Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/6eda0dd5-c438-3ac4-a864-879814c5c62e.roa
File:                     6eda0dd5-c438-3ac4-a864-879814c5c62e.roa (raw, json)
Hash identifier:          gHoX3v1dmABBRPm4sGXsAnkHCnmKagpwlNR1rP1pAhg=
Subject key identifier:   99:FE:A9:E7:2E:EE:09:08:98:73:89:6A:3F:B7:EF:54:8B:B5:9E:09
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584A427580E5B3DBC058B0F68260
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/6eda0dd5-c438-3ac4-a864-879814c5c62e.roa
Signing time:             Sat 21 Jun 2025 01:00:48 +0000
ROA not before:           Sat 21 Jun 2025 01:00:48 +0000
ROA not after:            Fri 19 Sep 2025 01:00:48 +0000
asID:                     401152
IP address blocks:        23.26.195.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:42:75:80:e5:b3:db:c0:58:b0:f6:82:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Jun 21 01:00:48 2025 GMT
            Not After : Sep 19 01:00:48 2025 GMT
        Subject: CN=529ff45f-e2b6-49cf-9e71-f67943dc6e50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:1c:91:55:29:ff:a1:1c:5e:79:e3:ad:76:dd:
                    c6:bc:cc:57:e6:52:d7:fc:82:e0:83:20:ce:28:ab:
                    23:c9:7e:e7:a1:bc:94:c6:da:76:3f:a9:2c:5b:e8:
                    5f:a6:c0:41:41:e8:5e:c7:c9:07:fe:35:24:cf:ad:
                    9d:93:6a:67:32:ee:5e:fe:29:ef:01:54:25:69:b5:
                    cb:4d:e0:7d:ca:56:a9:86:e2:40:2a:ae:b1:e9:60:
                    93:39:94:6c:f7:39:3d:58:ac:7d:02:5f:13:99:6b:
                    0a:f2:4e:c4:c9:0a:7a:52:ac:12:b4:ce:ca:28:7c:
                    a8:01:84:bb:3e:b7:33:03:b0:4d:f4:c2:66:31:c2:
                    dc:12:1b:d0:a4:44:ee:d7:61:77:dc:c5:9e:64:57:
                    57:bb:af:44:f8:7a:8c:ff:c4:e1:16:6c:6a:fc:a7:
                    0a:43:f5:30:5d:b3:03:b0:da:ba:c9:3f:f4:f0:00:
                    06:74:d3:26:0e:83:45:98:98:da:dd:64:ad:b8:8c:
                    0d:7f:bd:7b:44:a4:24:87:ac:10:7b:e6:08:7d:35:
                    90:d6:31:a0:c7:09:bd:ba:a7:e6:2f:f8:e8:97:e6:
                    3d:cf:80:82:16:62:f6:7b:8c:6e:de:24:2c:c1:2d:
                    24:89:29:9d:3a:91:3a:29:8b:c5:24:25:36:ea:c0:
                    13:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:FE:A9:E7:2E:EE:09:08:98:73:89:6A:3F:B7:EF:54:8B:B5:9E:09
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/6eda0dd5-c438-3ac4-a864-879814c5c62e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.26.195.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:8d:d9:8f:71:7d:de:76:5d:6d:f8:17:dd:61:64:17:e5:ee:
         28:07:e6:80:c5:1a:2f:63:99:53:f4:c3:e0:08:e0:04:06:9c:
         15:b2:31:d6:62:d5:d8:e3:0a:ca:a9:f3:c8:43:c4:d8:1e:8a:
         d1:07:56:bb:dc:59:4a:99:df:c9:48:ba:8e:31:65:fc:99:e5:
         c0:2f:66:99:b7:17:8d:57:d4:bb:eb:57:9a:1a:7b:60:5f:f4:
         d9:61:c2:4e:b5:59:94:be:60:73:12:24:34:db:eb:b6:c8:05:
         28:6a:87:55:4b:af:12:dc:ad:37:ea:63:7c:e5:18:4d:5f:84:
         2d:ac:55:47:3b:d9:2b:70:df:58:60:e1:49:f8:13:50:ec:46:
         ae:4c:ef:8d:f5:a0:17:6d:63:e4:74:71:0d:c2:ee:17:c1:1d:
         4f:9a:09:cf:f4:e6:3f:6e:67:28:61:76:b5:f8:24:a8:97:fb:
         ab:76:05:82:e0:eb:b2:f2:2a:59:98:9f:ac:cb:4b:3f:bb:6f:
         9f:d8:fc:84:16:2d:78:74:94:79:af:1a:a3:6c:a9:90:87:45:
         e3:72:7b:9a:02:ba:c6:3a:90:ca:bc:38:97:14:ce:f6:34:a6:
         10:c8:43:03:b4:8e:a1:db:4c:1c:bb:e6:37:b8:cd:bd:ce:ac:
         89:52:97:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 15:21:53 2025 by rpki-client