Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/de70a194-124d-4ea2-9bff-570049254664/26b91b4e-9f15-3084-adcf-71cc4bb60a54.roa
File:                     26b91b4e-9f15-3084-adcf-71cc4bb60a54.roa (raw, json)
Hash identifier:          ZoBkWon7CB7DL7O9WPRCoH9tmlXlCb5/LxZt2LPkL0k=
Subject key identifier:   F2:D1:C6:ED:A8:7D:FB:BF:BB:D2:23:80:E4:21:B6:C8:B6:93:DE:06
Certificate issuer:       /CN=de70a194-124d-4ea2-9bff-570049254664
Certificate serial:       010D0C9F4328584E640F7857C313AA8BCBBCF9C0
Authority key identifier: 68:64:CC:E9:C9:59:C6:8A:17:EE:0A:85:A4:AE:B9:42:3E:02:28:E8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/de70a194-124d-4ea2-9bff-570049254664.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/de70a194-124d-4ea2-9bff-570049254664/26b91b4e-9f15-3084-adcf-71cc4bb60a54.roa
Signing time:             Sat 04 Jul 2026 21:00:12 +0000
ROA not before:           Sat 04 Jul 2026 21:00:12 +0000
ROA not after:            Fri 02 Oct 2026 21:00:12 +0000
asID:                     399338
IP address blocks:        23.174.48.0/24 maxlen: 24
                          2602:fcbf::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/de70a194-124d-4ea2-9bff-570049254664/de70a194-124d-4ea2-9bff-570049254664.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/de70a194-124d-4ea2-9bff-570049254664/de70a194-124d-4ea2-9bff-570049254664.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/de70a194-124d-4ea2-9bff-570049254664.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:64:0f:78:57:c3:13:aa:8b:cb:bc:f9:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=de70a194-124d-4ea2-9bff-570049254664
        Validity
            Not Before: Jul  4 21:00:12 2026 GMT
            Not After : Oct  2 21:00:12 2026 GMT
        Subject: CN=570bde4e-fa16-404f-95c1-50cb11f2e399
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:dd:fc:1c:bb:22:19:53:7a:81:83:ed:cc:75:
                    78:71:3d:bf:3b:f0:fe:2f:37:76:ce:83:16:68:e7:
                    48:aa:f1:75:bb:c1:6a:0f:63:c5:1f:23:8b:c5:ba:
                    a9:31:5d:9b:ce:2b:29:f2:87:45:8e:5d:33:4e:8e:
                    cb:a4:8a:16:28:b1:9a:b7:95:63:21:2b:ee:c2:f0:
                    36:5e:0e:1c:21:80:51:d5:76:8f:e5:f0:53:45:63:
                    c6:e6:b7:c5:97:4c:34:f8:ca:f3:93:5f:1f:0e:c9:
                    71:55:56:a6:e9:12:76:57:3c:47:52:5a:fb:e9:33:
                    27:fe:77:89:72:39:0c:36:10:a0:0e:fe:8f:ca:4e:
                    c8:37:2a:57:d7:e4:b6:9e:a2:ee:f1:18:fe:d7:4e:
                    f6:71:a1:e9:b9:9a:a5:dd:21:8d:b2:99:e9:c6:0c:
                    f9:0f:7c:b7:3d:d5:d3:00:1f:52:ab:f6:f0:34:f1:
                    6d:2b:af:34:a8:cb:a6:2e:0f:cf:f6:1f:a9:cf:47:
                    c4:44:5c:a1:78:6d:cf:61:54:a4:9e:0a:50:7d:dd:
                    c8:4d:34:d3:f8:c7:b3:ad:07:54:06:65:3d:98:6f:
                    42:d7:e7:fe:18:1b:79:39:24:9b:7c:cc:b4:2e:77:
                    87:50:3a:a5:af:71:cf:11:b2:60:7b:04:f8:9a:65:
                    9c:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:D1:C6:ED:A8:7D:FB:BF:BB:D2:23:80:E4:21:B6:C8:B6:93:DE:06
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/de70a194-124d-4ea2-9bff-570049254664/26b91b4e-9f15-3084-adcf-71cc4bb60a54.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/de70a194-124d-4ea2-9bff-570049254664/de70a194-124d-4ea2-9bff-570049254664.crl

            X509v3 Authority Key Identifier:
                keyid:68:64:CC:E9:C9:59:C6:8A:17:EE:0A:85:A4:AE:B9:42:3E:02:28:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/de70a194-124d-4ea2-9bff-570049254664.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.174.48.0/24
                IPv6:
                  2602:fcbf::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:a1:e3:e4:36:36:76:e9:a2:16:58:1e:68:65:00:82:df:63:
         ad:ef:0a:cd:71:1a:c7:ac:35:30:4f:ce:eb:fc:64:6b:58:89:
         31:fb:9a:26:83:41:1b:cc:aa:23:0f:32:02:a5:f8:ff:23:6e:
         46:ca:30:18:2c:e0:f1:0d:bc:d0:82:b2:04:ef:6c:0d:54:ce:
         17:68:e4:79:c4:e5:bc:e5:80:4e:e7:92:8d:7a:60:82:b5:5d:
         12:7b:c1:5c:46:a0:83:98:48:5b:df:13:c1:6f:53:c6:fc:61:
         14:e4:69:89:3f:6e:a1:98:1b:7e:0c:1a:61:73:a0:70:f5:1d:
         77:57:97:f7:de:f4:f5:66:01:75:3a:b4:1f:6b:67:24:0e:e6:
         a0:2f:9b:38:69:1d:f3:b4:53:59:5f:70:8c:87:a8:dc:95:de:
         c9:cc:8f:0b:45:06:e1:41:cf:86:0a:8e:1b:00:b1:c0:51:ee:
         69:c8:27:62:22:52:d7:97:32:a8:74:6d:c5:8e:57:e6:1c:c4:
         36:92:d8:f0:13:76:01:20:7f:b4:46:6f:39:98:45:11:f3:de:
         e0:a2:51:d2:22:36:ce:c1:87:e2:3d:e9:a8:ff:fb:ed:7c:35:
         19:98:05:25:2b:5d:a3:c4:ca:ca:55:2b:8e:7c:2d:ae:58:bf:
         be:1d:7d:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 06:45:30 2026 by rpki-client