Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/23018308-cf4c-31cc-9141-c913304ec67d.roa
File:                     23018308-cf4c-31cc-9141-c913304ec67d.roa (raw, json)
Hash identifier:          YjQm2omosKlpM2jAO9KQTdHGsqlyk5nxIBrR47Ou950=
Subject key identifier:   82:4B:E0:1C:5E:F6:20:96:D2:55:DA:32:52:15:B4:0D:68:37:DE:43
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584A56004BA30CBB0E7346E91D80
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/23018308-cf4c-31cc-9141-c913304ec67d.roa
Signing time:             Sat 28 Jun 2025 01:00:48 +0000
ROA not before:           Sat 28 Jun 2025 01:00:48 +0000
ROA not after:            Fri 26 Sep 2025 01:00:48 +0000
asID:                     401152
IP address blocks:        23.26.228.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:56:00:4b:a3:0c:bb:0e:73:46:e9:1d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Jun 28 01:00:48 2025 GMT
            Not After : Sep 26 01:00:48 2025 GMT
        Subject: CN=89a1393f-2396-44d2-b7cb-d3a93538799e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:7d:15:74:17:03:44:78:35:86:fd:19:3d:14:
                    1d:55:87:6b:98:53:c2:a4:9c:34:53:23:8e:d0:d4:
                    7e:e7:01:94:82:0b:26:5a:18:72:ef:9c:99:34:b3:
                    c5:62:c5:02:bf:01:e7:44:d4:f3:0d:23:20:5c:bb:
                    3d:49:62:17:b1:50:bf:cd:c7:04:ed:2a:89:fc:ad:
                    87:37:cd:ba:d8:9b:a0:c3:e3:11:6f:e0:a7:5f:5e:
                    b6:6d:2d:2b:99:9f:f6:9d:95:38:ff:21:ba:61:5b:
                    bf:dd:56:1f:ff:a6:75:7f:f2:00:5c:70:7a:db:3a:
                    d4:20:5b:7d:aa:87:84:be:b0:68:04:0e:cb:eb:0e:
                    c0:3d:21:30:4b:46:53:3a:eb:f2:c1:c4:2d:17:f5:
                    08:a1:d0:d7:f6:9f:a9:e0:de:86:32:2a:5d:40:88:
                    ef:d2:49:4c:88:49:3a:02:3d:bd:60:e2:fb:4a:0f:
                    54:40:11:04:0c:c6:02:e2:4f:c2:ce:ed:0d:af:85:
                    1b:29:8b:b1:d0:61:3d:b3:e7:78:d4:82:25:38:25:
                    e5:9d:bc:7b:e2:91:d5:8e:79:d3:13:a6:87:01:f4:
                    0d:a2:12:2f:53:da:5b:01:40:22:f8:24:bd:69:40:
                    96:49:99:57:c7:67:b0:2f:6b:73:ca:e0:64:58:48:
                    76:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:4B:E0:1C:5E:F6:20:96:D2:55:DA:32:52:15:B4:0D:68:37:DE:43
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/23018308-cf4c-31cc-9141-c913304ec67d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.26.228.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:7f:e8:82:e8:49:b4:cb:1c:1f:ea:4c:b5:5b:dc:b9:7f:5e:
         ad:b3:26:c0:a9:e3:94:06:3c:3b:cd:bd:46:c1:17:4b:f5:54:
         26:39:59:c9:ee:34:25:c4:3e:bf:d0:e8:e6:54:a9:eb:29:48:
         54:be:94:e2:77:8c:87:af:c1:5a:9f:cf:18:1a:1d:fe:e4:77:
         35:6c:3b:b7:9a:e5:10:4d:91:25:02:2b:9e:60:55:18:e5:33:
         1e:42:28:89:7f:c5:4f:e0:28:a7:b0:fb:1c:b2:7b:56:30:be:
         51:18:72:75:d3:0a:99:09:b8:09:a5:fc:84:6d:d5:f5:73:7d:
         75:a1:af:51:e3:3b:bb:ca:b4:06:71:ff:49:74:8c:cf:00:d9:
         c9:09:8e:b8:a2:81:8d:ee:f7:ec:8b:2d:1d:08:22:db:eb:67:
         68:68:34:e4:19:a2:2b:20:8f:75:da:c5:53:5c:5e:b7:b8:11:
         18:36:7f:46:c2:29:5c:a1:85:d0:66:f5:ae:5f:a6:68:8a:d4:
         8f:a4:b1:e2:2e:ac:bd:57:b7:e9:c0:bd:02:11:e9:ff:bc:81:
         c0:f1:96:48:82:4e:81:0b:06:f9:f0:88:01:65:4c:b9:b8:88:
         50:7d:98:01:de:b3:c7:26:3f:c5:2f:bf:db:00:b9:70:c5:63:
         1f:b2:00:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 09:54:28 2025 by rpki-client