Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/86c5df20-c17a-3a1b-a8d7-74c0ec3782dd.roa
File:                     86c5df20-c17a-3a1b-a8d7-74c0ec3782dd.roa (raw, json)
Hash identifier:          v1ZL1vD3G9wTo6MjUzn8LSb+1zHm6e1/gpV+A7V1dPc=
Subject key identifier:   60:BE:1F:D8:DD:31:AA:55:01:1B:A3:D7:BC:88:E8:FF:5A:2E:F9:A4
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285849ABB4A113DB8116CA7A53E180
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/86c5df20-c17a-3a1b-a8d7-74c0ec3782dd.roa
Signing time:             Mon 28 Apr 2025 01:00:48 +0000
ROA not before:           Mon 28 Apr 2025 01:00:48 +0000
ROA not after:            Sun 27 Jul 2025 01:00:48 +0000
asID:                     61317
IP address blocks:        23.26.194.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 08 May 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ab:b4:a1:13:db:81:16:ca:7a:53:e1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Apr 28 01:00:48 2025 GMT
            Not After : Jul 27 01:00:48 2025 GMT
        Subject: CN=825b0126-7d60-4303-825e-133a068cf9f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:46:10:30:4c:fd:16:7b:bf:99:04:18:5d:59:
                    63:dc:f9:aa:07:fd:d5:5a:5f:8c:5b:0a:37:7f:0b:
                    22:44:a5:61:d8:bb:ae:2a:0e:30:b1:6a:03:a6:9c:
                    82:c7:c7:b5:34:e9:3b:6f:6c:74:76:5c:e6:49:e7:
                    06:8f:3e:03:e6:26:7e:bc:81:c8:0d:4c:a8:bf:e6:
                    08:32:74:83:ed:eb:16:ba:b6:51:15:6d:f5:3d:02:
                    9f:cc:30:ac:18:c6:f4:65:f9:91:a4:f3:62:49:e9:
                    48:a3:b4:d0:4b:17:7b:6e:5f:5b:55:b7:a7:bd:56:
                    44:7b:e3:d6:86:23:ba:d5:6f:d9:99:5d:f1:b8:04:
                    3a:85:16:65:0e:93:de:24:0a:0f:fe:aa:d1:6c:f5:
                    c3:a5:3f:91:21:00:3f:68:25:f4:c5:3b:31:a3:1e:
                    57:39:26:0d:28:d1:54:ad:14:b7:74:e3:b8:d8:47:
                    03:91:92:29:67:73:bc:5a:4e:6a:ce:bb:75:a6:77:
                    0a:73:3b:7c:0c:65:58:50:21:bb:45:aa:49:ed:fb:
                    21:ca:a4:ab:59:fd:e9:aa:93:bd:e8:2f:9f:c1:7f:
                    05:2d:94:5c:25:ce:8f:c6:c8:ae:db:84:89:c2:7d:
                    34:6d:1a:36:32:7d:43:a6:57:7a:9f:2a:5f:cb:c8:
                    a9:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:BE:1F:D8:DD:31:AA:55:01:1B:A3:D7:BC:88:E8:FF:5A:2E:F9:A4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/86c5df20-c17a-3a1b-a8d7-74c0ec3782dd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.26.194.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:11:39:d2:55:f3:a5:4e:b4:73:12:48:6e:7b:7a:29:31:7d:
         16:45:33:cb:a9:84:1e:4a:0b:f4:29:06:35:38:39:08:88:fd:
         fc:33:43:1a:fd:3c:14:7b:23:7c:64:27:dd:0e:5b:86:01:9c:
         9c:f6:80:ec:68:37:82:0e:ea:f9:ad:bd:21:79:f0:7f:45:24:
         c3:b4:8a:59:69:a5:93:d8:c6:44:25:fb:b8:22:83:91:fb:8a:
         0f:57:a1:30:d5:39:8c:ca:a6:a5:a0:9c:ef:f7:a7:bf:fc:6b:
         4a:ef:b1:cd:c7:7c:04:30:24:29:94:e9:f7:d9:13:d1:90:25:
         c7:16:85:4f:87:f6:55:45:9a:68:a0:1b:0b:02:2b:70:19:11:
         58:20:2b:20:ea:59:56:af:a8:47:be:07:38:43:94:09:18:a7:
         68:1c:51:10:cd:6a:63:79:1b:44:a0:ce:76:60:80:86:0b:79:
         f7:05:3d:7c:df:7e:73:6f:8d:3e:73:2e:99:bb:81:3e:36:2c:
         75:0d:95:a6:55:15:f7:fc:a4:23:01:d8:fd:7a:fe:89:0c:27:
         71:6e:b2:9b:3d:59:0f:21:4c:b6:a2:9a:80:43:5c:5b:2f:a0:
         c6:3a:4d:20:45:ae:4a:ab:dc:62:e2:fb:19:1a:f4:23:3b:12:
         49:c1:93:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 15:52:13 2025 by rpki-client