Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/b57d9a11-f647-32d1-b985-4b6928d6644f.roa
File:                     b57d9a11-f647-32d1-b985-4b6928d6644f.roa (raw, json)
Hash identifier:          5OsJ9YjqrgE26jShSe8ABKez7sZ8w+h5fKIAxjlmomU=
Subject key identifier:   A6:0B:BA:6C:F5:C0:69:3C:E4:8C:E5:B9:A4:4E:B7:6E:5A:DF:4E:7D
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584B6BC772F786F6972C8ED30CC8
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/b57d9a11-f647-32d1-b985-4b6928d6644f.roa
Signing time:             Sun 05 Oct 2025 13:00:40 +0000
ROA not before:           Sun 05 Oct 2025 13:00:40 +0000
ROA not after:            Sat 03 Jan 2026 14:00:40 +0000
asID:                     396998
IP address blocks:        23.26.135.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:6b:c7:72:f7:86:f6:97:2c:8e:d3:0c:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Oct  5 13:00:40 2025 GMT
            Not After : Jan  3 14:00:40 2026 GMT
        Subject: CN=2eb3ef97-40d9-42af-a2c4-c2399076e4bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:d5:5f:a2:14:65:2d:73:4f:38:9a:77:10:d8:
                    fa:83:8d:27:ab:79:23:55:9d:a0:e8:78:41:fd:1a:
                    c6:8b:79:61:ed:f4:6a:41:0c:81:ca:88:d2:8e:b7:
                    22:ef:ff:6e:f1:40:27:74:bb:3e:74:d9:df:53:52:
                    5f:7e:84:1d:76:da:45:d9:0f:86:b9:6b:5d:12:4f:
                    fd:80:5b:5b:c8:56:3d:db:62:20:a9:db:0c:ba:fa:
                    70:eb:3a:17:01:d7:6a:90:20:5a:f6:a3:5b:7f:1c:
                    8b:ae:4c:f6:ee:28:2a:8c:7f:14:80:96:17:6c:c7:
                    49:1a:c4:20:63:d0:3d:36:d8:18:25:0f:77:b6:72:
                    3c:6b:f4:89:4f:70:56:40:0b:3a:ca:88:c4:3b:fe:
                    f5:e8:f6:8f:c9:eb:5c:a2:0c:69:b6:1c:c6:5d:16:
                    82:2a:47:18:16:9a:d3:31:bd:76:ec:fa:f1:40:d1:
                    a9:00:b2:bf:7a:b3:11:5e:79:6d:d2:ce:d7:2f:26:
                    58:9e:d7:7f:c7:0e:02:c5:99:d0:bb:c5:7b:45:f8:
                    68:57:fa:b6:06:ea:b5:99:55:cc:a1:a7:1d:62:67:
                    12:8f:94:11:7d:9e:20:60:65:44:a0:0f:93:ff:90:
                    7e:d8:13:c6:4c:16:72:68:79:cc:99:f5:8a:34:cd:
                    67:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:0B:BA:6C:F5:C0:69:3C:E4:8C:E5:B9:A4:4E:B7:6E:5A:DF:4E:7D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/b57d9a11-f647-32d1-b985-4b6928d6644f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.26.135.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:91:d6:8e:81:1c:47:53:38:b0:28:0e:8d:60:fd:ec:26:65:
         6c:33:c3:2f:3b:fa:4a:49:db:ec:13:05:d6:e0:62:e8:4e:6f:
         4f:37:89:35:43:3d:87:52:02:e5:55:70:47:19:90:fe:34:7c:
         f3:00:7d:e9:70:c6:dd:25:28:97:44:22:de:6f:a0:28:d1:bc:
         4d:3b:a5:50:21:cc:3e:b8:6b:e9:e0:8e:e3:6c:09:dc:18:c5:
         ab:8a:91:6d:c8:ac:db:9d:7d:4d:a4:f0:ee:35:21:8f:ea:96:
         30:d2:dd:bf:2e:f3:8c:71:48:e8:9b:0d:36:e7:14:e7:83:43:
         61:aa:b7:8c:be:54:52:9f:97:53:c1:53:a7:87:83:f8:99:b4:
         41:a2:fb:70:9d:97:b2:a3:cb:4e:f2:71:12:b1:1b:67:71:b9:
         eb:b8:f7:cf:89:75:d2:85:2f:8a:fa:75:89:19:10:0b:d9:74:
         81:15:4f:8a:37:c0:78:19:73:4d:10:87:5b:42:e7:1d:97:b1:
         00:10:bf:65:66:a0:a0:3b:17:57:21:2f:a6:2d:ee:9f:b6:b9:
         6f:7c:4c:12:75:fa:92:1a:28:5f:4f:a7:65:a7:fd:11:44:17:
         90:50:7c:a0:c9:82:93:3a:51:80:db:4a:19:8e:96:37:f5:50:
         18:8f:e1:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:10:06 2025 by rpki-client