Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/da7c1d4d-0ee5-3fef-9a13-ffdc76d76cdf.roa
File:                     da7c1d4d-0ee5-3fef-9a13-ffdc76d76cdf.roa (raw, json)
Hash identifier:          DpQwfiniN7lNqaamf3da2RUTt9+BIeX3LkClXG/wm4c=
Subject key identifier:   36:26:58:64:01:6B:D4:C2:C8:69:83:15:0A:86:E4:15:78:08:4D:BD
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285849912F51462A6F5ACAFC89BF80
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/da7c1d4d-0ee5-3fef-9a13-ffdc76d76cdf.roa
Signing time:             Fri 18 Apr 2025 13:00:59 +0000
ROA not before:           Fri 18 Apr 2025 13:00:59 +0000
ROA not after:            Thu 17 Jul 2025 13:00:59 +0000
asID:                     135375
IP address blocks:        23.26.198.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 10 May 2025 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:91:2f:51:46:2a:6f:5a:ca:fc:89:bf:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Apr 18 13:00:59 2025 GMT
            Not After : Jul 17 13:00:59 2025 GMT
        Subject: CN=07087cc2-5a61-4874-a813-2a7a0badefeb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:62:ea:d6:96:64:60:41:46:a2:14:a3:d0:ec:
                    8d:7d:83:10:43:c6:27:76:87:59:e5:e1:e7:5b:ff:
                    92:3b:f0:21:93:89:2e:b3:18:29:0a:4f:fa:fb:4e:
                    23:1f:78:c7:6b:3c:09:44:d7:f4:fd:40:39:af:e6:
                    be:2e:97:de:1c:eb:ce:8c:e7:d3:5e:b9:16:cc:41:
                    9a:9a:48:eb:2c:50:ae:6b:7b:c8:5b:0f:15:d4:bd:
                    97:a3:af:fa:58:f6:37:b4:64:d1:bb:a7:03:7f:8e:
                    5c:0c:1e:45:fe:7b:a9:cc:c5:40:bd:42:9f:14:32:
                    cc:56:5f:82:cc:2a:fb:b2:f1:ba:cb:a8:52:56:67:
                    34:e4:45:82:5c:d2:7c:8d:c5:79:3e:24:f6:75:a7:
                    67:02:97:2c:eb:ac:6a:0f:d7:bc:62:21:6b:28:6f:
                    51:a6:da:a7:d3:e1:19:12:6a:04:00:d4:38:15:8d:
                    7f:51:07:b5:18:8a:12:d4:13:d2:6a:0f:16:f8:24:
                    ba:11:7d:b9:fe:46:83:4f:ac:ed:7e:d5:fc:18:ca:
                    ff:2c:aa:ce:69:46:81:43:53:3d:53:e5:57:3a:82:
                    94:1f:34:29:bf:03:4c:c4:09:e9:bc:19:a4:81:2b:
                    26:e4:90:55:b1:86:0c:84:f7:62:3d:31:78:9d:48:
                    59:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:26:58:64:01:6B:D4:C2:C8:69:83:15:0A:86:E4:15:78:08:4D:BD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/da7c1d4d-0ee5-3fef-9a13-ffdc76d76cdf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.26.198.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:fb:7e:cc:7c:e1:6a:e3:ee:3f:90:84:62:46:b3:cb:4c:aa:
         cc:ad:51:6f:70:57:50:5b:d8:b8:81:ef:91:18:c6:18:0e:d3:
         ab:7c:a7:2e:c7:6f:0b:ef:e5:e0:65:5a:af:93:4b:59:c6:73:
         2f:1f:93:38:4e:88:6e:e0:78:10:ef:70:26:8f:43:68:0b:f0:
         d2:be:98:97:e8:d5:07:3b:3b:e1:4a:43:9b:52:75:b5:02:cf:
         80:b0:cf:44:f4:f2:88:5a:aa:d1:dd:b5:ad:8f:c4:63:4a:d9:
         a9:af:47:5e:b9:fb:62:af:02:2f:6d:8f:cc:20:89:17:c3:dd:
         6e:8e:5e:38:7b:26:cd:af:36:7c:7d:dd:41:79:ca:46:dc:a2:
         8d:30:7c:84:f1:20:1c:6f:25:08:95:e9:f0:a5:ec:70:11:0a:
         7a:e3:c0:69:e1:7b:e9:71:4b:ea:f4:6a:bc:0c:c4:3a:2f:73:
         a5:89:92:1f:e9:40:93:31:02:b4:f9:9b:7a:71:bc:9c:e3:a2:
         32:82:c2:4c:e8:f3:8a:33:5d:4b:4b:69:ed:1d:28:38:1f:41:
         73:83:f9:5f:0c:c2:7b:70:df:56:58:83:ba:13:83:0a:58:f8:
         12:aa:d4:f0:c1:54:80:07:f6:80:13:1d:c5:9d:9e:29:16:26:
         9a:ce:e3:3b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmRL1FGKm9ayvyJv4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTI1MDQxODEzMDA1OVoXDTI1MDcxNzEzMDA1OVowLzEtMCsGA1UEAxMk
MDcwODdjYzItNWE2MS00ODc0LWE4MTMtMmE3YTBiYWRlZmViMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3GLq1pZkYEFGohSj0OyNfYMQQ8YndodZ5eHn
W/+SO/Ahk4kusxgpCk/6+04jH3jHazwJRNf0/UA5r+a+LpfeHOvOjOfTXrkWzEGa
mkjrLFCua3vIWw8V1L2Xo6/6WPY3tGTRu6cDf45cDB5F/nupzMVAvUKfFDLMVl+C
zCr7svG6y6hSVmc05EWCXNJ8jcV5PiT2dadnApcs66xqD9e8YiFrKG9Rptqn0+EZ
EmoEANQ4FY1/UQe1GIoS1BPSag8W+CS6EX25/kaDT6ztftX8GMr/LKrOaUaBQ1M9
U+VXOoKUHzQpvwNMxAnpvBmkgSsm5JBVsYYMhPdiPTF4nUhZWwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDYmWGQBa9TCyGmDFQqG5BV4CE29MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvZGE3YzFkNGQtMGVlNS0z
ZmVmLTlhMTMtZmZkYzc2ZDc2Y2RmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFxrGMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIf7fsx84Wrj7j+QhGJGs8tMqsytUW9wV1Bb2LiB75EYxhgO06t8py7H
bwvv5eBlWq+TS1nGcy8fkzhOiG7geBDvcCaPQ2gL8NK+mJfo1Qc7O+FKQ5tSdbUC
z4Cwz0T08ohaqtHdta2PxGNK2amvR165+2KvAi9tj8wgiRfD3W6OXjh7Js2vNnx9
3UF5ykbcoo0wfITxIBxvJQiV6fCl7HARCnrjwGnhe+lxS+r0arwMxDovc6WJkh/p
QJMxArT5m3pxvJzjojKCwkzo84ozXUtLae0dKDgfQXOD+V8Mwntw31ZYg7oTgwpY
+BKq1PDBVIAH9oATHcWdnikWJprO4zs=
-----END CERTIFICATE-----
Generated at Fri May 9 06:13:50 2025 by rpki-client