Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/59dcc727-ed9f-3d2a-8ba6-cab2a1f6a4b6.roa
File:                     59dcc727-ed9f-3d2a-8ba6-cab2a1f6a4b6.roa (raw, json)
Hash identifier:          RTTnaGtPCMUYx4/n1uAdcyuYVHhm2UVf2mQvZkhGd6c=
Subject key identifier:   27:44:FD:26:97:AE:7D:3C:EB:48:31:A0:6A:88:18:DB:3C:EF:3A:9B
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584B1806D15F64E7A9CC56DCBF20
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/59dcc727-ed9f-3d2a-8ba6-cab2a1f6a4b6.roa
Signing time:             Fri 05 Sep 2025 13:00:41 +0000
ROA not before:           Fri 05 Sep 2025 13:00:41 +0000
ROA not after:            Thu 04 Dec 2025 14:00:41 +0000
asID:                     401152
IP address blocks:        23.26.235.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:18:06:d1:5f:64:e7:a9:cc:56:dc:bf:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Sep  5 13:00:41 2025 GMT
            Not After : Dec  4 14:00:41 2025 GMT
        Subject: CN=470d942a-59ab-4155-8e34-4b27c35ceb20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:47:2b:33:3c:1a:db:c3:f4:05:7e:e8:86:49:
                    90:47:5c:77:f5:4b:14:bb:fe:11:6f:ba:27:1f:ac:
                    ca:63:03:f0:6a:a1:ae:a7:cc:a5:df:80:5f:47:74:
                    2f:83:63:9a:2e:91:0a:77:df:21:e3:32:44:9d:27:
                    7c:54:24:12:df:eb:df:85:a0:bb:40:fd:23:fe:fe:
                    87:8c:09:67:eb:27:9a:44:83:af:77:2d:6f:d4:cc:
                    2c:45:63:1b:dc:9d:b5:6b:c3:53:90:7b:0c:61:7f:
                    e3:4f:b6:ee:9d:88:87:dd:1f:07:1e:21:43:98:02:
                    0a:47:c8:2c:bd:27:e2:36:a7:2d:b6:ed:f4:e4:12:
                    38:42:a6:b1:f4:69:59:6e:a3:39:81:a9:4b:8b:5b:
                    11:f7:e0:92:2c:1d:f1:69:a4:aa:f2:5f:da:71:b2:
                    7c:33:50:fe:b4:7f:1e:85:7e:a1:b8:62:13:e8:2d:
                    8a:c6:1e:37:ed:9c:f5:1f:cb:f4:2d:a5:b1:a1:83:
                    be:ac:7b:dc:d3:08:2a:c3:97:03:96:42:ac:d4:f8:
                    d0:92:fc:84:aa:5b:61:99:54:9f:d2:b0:15:b5:7a:
                    ad:11:14:63:8e:75:3f:b8:93:30:f8:97:09:27:88:
                    bb:01:07:3f:b1:ac:b3:ed:db:bd:28:61:3c:02:ed:
                    cf:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:44:FD:26:97:AE:7D:3C:EB:48:31:A0:6A:88:18:DB:3C:EF:3A:9B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/59dcc727-ed9f-3d2a-8ba6-cab2a1f6a4b6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.26.235.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         98:3e:13:45:c6:57:df:cc:3f:3d:d3:fa:2f:fc:d3:c3:7d:9d:
         76:f6:ab:5e:72:1e:a4:0f:11:1d:2e:cf:9d:d2:dd:41:27:40:
         9e:f3:af:d0:32:ad:f7:9c:03:31:d5:4e:9e:51:af:7d:27:a2:
         1c:9b:c8:88:0d:16:df:72:2c:f6:f7:e3:7f:4d:ae:4f:ab:c2:
         8a:2a:57:0e:11:bf:b6:0e:4a:e6:35:98:64:ca:27:f5:8c:19:
         85:e5:fa:f1:9f:9d:a6:99:14:b3:71:0c:15:07:89:cf:c5:93:
         5b:51:41:df:a4:25:b8:52:95:c6:6c:ae:33:86:1a:3f:c8:87:
         bd:d6:6e:61:0b:8a:d3:e4:2b:66:46:6e:d3:1c:75:6b:a2:43:
         fa:45:95:2b:d9:96:a4:85:a8:7b:95:c0:1b:58:61:46:3d:60:
         62:81:fb:8a:9c:9e:c7:12:75:4d:a3:7e:f3:e8:92:58:9b:3b:
         17:f0:95:4a:4a:f4:a6:88:ff:29:ae:b3:8e:d9:49:2e:86:6f:
         ea:cf:70:d5:c3:26:3e:ee:8f:62:76:3d:17:3e:3c:5d:a9:9d:
         ad:7d:c9:9f:5e:b6:ed:ca:21:7f:f7:ae:1b:ea:91:9e:e8:bb:
         ee:7c:c9:6f:0b:e7:b2:d7:53:a5:10:49:26:dc:34:ac:4b:4c:
         21:4f:f3:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:28:50 2025 by rpki-client