Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/cd37798a-a9c3-3b81-af63-a763ee3d2cab.roa
File:                     cd37798a-a9c3-3b81-af63-a763ee3d2cab.roa (raw, json)
Hash identifier:          FVYzzWqCUNsmFZOOnBRENtMb3XuCdpRq8K1stw195aw=
Subject key identifier:   2B:4E:74:64:BE:1D:9B:57:AE:EB:7A:7E:A2:32:63:23:F5:31:7F:DD
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584D43FAE5F7D66FE352E069ED00
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/cd37798a-a9c3-3b81-af63-a763ee3d2cab.roa
Signing time:             Mon 23 Mar 2026 16:26:16 +0000
ROA not before:           Mon 23 Mar 2026 16:26:16 +0000
ROA not after:            Sun 21 Jun 2026 16:26:16 +0000
asID:                     2856
IP address blocks:        23.26.108.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 26 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:43:fa:e5:f7:d6:6f:e3:52:e0:69:ed:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Mar 23 16:26:16 2026 GMT
            Not After : Jun 21 16:26:16 2026 GMT
        Subject: CN=03b6abba-ca37-482e-8bf8-2fde6bf0a2a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:1d:9e:d0:f2:a3:87:eb:9f:88:b1:aa:5b:92:
                    92:ea:78:52:70:74:d3:5e:91:cb:4b:d6:54:4e:b8:
                    2a:a0:16:c5:53:02:3c:a9:1c:d8:34:b4:c7:36:21:
                    a8:13:24:f0:15:a8:72:ec:9b:84:71:90:e4:f7:87:
                    0b:a2:0b:0c:66:ae:c8:47:63:dc:a5:11:9b:7f:2c:
                    b5:23:70:b8:3e:a4:7c:19:e5:dd:b9:17:2e:13:d3:
                    47:98:24:9c:d9:17:5e:77:1f:16:94:18:78:23:24:
                    b7:f1:c8:17:a7:a7:a5:dc:b3:90:32:b0:03:3f:43:
                    62:f2:91:53:9e:83:a1:22:cd:02:cc:25:9b:70:21:
                    53:29:6b:7c:bb:0d:0c:c5:66:d8:fa:97:62:33:de:
                    63:bf:70:62:91:9e:f1:34:fa:b8:f6:80:ae:df:cf:
                    25:4d:59:eb:c1:2e:01:8d:24:0b:f0:59:c2:21:ed:
                    88:a7:e0:df:6c:02:d8:06:97:b8:91:05:40:99:61:
                    c8:1b:52:69:49:ef:8a:94:e9:36:f8:be:f5:df:e2:
                    4b:77:8c:26:b7:ae:54:50:e7:29:54:9d:f3:b7:f7:
                    d7:95:e3:c5:54:1d:9e:a2:90:3c:c5:60:39:2b:f1:
                    4f:1b:9c:38:e9:9e:dc:81:d3:45:3d:32:f7:4b:45:
                    53:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:4E:74:64:BE:1D:9B:57:AE:EB:7A:7E:A2:32:63:23:F5:31:7F:DD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/cd37798a-a9c3-3b81-af63-a763ee3d2cab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.26.108.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9d:71:57:a8:65:be:98:1e:52:02:38:9e:e9:53:91:54:f0:5a:
         5b:aa:c3:89:f3:07:b0:fc:50:d7:80:0a:d6:99:74:a6:59:14:
         6a:56:ce:75:1f:0c:57:39:ff:85:58:96:d7:1b:af:c8:f5:a8:
         93:e3:7a:a9:0b:28:5e:4f:dc:59:6b:b4:45:ea:6e:1d:17:a3:
         f8:d3:3a:5b:4e:9f:c5:e6:97:c1:35:a5:ee:c5:cc:d5:e5:0b:
         27:7d:d3:62:25:28:37:f4:ee:70:4c:d8:c2:b1:ad:44:95:af:
         72:7c:c8:97:0d:c5:db:df:02:51:34:33:4e:73:71:25:9f:09:
         c0:fc:0a:ce:fa:4f:aa:e1:49:0f:4b:67:7e:95:30:71:90:48:
         45:d2:6e:b8:d3:c4:ad:af:d2:ca:41:aa:41:76:c5:7a:20:65:
         10:37:4f:16:94:8a:af:7b:b1:a6:cd:70:b3:c5:da:5b:72:bc:
         89:42:43:4f:c8:06:88:05:75:cb:75:e8:0b:1b:58:0f:eb:6c:
         15:89:bd:17:18:fd:bd:34:c4:92:a2:92:f9:5d:ef:bb:6a:9c:
         37:b6:83:39:15:e0:c0:0d:2d:e8:26:0a:71:d5:76:2c:1b:23:
         1c:54:3b:f2:c3:53:d1:0d:90:77:98:28:c8:3d:c8:6e:d7:6f:
         88:36:9e:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 23 20:10:50 2026 by rpki-client