Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/ce39acc6-db31-32d0-945b-2ee2d526dfe8.roa
File:                     ce39acc6-db31-32d0-945b-2ee2d526dfe8.roa (raw, json)
Hash identifier:          6NXU/5mSBVmpXrUzrRwVNi291eH2BwnyZaVHo8uC7vQ=
Subject key identifier:   C0:A1:6C:83:53:AC:A0:D7:6E:01:98:DD:C5:DA:9D:79:29:DE:82:CC
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285849FCAA73DA4DD02A642E34A7A0
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/ce39acc6-db31-32d0-945b-2ee2d526dfe8.roa
Signing time:             Tue 27 May 2025 01:00:50 +0000
ROA not before:           Tue 27 May 2025 01:00:50 +0000
ROA not after:            Mon 25 Aug 2025 01:00:50 +0000
asID:                     134729
IP address blocks:        23.26.176.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 07 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:fc:aa:73:da:4d:d0:2a:64:2e:34:a7:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: May 27 01:00:50 2025 GMT
            Not After : Aug 25 01:00:50 2025 GMT
        Subject: CN=6b00fd25-9fca-403d-ac85-6f3eaf0472bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:34:50:39:93:52:4b:da:13:86:26:be:ff:a7:
                    67:51:26:86:10:6f:9a:90:e4:3b:5f:44:ae:92:d8:
                    7d:1b:ad:8c:c0:0c:67:a2:3e:ed:cd:95:fa:6f:99:
                    cf:c7:85:b9:9c:48:5b:7f:d2:84:12:f3:7c:e7:38:
                    e4:d9:aa:6e:7a:ae:03:4c:8e:6e:c8:a3:f7:a5:27:
                    cb:ed:3f:7d:35:fd:18:79:14:5c:f6:e9:9b:21:72:
                    f9:43:9c:a1:5f:c4:d3:67:8d:83:92:51:23:8b:10:
                    77:ef:e2:d8:82:d7:1b:0b:d1:3c:79:b2:53:b5:9c:
                    86:a3:4a:56:8b:fb:6f:58:83:46:1e:53:f2:e9:bb:
                    2e:84:03:e1:d3:f7:fd:5c:53:1f:e6:e9:c7:35:a7:
                    fe:25:df:59:c6:1f:bb:31:f6:a1:7d:6a:e0:13:fe:
                    16:6e:30:dd:23:d4:31:b8:22:5d:fc:61:8b:e0:64:
                    64:d9:ff:5f:ff:3e:e3:5e:9f:9f:5e:33:19:fe:51:
                    d5:e2:74:85:4a:08:82:e3:49:4c:08:f2:1f:87:0f:
                    fc:04:af:d5:74:54:66:88:e3:87:6d:7f:77:d8:8f:
                    8a:92:38:9f:c7:29:fb:57:9b:a0:90:bb:92:04:d3:
                    37:78:a6:eb:15:d8:43:40:74:a9:52:c2:01:5b:02:
                    1e:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:A1:6C:83:53:AC:A0:D7:6E:01:98:DD:C5:DA:9D:79:29:DE:82:CC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/ce39acc6-db31-32d0-945b-2ee2d526dfe8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.26.176.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:40:bd:85:50:84:9b:d0:4a:52:7a:3f:98:29:4b:93:da:1f:
         ff:be:c7:64:84:ca:6b:c4:43:22:63:88:89:ef:56:e8:ec:5b:
         11:01:d8:a0:8b:8e:f8:6a:73:e9:29:e1:06:73:1e:e3:e3:c7:
         b7:b3:cc:44:1c:2b:aa:0a:49:48:b4:10:53:62:e0:5f:0a:6f:
         77:f4:f5:15:dd:e9:44:90:95:dc:5e:b5:47:cd:d5:e0:72:79:
         45:24:62:b7:39:8a:81:0b:8f:01:5e:29:19:e7:ff:96:bd:5c:
         9f:0d:ac:a4:64:19:df:c6:33:7a:34:3e:60:1e:d7:6d:50:bd:
         8c:ef:88:86:de:23:57:9a:ac:dc:75:e7:b5:ca:72:29:4b:7a:
         49:4e:92:e6:42:21:7e:e1:13:b7:da:fc:ea:22:4e:ea:1b:ce:
         bd:32:ab:7f:f7:0c:5a:1b:4e:80:2e:e4:df:a3:ca:d3:a7:6b:
         76:3d:af:51:6e:29:46:e4:57:19:7d:d6:b8:67:84:2f:95:de:
         d2:7d:cf:43:36:8c:47:20:63:3b:ad:2b:d8:20:a6:15:72:93:
         b3:5a:39:69:8b:b6:aa:23:c9:dd:1a:5d:6d:18:0f:b7:f6:01:
         62:01:7d:b6:af:de:f6:d2:52:d2:44:76:24:f2:c7:42:ac:55:
         b2:a2:5e:67
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEn8qnPaTdAqZC40p6AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTI1MDUyNzAxMDA1MFoXDTI1MDgyNTAxMDA1MFowLzEtMCsGA1UEAxMk
NmIwMGZkMjUtOWZjYS00MDNkLWFjODUtNmYzZWFmMDQ3MmJjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjjRQOZNSS9oThia+/6dnUSaGEG+akOQ7X0Su
kth9G62MwAxnoj7tzZX6b5nPx4W5nEhbf9KEEvN85zjk2apueq4DTI5uyKP3pSfL
7T99Nf0YeRRc9umbIXL5Q5yhX8TTZ42DklEjixB37+LYgtcbC9E8ebJTtZyGo0pW
i/tvWINGHlPy6bsuhAPh0/f9XFMf5unHNaf+Jd9Zxh+7MfahfWrgE/4WbjDdI9Qx
uCJd/GGL4GRk2f9f/z7jXp+fXjMZ/lHV4nSFSgiC40lMCPIfhw/8BK/VdFRmiOOH
bX932I+Kkjifxyn7V5ugkLuSBNM3eKbrFdhDQHSpUsIBWwIe7wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMChbINTrKDXbgGY3cXanXkp3oLMMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvY2UzOWFjYzYtZGIzMS0z
MmQwLTk0NWItMmVlMmQ1MjZkZmU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEFxqwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAC5AvYVQhJvQSlJ6P5gpS5PaH/++x2SEymvEQyJjiInvVujsWxEB2KCL
jvhqc+kp4QZzHuPjx7ezzEQcK6oKSUi0EFNi4F8Kb3f09RXd6USQldxetUfN1eBy
eUUkYrc5ioELjwFeKRnn/5a9XJ8NrKRkGd/GM3o0PmAe121QvYzviIbeI1earNx1
57XKcilLeklOkuZCIX7hE7fa/OoiTuobzr0yq3/3DFobToAu5N+jytOna3Y9r1Fu
KUbkVxl91rhnhC+V3tJ9z0M2jEcgYzutK9ggphVyk7NaOWmLtqojyd0aXW0YD7f2
AWIBfbav3vbSUtJEdiTyx0KsVbKiXmc=
-----END CERTIFICATE-----
Generated at Thu Jun 5 18:38:13 2025 by rpki-client