Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/0096584d-da88-30eb-8fed-f64796225892.roa
File:                     0096584d-da88-30eb-8fed-f64796225892.roa (raw, json)
Hash identifier:          2rKZdWf6U+t0djkgRiXtlbc6vpmwl9DHIW7joMAmoh4=
Subject key identifier:   0B:19:7F:2C:DE:6F:D4:59:B8:DC:59:66:54:F6:DF:37:E7:B5:04:1A
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584B7DECCFE35D353718B468FBC0
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/0096584d-da88-30eb-8fed-f64796225892.roa
Signing time:             Sun 12 Oct 2025 01:00:30 +0000
ROA not before:           Sun 12 Oct 2025 01:00:30 +0000
ROA not after:            Sat 10 Jan 2026 02:00:30 +0000
asID:                     7385
IP address blocks:        23.26.157.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:7d:ec:cf:e3:5d:35:37:18:b4:68:fb:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Oct 12 01:00:30 2025 GMT
            Not After : Jan 10 02:00:30 2026 GMT
        Subject: CN=ba5c0565-ea98-4058-ba6a-26ecc6217df3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:65:3c:83:74:5c:82:08:ed:50:5d:bd:ad:68:
                    f2:0a:d0:74:13:4d:8a:94:af:d0:bc:ec:77:eb:e2:
                    22:99:19:27:72:81:79:09:c3:0d:9f:93:4d:77:78:
                    32:e0:66:b6:dc:24:71:3b:16:0e:58:5a:a4:53:45:
                    3b:74:76:5b:e4:e3:0e:66:b1:51:9f:7c:2b:26:88:
                    48:11:84:f0:99:09:96:0f:e0:51:a8:9b:25:a9:d1:
                    79:9f:f4:ca:d5:d3:93:22:7f:4a:b5:3b:d9:b3:98:
                    f3:67:f2:12:3f:0b:ad:51:48:d2:ca:d9:00:ab:a4:
                    fa:a5:de:61:79:22:9d:7e:bb:b9:b2:ff:8d:4a:61:
                    41:cf:6c:a4:0a:81:6a:29:56:2b:1b:72:a3:4b:82:
                    5c:b8:9b:aa:1d:bb:1a:a3:22:76:45:43:27:1c:49:
                    88:d9:a0:83:31:26:b5:b2:73:b4:f0:84:2f:dc:98:
                    d4:47:66:a2:47:31:e3:05:7d:fd:d0:02:50:02:06:
                    3b:34:3e:54:1a:30:8b:36:b6:6f:5b:fe:83:4f:18:
                    68:17:70:88:33:84:5f:ec:e1:b4:0b:9b:e5:88:eb:
                    98:f9:db:84:e5:07:2a:60:33:10:c4:b1:4d:d3:27:
                    51:cf:51:99:6a:a0:4b:cf:15:38:01:4b:1b:c2:f2:
                    cc:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:19:7F:2C:DE:6F:D4:59:B8:DC:59:66:54:F6:DF:37:E7:B5:04:1A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/0096584d-da88-30eb-8fed-f64796225892.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.26.157.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:be:87:74:64:0c:3c:ac:97:f2:45:d2:96:87:d4:2e:ff:52:
         67:57:f2:8d:00:29:d9:68:06:cf:0e:c9:e2:36:25:37:d7:c2:
         3d:b0:e2:94:9c:17:80:31:e7:e6:b8:3b:ea:a3:c8:7a:68:b8:
         0a:bb:97:23:f5:21:57:32:8b:60:25:b7:38:42:b1:ce:b8:17:
         8d:98:26:43:f4:79:65:d6:20:82:19:bd:70:2f:1f:11:d6:7f:
         8a:eb:3c:20:7e:e8:db:ac:c6:68:e3:5c:b5:60:88:40:96:3a:
         18:45:93:1b:06:2b:6b:20:e3:e3:72:d2:5f:34:fe:5a:44:f5:
         34:55:52:64:3f:a7:f5:71:7f:90:ad:64:9d:9f:31:4b:56:c6:
         b9:80:cc:d5:38:57:14:df:28:33:8e:4e:36:15:a6:c2:59:22:
         04:df:60:63:e8:db:a2:9e:61:59:32:09:8e:c0:07:4e:f6:86:
         57:8f:57:6b:3f:99:56:32:f5:22:a1:8d:bc:35:fb:98:f6:2b:
         ff:4b:cf:f4:ad:7e:ae:66:8d:a3:43:f7:8e:c2:66:bb:7c:bf:
         95:52:39:8d:aa:3a:d4:30:dc:ce:7d:cd:e3:cf:f2:1d:be:79:
         cc:05:9b:61:24:b3:0d:92:57:95:63:7a:0b:50:29:1e:fd:1f:
         2c:ac:10:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:16:12 2025 by rpki-client