Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/abbd87ec-bf2d-3bf6-8bd5-4d089321c290.roa
File:                     abbd87ec-bf2d-3bf6-8bd5-4d089321c290.roa (raw, json)
Hash identifier:          VfJDakvlsWP2SxT4dCq1emKobN3sLnaNxJl+Tjof1oM=
Subject key identifier:   76:B6:8F:E9:E4:DD:16:DA:1D:37:7C:CC:07:44:BC:C8:68:46:B5:E7
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584B7DECC98A2DA5B388CAC90E80
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/abbd87ec-bf2d-3bf6-8bd5-4d089321c290.roa
Signing time:             Sun 12 Oct 2025 01:00:30 +0000
ROA not before:           Sun 12 Oct 2025 01:00:30 +0000
ROA not after:            Sat 10 Jan 2026 02:00:30 +0000
asID:                     401152
IP address blocks:        23.26.84.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:7d:ec:c9:8a:2d:a5:b3:88:ca:c9:0e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Oct 12 01:00:30 2025 GMT
            Not After : Jan 10 02:00:30 2026 GMT
        Subject: CN=ffc58e02-a64f-4ec8-b092-c3d031f744e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:e4:7e:76:2c:4d:82:6f:9c:46:49:16:3a:cd:
                    9f:c8:82:f7:49:5c:57:3d:9f:17:93:8f:0e:46:59:
                    c6:3c:cf:04:1a:61:f0:b7:6b:52:39:8a:af:ae:d1:
                    d4:71:4d:f0:dc:dd:2c:2c:10:89:85:03:79:d0:83:
                    85:2d:86:be:d0:41:aa:77:58:6c:1d:32:fb:ed:ea:
                    20:0a:c9:b1:bc:bf:65:c8:a7:d3:7e:3f:aa:00:ea:
                    c0:dc:cb:31:0d:8f:a5:f9:ea:bd:aa:ab:d6:a5:e9:
                    2b:76:dd:b1:4e:79:8f:5e:fc:c1:9b:28:63:e9:1b:
                    97:1d:f4:c9:8a:64:93:e5:b4:e0:0f:4f:e6:17:d1:
                    3f:fa:22:3d:7b:31:0a:25:1c:0e:5c:b3:2b:aa:d4:
                    6a:bd:df:0f:4c:e7:39:07:a2:1d:3a:6e:91:86:37:
                    3c:ff:b5:a3:04:53:bd:4f:d4:26:4e:c6:21:5b:52:
                    86:d8:35:ee:56:72:b2:e4:ec:8d:b5:ed:e4:e4:43:
                    e3:17:ed:fc:f2:1a:20:5d:c5:89:f0:a4:ae:55:63:
                    17:f0:b1:11:12:4e:fc:16:b8:b3:07:1d:a0:6b:6f:
                    9e:19:95:fc:77:16:15:15:41:c8:e4:94:c7:ae:49:
                    af:18:64:9a:11:8b:c9:21:e9:eb:e7:ff:7e:a3:09:
                    d9:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:B6:8F:E9:E4:DD:16:DA:1D:37:7C:CC:07:44:BC:C8:68:46:B5:E7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/abbd87ec-bf2d-3bf6-8bd5-4d089321c290.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.26.84.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:53:4f:98:85:dd:78:30:5f:be:4d:8b:63:4e:b7:0f:27:5d:
         45:30:b9:53:16:2f:08:82:3c:87:a4:ec:52:c4:7b:6d:0b:70:
         7c:fc:29:d5:09:fc:b1:ee:04:10:1c:99:1a:83:4b:b1:4c:ff:
         42:59:9b:86:5c:e2:fa:d3:87:57:35:60:7e:f7:44:02:01:93:
         23:74:9c:15:8a:01:68:dc:d2:3d:07:86:99:37:71:fe:50:bf:
         ef:17:0f:54:6e:9c:c0:93:fa:5c:79:1d:d7:3c:f3:fb:9c:32:
         9c:7a:96:27:0e:bb:7b:8b:1b:13:43:6a:22:f5:c7:bd:cd:40:
         db:41:80:26:2c:e4:3e:f7:14:a2:ea:29:98:bd:c8:cf:96:50:
         21:71:b4:6a:a1:70:d6:02:3e:c2:9f:62:53:d5:54:b9:ab:9a:
         03:25:53:a3:e3:bd:53:70:7d:51:ca:b6:24:c3:6f:ee:78:0a:
         c6:15:9c:cd:7a:af:e9:b9:f6:cf:d3:73:5d:a2:17:2e:02:85:
         ad:a0:29:ec:00:5a:f3:f4:a8:20:d7:9d:de:96:8c:2c:e3:c1:
         7b:4e:45:de:9f:3c:d5:33:dd:6d:f0:06:69:4d:66:07:f4:ce:
         e1:90:88:6e:89:61:93:8c:cf:a1:cb:09:94:c5:47:26:31:d5:
         79:9f:51:19
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt97MmKLaWziMrJDoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTI1MTAxMjAxMDAzMFoXDTI2MDExMDAyMDAzMFowLzEtMCsGA1UEAxMk
ZmZjNThlMDItYTY0Zi00ZWM4LWIwOTItYzNkMDMxZjc0NGU2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiOR+dixNgm+cRkkWOs2fyIL3SVxXPZ8Xk48O
RlnGPM8EGmHwt2tSOYqvrtHUcU3w3N0sLBCJhQN50IOFLYa+0EGqd1hsHTL77eog
CsmxvL9lyKfTfj+qAOrA3MsxDY+l+eq9qqvWpekrdt2xTnmPXvzBmyhj6RuXHfTJ
imST5bTgD0/mF9E/+iI9ezEKJRwOXLMrqtRqvd8PTOc5B6IdOm6Rhjc8/7WjBFO9
T9QmTsYhW1KG2DXuVnKy5OyNte3k5EPjF+388hogXcWJ8KSuVWMX8LEREk78Friz
Bx2ga2+eGZX8dxYVFUHI5JTHrkmvGGSaEYvJIenr5/9+ownZ5wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHa2j+nk3RbaHTd8zAdEvMhoRrXnMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvYWJiZDg3ZWMtYmYyZC0z
YmY2LThiZDUtNGQwODkzMjFjMjkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFxpUMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIJTT5iF3XgwX75Ni2NOtw8nXUUwuVMWLwiCPIek7FLEe20LcHz8KdUJ
/LHuBBAcmRqDS7FM/0JZm4Zc4vrTh1c1YH73RAIBkyN0nBWKAWjc0j0Hhpk3cf5Q
v+8XD1RunMCT+lx5Hdc88/ucMpx6licOu3uLGxNDaiL1x73NQNtBgCYs5D73FKLq
KZi9yM+WUCFxtGqhcNYCPsKfYlPVVLmrmgMlU6PjvVNwfVHKtiTDb+54CsYVnM16
r+m59s/Tc12iFy4Cha2gKewAWvP0qCDXnd6WjCzjwXtORd6fPNUz3W3wBmlNZgf0
zuGQiG6JYZOMz6HLCZTFRyYx1XmfURk=
-----END CERTIFICATE-----
Generated at Sun Oct 19 22:35:34 2025 by rpki-client