Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/09f47d87-7680-3383-92cb-56a062c0722d.roa
File:                     09f47d87-7680-3383-92cb-56a062c0722d.roa (raw, json)
Hash identifier:          LeAo31oXzTWNWLld7xg47ZKRTlpAXf8LRMbfhn3KkZ0=
Subject key identifier:   44:43:0B:C5:7C:EC:B4:CA:79:3C:2B:DF:7E:05:31:6A:FE:C9:FA:38
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584AF0F1452395B7768F110E4780
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/09f47d87-7680-3383-92cb-56a062c0722d.roa
Signing time:             Fri 22 Aug 2025 13:00:41 +0000
ROA not before:           Fri 22 Aug 2025 13:00:41 +0000
ROA not after:            Thu 20 Nov 2025 14:00:41 +0000
asID:                     264409
IP address blocks:        23.26.115.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:f0:f1:45:23:95:b7:76:8f:11:0e:47:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Aug 22 13:00:41 2025 GMT
            Not After : Nov 20 14:00:41 2025 GMT
        Subject: CN=36742523-cad4-4eb0-8c34-a805e75eaf77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:37:38:87:ff:57:16:53:72:2d:ac:0f:f2:52:
                    93:04:42:f5:b3:b7:1a:b5:ca:cb:4c:de:9a:45:87:
                    1d:0c:95:66:68:a1:2a:48:06:b7:7e:63:51:4d:6a:
                    b8:c8:02:72:5a:1d:84:29:d3:74:59:3a:31:b7:3e:
                    4e:ed:74:14:13:71:c4:6b:ed:b2:31:32:75:1a:92:
                    44:88:d6:84:fa:f3:c6:5b:90:09:92:0a:cc:71:a1:
                    71:22:1a:aa:d6:2c:1c:64:16:82:26:32:77:23:59:
                    cc:77:7e:07:5c:f0:dd:32:13:22:8f:3e:64:42:ac:
                    ff:52:40:99:84:77:1e:48:00:b1:4b:8a:bd:eb:27:
                    b9:d0:b5:17:18:cb:c1:3a:84:4f:12:c5:5d:47:6e:
                    62:2e:53:07:b0:ad:6b:e8:9f:90:2d:db:f1:f2:03:
                    2c:ea:b2:8a:e5:43:e4:63:d6:b0:66:b9:98:9c:35:
                    10:4b:dc:a2:00:40:f0:80:0e:8a:37:fe:2c:6b:a7:
                    47:00:fd:ae:ca:c5:66:d6:a4:40:ef:2a:b3:99:5f:
                    d2:57:49:0d:85:50:aa:43:15:63:51:de:39:33:c9:
                    fc:31:4a:1a:2c:15:48:b0:50:8b:99:59:23:85:b3:
                    be:aa:c2:19:42:6a:19:2e:d1:c5:f2:39:7c:a4:82:
                    7e:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:43:0B:C5:7C:EC:B4:CA:79:3C:2B:DF:7E:05:31:6A:FE:C9:FA:38
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/09f47d87-7680-3383-92cb-56a062c0722d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.26.115.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:19:97:47:95:13:dc:00:a3:36:be:89:93:16:06:f3:d2:95:
         47:21:bf:34:d3:2e:bf:76:1f:e9:87:7b:47:4b:a3:0d:c1:87:
         7c:0a:3d:5f:ea:e7:7a:1e:6a:1a:1d:a7:50:a7:92:2f:2f:f5:
         6b:74:01:1b:bf:39:1b:a3:2a:b2:53:69:50:01:1a:2b:b8:a1:
         b2:f7:ae:84:9d:ad:92:5f:ed:f0:7b:4a:e7:53:c0:b3:e4:cb:
         bc:c2:6b:d5:99:6e:db:bc:03:d4:1b:b5:ce:08:ab:20:2f:ce:
         89:0d:f0:24:30:11:fe:2f:d9:c8:05:ba:7f:46:f7:5a:b9:0b:
         06:1b:3e:65:7c:72:9e:ce:fa:d9:12:f5:7e:7b:1b:7c:11:87:
         d2:df:f2:07:c4:3a:22:1d:e2:a3:4f:92:f2:fd:69:99:15:3d:
         1e:a3:b7:8d:a7:df:d8:8b:45:5d:53:2e:88:47:33:84:7e:07:
         48:38:fa:91:70:68:7c:ec:ef:b9:32:f5:ec:2f:03:c8:e4:7b:
         a5:c2:92:f2:4f:4d:82:a7:46:b5:16:3f:d7:c4:0c:d1:c5:dc:
         22:d6:7d:7b:79:19:9c:cd:e4:a3:9e:d5:b6:51:b3:ce:92:ba:
         af:9b:0d:e0:75:c3:a5:25:4e:ad:08:9d:ef:53:77:f0:5f:61:
         c2:91:1b:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:46:41 2025 by rpki-client