Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/bbd47fc6-e513-3ed7-904e-fa1e4afa29b6.roa
File:                     bbd47fc6-e513-3ed7-904e-fa1e4afa29b6.roa (raw, json)
Hash identifier:          OsgpQC7r+tMKFaMd7Ky1jQzATNeSD7hDQwB4gylduII=
Subject key identifier:   20:CE:0B:0B:B6:80:39:F8:F9:77:72:3D:A8:11:30:60:61:B0:B6:CF
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584B03169A2FDD034BDCC2C7FEE0
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/bbd47fc6-e513-3ed7-904e-fa1e4afa29b6.roa
Signing time:             Fri 29 Aug 2025 01:00:32 +0000
ROA not before:           Fri 29 Aug 2025 01:00:32 +0000
ROA not after:            Thu 27 Nov 2025 02:00:32 +0000
asID:                     401152
IP address blocks:        23.26.192.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:03:16:9a:2f:dd:03:4b:dc:c2:c7:fe:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Aug 29 01:00:32 2025 GMT
            Not After : Nov 27 02:00:32 2025 GMT
        Subject: CN=9c0df2ab-0784-4822-a007-71555f0e6cf9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:bd:68:b4:c2:81:12:7e:18:0b:38:83:57:ce:
                    21:b6:b4:6e:f1:3d:2b:30:4f:d4:dd:d1:9a:8c:43:
                    f4:9d:6d:56:73:c9:a3:11:4b:db:2e:65:de:1f:a6:
                    ec:fe:8d:88:ea:96:01:cc:8e:68:5d:4f:73:03:4c:
                    22:26:b6:19:6f:08:92:70:d7:f3:90:c4:39:10:fc:
                    3a:eb:b6:83:23:4f:81:d9:58:75:e0:7e:4c:3a:6f:
                    43:e1:d6:6d:28:a5:51:81:b0:7f:cf:14:d7:81:80:
                    a0:d0:fe:b7:4d:09:f0:ed:e2:db:3d:d7:b4:42:16:
                    16:d9:64:b8:fc:f7:a1:b5:5b:ab:44:ab:4d:6f:a8:
                    f7:a8:cc:8a:5e:eb:69:d2:d5:27:2d:1e:eb:3a:0d:
                    f2:12:2f:87:c2:3f:8a:7e:d0:9c:8c:9f:51:a5:c7:
                    d8:cf:95:f4:e0:15:a2:4d:39:41:c8:a0:5e:c7:fe:
                    65:7d:12:d6:99:04:e5:b8:6d:09:85:f9:00:fd:ef:
                    64:17:c1:0f:84:ec:56:a0:fb:38:6f:e1:98:07:a8:
                    44:2a:0c:d7:80:f6:e3:5d:6c:68:77:ee:70:41:66:
                    ec:24:eb:4f:fc:9e:8c:c7:6d:4c:ef:51:67:62:63:
                    a3:30:ca:88:83:6f:d4:58:04:f2:b7:9c:fe:24:e0:
                    ec:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:CE:0B:0B:B6:80:39:F8:F9:77:72:3D:A8:11:30:60:61:B0:B6:CF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/bbd47fc6-e513-3ed7-904e-fa1e4afa29b6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.26.192.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:9a:1f:3f:66:87:4d:4c:b4:0a:89:80:1a:f8:d0:9f:6f:47:
         58:16:17:9f:be:e0:c6:9d:26:ac:8c:14:e4:91:c9:40:bf:f3:
         12:3c:0f:a1:29:32:da:28:7d:3c:30:dd:fc:41:50:9d:c2:de:
         91:15:6c:d2:0b:9a:2f:0d:07:03:f2:fa:c7:8f:34:86:c0:59:
         e2:91:35:ed:a9:a6:b1:41:3d:52:61:a9:b1:23:e1:b8:75:a9:
         31:b9:9e:3c:5a:4a:0d:9f:aa:51:59:07:ad:b5:ee:71:93:46:
         90:10:7f:b3:de:2f:04:0b:a6:6e:61:58:94:4e:48:52:0e:54:
         dd:87:e0:3d:05:83:22:d2:28:f7:99:99:73:a1:73:64:09:53:
         c6:08:04:e8:c8:bd:a7:e7:b8:00:89:69:77:f2:d9:50:59:09:
         5a:0c:c8:22:10:e7:cd:a5:f3:b3:2f:37:6f:f3:70:e8:b6:2c:
         b8:80:7d:67:d0:d8:09:d8:8b:2f:61:4c:67:16:b5:23:4a:5b:
         a8:c1:4f:05:e5:30:76:3b:a3:ab:a6:58:3e:78:01:1e:ac:68:
         6e:58:cd:ce:a9:2e:ad:09:d3:9b:b1:82:b4:ed:34:7a:26:63:
         bc:62:96:fc:46:cc:e7:c4:82:53:61:06:1c:67:6b:52:f8:54:
         ae:35:22:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:29:45 2025 by rpki-client