Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/f8fae74c-df9e-3d1c-921a-af052d3cf523.roa
File:                     f8fae74c-df9e-3d1c-921a-af052d3cf523.roa (raw, json)
Hash identifier:          a0QkFP0WwFNCoGe9c092ea5n684Incq7v1x0MT1C1bI=
Subject key identifier:   4C:2B:5D:14:DF:37:84:83:85:F7:4D:BE:1E:57:B9:C9:66:61:FF:DD
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584AD7D14A60DB29D8C3F6933780
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/f8fae74c-df9e-3d1c-921a-af052d3cf523.roa
Signing time:             Wed 13 Aug 2025 13:00:41 +0000
ROA not before:           Wed 13 Aug 2025 13:00:41 +0000
ROA not after:            Tue 11 Nov 2025 14:00:41 +0000
asID:                     30058
IP address blocks:        23.26.204.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:d7:d1:4a:60:db:29:d8:c3:f6:93:37:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Aug 13 13:00:41 2025 GMT
            Not After : Nov 11 14:00:41 2025 GMT
        Subject: CN=c16d4a81-2f72-49d7-b756-47c01a937f38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:8e:32:72:1c:92:ff:70:ce:36:d1:ec:50:bf:
                    40:e1:58:66:48:2c:ce:80:81:cf:95:09:fb:3c:55:
                    43:ec:4f:5e:88:48:b4:45:4e:3c:61:bf:4c:fe:b2:
                    15:79:c9:ed:5e:2b:ec:e3:cd:3a:9b:fd:fc:64:b3:
                    34:2c:c0:23:f9:fa:32:e2:27:de:5b:6a:5d:79:d3:
                    be:ea:12:f7:f0:68:b0:df:07:ca:07:00:6e:82:e8:
                    87:eb:d1:78:83:5f:ac:b0:22:64:d8:6f:6d:1b:3e:
                    eb:79:a7:61:41:8e:ea:f3:49:d1:73:a4:91:5f:c4:
                    c1:88:1e:b3:ab:25:45:58:a0:19:f4:25:d1:40:52:
                    2e:62:5f:31:1f:07:42:16:e0:1b:39:1b:ea:bd:8b:
                    74:4c:9b:ac:c0:58:a2:c0:cc:5c:b9:08:93:39:0b:
                    1a:f2:bc:dd:1a:0f:21:9b:95:1a:da:05:18:56:6d:
                    fd:09:df:f1:6a:d1:1c:f8:ae:32:05:5b:75:92:a3:
                    64:b5:5b:1c:44:1c:55:88:0d:aa:2b:99:e5:09:5b:
                    fb:45:da:61:21:e7:d1:69:87:75:c4:1c:a5:6c:04:
                    bf:e0:b9:73:96:37:3e:2e:75:55:33:fb:f5:24:a0:
                    6f:af:0f:82:9f:81:f6:dc:1e:f8:8f:82:84:dd:87:
                    9a:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:2B:5D:14:DF:37:84:83:85:F7:4D:BE:1E:57:B9:C9:66:61:FF:DD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/f8fae74c-df9e-3d1c-921a-af052d3cf523.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.26.204.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:f0:18:31:d2:47:af:d7:33:b6:40:f6:3c:6a:d5:53:34:dd:
         c1:c5:b5:61:f3:4a:c8:e2:2f:9c:a4:64:d6:79:6e:d8:00:45:
         80:0b:95:b9:3b:89:c7:91:f7:1c:e2:57:f4:8b:93:76:95:19:
         40:fb:7f:dd:4f:17:87:cf:a9:26:1d:6e:c3:39:cc:13:b7:4e:
         8e:df:59:67:ef:dd:ae:33:af:8f:05:0a:56:b8:e9:cb:52:0c:
         e4:8e:93:49:0a:38:f4:6e:bb:99:7a:c2:8e:ec:b7:4b:a3:09:
         54:f4:79:b7:10:f4:24:98:6b:fd:b5:1b:7f:58:76:75:11:95:
         b8:82:c4:8d:3b:a8:0f:fe:c3:81:3b:00:ab:09:c7:0d:a5:34:
         aa:88:94:28:96:d1:3c:14:ae:c3:c4:e2:91:b7:c5:b4:71:c8:
         20:15:b3:3d:30:4c:d8:0a:cd:2a:23:40:ce:13:33:85:f6:be:
         0e:d6:69:08:1f:18:7d:87:b0:30:01:5d:27:a7:ef:75:76:67:
         40:cc:ff:ce:a2:06:ae:89:5c:9a:3b:1b:d1:5b:28:c2:e8:34:
         9c:78:97:f9:e8:95:4e:59:4f:11:ef:b6:93:22:aa:8c:5c:9c:
         9c:a9:d2:03:b6:8f:d3:a0:2a:a2:d5:80:96:31:f3:57:8f:3e:
         41:2d:c8:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:51:49 2025 by rpki-client