Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/e9ff9034-adaa-3747-8e07-7358e8857068.roa
File:                     e9ff9034-adaa-3747-8e07-7358e8857068.roa (raw, json)
Hash identifier:          gWA43dXzTdIi0qZeigm911lE+cJFydAEH838XtF0k/I=
Subject key identifier:   32:43:29:AD:F6:43:A2:F4:1C:74:11:87:54:C4:A1:EC:F3:6F:42:CE
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584EB84725CFE323404D4CE40000
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/e9ff9034-adaa-3747-8e07-7358e8857068.roa
Signing time:             Tue 04 Aug 2026 01:00:12 +0000
ROA not before:           Tue 04 Aug 2026 01:00:12 +0000
ROA not after:            Mon 02 Nov 2026 02:00:12 +0000
asID:                     401152
IP address blocks:        23.26.151.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 20 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:b8:47:25:cf:e3:23:40:4d:4c:e4:00:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Aug  4 01:00:12 2026 GMT
            Not After : Nov  2 02:00:12 2026 GMT
        Subject: CN=ce97aaed-05fe-48c7-b93f-ab3d8c2f451b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:98:3a:b6:9b:a3:8b:d0:bd:e5:7b:22:7e:2b:
                    8d:14:e6:86:fe:f2:77:f4:26:03:fb:7b:98:cf:30:
                    2f:8e:0a:f0:54:3b:2f:c6:bb:83:7f:90:9b:57:82:
                    d5:98:90:d6:bf:c1:eb:dd:a5:ad:96:47:1b:e5:49:
                    2a:ff:52:6c:ae:bd:12:09:09:d8:23:5e:d5:c9:e2:
                    59:a8:7a:bb:a4:3b:45:0e:70:d0:38:b8:dd:16:5d:
                    7c:57:73:3a:6c:85:3e:7d:9e:1f:9b:d1:cf:ec:6c:
                    2b:54:c9:fe:a5:86:15:3c:42:2c:31:98:a3:12:97:
                    13:89:2d:e8:fd:ff:25:1d:ec:6d:e1:b1:3f:26:ca:
                    b1:0c:6c:82:50:93:bd:df:3c:7c:4c:8b:cc:2d:72:
                    fa:ea:be:6a:ce:d3:94:8a:76:1c:be:6d:c8:92:f9:
                    87:43:5f:70:35:76:77:fe:83:63:42:09:1e:06:ce:
                    9d:f5:71:0e:c9:61:95:83:13:db:24:f0:b4:f6:d0:
                    61:0a:f6:74:10:05:5b:ad:79:ea:2c:86:7a:80:85:
                    44:f8:0e:0c:9b:5e:f5:82:51:7c:19:d3:ad:a2:a1:
                    14:2a:8f:03:d5:aa:f2:2e:bc:62:7a:7b:3d:da:73:
                    59:bf:32:60:54:2d:fa:db:e8:b5:e1:f0:1f:a5:39:
                    66:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:43:29:AD:F6:43:A2:F4:1C:74:11:87:54:C4:A1:EC:F3:6F:42:CE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/e9ff9034-adaa-3747-8e07-7358e8857068.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.26.151.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:d4:8c:0c:b4:70:13:f3:be:94:c4:e3:60:07:f8:ec:f0:15:
         77:d6:39:d2:26:8c:04:34:72:ff:88:73:77:61:db:4b:bb:32:
         76:8f:99:01:d1:95:3d:77:f1:3b:c5:87:1c:40:c4:21:b0:87:
         96:6b:11:02:11:cc:0e:e0:32:df:e1:cc:5c:3e:de:2a:aa:ae:
         74:16:77:7b:ea:b8:7d:8f:36:73:92:0d:8f:ad:36:80:87:58:
         a8:d7:c0:c6:e0:77:40:ab:14:de:91:35:c6:9a:0a:9b:b6:98:
         6d:2c:42:85:1f:ee:b8:36:eb:cc:e9:6b:07:cc:57:be:8a:cb:
         c5:82:9c:fd:50:b4:4c:ab:58:ee:5b:22:32:af:05:c2:d7:64:
         a8:b1:e2:6a:01:6c:48:08:e7:2e:60:4b:1c:cf:51:bd:ff:0f:
         ee:bc:bb:3c:e4:72:e6:1b:6a:e4:75:11:d1:55:36:bb:97:53:
         ee:cf:ce:75:74:1f:d8:11:df:3e:c1:e2:cd:66:c6:36:47:d6:
         db:d2:49:4c:bc:32:c8:44:d6:43:5a:df:7c:25:87:18:71:c3:
         dd:82:19:f7:dd:bb:42:1c:b7:8c:35:4c:d0:69:7d:ac:1f:b2:
         ac:6c:51:ca:48:a6:74:40:61:ee:e9:1e:a9:87:42:09:1e:d6:
         1b:84:7f:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 17 18:01:09 2026 by rpki-client