Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/ecc3cdb6-e415-3c64-ae26-d2072b29a6a6.roa
File:                     ecc3cdb6-e415-3c64-ae26-d2072b29a6a6.roa (raw, json)
Hash identifier:          H3VSZSGPCkqEmF49ak24JC5BBGBo5pvn2ZJltA5lo/g=
Subject key identifier:   46:10:6C:E4:EB:9D:0E:80:11:DD:CE:62:E3:1E:C6:C8:10:F2:38:26
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584D366F57859C9A2A52E247FC80
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/ecc3cdb6-e415-3c64-ae26-d2072b29a6a6.roa
Signing time:             Wed 18 Mar 2026 19:59:34 +0000
ROA not before:           Wed 18 Mar 2026 19:59:34 +0000
ROA not after:            Tue 16 Jun 2026 19:59:34 +0000
asID:                     401152
IP address blocks:        23.26.95.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 20 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:36:6f:57:85:9c:9a:2a:52:e2:47:fc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Mar 18 19:59:34 2026 GMT
            Not After : Jun 16 19:59:34 2026 GMT
        Subject: CN=82d9ab8d-d68f-4ccc-b31c-db8c23a9008c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:8c:03:f2:bf:59:47:e3:6b:6a:a7:3e:43:0a:
                    f5:1c:a4:56:da:96:9b:af:fb:4d:52:15:40:a0:68:
                    e7:1b:09:d8:da:18:9f:2a:ee:f6:91:75:95:5f:b6:
                    4e:9d:41:a8:47:72:1d:d6:2d:d3:ee:5d:2f:d6:9e:
                    b9:7d:88:71:cb:e2:f2:ef:1b:84:68:62:59:7a:a1:
                    aa:e7:28:37:b0:7f:35:7f:e6:1c:f3:b9:41:12:e8:
                    8d:16:11:8d:81:39:13:a6:09:60:d8:2b:98:98:09:
                    83:5e:de:01:43:96:9f:9d:0d:6a:65:9a:73:f4:5f:
                    12:7e:d7:fe:2d:44:9b:e4:5e:91:2a:da:65:69:0b:
                    26:8e:ff:c6:db:8d:9c:93:8a:8e:ab:b7:f8:03:50:
                    ce:01:61:38:1d:a2:69:3f:f5:fd:04:29:0e:16:fc:
                    3f:e3:a8:96:96:5e:ee:13:2b:ae:a1:6c:4e:87:4a:
                    21:fa:fb:aa:d0:4f:c6:c9:93:54:9e:eb:7f:b5:23:
                    18:c5:42:6e:8d:3d:2a:6b:32:06:52:cc:d4:99:a4:
                    85:fc:98:88:14:86:06:5b:4f:37:a3:a0:25:ff:d1:
                    f2:44:28:ed:3b:d5:55:8b:a3:a0:ca:84:bf:18:b7:
                    34:3f:4e:c1:90:39:80:a4:2e:85:0f:ee:a2:34:51:
                    2d:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:10:6C:E4:EB:9D:0E:80:11:DD:CE:62:E3:1E:C6:C8:10:F2:38:26
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/ecc3cdb6-e415-3c64-ae26-d2072b29a6a6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.26.95.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:0c:6e:56:51:67:f2:b8:b7:d9:3e:cc:b6:b6:29:31:20:7b:
         83:51:1b:2c:9a:5a:99:d1:52:af:fc:a4:5e:79:46:02:9d:4b:
         3d:f9:63:90:19:c0:88:1d:a0:fb:00:a6:bc:ed:45:c4:e6:6c:
         1d:1b:63:74:76:fc:40:a8:68:be:0f:f9:28:95:15:57:38:d0:
         10:d0:69:8a:f7:37:83:44:ab:6b:fa:51:01:29:8e:e4:4b:3e:
         99:3f:8e:7e:ca:39:f0:02:21:36:e3:1e:14:41:c8:5d:f5:9e:
         9a:38:63:00:f8:57:de:3d:98:d1:ad:76:0a:e0:31:eb:31:72:
         ed:a4:05:b7:b3:eb:90:a7:3d:17:50:b6:a2:60:be:f1:af:46:
         d1:3b:ee:ce:54:d3:b8:8b:92:0a:0c:b0:2c:90:c3:b6:a4:45:
         79:72:a8:b1:d2:e1:ed:be:e6:d9:8d:36:b0:22:99:66:ad:4f:
         17:f0:e8:9f:dc:5e:e5:36:70:43:85:f8:ea:7c:1f:00:3d:3f:
         9e:7f:b2:8a:77:d4:2f:2b:38:69:51:ad:c0:d8:05:5e:be:72:
         14:1c:89:8b:47:9e:0a:b2:f9:d9:15:1a:0a:91:13:78:47:1a:
         ea:68:e4:eb:03:9a:64:a7:bc:7c:05:6f:b6:34:d5:70:88:93:
         23:64:c8:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 19 14:54:44 2026 by rpki-client