Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/b6025966-d361-3992-b4eb-f3d327417fbe.roa
File:                     b6025966-d361-3992-b4eb-f3d327417fbe.roa (raw, json)
Hash identifier:          LteFe1naCMI3ZsgW8Z+UgKAH5GHBlf1mJVjId/ELC2w=
Subject key identifier:   E9:2C:5B:1F:0E:A5:A3:23:40:88:BD:43:C7:66:56:A3:7E:72:43:87
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584B715CA5F35B7838E98CEF7C20
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/b6025966-d361-3992-b4eb-f3d327417fbe.roa
Signing time:             Tue 07 Oct 2025 13:00:37 +0000
ROA not before:           Tue 07 Oct 2025 13:00:37 +0000
ROA not after:            Mon 05 Jan 2026 14:00:37 +0000
asID:                     19437
IP address blocks:        23.26.69.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:71:5c:a5:f3:5b:78:38:e9:8c:ef:7c:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Oct  7 13:00:37 2025 GMT
            Not After : Jan  5 14:00:37 2026 GMT
        Subject: CN=d1c7e17c-b7ab-4489-99be-936a86629a21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:e4:35:d3:e1:ff:31:e0:31:85:b5:93:8a:99:
                    ef:c4:2a:67:1f:be:bb:19:15:75:bd:3c:bb:a5:f1:
                    8d:af:33:ee:7e:e5:46:1d:3c:a3:e9:f5:34:21:2b:
                    19:02:6e:ab:c1:92:71:9d:ae:63:9b:b3:d8:8f:f0:
                    0f:1d:18:a9:32:fa:aa:11:e3:fa:29:d6:26:a8:6c:
                    8a:5c:c2:66:c9:e2:ed:32:86:37:ad:c2:8b:28:81:
                    1f:61:2e:15:73:17:13:7c:99:51:2a:89:bc:9e:6b:
                    08:db:ef:e9:a9:8c:6b:9c:87:a6:2a:04:08:f8:22:
                    e0:8b:e9:65:1b:85:28:a5:64:6d:f5:09:fa:af:6b:
                    17:9f:a7:3a:20:a5:1e:3e:9b:3c:53:76:71:2c:47:
                    9d:7d:d8:27:bf:9d:d9:59:ef:57:a1:ce:59:39:ae:
                    71:a0:e6:79:3e:06:ff:21:2f:0a:00:79:85:35:59:
                    cb:f2:a3:ed:11:f1:0f:31:8a:bf:ff:f5:d1:dc:e4:
                    a2:78:87:76:53:f2:e3:a2:8f:2c:35:6d:85:75:d2:
                    35:47:c1:42:47:6f:b0:88:ee:0b:76:cd:9a:9a:ea:
                    d5:57:94:f8:ca:be:6a:6c:dc:47:c1:f4:8d:dc:f3:
                    bb:5d:0e:fb:e0:34:b8:19:82:23:a9:ad:44:8b:ce:
                    11:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:2C:5B:1F:0E:A5:A3:23:40:88:BD:43:C7:66:56:A3:7E:72:43:87
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/b6025966-d361-3992-b4eb-f3d327417fbe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.26.69.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:db:e3:b6:c0:b3:6a:72:ff:44:08:fc:f0:d2:38:fc:20:ac:
         81:11:10:f3:5d:f1:dc:23:a4:94:30:42:52:7e:2c:0b:14:40:
         32:54:fb:4c:bb:4c:65:31:92:63:c4:89:ca:e8:0d:ae:7a:f3:
         b5:b7:b5:ec:22:77:5a:f7:e2:cc:ac:29:2b:99:a2:03:e6:0a:
         b0:39:7f:ad:62:f2:1b:e2:5c:fd:d5:2a:25:72:6f:d1:8c:e7:
         c7:b9:bd:78:94:ed:2c:98:9b:26:d9:04:d1:6d:b3:0e:cb:3b:
         c4:20:a3:8d:fa:08:d3:b9:6f:b5:54:8c:08:43:5c:1a:e7:6d:
         27:fe:94:ad:98:17:09:19:21:bb:e3:09:62:a5:05:45:32:1e:
         3f:68:9f:58:2f:72:20:26:62:a8:7a:3c:7b:89:c3:cb:da:68:
         29:5a:5e:0b:e3:ed:dc:d9:24:9d:12:d8:9f:34:e8:d5:5f:aa:
         22:ae:2c:f6:0e:87:e4:4c:bb:df:3f:10:d2:d3:f9:50:d5:6d:
         0e:ef:d4:3e:5e:05:0a:38:1b:83:41:f6:a1:84:89:93:4a:e2:
         73:ee:7d:de:06:e8:6d:62:d3:e0:78:09:1b:9c:64:ce:b5:f8:
         fe:c8:9c:12:e1:d2:1d:35:c2:a9:e1:cc:49:cc:24:09:72:3f:
         c8:3c:b8:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:41:27 2025 by rpki-client