Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/578c077c-06c4-3014-bd5d-6221fa6c5d47.roa
File:                     578c077c-06c4-3014-bd5d-6221fa6c5d47.roa (raw, json)
Hash identifier:          i21JkRy6YVyNgUKoRWuPZ7hNr52u4wFMGXlF7Y73bd4=
Subject key identifier:   97:7B:80:9D:FB:9F:69:4E:48:68:8F:3F:1E:17:34:74:97:20:44:57
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584E3E5F4B3C55B9D65D2DFD5640
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/578c077c-06c4-3014-bd5d-6221fa6c5d47.roa
Signing time:             Sun 21 Jun 2026 09:00:12 +0000
ROA not before:           Sun 21 Jun 2026 09:00:12 +0000
ROA not after:            Sat 19 Sep 2026 09:00:12 +0000
asID:                     134351
IP address blocks:        23.26.61.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:3e:5f:4b:3c:55:b9:d6:5d:2d:fd:56:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Jun 21 09:00:12 2026 GMT
            Not After : Sep 19 09:00:12 2026 GMT
        Subject: CN=ac517aa3-6a73-4f97-b52a-41318ac7f809
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:58:38:88:d5:f2:79:88:e2:ce:36:47:39:d1:
                    02:af:f9:e4:fb:4d:83:be:d3:2b:be:25:cd:e2:fa:
                    94:ef:49:5c:1e:86:b4:0a:0a:f0:ff:3d:aa:b5:32:
                    34:f4:8d:7a:bc:dd:4a:34:29:65:49:3e:49:95:92:
                    f5:80:3d:17:28:76:2b:12:b5:8b:2a:67:e1:dc:64:
                    a1:65:d4:26:8c:0a:e6:bf:76:5c:9c:f4:20:23:6a:
                    03:b4:a2:58:55:b8:67:6c:76:39:52:3e:b9:4d:4e:
                    e0:fa:6e:b8:d5:fb:e3:02:10:2a:4d:04:d8:2f:2b:
                    c6:f4:22:72:f4:0d:07:fc:04:27:6a:83:62:c3:13:
                    39:ed:2d:2a:55:72:55:f7:aa:25:dc:60:50:27:68:
                    d2:19:5d:8d:36:49:0d:a1:3e:38:f5:77:55:02:6a:
                    9a:ce:1a:1b:bc:43:f8:ce:24:6f:ae:c8:84:a5:14:
                    f8:77:e9:82:5e:79:fd:cf:f8:87:2d:f4:1c:6b:9b:
                    b2:9b:86:40:e4:ca:ca:06:2c:ab:11:10:4a:e1:37:
                    63:fe:83:19:82:f6:4f:d5:41:aa:fe:b2:7d:c5:88:
                    98:b0:db:e2:56:9a:52:66:9c:7c:6f:32:04:44:c7:
                    59:bb:d0:50:e3:fb:60:e2:c6:2b:0a:65:d8:1f:92:
                    90:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:7B:80:9D:FB:9F:69:4E:48:68:8F:3F:1E:17:34:74:97:20:44:57
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/578c077c-06c4-3014-bd5d-6221fa6c5d47.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.26.61.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8f:1b:23:88:f6:02:45:2f:ee:48:c9:cd:20:0e:18:49:4d:82:
         46:61:22:7c:ad:72:bc:92:f2:5e:54:3e:89:42:2d:cf:6f:14:
         29:8c:f6:44:df:e5:00:4d:1b:60:fa:59:ca:64:a9:4c:83:8e:
         04:f4:2a:db:fb:4a:0e:f5:2d:aa:bd:01:b1:10:9c:7e:6f:e0:
         e2:a1:d2:e3:b9:af:6c:ff:80:1c:e7:bc:c1:11:46:6b:45:0e:
         22:94:9b:24:e8:8f:32:35:52:e9:da:83:9f:f7:3b:f2:84:99:
         f5:0c:48:f1:c2:de:d0:19:37:b5:bc:4a:33:28:2c:53:c2:5c:
         9d:00:4f:6f:fe:64:0a:d4:bf:34:40:5f:19:86:78:23:d1:ec:
         1a:cb:6d:9d:e9:6e:2f:f6:11:2d:ff:1e:b5:8a:2b:35:f2:77:
         56:b2:92:23:9c:84:3a:1d:4a:c1:12:dd:40:44:ba:49:5c:db:
         42:ea:d4:bf:78:d0:2c:1d:37:ce:78:ed:6a:8c:8a:97:61:1d:
         c0:0b:01:8f:76:66:60:8a:72:fb:db:0f:3f:0f:3c:cc:e3:14:
         2a:90:a2:7b:74:8a:e2:ab:ea:72:8c:8f:de:a8:f3:1e:f6:d9:
         7e:77:8e:db:9b:a6:bf:40:d4:20:1e:3a:ab:53:ad:bf:d9:06:
         e2:ec:4f:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:45:45 2026 by rpki-client