Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/da8636d8-8631-35b5-a554-9c21d0601b1e.roa
File:                     da8636d8-8631-35b5-a554-9c21d0601b1e.roa (raw, json)
Hash identifier:          CtspMBb3uVAgdd5FfRo8gqUEdJ/jPUnex5DVtl8riPg=
Subject key identifier:   EF:D3:7E:17:34:43:DB:1D:83:D7:3A:B4:C8:81:EB:82:CE:36:36:E1
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584D30DDDF90CD62D6ED15728540
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/da8636d8-8631-35b5-a554-9c21d0601b1e.roa
Signing time:             Mon 16 Mar 2026 20:07:25 +0000
ROA not before:           Mon 16 Mar 2026 20:07:25 +0000
ROA not after:            Sun 14 Jun 2026 20:07:25 +0000
asID:                     401152
IP address blocks:        23.26.136.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 18 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:30:dd:df:90:cd:62:d6:ed:15:72:85:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Mar 16 20:07:25 2026 GMT
            Not After : Jun 14 20:07:25 2026 GMT
        Subject: CN=e4320f90-cfcf-4bb1-86de-4b308a4f802c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:9f:6f:8a:ad:dc:ba:30:d2:be:c6:0f:01:5d:
                    1b:75:99:a7:dc:05:6b:22:df:7a:60:63:66:0f:23:
                    96:7b:fa:7c:85:4f:54:f8:83:32:b8:4c:77:61:5e:
                    fe:6a:2f:61:fc:32:ec:5b:60:55:d9:8b:d7:b2:84:
                    12:3f:92:fc:57:a4:7a:11:ef:31:47:08:ee:08:5d:
                    4f:50:8d:cf:95:1e:5a:27:a7:d5:97:db:60:eb:0d:
                    1b:10:14:1f:a3:30:1d:58:22:1a:93:56:45:40:e2:
                    b6:52:af:e8:a5:8f:96:26:b5:a4:83:82:f5:ab:10:
                    45:3b:68:57:c1:d8:af:d4:4e:ad:ad:08:35:c7:84:
                    8a:e3:9d:4a:84:69:76:dd:91:cc:e7:37:9c:b9:e4:
                    68:7d:1b:b6:31:f7:33:01:b9:06:30:44:fc:a6:88:
                    f3:e5:2d:82:19:18:ea:c2:1f:68:e6:4e:93:17:b4:
                    7a:8e:11:a0:c4:31:ab:3b:79:f8:31:11:4b:33:df:
                    c0:c4:85:22:54:4c:08:f0:7c:b9:c1:a1:41:2e:8f:
                    28:87:8a:f2:6f:ec:3d:20:33:9e:50:65:ba:38:f6:
                    d5:d6:7c:15:97:df:a9:3a:ca:bb:69:ca:ce:06:c5:
                    f6:bc:e7:46:71:85:82:f2:2b:8d:bf:0b:3e:16:f8:
                    9d:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:D3:7E:17:34:43:DB:1D:83:D7:3A:B4:C8:81:EB:82:CE:36:36:E1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/da8636d8-8631-35b5-a554-9c21d0601b1e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.26.136.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:d2:2f:3d:c9:9c:4d:82:fa:5d:02:35:2b:1a:1a:57:f6:f9:
         8d:5a:15:26:81:c6:35:65:20:03:ae:5d:0a:64:70:91:59:79:
         53:12:69:b9:17:03:bf:53:1d:ad:a3:f7:89:ab:9e:03:08:17:
         ce:c4:00:58:a2:7c:d3:fd:33:6c:75:c6:38:2d:53:05:9f:2b:
         51:d4:bd:5c:dd:90:71:5e:c6:14:f9:18:78:40:79:e8:77:03:
         4b:a8:24:b7:3a:5c:0b:01:80:c2:a4:0b:31:fd:f2:52:d7:0f:
         a6:e1:18:1d:5e:45:60:71:57:79:64:e1:b6:54:13:9e:49:4e:
         1a:df:69:d6:98:4f:5c:b4:b3:cc:60:71:87:c9:70:24:d7:32:
         1b:91:a4:7b:7f:6e:9d:55:fb:b8:cd:bb:7f:de:b2:84:75:a4:
         02:da:b7:e3:5a:13:6e:55:2e:f4:22:51:00:53:60:c2:4e:2e:
         55:c5:2f:f4:3b:57:a8:f1:b4:09:08:99:01:f8:5f:f9:60:f3:
         51:74:9e:34:8f:10:e3:7f:5d:b4:6d:99:81:bb:e1:59:7b:9c:
         62:b8:df:8c:11:d5:8a:0b:24:e7:ee:c4:58:b8:a3:df:06:06:
         38:f6:b5:65:b4:e7:91:65:a9:d3:46:c3:5f:37:f9:c9:c0:8a:
         3c:3c:ee:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 17 00:40:10 2026 by rpki-client