Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/d5e54957-61cb-35ea-b85c-222f41795431.roa
File:                     d5e54957-61cb-35ea-b85c-222f41795431.roa (raw, json)
Hash identifier:          pMVn90SJrmHfhroA5NnYs8YsLvFRgBRdrxWFGHGGGw8=
Subject key identifier:   18:73:10:FB:71:E6:74:DC:5A:07:0C:B4:8A:59:E9:40:B5:54:61:E0
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584B10489C40828F34570BC8EE80
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/d5e54957-61cb-35ea-b85c-222f41795431.roa
Signing time:             Tue 02 Sep 2025 18:26:56 +0000
ROA not before:           Tue 02 Sep 2025 18:26:56 +0000
ROA not after:            Mon 01 Dec 2025 19:26:56 +0000
asID:                     401152
IP address blocks:        23.26.200.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 21 Sep 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:10:48:9c:40:82:8f:34:57:0b:c8:ee:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Sep  2 18:26:56 2025 GMT
            Not After : Dec  1 19:26:56 2025 GMT
        Subject: CN=522c5bcf-9e92-439e-a9cd-4d83c08f9135
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:b2:39:bc:a7:05:6f:c9:2c:50:5e:e1:e1:0e:
                    4e:4d:d4:b2:bf:69:e5:d4:08:2d:b5:ef:32:8f:90:
                    1e:91:81:4b:38:95:12:59:9d:ac:c1:c4:4f:4b:e3:
                    8c:e3:9b:0b:5a:8a:c8:f0:1c:06:25:64:ba:c8:6b:
                    cc:96:1c:de:46:c6:20:3b:80:33:04:dd:2c:d1:27:
                    a8:3d:56:25:ec:6b:4d:c2:60:69:1c:b9:82:67:8c:
                    b2:c1:2e:a0:f5:97:e2:05:12:39:86:7e:2e:3e:4d:
                    f3:e4:6e:7f:8b:85:48:39:44:59:4c:39:ca:f3:af:
                    bc:c5:77:3a:b2:53:ff:a3:d8:31:0b:86:9e:46:c8:
                    50:b8:f2:8d:94:33:71:ac:0e:ec:b3:cd:04:17:ca:
                    a2:1f:bd:52:51:75:48:a2:19:3a:94:81:fb:44:c7:
                    44:eb:0c:7d:ea:8a:4c:bf:a9:e4:32:09:bc:43:6f:
                    9a:0c:ec:f5:d8:4d:69:4d:fd:a9:18:52:cc:fa:3c:
                    52:51:a1:92:99:3c:a3:42:1e:80:12:d3:ea:c4:b1:
                    e0:42:c4:12:e2:4f:60:5a:ff:8e:56:9d:3e:62:38:
                    52:f7:46:46:e3:7b:44:e8:57:92:d0:da:7a:08:c8:
                    56:e9:5a:b8:84:83:41:af:0b:e5:ba:d7:d2:a4:5b:
                    68:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:73:10:FB:71:E6:74:DC:5A:07:0C:B4:8A:59:E9:40:B5:54:61:E0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/d5e54957-61cb-35ea-b85c-222f41795431.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.26.200.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:a7:9e:98:1c:5e:0f:55:ec:d5:e5:01:e3:2e:f4:eb:1d:5f:
         3b:8e:c5:a4:57:0f:2e:41:f5:ed:39:8b:cd:8a:a4:38:fe:75:
         2e:7e:82:00:5b:14:86:d2:dd:71:e7:79:83:73:05:34:69:3c:
         9c:50:96:d1:b0:40:39:50:cc:ec:d7:31:50:4e:e1:cd:79:cf:
         73:0d:5c:44:4f:f4:60:f9:2c:20:52:54:a8:0a:d9:3f:d8:f3:
         4f:78:29:ec:de:85:3f:38:e9:c6:c6:36:a8:0a:cb:31:16:f5:
         6b:af:ca:5d:20:44:e8:ce:05:4b:d3:c7:f8:2b:5f:b9:4c:4b:
         db:2e:61:ba:cc:2d:20:ba:b3:08:c6:83:59:c3:3c:59:a9:01:
         93:d5:7d:09:27:eb:f4:eb:8c:bf:4a:1a:50:4c:f9:e4:81:61:
         bd:07:7b:4f:ab:04:1b:75:9e:27:9d:86:f7:d4:f1:3c:86:5a:
         23:18:eb:95:99:4f:3a:28:36:86:8e:e9:37:7e:c9:1e:f3:99:
         9b:c5:e1:e5:4f:f6:70:83:63:0e:81:16:6f:df:d7:13:08:8a:
         07:6a:0f:86:8c:14:89:c1:0e:ba:69:3b:c3:26:06:03:4c:ce:
         a3:4e:d9:5c:d5:fe:f2:97:c6:b4:6e:c5:22:ce:a7:be:2a:4f:
         4a:50:b0:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 17:02:58 2025 by rpki-client