Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/dafd2d4f-7b88-36e1-b460-1c71880c137a.roa
File:                     dafd2d4f-7b88-36e1-b460-1c71880c137a.roa (raw, json)
Hash identifier:          rSLANPvoVoO30wEtGAg36UVpCs0iqmwF5jAa6oL1Cug=
Subject key identifier:   F9:54:A5:7F:9B:47:DD:AE:BF:F8:F2:38:5E:36:CD:C1:F8:D0:8E:A8
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584A3963D9DC12A754AAAB039BA0
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/dafd2d4f-7b88-36e1-b460-1c71880c137a.roa
Signing time:             Tue 17 Jun 2025 19:03:02 +0000
ROA not before:           Tue 17 Jun 2025 19:03:02 +0000
ROA not after:            Mon 15 Sep 2025 19:03:02 +0000
asID:                     401152
IP address blocks:        23.26.168.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:39:63:d9:dc:12:a7:54:aa:ab:03:9b:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Jun 17 19:03:02 2025 GMT
            Not After : Sep 15 19:03:02 2025 GMT
        Subject: CN=22157cb1-8311-472c-9dbe-0669c53588c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:68:9e:28:b5:29:2a:f6:dd:98:d6:b9:6f:1f:
                    c3:d3:57:91:db:8b:3b:13:4d:91:af:ed:8c:b3:b4:
                    54:c3:48:bd:d4:57:e1:a2:d8:1f:5d:6b:fb:2a:c1:
                    50:6f:ea:96:f5:3c:70:a6:96:88:15:cb:4b:e2:9a:
                    80:de:2c:34:be:58:09:7c:d9:62:c2:f6:c8:42:f7:
                    d1:57:d9:b5:c2:cc:05:47:b3:a5:b0:19:ba:f5:b8:
                    74:89:43:b6:ce:64:b1:6f:91:25:d8:6d:12:45:0a:
                    cb:96:f1:53:4b:6e:fa:15:69:73:2f:3d:16:cd:f2:
                    46:13:5b:ec:7e:a3:4b:79:44:13:cd:77:0a:13:09:
                    5f:ee:dc:7d:68:5e:87:34:57:51:0c:7c:43:d4:67:
                    89:84:34:18:3e:38:5f:3e:a5:ec:8b:8e:4e:b5:53:
                    f5:47:78:53:f4:85:eb:54:24:ac:85:bd:f5:62:d6:
                    89:72:9b:b1:72:f8:c1:b7:d3:43:f6:18:0d:05:06:
                    6c:29:e5:1e:69:a5:1c:60:88:fd:e2:32:19:12:56:
                    19:f2:64:39:09:52:d5:42:a7:cc:45:35:4c:d3:3e:
                    f3:5e:51:04:6a:9a:62:1b:a8:a9:1f:a1:f1:4f:66:
                    98:03:78:fb:67:ac:9a:dd:3b:be:68:92:db:cb:ac:
                    26:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:54:A5:7F:9B:47:DD:AE:BF:F8:F2:38:5E:36:CD:C1:F8:D0:8E:A8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/dafd2d4f-7b88-36e1-b460-1c71880c137a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.26.168.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:8d:3b:69:8b:52:98:a0:b6:6b:4a:3b:e9:62:1f:5e:22:b5:
         7a:a1:24:a4:ef:7e:11:b1:18:84:cd:c9:26:03:46:d0:4f:2e:
         4d:b8:bd:63:37:ca:60:13:f1:40:af:25:a4:a6:4a:eb:47:a3:
         b2:af:16:b9:a0:6d:3b:14:4d:8b:98:97:21:4f:77:bb:94:0f:
         22:4d:3c:d0:e0:3c:cb:a3:b4:e1:be:9c:d2:7a:41:bc:38:f1:
         74:66:3d:a1:8b:60:4c:c5:12:d4:c4:f4:25:c0:de:3d:34:a7:
         cf:18:63:22:15:33:54:93:88:ca:fe:af:80:c7:78:68:eb:64:
         38:ce:e9:7b:b1:b4:73:10:37:df:57:c6:da:c9:45:4b:31:5e:
         33:62:6b:a6:32:6f:c1:17:8e:59:03:81:30:34:94:c8:32:09:
         64:a4:de:98:f9:f3:d4:22:06:cd:f4:9a:1d:dc:ce:3a:30:98:
         36:44:16:ec:3e:82:b5:95:18:c0:3f:dc:ff:3c:cd:94:2b:62:
         2e:82:23:dc:e3:fc:c4:06:35:14:45:c8:3b:b4:95:b8:7c:3b:
         59:ff:a8:64:71:19:f2:3a:1b:ec:ef:9d:d6:c9:68:d9:24:07:
         d9:5d:d8:19:d5:42:3c:b4:fa:36:a4:a7:5e:3f:a2:0b:82:57:
         e0:14:68:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 18:39:51 2025 by rpki-client