Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/8e6aa5cf-258f-3c0b-bb61-6af1ba38eed0.roa
File:                     8e6aa5cf-258f-3c0b-bb61-6af1ba38eed0.roa (raw, json)
Hash identifier:          MLv/Kkv9VbTEwfcP75z90vMnlcWgD6RhuXhy9FE9G+Y=
Subject key identifier:   89:E0:D6:DD:95:90:37:41:CC:4F:0A:1D:84:EF:48:B4:9E:0B:C4:78
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584D2644A05A8259D777CCD57080
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/8e6aa5cf-258f-3c0b-bb61-6af1ba38eed0.roa
Signing time:             Fri 13 Mar 2026 01:00:31 +0000
ROA not before:           Fri 13 Mar 2026 01:00:31 +0000
ROA not after:            Thu 11 Jun 2026 01:00:31 +0000
asID:                     397373
IP address blocks:        23.26.150.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:26:44:a0:5a:82:59:d7:77:cc:d5:70:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Mar 13 01:00:31 2026 GMT
            Not After : Jun 11 01:00:31 2026 GMT
        Subject: CN=4a548f38-eae2-4c6f-92a0-f9d3578f20f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:cd:f7:f5:45:df:7f:b7:48:c6:ff:c8:f9:7f:
                    f6:f2:3f:9e:64:b8:57:55:65:84:d9:d2:cc:54:5f:
                    a1:96:26:db:a3:a3:b5:42:5e:36:51:d8:38:b5:9d:
                    a2:44:4a:41:de:9d:cd:df:e1:97:b2:02:54:73:4b:
                    e1:55:93:ee:f8:06:f1:62:6f:9d:e0:86:83:cf:e2:
                    c1:55:44:00:7b:b9:54:9e:7b:ef:58:5e:a9:b2:ea:
                    1a:f9:90:bc:0a:c3:07:3e:8d:c9:65:57:8e:2b:59:
                    87:91:a4:0f:d3:50:b7:a6:54:c4:19:01:49:fd:7c:
                    02:40:76:0e:58:66:57:ca:fa:38:63:5d:7e:e2:ff:
                    0e:eb:e8:6f:02:b1:47:55:2d:01:b8:7f:44:c9:09:
                    d0:a5:cc:7d:3f:04:09:74:34:04:a2:a7:ae:59:44:
                    7c:5a:de:24:51:e2:59:d2:18:2e:06:b6:23:14:5b:
                    d3:a2:a2:7d:b3:e8:18:64:2a:bf:c6:2e:58:e7:cb:
                    8d:1f:ff:b3:da:4f:c0:99:e1:53:97:30:d3:bb:3f:
                    a8:77:0b:29:90:57:f9:8e:18:2d:c0:e1:9c:71:6e:
                    eb:21:eb:c8:26:a9:7f:b2:a9:b8:f8:87:ab:c6:55:
                    2a:dc:e2:05:f6:92:7c:96:22:40:10:51:82:a5:86:
                    91:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:E0:D6:DD:95:90:37:41:CC:4F:0A:1D:84:EF:48:B4:9E:0B:C4:78
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/8e6aa5cf-258f-3c0b-bb61-6af1ba38eed0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.26.150.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:22:e7:e2:4c:b5:c5:58:80:bb:18:cc:9c:57:d4:80:c0:12:
         e8:65:16:8f:1c:04:8c:f0:65:e9:9b:50:ce:b3:64:01:cc:dc:
         65:4d:47:15:73:1e:ac:cd:cb:ef:51:cb:ea:7d:06:ec:13:ff:
         89:1a:85:43:27:f6:bd:90:02:1b:06:5f:70:a8:a2:34:b8:20:
         fb:1e:56:bb:30:bc:93:35:17:05:57:e3:25:9d:96:bf:54:c3:
         4d:c7:77:a1:88:53:53:3b:e4:4f:56:15:61:ad:76:62:1b:7b:
         f1:8d:2f:f6:df:5f:f8:43:e6:09:fe:35:8d:46:e7:15:17:69:
         56:7c:5e:25:08:eb:b5:4f:8d:31:af:4d:a8:d9:cf:05:47:52:
         b8:c6:24:36:57:b4:dc:07:71:b0:ee:ec:38:b1:d4:87:9b:65:
         61:1b:32:2a:fc:f7:15:94:68:69:cc:28:78:80:77:5d:50:d3:
         f5:4e:1f:1c:38:21:0d:c7:3c:bb:9c:4c:01:9a:d5:ab:5b:35:
         27:05:d5:65:48:e1:48:91:0f:e8:c8:d1:7d:46:5e:c4:93:e4:
         82:f0:8b:bf:1c:c1:cd:29:5a:d9:38:6b:10:c4:68:4a:7a:82:
         9d:74:e6:71:54:eb:5b:ad:a6:41:79:72:36:2f:5d:76:07:c1:
         9d:33:60:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:36:20 2026 by rpki-client