Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/244aa4a1-72be-35b2-be63-c23f2555aa81.roa
File:                     244aa4a1-72be-35b2-be63-c23f2555aa81.roa (raw, json)
Hash identifier:          ilfzo39qfGLOfrLpJ9SFdwF7qg70Tiqgupff4PyMH7c=
Subject key identifier:   9A:D7:3F:D3:15:B8:DC:A7:49:46:5B:42:EF:01:7E:E2:17:25:0A:3B
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584A4AD58F8FF0204787C5E59680
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/244aa4a1-72be-35b2-be63-c23f2555aa81.roa
Signing time:             Tue 24 Jun 2025 01:00:50 +0000
ROA not before:           Tue 24 Jun 2025 01:00:50 +0000
ROA not after:            Mon 22 Sep 2025 01:00:50 +0000
asID:                     401152
IP address blocks:        23.26.42.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:4a:d5:8f:8f:f0:20:47:87:c5:e5:96:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Jun 24 01:00:50 2025 GMT
            Not After : Sep 22 01:00:50 2025 GMT
        Subject: CN=0518b100-3de7-414f-b10b-56c3587e4c26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:92:c4:88:99:11:cf:25:af:d7:85:50:c3:70:
                    51:c2:2b:2a:c4:2b:32:ab:57:54:64:a3:ba:d9:79:
                    b5:87:1c:33:5f:ed:b2:50:fc:63:61:ad:bc:21:b6:
                    1e:a0:93:a9:f8:00:6e:8e:bb:0a:cf:98:53:73:cf:
                    e1:54:e5:55:1e:61:d5:3f:74:a6:c1:bb:32:ec:f0:
                    a7:63:e8:db:1e:86:6c:d0:fc:e9:90:bf:0a:f0:a9:
                    e6:57:5d:88:13:10:5e:1b:94:80:28:de:de:3a:fa:
                    cd:c5:ff:f6:f8:8d:c7:46:ee:e5:6e:02:28:1e:fb:
                    71:d1:80:af:f9:52:b2:22:fc:6c:9a:4f:b9:3b:99:
                    11:fb:b0:b2:54:33:65:12:93:11:7a:93:b5:96:1d:
                    1c:84:24:12:0d:82:a1:58:1e:5a:3a:c4:4a:7b:4d:
                    31:83:7a:60:f8:ce:f7:c8:10:89:6e:e7:26:ca:6b:
                    a5:96:fb:9e:99:dc:87:bc:64:01:47:41:ba:c2:7e:
                    38:7b:15:e3:7c:8a:72:27:b5:61:72:c6:52:1c:8e:
                    67:d9:3d:7a:3b:cf:4e:fa:af:9b:b4:81:c4:5e:2a:
                    de:0a:c5:88:43:b5:a3:18:c4:11:e1:8d:7c:f0:0f:
                    74:dc:e6:43:00:17:c8:8f:c9:57:a5:8c:00:57:8f:
                    b3:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:D7:3F:D3:15:B8:DC:A7:49:46:5B:42:EF:01:7E:E2:17:25:0A:3B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/244aa4a1-72be-35b2-be63-c23f2555aa81.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.26.42.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a5:be:29:b3:73:68:8d:b0:82:b2:46:1a:c6:bd:fc:e6:39:b6:
         12:c3:53:a3:11:ba:52:d3:99:00:8d:68:74:0c:c8:4e:39:49:
         91:8c:78:ea:34:9e:44:88:18:af:a1:c0:30:c3:bf:8d:f5:84:
         a5:1c:43:f0:dc:9f:53:6c:19:c6:6c:f9:00:e5:78:b2:9a:54:
         51:18:32:30:d5:e9:79:4a:21:06:b4:56:e3:09:ef:c4:6a:40:
         b8:b9:54:e4:08:9c:ca:02:0c:b3:31:2d:69:af:76:c0:e3:e2:
         20:e3:52:5d:35:63:b8:89:28:89:08:02:3c:a9:94:24:00:82:
         48:1a:78:02:14:3d:9a:92:c4:01:86:95:0a:79:bc:8a:a2:6e:
         01:b6:7d:76:1d:49:f3:c1:b3:d7:9e:2c:d6:e8:64:1d:7b:eb:
         d2:52:5a:91:0f:08:f4:e4:de:11:13:41:d9:e8:9c:1f:d7:27:
         d0:33:d6:2c:65:14:2a:2b:ad:30:53:4f:d5:8b:4f:6e:02:39:
         e6:2b:6d:b8:0c:7f:f0:f7:9d:47:0f:1b:62:29:8c:7d:3f:d5:
         a8:d6:8f:a5:7b:6d:94:07:1f:bb:16:15:98:19:5e:9b:94:99:
         f6:7f:23:98:65:f3:99:e6:59:79:7c:12:79:35:d2:e8:8e:3f:
         63:75:bf:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 16:54:44 2025 by rpki-client