Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/ffbd79bb-a0ba-38d9-a8cb-b1bda40c8bae.roa
File:                     ffbd79bb-a0ba-38d9-a8cb-b1bda40c8bae.roa (raw, json)
Hash identifier:          7ofXopvk7YKdFHpnfXFew4hAt1OB1YHgpuK21cuAQ4w=
Subject key identifier:   EB:E3:43:15:27:E1:5F:5F:0E:93:AE:CD:20:57:5F:33:B0:89:FD:A3
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584E7A650695301BC29488FDD300
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/ffbd79bb-a0ba-38d9-a8cb-b1bda40c8bae.roa
Signing time:             Sun 12 Jul 2026 21:00:13 +0000
ROA not before:           Sun 12 Jul 2026 21:00:13 +0000
ROA not after:            Sat 10 Oct 2026 21:00:13 +0000
asID:                     2914
IP address blocks:        23.26.238.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:7a:65:06:95:30:1b:c2:94:88:fd:d3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Jul 12 21:00:13 2026 GMT
            Not After : Oct 10 21:00:13 2026 GMT
        Subject: CN=09ed7326-a3be-4821-ab6d-5cffbe27aa7c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:a5:35:61:61:28:28:6d:18:c3:af:d2:7f:97:
                    f7:d0:0e:52:33:91:48:4a:5e:b2:db:60:0a:9b:92:
                    ed:78:0a:a0:f1:c4:71:b1:24:1e:ce:58:27:05:97:
                    d3:93:60:f0:90:48:4d:f1:eb:54:75:3f:ca:1c:3c:
                    49:69:06:9c:f9:e2:fa:6a:9a:9d:20:4c:4e:a3:cf:
                    a8:f3:ec:bc:c5:db:52:67:e9:ec:12:07:e9:c0:1d:
                    c9:e1:cd:6f:c6:23:a1:9f:f7:67:c3:97:50:b4:27:
                    ae:5a:6d:9d:a3:6d:97:68:e2:7c:c6:a9:de:28:19:
                    76:6b:ee:a7:20:3f:c2:f2:8c:a9:5e:a9:a3:80:96:
                    4e:9a:3b:d5:c4:25:5a:3b:2e:d8:ef:dc:dd:00:fe:
                    3e:b3:fa:6f:be:f8:db:97:fa:2d:df:f5:be:48:23:
                    fc:43:a7:69:9e:f8:6c:0f:2c:c5:8e:26:a9:69:88:
                    06:ad:26:09:39:5f:17:c1:1b:ff:85:b0:c7:ce:3a:
                    a8:9a:6e:8d:91:e1:85:9a:74:74:bd:ab:87:36:22:
                    32:b7:b0:40:32:aa:1d:0f:3b:bf:1c:cd:6a:76:ac:
                    c0:6d:c4:81:f2:fc:0d:8a:86:ac:70:ea:e9:21:6c:
                    76:94:f9:30:32:1a:b5:1f:68:12:89:c1:c6:f5:3f:
                    12:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:E3:43:15:27:E1:5F:5F:0E:93:AE:CD:20:57:5F:33:B0:89:FD:A3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/ffbd79bb-a0ba-38d9-a8cb-b1bda40c8bae.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.26.238.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:e1:af:d5:9c:77:78:ee:76:9b:a2:a0:1e:71:be:ce:61:38:
         c6:fc:b3:19:31:8f:cb:8b:af:8f:72:ed:a7:8a:3d:01:90:40:
         dc:03:51:64:f7:d7:13:b8:7e:4a:c7:df:14:54:a8:4d:26:e2:
         68:98:9f:f5:73:c7:b8:5d:72:71:6e:f5:0a:a7:e8:fd:d6:b0:
         98:dd:a9:bc:91:f8:51:c8:90:d9:46:8e:5e:7b:08:93:7c:cd:
         8a:64:72:cd:4a:39:78:f4:78:4e:fe:c3:12:bd:06:e6:2f:4a:
         ba:81:3e:93:cd:05:af:7d:ed:33:02:b9:d5:b1:f3:0c:1b:07:
         2e:d7:27:4f:92:ca:97:46:2c:6d:60:ec:0f:25:65:ee:ef:69:
         7e:ea:01:51:84:85:de:e5:2f:5e:90:47:58:d7:00:28:0a:22:
         cb:85:76:2b:fd:36:76:e2:45:33:37:9e:eb:63:6a:f2:6a:47:
         c4:52:2c:b0:b2:1d:9c:16:94:c3:ad:ce:4f:fa:e7:c6:5f:0b:
         8b:e0:36:8f:95:63:3c:78:f7:c9:15:f7:d5:60:51:48:21:96:
         8e:84:c8:31:b8:96:6e:19:e9:f1:c3:43:ab:af:8e:3e:87:c2:
         ff:87:01:f2:51:e0:76:84:83:15:c0:19:66:fd:e1:95:fd:51:
         51:3a:54:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:39:05 2026 by rpki-client