Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/fb90281b-17b4-314d-9470-b121ea46f9d9.roa
File:                     fb90281b-17b4-314d-9470-b121ea46f9d9.roa (raw, json)
Hash identifier:          htBF8pnWx8ZKTCByiyPV6gvTTzNgB9JeCD7JHu178iE=
Subject key identifier:   09:71:EF:80:58:8A:E5:27:36:43:E0:2C:A9:4E:8D:1E:84:41:B0:B2
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584D2ADA8372AB24004BBDB83AE0
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/fb90281b-17b4-314d-9470-b121ea46f9d9.roa
Signing time:             Sat 14 Mar 2026 16:25:48 +0000
ROA not before:           Sat 14 Mar 2026 16:25:48 +0000
ROA not after:            Fri 12 Jun 2026 16:25:48 +0000
asID:                     398465
IP address blocks:        23.26.219.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 18 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:2a:da:83:72:ab:24:00:4b:bd:b8:3a:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Mar 14 16:25:48 2026 GMT
            Not After : Jun 12 16:25:48 2026 GMT
        Subject: CN=524ee4b3-02b4-42a2-b4fa-9645ee06616c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:8c:71:7b:11:bb:48:65:38:29:5f:fe:65:74:
                    70:55:b4:b9:a9:b7:b6:08:f8:b8:22:b9:b5:9c:9e:
                    67:86:49:69:59:c2:2b:77:41:66:08:ad:15:e2:3e:
                    1f:d3:53:26:16:b9:1e:4d:3e:86:fe:be:5a:33:90:
                    dd:29:68:a7:3f:c9:70:15:8b:3b:cc:aa:1b:b7:f4:
                    dc:1b:03:c0:cd:ed:96:a2:43:c8:62:81:7f:5c:bb:
                    66:83:41:74:0e:4a:05:e5:8b:19:16:69:fc:e1:c2:
                    81:e9:b7:1a:de:43:22:20:a7:90:d2:69:a8:83:14:
                    68:90:80:32:2e:86:a2:5c:c2:4d:1c:d8:90:9f:c5:
                    57:70:08:28:a1:ec:82:1d:97:31:17:6f:40:03:63:
                    7a:5f:84:ae:a3:28:7c:0b:63:94:65:9e:8b:78:35:
                    81:d2:6e:8e:31:cd:ca:06:d9:d9:a9:70:eb:f2:e6:
                    54:2d:ad:26:3f:ed:51:6b:71:00:77:84:88:91:56:
                    8f:95:b5:7a:94:58:aa:d9:6b:19:48:4e:49:f5:db:
                    6d:7c:96:df:e9:95:a8:de:16:56:44:ed:43:12:54:
                    82:0a:c6:7c:ea:a1:77:ea:fa:2f:be:f8:ba:05:f4:
                    d9:ee:12:dd:8b:ee:18:e6:65:94:8d:6d:f7:f2:b7:
                    a6:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:71:EF:80:58:8A:E5:27:36:43:E0:2C:A9:4E:8D:1E:84:41:B0:B2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/fb90281b-17b4-314d-9470-b121ea46f9d9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.26.219.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a2:cd:c0:7f:95:75:7b:8e:06:b6:f7:a3:31:bb:69:72:f3:c2:
         26:55:48:f4:ed:78:bb:9d:7f:0b:92:c5:b1:88:44:0c:5d:01:
         64:d1:d0:1e:31:5d:19:95:47:f4:46:21:08:19:7c:ba:f4:fa:
         68:8c:ef:bc:d7:a4:bc:0f:23:1e:25:53:36:54:da:63:e1:18:
         93:1f:e3:08:35:d4:00:48:b4:40:ea:f0:c3:df:4d:e8:0d:17:
         39:04:30:3d:ae:52:d6:2e:87:c7:cd:3d:38:57:c8:32:7f:26:
         91:9e:cd:93:3c:a4:9f:6a:42:b6:9d:49:ee:8f:15:7e:5e:f8:
         16:1c:1c:19:ce:4b:99:7b:ad:1d:81:c7:6b:0e:69:ea:f1:ad:
         a5:b4:37:89:c7:c8:2c:50:fb:67:49:e8:5d:9a:17:7c:03:ba:
         c2:f1:c6:db:56:8e:2a:4c:07:5b:3e:99:86:4e:09:53:0d:5f:
         12:77:3f:36:f4:64:6e:92:44:ca:0d:4f:f3:7f:52:67:cd:4a:
         b5:09:a5:bd:c6:21:20:a1:b0:96:c4:5f:7d:a6:20:92:2c:2c:
         5e:c3:05:f5:4d:7a:5f:99:d9:36:23:c6:25:a5:b2:72:13:55:
         d2:4d:fe:78:85:c5:a5:11:f5:b3:d6:3f:ef:91:aa:6b:9a:55:
         54:8e:ad:71
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0q2oNyqyQAS724OuAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTI2MDMxNDE2MjU0OFoXDTI2MDYxMjE2MjU0OFowLzEtMCsGA1UEAxMk
NTI0ZWU0YjMtMDJiNC00MmEyLWI0ZmEtOTY0NWVlMDY2MTZjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhYxxexG7SGU4KV/+ZXRwVbS5qbe2CPi4Irm1
nJ5nhklpWcIrd0FmCK0V4j4f01MmFrkeTT6G/r5aM5DdKWinP8lwFYs7zKobt/Tc
GwPAze2WokPIYoF/XLtmg0F0DkoF5YsZFmn84cKB6bca3kMiIKeQ0mmogxRokIAy
LoaiXMJNHNiQn8VXcAgooeyCHZcxF29AA2N6X4Suoyh8C2OUZZ6LeDWB0m6OMc3K
BtnZqXDr8uZULa0mP+1Ra3EAd4SIkVaPlbV6lFiq2WsZSE5J9dttfJbf6ZWo3hZW
RO1DElSCCsZ86qF36vovvvi6BfTZ7hLdi+4Y5mWUjW338remWQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAlx74BYiuUnNkPgLKlOjR6EQbCyMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvZmI5MDI4MWItMTdiNC0z
MTRkLTk0NzAtYjEyMWVhNDZmOWQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFxrbMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKLNwH+VdXuOBrb3ozG7aXLzwiZVSPTteLudfwuSxbGIRAxdAWTR0B4x
XRmVR/RGIQgZfLr0+miM77zXpLwPIx4lUzZU2mPhGJMf4wg11ABItEDq8MPfTegN
FzkEMD2uUtYuh8fNPThXyDJ/JpGezZM8pJ9qQradSe6PFX5e+BYcHBnOS5l7rR2B
x2sOaerxraW0N4nHyCxQ+2dJ6F2aF3wDusLxxttWjipMB1s+mYZOCVMNXxJ3Pzb0
ZG6SRMoNT/N/UmfNSrUJpb3GISChsJbEX32mIJIsLF7DBfVNel+Z2TYjxiWlsnIT
VdJN/niFxaUR9bPWP++RqmuaVVSOrXE=
-----END CERTIFICATE-----
Generated at Sun Mar 15 22:44:05 2026 by rpki-client