Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/550aafa4-ce15-36a1-889f-06bcce6aa335.roa
File:                     550aafa4-ce15-36a1-889f-06bcce6aa335.roa (raw, json)
Hash identifier:          /hvij6OCFvqE4xaE6wqAUACSl88FLVgZTHZ/PyCg+o4=
Subject key identifier:   69:1B:A7:FE:16:DA:77:9E:37:A3:26:00:EB:51:67:6A:6B:E4:38:1E
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584B7DECCF9ABE017518A5C6DB80
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/550aafa4-ce15-36a1-889f-06bcce6aa335.roa
Signing time:             Sun 12 Oct 2025 01:00:30 +0000
ROA not before:           Sun 12 Oct 2025 01:00:30 +0000
ROA not after:            Sat 10 Jan 2026 02:00:30 +0000
asID:                     7385
IP address blocks:        23.26.110.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:7d:ec:cf:9a:be:01:75:18:a5:c6:db:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Oct 12 01:00:30 2025 GMT
            Not After : Jan 10 02:00:30 2026 GMT
        Subject: CN=cb5776ea-b058-405c-b75a-0f84f65336b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:e7:b4:85:82:4c:24:b9:e5:cc:e5:d4:c2:e8:
                    72:24:cd:6e:a7:03:c2:8e:04:d4:48:b7:d2:42:3e:
                    26:9a:ed:61:04:1f:b7:4a:4d:b2:95:48:e8:e5:da:
                    c5:e5:3a:ed:ac:b8:1d:50:91:0e:b1:a4:bc:dc:d9:
                    ed:01:66:d7:7b:62:63:c2:83:f9:68:47:24:33:49:
                    3f:15:85:da:d1:a4:27:96:f1:05:fb:ed:64:57:1e:
                    19:f7:2a:ff:cc:a6:21:7e:7c:cb:77:90:b4:a5:de:
                    a2:ec:e0:32:52:9c:aa:ca:05:db:96:86:41:89:a2:
                    f0:3f:22:f8:9b:d6:81:13:6d:db:70:c8:20:67:d5:
                    5e:9b:7d:22:9c:9e:25:9d:7f:0a:90:4f:23:ff:f8:
                    0c:23:59:e2:50:fb:28:a0:4c:9d:26:97:74:a4:08:
                    0b:2d:ff:ef:8f:ad:51:23:dc:ea:a2:04:14:08:5e:
                    ec:f9:c4:e9:5a:65:96:ef:6f:b5:91:fe:25:4c:46:
                    d3:62:c6:d8:4a:3d:a3:56:7c:3c:64:1c:02:78:fe:
                    11:c7:55:1b:1d:e0:e7:42:d0:a3:2a:c4:45:73:aa:
                    00:d7:3d:d7:c3:63:f7:f2:d0:8a:b0:d8:98:f1:fa:
                    b4:fb:a1:b7:ed:8d:70:06:76:f5:e7:ba:02:01:68:
                    5b:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:1B:A7:FE:16:DA:77:9E:37:A3:26:00:EB:51:67:6A:6B:E4:38:1E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/550aafa4-ce15-36a1-889f-06bcce6aa335.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.26.110.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:21:4b:67:3f:2d:62:a4:41:c2:8d:68:c2:95:3a:3b:14:42:
         83:9a:70:e5:54:24:33:0e:0e:cb:ce:ff:68:bc:a7:9e:a9:29:
         32:eb:78:f5:2f:c0:43:b8:ca:ae:58:63:e6:84:63:9e:fc:4c:
         fc:77:0f:f6:c7:fc:80:a0:76:0f:41:d1:9d:bb:13:82:eb:cc:
         92:e9:6f:c4:79:fe:f0:49:69:09:36:a2:fa:46:ca:18:c4:4e:
         ae:73:25:45:c8:47:3b:3f:fa:74:b0:76:45:2f:d1:99:ac:60:
         51:98:65:91:53:d2:9d:44:4c:8d:08:53:c8:45:40:77:43:25:
         56:49:b3:e0:c2:fe:28:58:3b:a8:52:29:25:a3:04:3f:03:da:
         5e:e3:ba:51:02:6c:ce:a7:a4:29:e0:47:76:2f:6e:14:4e:62:
         af:b1:01:ba:1b:69:9c:dd:50:af:9b:6d:5d:91:1a:18:e2:3a:
         ed:30:b0:c0:ba:3c:39:04:66:cc:b7:26:d8:76:3b:6d:3f:80:
         58:c3:44:7d:bf:c3:ec:1e:b4:a0:6a:c4:79:15:93:87:26:02:
         2b:de:48:dd:ef:c4:ee:0e:30:b2:7e:47:62:e2:9c:54:4e:00:
         58:91:d9:f3:11:6b:d4:96:0e:ff:57:6e:8d:9d:b4:6f:01:45:
         00:1e:cd:c3
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt97M+avgF1GKXG24AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTI1MTAxMjAxMDAzMFoXDTI2MDExMDAyMDAzMFowLzEtMCsGA1UEAxMk
Y2I1Nzc2ZWEtYjA1OC00MDVjLWI3NWEtMGY4NGY2NTMzNmI1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkee0hYJMJLnlzOXUwuhyJM1upwPCjgTUSLfS
Qj4mmu1hBB+3Sk2ylUjo5drF5TrtrLgdUJEOsaS83NntAWbXe2JjwoP5aEckM0k/
FYXa0aQnlvEF++1kVx4Z9yr/zKYhfnzLd5C0pd6i7OAyUpyqygXbloZBiaLwPyL4
m9aBE23bcMggZ9Vem30inJ4lnX8KkE8j//gMI1niUPsooEydJpd0pAgLLf/vj61R
I9zqogQUCF7s+cTpWmWW72+1kf4lTEbTYsbYSj2jVnw8ZBwCeP4Rx1UbHeDnQtCj
KsRFc6oA1z3Xw2P38tCKsNiY8fq0+6G37Y1wBnb157oCAWhbUwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGkbp/4W2neeN6MmAOtRZ2pr5DgeMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvNTUwYWFmYTQtY2UxNS0z
NmExLTg4OWYtMDZiY2NlNmFhMzM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFxpuMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACshS2c/LWKkQcKNaMKVOjsUQoOacOVUJDMODsvO/2i8p56pKTLrePUv
wEO4yq5YY+aEY578TPx3D/bH/ICgdg9B0Z27E4LrzJLpb8R5/vBJaQk2ovpGyhjE
Tq5zJUXIRzs/+nSwdkUv0ZmsYFGYZZFT0p1ETI0IU8hFQHdDJVZJs+DC/ihYO6hS
KSWjBD8D2l7julECbM6npCngR3YvbhROYq+xAbobaZzdUK+bbV2RGhjiOu0wsMC6
PDkEZsy3Jth2O20/gFjDRH2/w+wetKBqxHkVk4cmAiveSN3vxO4OMLJ+R2LinFRO
AFiR2fMRa9SWDv9Xbo2dtG8BRQAezcM=
-----END CERTIFICATE-----
Generated at Sun Oct 19 20:09:40 2025 by rpki-client