Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/f24f1b3f-d5e4-3086-89b8-c54a0ecb1c82.roa
File:                     f24f1b3f-d5e4-3086-89b8-c54a0ecb1c82.roa (raw, json)
Hash identifier:          rRZXOMwzrcikGbhCIcZfcsOCHfvsrI2SvbNXNiBNbB0=
Subject key identifier:   2B:B1:C8:4F:DB:CE:E8:9A:74:B9:7E:46:58:9A:8D:11:4D:13:7D:DE
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584F11A13E4C546B626C289DBC00
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/f24f1b3f-d5e4-3086-89b8-c54a0ecb1c82.roa
Signing time:             Sat 05 Sep 2026 01:00:12 +0000
ROA not before:           Sat 05 Sep 2026 01:00:12 +0000
ROA not after:            Fri 04 Dec 2026 02:00:12 +0000
asID:                     211373
IP address blocks:        23.26.97.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 20 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:11:a1:3e:4c:54:6b:62:6c:28:9d:bc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Sep  5 01:00:12 2026 GMT
            Not After : Dec  4 02:00:12 2026 GMT
        Subject: CN=5f32a6d1-d318-445c-b169-4540f683eab9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:6a:af:5f:c9:ac:f3:2e:45:e6:b0:2e:ec:fa:
                    d8:be:a3:a0:5d:d5:2f:4d:20:51:cf:eb:28:65:27:
                    c8:87:be:26:77:7d:85:b7:e9:85:14:2f:c1:12:b8:
                    e3:c2:8b:76:70:74:aa:53:cd:00:8c:95:49:cc:22:
                    a9:06:6a:27:68:48:2d:1b:c5:01:ee:3c:c6:32:40:
                    a9:d1:60:0b:14:65:96:e7:bc:4e:0f:59:b1:b6:e9:
                    84:6a:32:42:74:4b:02:c5:b4:0f:e0:67:f7:c1:01:
                    75:66:bf:a1:d5:02:13:df:12:10:5c:e7:76:5e:6a:
                    28:a6:1b:1f:fb:e2:6e:fc:d5:b7:ce:7e:9e:9f:73:
                    11:80:3d:32:78:92:7c:0e:9e:60:a3:e9:e0:05:53:
                    11:89:27:6e:a3:89:95:af:9f:d0:52:21:36:e5:a7:
                    ae:30:e8:52:01:0a:21:e2:24:86:f8:a4:3d:2f:f1:
                    84:50:62:2b:3b:77:ff:96:78:31:a0:5f:5c:10:f4:
                    9d:1c:77:63:02:05:bc:12:c0:70:16:8c:f6:0d:1e:
                    17:14:a6:e0:f5:db:b2:74:19:f3:59:6e:c0:1f:88:
                    eb:dc:7d:ba:f5:1d:a5:30:ac:69:4c:c7:e6:14:9d:
                    1c:aa:6c:a8:73:a7:db:ad:8c:88:53:84:6c:71:8e:
                    ea:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:B1:C8:4F:DB:CE:E8:9A:74:B9:7E:46:58:9A:8D:11:4D:13:7D:DE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/f24f1b3f-d5e4-3086-89b8-c54a0ecb1c82.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.26.97.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:aa:1b:65:b3:3f:88:da:c6:32:35:fa:fc:d7:5c:64:55:c9:
         42:5d:0c:b4:2b:d4:90:04:45:ff:23:34:8a:22:fb:84:5d:b9:
         52:77:be:e7:f4:c7:d2:01:c6:f1:d4:65:35:66:1f:d4:f5:fb:
         f4:a8:80:cc:b8:7d:0c:bf:0a:f8:55:5a:7c:96:34:68:7c:51:
         38:c7:bb:db:5e:d4:73:94:96:b5:a8:45:57:73:84:f0:4a:d7:
         b0:b0:ca:ba:03:60:d6:1a:cb:62:d9:b3:47:c4:15:63:9e:79:
         71:33:c2:10:2b:46:2b:4c:b7:b7:b9:29:e4:e6:d4:98:ea:b0:
         de:d6:89:ff:1b:5d:e2:b3:db:e0:ca:d2:fe:eb:22:1e:d1:bd:
         0e:da:d8:b9:a9:1c:fc:56:92:15:31:91:74:52:f3:0e:c0:42:
         fb:93:47:06:27:d5:c8:48:bc:ff:26:f4:7c:ce:04:7c:c7:0b:
         92:d4:91:9c:4e:ed:9d:cb:aa:04:ee:d7:28:39:93:69:98:0e:
         37:10:c1:18:c3:e3:ca:c7:3e:d0:d2:8b:3b:3c:8d:52:e8:77:
         df:f1:e4:a3:bd:c7:3c:d5:9f:b5:1d:4a:1b:76:52:ce:58:c7:
         dd:a9:fc:26:82:b3:45:d5:c3:a8:07:35:79:56:fb:42:8a:d6:
         32:21:23:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 17 23:01:25 2026 by rpki-client