Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/0bcb12e2-1225-3898-8058-9a4e55a8ef66.roa
File:                     0bcb12e2-1225-3898-8058-9a4e55a8ef66.roa (raw, json)
Hash identifier:          jwTK6plvwTUkaFyKSe5Q5NKfOlqOx696yxMBN5Fc38A=
Subject key identifier:   F1:1C:99:15:69:D8:4E:9A:A0:DB:C5:19:90:0A:B9:1C:86:A2:56:ED
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584E3601882632FCCA9F5E3ACB00
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/0bcb12e2-1225-3898-8058-9a4e55a8ef66.roa
Signing time:             Thu 18 Jun 2026 09:00:12 +0000
ROA not before:           Thu 18 Jun 2026 09:00:12 +0000
ROA not after:            Wed 16 Sep 2026 09:00:12 +0000
asID:                     399646
IP address blocks:        23.26.125.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:36:01:88:26:32:fc:ca:9f:5e:3a:cb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Jun 18 09:00:12 2026 GMT
            Not After : Sep 16 09:00:12 2026 GMT
        Subject: CN=9dc3b1ea-3fdd-4881-b714-2a35059eb3da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:5c:bd:6e:20:da:03:1f:39:6a:4c:5f:b5:9c:
                    fc:e3:4c:91:ab:45:42:f8:b6:b6:bd:62:be:80:00:
                    63:82:27:8f:e6:0d:a8:ad:46:38:91:f5:02:ce:8f:
                    1c:5e:51:6a:bc:b3:e7:85:7e:cd:53:cf:25:3f:fb:
                    f4:c7:f6:88:6e:bb:53:09:72:ca:35:0d:fe:cf:b5:
                    1a:c0:cd:0f:f3:62:43:9f:6f:00:e9:1c:d8:56:c4:
                    83:d7:d7:92:bc:53:fb:4b:0a:b1:fd:a6:85:9a:95:
                    3b:9f:60:90:e4:09:7e:18:b7:88:31:a2:b8:13:60:
                    84:e3:7e:28:00:76:09:b3:8d:0c:7a:2a:fe:06:e7:
                    de:f3:41:34:f8:86:d7:6d:40:40:24:e7:cc:a5:c7:
                    6e:68:b0:a9:33:d2:7f:74:cb:24:e0:de:67:ee:4f:
                    b3:bd:81:5d:ba:c6:03:d0:3c:3f:d8:db:0c:ad:37:
                    c3:45:50:e5:d4:2b:a2:1c:65:80:dd:d8:8e:3d:ae:
                    5d:3e:35:f7:0d:87:a9:74:4a:56:e1:06:95:ac:fe:
                    dd:36:70:fc:7d:aa:c6:7c:19:1a:43:06:37:7e:a4:
                    9b:b0:8f:e3:48:1c:78:ff:63:8e:32:1e:2f:1a:c3:
                    e3:bd:59:bb:33:d7:c1:5c:23:9a:d4:7e:5a:94:ce:
                    7d:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:1C:99:15:69:D8:4E:9A:A0:DB:C5:19:90:0A:B9:1C:86:A2:56:ED
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/0bcb12e2-1225-3898-8058-9a4e55a8ef66.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.26.125.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:55:0f:d6:76:85:3e:7a:a3:6d:10:26:8e:34:0c:9c:5f:97:
         6c:f9:a2:65:12:99:c2:4d:55:c5:20:54:9a:78:02:68:aa:84:
         cb:8c:37:97:63:c5:c0:35:ad:8b:2f:72:17:ea:bd:25:f5:ed:
         db:2c:d1:6c:41:1e:79:95:32:d8:52:af:75:06:ba:6e:5a:23:
         45:1b:08:51:b4:ac:86:28:d1:5c:0f:e4:ff:7a:c9:23:4e:1c:
         d9:a5:48:49:44:b0:eb:89:02:b5:f7:74:4a:58:5d:ce:b3:99:
         3a:68:7e:ba:46:29:a6:78:28:ee:43:d7:ff:e4:38:e1:36:56:
         48:ce:8f:a8:fb:c2:0c:42:60:fb:ee:f3:46:9d:9c:e7:6b:dd:
         07:38:fa:c6:b4:c0:90:73:8e:2d:57:6c:65:31:df:b0:42:46:
         94:64:94:cf:3e:3a:4c:12:34:cd:87:c4:b3:9a:6f:c9:11:82:
         30:4a:be:ab:94:76:8e:1c:9c:79:08:7a:2e:81:9b:65:92:d7:
         63:57:4b:f6:11:12:28:4f:9d:5c:04:77:c2:7b:91:6a:b7:83:
         a0:e1:43:d3:9b:20:5c:14:00:73:be:53:4c:dc:ed:50:b2:c2:
         a2:a8:6e:58:58:c9:4e:6e:7f:06:4d:eb:d9:85:5a:42:d2:71:
         7e:af:23:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:11:05 2026 by rpki-client