Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/367dff73-daba-307d-bb6f-9a7bca5547d9.roa
File:                     367dff73-daba-307d-bb6f-9a7bca5547d9.roa (raw, json)
Hash identifier:          8POOUZDOqUTEVvO7aUgbop/8i5vN0OpNGxtpYPT75Ms=
Subject key identifier:   24:90:5D:58:FE:94:D5:5C:BF:C5:AD:A1:F1:0F:45:CA:7E:EE:93:EB
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584B7DECCF777E0A16DFE60E3840
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/367dff73-daba-307d-bb6f-9a7bca5547d9.roa
Signing time:             Sun 12 Oct 2025 01:00:30 +0000
ROA not before:           Sun 12 Oct 2025 01:00:30 +0000
ROA not after:            Sat 10 Jan 2026 02:00:30 +0000
asID:                     7385
IP address blocks:        23.26.89.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:7d:ec:cf:77:7e:0a:16:df:e6:0e:38:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Oct 12 01:00:30 2025 GMT
            Not After : Jan 10 02:00:30 2026 GMT
        Subject: CN=6f87cf71-c5c6-4895-9ec4-d1676891f0ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:c8:40:78:8c:3f:71:00:00:3b:83:15:8e:e1:
                    09:c6:c9:9a:44:a4:5d:84:80:e2:97:ee:a1:0f:ab:
                    92:93:52:fd:7c:5f:b1:cf:71:b7:cf:27:2f:a7:4b:
                    78:72:e0:a9:6c:f5:e3:5d:a1:84:7a:73:3e:f1:2f:
                    e8:59:f7:be:e4:cc:50:a0:2c:06:41:d0:f1:0c:ba:
                    3b:15:3a:3d:c1:f1:75:20:91:aa:00:74:44:7f:2b:
                    21:03:db:af:b9:74:4f:64:fd:32:72:b0:4b:0c:af:
                    0e:99:17:6c:35:70:8d:2f:da:a0:06:3b:6f:f2:44:
                    aa:f3:3d:43:33:9d:bc:ef:e4:f2:16:66:21:fa:cb:
                    c1:dc:b3:39:82:4a:41:90:27:44:09:5d:16:fa:d5:
                    83:d7:2b:d1:7f:3b:42:95:05:84:49:81:dd:d2:af:
                    eb:d2:21:e8:98:22:b7:8a:af:46:cd:41:c2:d8:1c:
                    82:39:82:c3:f7:15:0b:6e:d9:95:94:54:91:d6:91:
                    ba:53:06:f4:64:e4:1b:5a:24:4e:53:de:8d:bd:b4:
                    fb:1b:76:36:99:f7:e4:57:aa:18:30:ea:c2:4b:02:
                    a1:83:a9:dc:fb:a8:fd:e4:72:fb:52:e9:ee:99:ee:
                    6e:17:ab:95:71:dc:af:9f:87:a7:8e:ff:55:ff:1a:
                    98:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:90:5D:58:FE:94:D5:5C:BF:C5:AD:A1:F1:0F:45:CA:7E:EE:93:EB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/367dff73-daba-307d-bb6f-9a7bca5547d9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.26.89.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:b8:23:19:c2:29:10:ce:8c:ce:c6:c1:ba:7c:06:2c:7c:41:
         0d:28:a6:8a:91:e2:19:15:f0:d5:fe:b4:f4:c2:0b:7f:ee:00:
         19:75:3a:73:88:06:e0:e3:05:cd:f1:99:57:47:b2:7b:4e:2d:
         e2:87:2b:4b:98:48:c0:86:27:38:db:a2:1f:e9:15:15:37:fd:
         49:b2:31:33:cd:3a:18:27:66:8b:69:7b:4b:cb:e0:c2:69:37:
         24:a6:5b:89:be:d1:75:e5:b1:b3:17:4f:f8:56:a5:97:75:bb:
         5c:57:b4:42:27:8a:cf:2b:77:75:1d:c4:e8:7c:57:61:9a:1f:
         3c:42:08:94:16:81:3b:70:ae:36:21:10:45:08:b5:a4:bd:22:
         b6:fa:8c:4b:fd:07:12:28:f8:fc:d5:d9:53:b0:60:aa:e7:26:
         4e:32:93:10:3c:2b:a4:ee:7e:24:ec:fd:fa:26:f2:d2:2e:74:
         7f:32:31:ad:0a:4e:f9:c0:00:8d:07:f9:fa:cf:d6:04:2d:a1:
         96:7b:f5:e3:33:e6:ad:27:33:9e:f4:39:72:d5:bf:d5:cd:17:
         7e:ce:b5:fe:c2:1a:0b:c4:24:69:b6:1a:12:85:9e:39:25:d9:
         48:65:15:2f:f2:ac:db:c5:ad:a5:14:fd:07:c7:cb:c2:ac:10:
         e6:a1:6b:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:09:54 2025 by rpki-client