Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/f6d28d62-947f-30b0-9ddd-9b37174cf4a2.roa
File:                     f6d28d62-947f-30b0-9ddd-9b37174cf4a2.roa (raw, json)
Hash identifier:          INN7il/DYjMA8UFxc24GLrwjOxmN2EK5PIvrV76DJwQ=
Subject key identifier:   4B:13:0E:D4:6D:EE:BC:75:C7:6A:70:F8:6A:2A:16:7D:22:1E:4B:EA
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584D5D47B10DA308AA295A90B580
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/f6d28d62-947f-30b0-9ddd-9b37174cf4a2.roa
Signing time:             Wed 01 Apr 2026 17:56:12 +0000
ROA not before:           Wed 01 Apr 2026 17:56:12 +0000
ROA not after:            Tue 30 Jun 2026 17:56:12 +0000
asID:                     401152
IP address blocks:        23.26.40.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 05 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:5d:47:b1:0d:a3:08:aa:29:5a:90:b5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Apr  1 17:56:12 2026 GMT
            Not After : Jun 30 17:56:12 2026 GMT
        Subject: CN=26c37023-2eb7-4ec7-ac0b-5dd35d38f4c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:0f:30:ec:ac:4a:24:a2:06:4f:5e:f7:c1:50:
                    71:e1:07:0b:84:b0:85:a7:5a:e3:a1:2c:1f:59:3e:
                    18:4f:01:a2:18:0c:ad:70:45:cb:3d:36:45:b7:73:
                    65:1b:c5:6a:40:02:51:f6:79:25:62:e1:fd:50:d3:
                    62:67:0c:2b:5c:21:9e:d0:4e:c3:69:0a:20:6a:61:
                    eb:8c:6a:5b:82:b9:a6:87:04:25:fb:d2:13:1f:b3:
                    88:c2:6f:67:ca:06:25:ab:93:3e:2b:c9:00:9f:06:
                    0c:bc:cd:8d:80:b4:0f:53:e3:d1:6c:d4:22:88:b7:
                    12:ea:fc:68:ee:39:6e:13:52:d6:fe:ea:53:39:76:
                    75:01:62:94:b4:03:63:bf:2c:f2:68:ba:01:db:01:
                    1a:e1:e0:3a:67:9f:db:c2:21:9d:a9:7d:a4:9e:84:
                    f2:42:8c:8e:0c:6e:3e:39:63:aa:85:4a:90:f1:d1:
                    98:7f:ab:2b:fb:9f:b5:c9:90:c8:df:f8:e0:39:ae:
                    4c:1c:0a:5c:c2:86:24:48:89:16:57:29:ab:47:06:
                    f7:d9:e8:84:f4:fa:5a:62:4a:d8:24:97:4e:89:a6:
                    68:18:4a:98:2f:bc:49:90:89:28:97:71:c5:26:77:
                    a5:cd:6f:ed:09:f5:f3:01:16:bd:1e:2b:8d:99:22:
                    39:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:13:0E:D4:6D:EE:BC:75:C7:6A:70:F8:6A:2A:16:7D:22:1E:4B:EA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/f6d28d62-947f-30b0-9ddd-9b37174cf4a2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.26.40.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:3d:54:20:5d:5f:51:f6:69:8d:51:11:93:d8:fd:8c:fc:6a:
         f4:0a:39:b0:a9:b0:c1:4a:70:bb:8f:fc:67:6f:81:6e:02:94:
         c5:31:3b:89:c2:41:98:d0:f8:b3:b6:bc:85:ad:72:f9:36:c5:
         51:8f:a8:42:83:3e:c1:d5:7e:32:37:19:1b:3c:92:90:c4:55:
         26:6a:03:c9:16:be:b8:81:07:0b:56:67:dc:ff:70:17:3d:79:
         7a:e7:4a:5c:50:65:1c:89:4f:b9:fb:a4:1e:ba:d5:60:97:87:
         2c:c5:80:6a:04:ce:20:d6:db:fd:e4:ec:13:e1:3e:8e:5c:e8:
         0e:ac:e5:aa:15:34:cd:20:95:ba:d3:83:3e:90:cb:42:fd:df:
         2c:71:69:54:67:36:d8:39:98:35:3b:cb:d3:ea:2c:f1:be:dd:
         e2:af:fa:68:5f:fa:61:88:2c:ef:83:1e:f4:3c:8a:5e:3e:9a:
         0b:00:48:27:09:7b:d5:46:1b:37:19:c2:d0:18:2b:86:55:23:
         9b:48:f1:ae:4d:75:6e:a1:70:0a:31:aa:7a:9b:45:db:e7:ef:
         83:71:4c:1c:5e:22:5e:8f:bb:e9:bc:70:62:80:5c:f5:1a:8e:
         f3:c2:c2:24:f1:11:f8:87:8f:d2:07:80:90:46:e9:c6:d9:26:
         b4:f9:0a:cb
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1dR7ENowiqKVqQtYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTI2MDQwMTE3NTYxMloXDTI2MDYzMDE3NTYxMlowLzEtMCsGA1UEAxMk
MjZjMzcwMjMtMmViNy00ZWM3LWFjMGItNWRkMzVkMzhmNGMxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgQ8w7KxKJKIGT173wVBx4QcLhLCFp1rjoSwf
WT4YTwGiGAytcEXLPTZFt3NlG8VqQAJR9nklYuH9UNNiZwwrXCGe0E7DaQogamHr
jGpbgrmmhwQl+9ITH7OIwm9nygYlq5M+K8kAnwYMvM2NgLQPU+PRbNQiiLcS6vxo
7jluE1LW/upTOXZ1AWKUtANjvyzyaLoB2wEa4eA6Z5/bwiGdqX2knoTyQoyODG4+
OWOqhUqQ8dGYf6sr+5+1yZDI3/jgOa5MHApcwoYkSIkWVymrRwb32eiE9PpaYkrY
JJdOiaZoGEqYL7xJkIkol3HFJnelzW/tCfXzARa9HiuNmSI5mwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEsTDtRt7rx1x2pw+GoqFn0iHkvqMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvZjZkMjhkNjItOTQ3Zi0z
MGIwLTlkZGQtOWIzNzE3NGNmNGEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFxooMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIU9VCBdX1H2aY1REZPY/Yz8avQKObCpsMFKcLuP/GdvgW4ClMUxO4nC
QZjQ+LO2vIWtcvk2xVGPqEKDPsHVfjI3GRs8kpDEVSZqA8kWvriBBwtWZ9z/cBc9
eXrnSlxQZRyJT7n7pB661WCXhyzFgGoEziDW2/3k7BPhPo5c6A6s5aoVNM0glbrT
gz6Qy0L93yxxaVRnNtg5mDU7y9PqLPG+3eKv+mhf+mGILO+DHvQ8il4+mgsASCcJ
e9VGGzcZwtAYK4ZVI5tI8a5NdW6hcAoxqnqbRdvn74NxTBxeIl6Pu+m8cGKAXPUa
jvPCwiTxEfiHj9IHgJBG6cbZJrT5Css=
-----END CERTIFICATE-----
Generated at Thu Apr 2 22:32:44 2026 by rpki-client