Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/7df0adb4-c76a-398b-80ee-9393a6bc5f54.roa
File:                     7df0adb4-c76a-398b-80ee-9393a6bc5f54.roa (raw, json)
Hash identifier:          QW4HnErpU7ujCT+S5+lP7oothuOuef2zzGGZRWOVb10=
Subject key identifier:   4E:62:92:55:F3:9A:CD:B9:AA:6A:6F:3E:C1:49:3C:EA:10:29:DB:99
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584F3A17DC02F576188B63AEBF00
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/7df0adb4-c76a-398b-80ee-9393a6bc5f54.roa
Signing time:             Sat 19 Sep 2026 13:00:12 +0000
ROA not before:           Sat 19 Sep 2026 13:00:12 +0000
ROA not after:            Fri 18 Dec 2026 14:00:12 +0000
asID:                     9009
IP address blocks:        23.26.230.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:3a:17:dc:02:f5:76:18:8b:63:ae:bf:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Sep 19 13:00:12 2026 GMT
            Not After : Dec 18 14:00:12 2026 GMT
        Subject: CN=2104fa37-1955-4178-8b76-98a92c3b8ecb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:e7:be:30:4d:f7:a1:13:91:69:ea:f5:3f:1b:
                    cc:0f:e9:b3:d4:22:8b:40:ae:3b:3d:be:1d:66:f7:
                    91:6f:d5:a3:53:15:7f:3f:fb:38:02:a9:47:b0:51:
                    59:2f:de:12:86:38:0e:c1:02:92:ac:73:19:88:cb:
                    83:9a:74:bd:bb:84:50:33:f4:ec:00:9b:de:c4:5a:
                    fc:2d:c3:fd:c4:7c:77:8f:f6:41:ec:a3:57:ea:a2:
                    9c:9a:c0:1a:88:eb:96:1e:af:e7:d9:4f:65:93:c1:
                    f2:01:4b:88:bf:18:fb:71:f0:ac:f4:76:8f:ce:0b:
                    05:b6:3d:3a:0e:78:0a:3b:e9:7a:f6:30:65:30:e3:
                    da:64:f2:4f:e0:19:ee:c9:2f:a2:f7:a5:29:13:c7:
                    47:17:1e:83:18:96:7c:1e:78:dd:bf:49:e8:bc:b7:
                    3e:ae:f0:ff:21:8c:52:d1:01:99:ea:fc:2e:64:0c:
                    b4:b9:6c:10:63:b2:ee:84:ed:4f:7f:41:e7:37:9b:
                    2f:78:d7:76:e8:77:32:b1:73:35:b8:a6:31:b2:04:
                    91:11:7f:cf:53:1d:f8:0a:88:32:d7:e7:b6:9e:01:
                    52:04:9c:bc:c5:78:14:4c:c6:c3:9f:78:3d:d6:43:
                    a6:62:0a:6f:fe:b3:2d:ed:94:fa:35:eb:e8:67:a6:
                    3c:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:62:92:55:F3:9A:CD:B9:AA:6A:6F:3E:C1:49:3C:EA:10:29:DB:99
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/7df0adb4-c76a-398b-80ee-9393a6bc5f54.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.26.230.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ac:dd:3f:3d:a0:fe:d3:9f:b3:95:cb:ac:fc:0e:d2:ae:12:77:
         83:70:bb:ec:68:39:5e:ce:c9:23:f7:86:42:98:ac:68:8f:01:
         5b:ad:5b:f0:12:02:b3:b0:4c:06:f5:8b:da:c5:ce:e9:92:0c:
         64:aa:93:df:69:66:ba:2c:36:e4:04:66:57:6e:01:4f:32:24:
         fc:bb:9c:cb:bb:3b:2c:1e:87:2c:ad:9f:41:75:79:da:16:7b:
         5f:7b:1c:d9:69:a5:a6:14:93:87:08:ff:99:2d:cd:2c:30:25:
         e5:f8:36:af:a8:b5:70:75:79:45:3d:80:41:e9:01:93:ef:02:
         69:3a:7d:88:51:8f:51:4c:ba:58:27:84:0a:5b:6c:8b:5c:b3:
         08:81:e7:7e:1a:2a:24:5f:e7:db:d2:09:ce:80:63:c7:ef:bd:
         a5:37:71:7b:57:2f:9a:16:aa:e5:e6:03:a7:a1:ff:bf:00:13:
         1a:ee:1d:ca:a3:77:48:21:59:5e:60:c9:76:41:78:88:4f:45:
         88:3e:eb:45:fa:87:53:81:32:0c:fb:66:c6:5b:24:c5:f3:b9:
         df:b8:09:b3:ef:ac:0d:a8:f7:72:e8:cb:a9:c8:0f:43:03:3f:
         28:8c:e3:d2:e0:0e:4c:0f:5b:d7:49:3f:bc:42:b3:ca:87:9f:
         69:db:6a:21
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE86F9wC9XYYi2OuvwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTI2MDkxOTEzMDAxMloXDTI2MTIxODE0MDAxMlowLzEtMCsGA1UEAxMk
MjEwNGZhMzctMTk1NS00MTc4LThiNzYtOThhOTJjM2I4ZWNiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg+e+ME33oRORaer1PxvMD+mz1CKLQK47Pb4d
ZveRb9WjUxV/P/s4AqlHsFFZL94ShjgOwQKSrHMZiMuDmnS9u4RQM/TsAJvexFr8
LcP9xHx3j/ZB7KNX6qKcmsAaiOuWHq/n2U9lk8HyAUuIvxj7cfCs9HaPzgsFtj06
DngKO+l69jBlMOPaZPJP4BnuyS+i96UpE8dHFx6DGJZ8Hnjdv0novLc+rvD/IYxS
0QGZ6vwuZAy0uWwQY7LuhO1Pf0HnN5sveNd26HcysXM1uKYxsgSREX/PUx34Cogy
1+e2ngFSBJy8xXgUTMbDn3g91kOmYgpv/rMt7ZT6NevoZ6Y8KwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFE5iklXzms25qmpvPsFJPOoQKduZMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvN2RmMGFkYjQtYzc2YS0z
OThiLTgwZWUtOTM5M2E2YmM1ZjU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFxrmMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKzdPz2g/tOfs5XLrPwO0q4Sd4Nwu+xoOV7OySP3hkKYrGiPAVutW/AS
ArOwTAb1i9rFzumSDGSqk99pZrosNuQEZlduAU8yJPy7nMu7Oywehyytn0F1edoW
e197HNlppaYUk4cI/5ktzSwwJeX4Nq+otXB1eUU9gEHpAZPvAmk6fYhRj1FMulgn
hApbbItcswiB534aKiRf59vSCc6AY8fvvaU3cXtXL5oWquXmA6eh/78AExruHcqj
d0ghWV5gyXZBeIhPRYg+60X6h1OBMgz7ZsZbJMXzud+4CbPvrA2o93Loy6nID0MD
PyiM49LgDkwPW9dJP7xCs8qHn2nbaiE=
-----END CERTIFICATE-----
Generated at Fri Sep 25 00:14:49 2026 by rpki-client