Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/1fe5d6d6-f4a3-3b57-b895-c5018db86dd6.roa
File:                     1fe5d6d6-f4a3-3b57-b895-c5018db86dd6.roa (raw, json)
Hash identifier:          0pVX/ogiSi0/f9MS/kvpJ5iTRh8wuwQT/k0mTSALMNs=
Subject key identifier:   2F:2D:59:15:99:B9:52:BC:3E:6E:FB:59:6B:73:F9:5F:22:1C:40:5C
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584A551DAF70DD2BFA8BE0556A80
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/1fe5d6d6-f4a3-3b57-b895-c5018db86dd6.roa
Signing time:             Fri 27 Jun 2025 17:24:17 +0000
ROA not before:           Fri 27 Jun 2025 17:24:17 +0000
ROA not after:            Thu 25 Sep 2025 17:24:17 +0000
asID:                     401152
IP address blocks:        23.26.38.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:55:1d:af:70:dd:2b:fa:8b:e0:55:6a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Jun 27 17:24:17 2025 GMT
            Not After : Sep 25 17:24:17 2025 GMT
        Subject: CN=051221c5-bf2e-4f1c-98ad-37ef596f9182
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:82:64:65:81:86:b4:95:b7:88:59:27:0a:b3:
                    51:8d:4d:f6:c7:3c:9f:b7:d3:9a:41:f1:90:9b:1c:
                    72:c5:33:f5:6e:c3:87:12:d2:2c:b3:d5:36:b2:87:
                    ed:6b:3e:d9:79:40:a0:be:65:49:43:68:6f:d0:63:
                    19:45:f2:47:cf:d7:52:02:96:2d:8d:51:0d:16:a4:
                    8c:aa:cb:95:e7:0f:35:d5:92:91:f8:6f:9f:9d:75:
                    3b:84:55:e0:ba:a4:03:9f:88:7b:c3:5e:74:f1:f5:
                    2a:61:39:10:ad:5e:eb:6f:5c:10:db:80:71:31:4c:
                    d3:c4:84:ba:52:fd:5b:12:ad:cf:31:73:d2:11:f1:
                    46:97:77:5c:78:ad:36:cd:f5:81:76:e5:e9:3e:b1:
                    6a:4a:d3:97:71:70:9e:29:8c:71:f7:85:1a:9e:70:
                    d4:d7:93:57:b7:15:aa:3c:13:28:9d:7d:61:2e:ec:
                    2b:39:64:3c:09:01:c5:5e:8f:99:76:52:df:2a:c1:
                    10:8e:99:0d:bf:3a:cc:46:06:30:3a:8c:51:8e:b4:
                    71:5f:d8:01:9f:9d:eb:75:ed:5d:1d:93:a4:31:cd:
                    0e:ec:f9:19:eb:7c:0c:8f:47:43:63:e8:73:a1:d2:
                    6d:af:0b:8b:9f:65:1d:86:3d:c0:21:59:70:b7:bd:
                    f8:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:2D:59:15:99:B9:52:BC:3E:6E:FB:59:6B:73:F9:5F:22:1C:40:5C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/1fe5d6d6-f4a3-3b57-b895-c5018db86dd6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.26.38.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:e5:f9:b6:cc:87:75:d1:3b:e8:16:6b:e3:9f:04:cb:d4:0e:
         18:6f:b0:3b:34:26:30:9d:46:f5:b5:fc:5f:bb:03:16:d0:c6:
         dc:c2:93:da:76:f1:b2:9c:44:cb:c7:fc:0f:2f:16:17:94:68:
         83:65:50:9b:6a:e8:ff:0d:42:cd:62:a4:63:cd:4f:c2:30:c1:
         de:bd:87:d0:1c:52:f5:70:61:94:5d:4c:b9:bc:64:c5:ed:49:
         bd:26:42:44:45:9e:c1:5d:52:72:11:7d:21:78:d5:01:fc:5c:
         87:15:ed:7d:be:5f:4d:8f:c7:cb:ea:fd:d9:d7:96:be:ed:2e:
         44:1e:93:b7:67:45:52:0f:b0:66:ce:0b:38:1c:3c:1c:04:7e:
         2c:37:33:36:d6:ad:e2:c6:bb:d3:24:3a:78:6e:b2:dc:3a:2a:
         99:27:22:01:11:5a:c6:4e:ee:84:dd:fd:a6:44:9b:5b:d3:3b:
         a9:4e:9a:95:25:16:8b:64:f2:e6:09:6d:2d:3c:2e:01:81:e1:
         33:47:5c:67:bb:a5:35:b7:4a:7b:ad:0f:d6:90:a8:8e:31:2e:
         f0:f6:d2:19:89:18:ae:04:c5:2a:f2:01:6d:98:45:64:c9:90:
         aa:dc:e0:e2:da:28:9f:e0:78:75:d0:e8:ec:c6:5e:cb:5d:a7:
         ec:91:39:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 14:53:48 2025 by rpki-client