Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/6daf1bf3-78a4-3de2-baa1-1ff2afe9728e.roa
File:                     6daf1bf3-78a4-3de2-baa1-1ff2afe9728e.roa (raw, json)
Hash identifier:          Vqjuwep4GZKlQrKtDyA1QxfcD+opvp6XO3srriLQ7gc=
Subject key identifier:   1D:49:8C:F6:FF:96:71:81:F0:89:1F:0E:48:C2:B2:46:3D:06:03:87
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584A3963DA2543BFF7FA516FDDE0
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/6daf1bf3-78a4-3de2-baa1-1ff2afe9728e.roa
Signing time:             Tue 17 Jun 2025 19:03:02 +0000
ROA not before:           Tue 17 Jun 2025 19:03:02 +0000
ROA not after:            Mon 15 Sep 2025 19:03:02 +0000
asID:                     54600
IP address blocks:        23.26.164.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:39:63:da:25:43:bf:f7:fa:51:6f:dd:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Jun 17 19:03:02 2025 GMT
            Not After : Sep 15 19:03:02 2025 GMT
        Subject: CN=118cf5b6-fddb-4880-bc78-5ca78465f70c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:72:50:c2:de:2f:2d:cd:3d:f8:1d:52:c1:56:
                    cf:1e:6a:a9:84:35:87:03:19:ca:0c:b3:c7:18:d2:
                    1f:c1:d2:bd:90:a7:61:36:11:fb:12:14:d9:b9:0a:
                    ca:c2:c5:ed:52:a2:cc:b3:9a:22:12:89:ad:f1:1d:
                    cb:f6:0f:6e:52:6e:4b:64:be:4f:b7:16:e3:47:36:
                    61:8c:04:c4:63:53:1d:c1:4d:f5:47:96:64:06:9e:
                    43:0c:90:bd:f3:28:1b:3e:70:60:52:06:18:7b:4f:
                    05:8b:24:e0:50:17:bb:ae:0d:97:34:00:95:d3:f4:
                    ba:87:f0:0f:79:53:59:81:14:b3:75:73:85:52:db:
                    82:47:8c:6c:fe:d7:a1:eb:00:57:81:c6:50:f6:f6:
                    7a:1c:da:2c:cb:83:47:e4:00:39:cc:a5:9c:04:4d:
                    1c:5f:54:11:f4:bf:5d:e4:4e:e8:b3:f8:a9:77:af:
                    08:70:d6:bd:8d:89:97:13:47:0c:3d:f0:f5:42:cf:
                    94:a2:28:90:f1:1d:a5:92:44:4a:64:0e:a9:de:7c:
                    f5:4a:50:29:13:32:35:84:b0:af:7b:71:68:16:30:
                    7b:91:7a:23:f9:09:49:9a:54:1e:98:dc:e7:51:14:
                    22:7b:28:10:c4:26:0d:46:df:2c:2d:b8:5c:75:ee:
                    90:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:49:8C:F6:FF:96:71:81:F0:89:1F:0E:48:C2:B2:46:3D:06:03:87
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/6daf1bf3-78a4-3de2-baa1-1ff2afe9728e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.26.164.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:16:99:1f:aa:7c:b1:25:e7:48:9b:35:ae:06:ec:35:03:37:
         c6:fc:bc:07:af:d5:8a:8b:f3:d0:8d:bf:5e:99:d0:73:6f:c1:
         2f:cc:96:84:5c:11:8b:9f:44:b0:b0:29:8b:2f:fe:35:b9:7f:
         00:0c:6b:0f:4e:45:8f:0c:a6:28:57:d3:e5:d4:ce:e5:22:47:
         6b:7d:64:22:6f:d2:69:43:46:f8:af:cb:82:b9:01:75:b3:19:
         e5:be:4f:f1:e6:b1:76:7e:5c:6a:24:7f:0b:3a:e2:92:3b:58:
         bd:88:9c:5c:10:89:df:37:4a:cd:74:24:9b:45:66:1a:db:5b:
         72:a5:d7:5c:1b:77:f5:25:8b:e8:3f:cf:2f:68:40:3b:4c:02:
         f4:f3:f9:45:14:66:6a:47:40:f2:2d:c1:d9:f6:12:12:6d:09:
         d6:d9:a4:74:2d:0c:bf:50:ac:a1:34:d6:5d:c7:7e:26:d6:2f:
         0e:74:35:df:2c:38:a4:cc:b6:4d:f8:c1:a0:d5:a9:5a:00:a5:
         21:9f:0b:62:32:60:f4:60:22:34:76:87:0d:9f:da:17:b5:f6:
         41:df:b1:3e:85:f3:fb:2e:ca:fe:78:35:65:49:6a:e1:6a:d6:
         d2:16:36:a9:4e:78:b2:ef:28:f4:84:ea:71:40:bd:f4:fa:0b:
         42:07:95:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 13:09:50 2025 by rpki-client