Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/287dc4c9-1caf-3963-a818-a14655c384c9.roa
File:                     287dc4c9-1caf-3963-a818-a14655c384c9.roa (raw, json)
Hash identifier:          VrrIgXqu1AR+GIXd6tjh38xJHxvnutq8Lupr9fVoOgM=
Subject key identifier:   A4:50:E7:6E:F8:0C:AE:4E:5D:A7:6D:60:FB:4B:CB:E9:47:BC:23:8B
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285849CC83CCC2E379105EE8F15780
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/287dc4c9-1caf-3963-a818-a14655c384c9.roa
Signing time:             Fri 09 May 2025 19:04:17 +0000
ROA not before:           Fri 09 May 2025 19:04:17 +0000
ROA not after:            Thu 07 Aug 2025 19:04:17 +0000
asID:                     401152
IP address blocks:        23.26.130.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 May 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:cc:83:cc:c2:e3:79:10:5e:e8:f1:57:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: May  9 19:04:17 2025 GMT
            Not After : Aug  7 19:04:17 2025 GMT
        Subject: CN=86299da1-3c3b-4cb9-9ee4-6b70dfe16a23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:20:b5:4a:4b:03:28:17:9d:da:8b:17:b8:9c:
                    fc:61:88:15:85:14:76:01:d5:d5:f5:92:f6:95:ee:
                    ea:d6:f8:08:3b:e6:3b:eb:44:07:23:44:f3:83:a3:
                    2f:1f:27:10:56:86:5a:4f:60:2a:90:9c:26:53:cc:
                    e2:58:1e:dc:8b:26:bd:a0:44:e6:89:fd:ae:79:2d:
                    ee:0b:1a:ad:ed:97:eb:0f:3a:88:4d:63:d4:3a:58:
                    98:f0:c8:4d:67:e9:5f:95:c1:af:9d:0b:da:69:d6:
                    9e:fe:5b:c7:a3:b6:c2:53:94:c0:86:70:16:36:14:
                    65:ca:d1:7f:6d:76:dc:60:0c:1f:d2:42:ed:d6:26:
                    f6:9f:d9:c1:13:bb:ed:76:6a:8e:e2:23:f3:9b:79:
                    a9:c8:fe:31:da:3b:90:12:6d:d9:25:3f:b0:c6:8d:
                    6f:5d:de:1b:58:86:2c:14:3b:c1:bc:16:b1:bb:05:
                    f7:9c:86:a3:e4:5e:ac:d9:b7:81:ed:df:15:af:7b:
                    09:20:95:c9:a4:75:02:e8:ff:9c:6a:a3:32:c9:e5:
                    63:98:12:9d:cf:e2:49:28:8e:ba:cc:3f:75:08:f0:
                    28:85:05:cb:9a:07:a9:09:c5:fd:be:98:e0:31:48:
                    00:2d:3f:1d:5c:61:31:e9:91:4a:b1:db:e4:53:8c:
                    02:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:50:E7:6E:F8:0C:AE:4E:5D:A7:6D:60:FB:4B:CB:E9:47:BC:23:8B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/287dc4c9-1caf-3963-a818-a14655c384c9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.26.130.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:62:b3:3d:51:33:52:6b:a6:69:7d:e8:11:2d:e9:a2:20:69:
         59:32:71:ed:1b:1a:0f:8a:45:fa:b2:1c:29:d1:55:7a:eb:56:
         e8:7c:37:97:0f:5a:72:37:50:a5:00:67:d4:3e:aa:9c:af:0d:
         b9:8a:aa:99:53:4d:3b:6a:74:3d:b6:25:02:b9:9f:54:ff:bc:
         97:1c:8e:f4:fd:e2:11:7a:16:d0:7b:6c:cb:34:7a:6c:89:7c:
         15:b7:a4:15:be:30:cd:70:d9:92:08:e3:5b:14:4e:3c:93:e9:
         55:58:44:e8:6e:f2:f6:b0:02:bd:31:ae:d6:6d:ad:51:97:f6:
         74:85:8f:43:12:1d:7f:03:00:c2:0f:f2:f7:53:20:75:da:21:
         6e:c8:86:7d:e0:b9:be:83:54:92:c1:ee:e5:0c:3a:f5:bb:32:
         83:67:4d:0d:b0:40:74:10:19:c2:f9:a6:28:bc:5f:32:c4:42:
         53:2c:fa:48:fc:a5:a4:03:af:a7:48:34:76:a2:e1:9b:b4:79:
         d0:12:f8:99:f8:6e:0e:93:1f:ec:a7:1f:0f:94:8a:29:6f:76:
         a7:7a:11:52:e9:1d:b1:a4:ca:48:18:5e:4d:92:a0:ce:dc:1d:
         c3:a9:75:31:fa:44:b4:47:6a:89:86:bd:9a:57:4e:de:18:2e:
         cc:10:18:a2
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnMg8zC43kQXujxV4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTI1MDUwOTE5MDQxN1oXDTI1MDgwNzE5MDQxN1owLzEtMCsGA1UEAxMk
ODYyOTlkYTEtM2MzYi00Y2I5LTllZTQtNmI3MGRmZTE2YTIzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgiC1SksDKBed2osXuJz8YYgVhRR2AdXV9ZL2
le7q1vgIO+Y760QHI0Tzg6MvHycQVoZaT2AqkJwmU8ziWB7ciya9oETmif2ueS3u
Cxqt7ZfrDzqITWPUOliY8MhNZ+lflcGvnQvaadae/lvHo7bCU5TAhnAWNhRlytF/
bXbcYAwf0kLt1ib2n9nBE7vtdmqO4iPzm3mpyP4x2juQEm3ZJT+wxo1vXd4bWIYs
FDvBvBaxuwX3nIaj5F6s2beB7d8Vr3sJIJXJpHUC6P+caqMyyeVjmBKdz+JJKI66
zD91CPAohQXLmgepCcX9vpjgMUgALT8dXGEx6ZFKsdvkU4wCPwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKRQ5274DK5OXadtYPtLy+lHvCOLMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvMjg3ZGM0YzktMWNhZi0z
OTYzLWE4MTgtYTE0NjU1YzM4NGM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFxqCMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAE5isz1RM1Jrpml96BEt6aIgaVkyce0bGg+KRfqyHCnRVXrrVuh8N5cP
WnI3UKUAZ9Q+qpyvDbmKqplTTTtqdD22JQK5n1T/vJccjvT94hF6FtB7bMs0emyJ
fBW3pBW+MM1w2ZII41sUTjyT6VVYROhu8vawAr0xrtZtrVGX9nSFj0MSHX8DAMIP
8vdTIHXaIW7Ihn3gub6DVJLB7uUMOvW7MoNnTQ2wQHQQGcL5pii8XzLEQlMs+kj8
paQDr6dINHai4Zu0edAS+Jn4bg6TH+ynHw+Uiilvdqd6EVLpHbGkykgYXk2SoM7c
HcOpdTH6RLRHaomGvZpXTt4YLswQGKI=
-----END CERTIFICATE-----
Generated at Mon May 12 19:42:18 2025 by rpki-client