Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/f2f5c73c-cc32-377a-be5d-4452b8c6e386.roa
File:                     f2f5c73c-cc32-377a-be5d-4452b8c6e386.roa (raw, json)
Hash identifier:          bYh5RuJWVEsN1zsx/5mdoNIELffJ+ehsW465KAoizBE=
Subject key identifier:   59:8D:66:39:2A:1A:FD:C0:FE:DA:7F:B0:EB:54:20:13:BB:BC:14:CC
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584F4C3D4DA3721530032CAE8700
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/f2f5c73c-cc32-377a-be5d-4452b8c6e386.roa
Signing time:             Sat 26 Sep 2026 01:00:13 +0000
ROA not before:           Sat 26 Sep 2026 01:00:13 +0000
ROA not after:            Fri 25 Dec 2026 02:00:13 +0000
asID:                     9009
IP address blocks:        23.26.194.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:4c:3d:4d:a3:72:15:30:03:2c:ae:87:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Sep 26 01:00:13 2026 GMT
            Not After : Dec 25 02:00:13 2026 GMT
        Subject: CN=d36488f0-957d-49ae-8413-a45a67934f1b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:44:35:04:31:71:13:1b:3f:8a:ca:1e:ee:47:
                    69:18:e1:31:c4:dd:68:ce:3f:17:af:8e:57:e9:cc:
                    50:c0:a9:52:08:a3:6b:2e:2a:03:85:d5:b5:f5:bd:
                    c0:67:dc:5a:13:34:be:e3:78:a4:6e:84:1a:97:16:
                    14:ac:e9:8b:3c:e4:1e:19:9d:69:e8:17:24:a1:f5:
                    4e:57:63:fa:30:91:d4:84:b4:66:71:78:f0:d2:5a:
                    b9:46:fc:6b:5e:2b:bd:b4:6e:dd:3a:30:40:48:b4:
                    e7:ca:f0:cd:14:ca:ba:28:4f:16:f9:5c:da:c6:29:
                    0b:ed:39:99:8c:24:76:5f:74:e1:de:11:e5:7e:68:
                    0b:8d:13:60:57:4d:46:de:e0:a0:c1:72:6c:7c:79:
                    04:ef:e6:8a:17:d7:43:50:d9:08:52:bc:8a:7c:83:
                    e0:42:2b:01:29:a5:ac:a1:22:37:c7:6a:20:0d:5b:
                    38:5c:c7:e9:01:bc:11:6a:7e:72:90:b4:31:10:76:
                    aa:86:1d:8f:9d:45:7d:85:99:df:e1:ac:dd:81:e5:
                    2f:5b:a4:8d:6b:89:ed:d3:d3:f2:af:85:ab:ae:dd:
                    b3:88:28:3f:20:93:af:f2:10:ee:bc:12:65:dd:2d:
                    8e:d9:01:e7:8e:4c:5c:e8:47:a2:62:3c:34:9c:9c:
                    80:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:8D:66:39:2A:1A:FD:C0:FE:DA:7F:B0:EB:54:20:13:BB:BC:14:CC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/f2f5c73c-cc32-377a-be5d-4452b8c6e386.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.26.194.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a5:fa:4f:82:fc:63:e5:02:71:0a:06:03:2f:89:5c:c4:86:23:
         8d:d4:2e:bf:5f:f2:44:d6:d0:05:fe:09:c0:e3:08:22:13:61:
         44:d3:72:30:63:9f:1c:b4:bb:2a:d6:4d:63:41:d8:4a:01:d4:
         f5:5c:c7:31:20:2b:e2:8e:76:fb:ec:e3:27:42:e4:14:0d:8c:
         d8:34:b6:62:ef:8d:1a:0f:f4:55:89:41:29:01:11:81:9f:64:
         3a:ad:be:d9:7d:5e:32:0a:01:6b:ba:60:a5:d7:bd:0f:93:13:
         05:91:c0:b8:56:3f:74:c2:fd:c1:0b:1e:57:ae:0c:b6:75:a7:
         00:ac:1c:09:e6:e3:70:c4:e8:f9:86:2b:93:45:24:82:10:3c:
         6b:b4:a2:18:77:bf:f5:71:fd:62:49:5c:4a:7e:35:db:ff:ae:
         bb:ec:2e:e4:76:56:89:c6:58:ae:48:98:b2:c4:44:fe:ce:86:
         d0:8a:0c:f1:b7:ff:81:e1:d6:df:39:60:09:fc:b3:11:73:b0:
         97:38:59:a8:76:d7:6b:a1:7c:69:0e:1d:83:e7:fd:a4:76:60:
         78:5d:bd:0c:e2:68:8c:21:e9:f4:46:b4:1a:64:e3:12:6d:ab:
         58:7d:de:76:a1:23:a0:5d:72:36:7b:45:ec:03:a6:86:b8:ca:
         40:da:7e:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 06:58:53 2026 by rpki-client