Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/8e6c863c-46f0-3cd9-af94-8365c67eae41.roa
File:                     8e6c863c-46f0-3cd9-af94-8365c67eae41.roa (raw, json)
Hash identifier:          fYjjt07KeY2xUzYJ3CbFdy0yAPIcuVLDqlD0bCmbx6M=
Subject key identifier:   34:EF:2B:BE:30:83:25:C3:2D:2C:D7:23:1D:96:16:2C:EE:8D:05:87
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584D0EA7E76FB4AEE8939A64B1C0
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/8e6c863c-46f0-3cd9-af94-8365c67eae41.roa
Signing time:             Wed 04 Mar 2026 14:00:41 +0000
ROA not before:           Wed 04 Mar 2026 14:00:41 +0000
ROA not after:            Tue 02 Jun 2026 13:00:41 +0000
asID:                     29802
IP address blocks:        23.26.109.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:0e:a7:e7:6f:b4:ae:e8:93:9a:64:b1:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Mar  4 14:00:41 2026 GMT
            Not After : Jun  2 13:00:41 2026 GMT
        Subject: CN=0c43d7ca-b63a-4dce-aab7-211ded4390fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:45:ac:c7:39:52:06:ab:6b:c0:5a:7d:1d:0e:
                    6f:a6:16:ef:a1:8d:60:d1:46:d6:57:62:58:b1:69:
                    ff:c4:d0:a1:78:c3:b3:fd:d8:aa:b8:7b:30:6a:37:
                    c6:cd:73:1a:c1:95:8c:22:16:a9:98:a8:f7:57:62:
                    6c:5c:08:fa:90:34:d8:a3:4b:e2:66:44:ec:47:41:
                    94:99:db:c7:18:e9:dc:d4:5e:99:02:b0:d4:74:be:
                    83:2c:f6:87:d7:ac:77:6f:8d:d1:54:c5:2c:b6:4a:
                    47:fd:cd:f2:7b:ca:49:10:84:fd:07:bf:cb:39:50:
                    e5:bc:13:d2:31:31:49:b1:bc:19:e3:31:63:b6:fe:
                    64:80:66:42:5b:3f:ca:37:ce:8a:f6:13:1b:a2:b3:
                    9c:74:5f:6e:c4:f1:97:66:98:7a:68:7c:d0:df:b0:
                    61:bf:28:44:43:97:eb:da:b7:78:bb:ed:e8:ef:8d:
                    9a:70:23:5e:7e:9a:7b:30:10:d3:cb:06:f7:8b:db:
                    33:63:f0:13:2e:e2:1e:f2:b1:1a:94:34:ae:39:4b:
                    19:ad:dd:8b:94:c8:db:97:38:67:03:38:d0:fc:43:
                    b9:66:2d:36:94:a5:65:cf:0b:83:a3:fa:2c:d9:12:
                    86:25:fb:a3:55:1c:06:b0:26:72:c1:1c:3d:0b:a4:
                    37:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:EF:2B:BE:30:83:25:C3:2D:2C:D7:23:1D:96:16:2C:EE:8D:05:87
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/8e6c863c-46f0-3cd9-af94-8365c67eae41.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.26.109.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a6:9d:8c:55:db:3f:26:5a:e9:4f:7d:61:a5:8e:91:4e:a7:c9:
         34:90:bf:c2:cf:fe:ce:0b:0e:e5:c0:62:d3:62:d5:a7:3b:0c:
         1c:f5:6a:74:1e:fc:73:ed:1f:b8:ef:24:22:88:56:40:eb:9f:
         44:c4:78:4d:1f:48:b7:0e:e3:02:2f:cd:b5:6a:fb:b9:84:49:
         f5:3c:d9:2f:b3:0e:ff:b7:f0:79:ee:ed:05:81:2d:62:0d:cc:
         13:34:8f:90:f8:14:73:7f:bc:f7:8f:1b:69:37:7e:64:0d:d5:
         b7:e5:d1:04:83:76:62:e5:b1:23:94:63:fc:f8:0a:5f:dc:75:
         e9:e2:f1:1c:c8:cb:d2:18:f4:e5:8e:24:0c:4b:ea:07:03:f3:
         1b:34:4f:58:9d:91:04:29:8e:9e:61:4b:45:94:90:bf:57:1f:
         9f:f6:8a:f2:09:b3:73:77:c1:03:c8:37:05:fb:cf:08:13:7d:
         32:67:d4:69:87:e0:d0:21:27:21:64:1b:85:7b:a7:bb:95:43:
         ba:b6:4a:ba:5b:f5:be:cd:b0:42:97:86:b3:5d:91:eb:7f:bf:
         fa:53:a2:ec:67:c0:96:c2:2c:2f:63:05:89:26:9e:69:76:f1:
         dd:27:43:5a:d0:88:71:43:63:a9:e9:dc:88:c0:cc:ce:db:fa:
         ea:62:6d:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:59:16 2026 by rpki-client