Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/de70a194-124d-4ea2-9bff-570049254664/26b91b4e-9f15-3084-adcf-71cc4bb60a54.roa
File:                     26b91b4e-9f15-3084-adcf-71cc4bb60a54.roa (raw, json)
Hash identifier:          Li3ZM7aLhexDBTv98T675ArVlZ3JuSavYpyOKfgStL8=
Subject key identifier:   8D:F4:F9:68:6A:C4:34:5D:92:B2:86:21:BF:FE:27:82:34:16:30:06
Certificate issuer:       /CN=de70a194-124d-4ea2-9bff-570049254664
Certificate serial:       010D0C9F4328584AE196915D72D6BD577E184400
Authority key identifier: 68:64:CC:E9:C9:59:C6:8A:17:EE:0A:85:A4:AE:B9:42:3E:02:28:E8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/de70a194-124d-4ea2-9bff-570049254664.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/de70a194-124d-4ea2-9bff-570049254664/26b91b4e-9f15-3084-adcf-71cc4bb60a54.roa
Signing time:             Sun 17 Aug 2025 01:00:32 +0000
ROA not before:           Sun 17 Aug 2025 01:00:32 +0000
ROA not after:            Sat 15 Nov 2025 02:00:32 +0000
asID:                     399338
IP address blocks:        23.174.48.0/24 maxlen: 24
                          2602:fcbf::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/de70a194-124d-4ea2-9bff-570049254664/de70a194-124d-4ea2-9bff-570049254664.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/de70a194-124d-4ea2-9bff-570049254664/de70a194-124d-4ea2-9bff-570049254664.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/de70a194-124d-4ea2-9bff-570049254664.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e1:96:91:5d:72:d6:bd:57:7e:18:44:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=de70a194-124d-4ea2-9bff-570049254664
        Validity
            Not Before: Aug 17 01:00:32 2025 GMT
            Not After : Nov 15 02:00:32 2025 GMT
        Subject: CN=ad2b2004-e1c1-4a2c-989b-0e188d3523ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:fb:ac:c5:9b:f2:6b:e9:ff:55:98:c7:ee:b2:
                    99:21:ba:9e:2d:00:cd:8f:e9:b2:9f:bf:5d:af:93:
                    cf:b4:7c:98:08:69:26:29:c7:9a:07:e2:8e:75:64:
                    a7:ea:01:9d:54:d8:e3:21:70:ce:d8:d1:1c:a6:52:
                    1b:8f:d1:5c:61:98:62:02:ab:f0:4c:17:30:d9:6b:
                    23:a8:56:7e:7e:30:f0:20:ee:b2:ad:98:74:c5:69:
                    e5:4c:d6:97:64:dc:67:64:c7:50:95:69:06:2c:01:
                    e9:6f:8f:f2:2c:6c:24:57:dc:8e:e1:cf:b5:43:56:
                    b2:ca:54:65:fc:ac:3f:11:b7:e1:17:fb:8a:b7:aa:
                    9a:89:55:7f:f0:0c:21:c7:a5:fc:cb:04:3c:46:bd:
                    10:a1:5f:66:44:ac:60:dd:bb:78:6d:ff:f9:68:a9:
                    9b:39:27:23:42:32:8c:39:92:6e:f8:96:55:3a:4b:
                    54:3e:a4:9d:82:79:38:7c:a7:be:de:d4:6c:7e:e1:
                    ac:11:96:e2:bf:32:40:5a:8f:38:99:86:b5:8e:89:
                    51:82:8d:bb:94:0e:ac:47:a6:68:a1:e7:c2:0d:b3:
                    a0:29:b7:a0:02:d2:9f:5d:28:09:8e:66:ca:1c:3c:
                    3e:83:5f:2a:ac:c7:80:40:91:61:82:dc:a0:69:e6:
                    1f:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:F4:F9:68:6A:C4:34:5D:92:B2:86:21:BF:FE:27:82:34:16:30:06
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/de70a194-124d-4ea2-9bff-570049254664/26b91b4e-9f15-3084-adcf-71cc4bb60a54.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/de70a194-124d-4ea2-9bff-570049254664/de70a194-124d-4ea2-9bff-570049254664.crl

            X509v3 Authority Key Identifier:
                keyid:68:64:CC:E9:C9:59:C6:8A:17:EE:0A:85:A4:AE:B9:42:3E:02:28:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/de70a194-124d-4ea2-9bff-570049254664.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.174.48.0/24
                IPv6:
                  2602:fcbf::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         be:3d:a6:45:3f:28:9b:13:5e:7a:2c:37:cd:62:4b:18:bd:b9:
         ed:c8:30:14:83:4f:7b:00:d5:85:e8:82:d9:dd:6a:d8:18:6a:
         f9:ac:53:c8:8a:9e:e4:e0:7e:71:0b:fe:3e:6c:e5:5e:98:0e:
         19:f3:04:a4:bf:89:db:65:76:1a:e0:cc:42:57:50:31:51:08:
         00:13:07:c4:9c:61:29:9b:28:9a:e9:d1:14:93:50:26:f1:c8:
         47:bf:e5:19:da:27:df:86:97:88:b6:09:68:31:e8:6c:8c:47:
         50:00:90:0f:ce:08:e7:02:83:f7:3b:8f:ef:f5:7f:32:9d:b3:
         00:2b:b5:29:a6:ca:43:be:47:0e:b7:4b:0c:1b:83:6a:ec:cf:
         c4:de:64:49:8e:95:eb:8d:d7:6a:30:f3:32:f3:b2:b5:70:69:
         c2:f3:ce:ad:8e:eb:7f:be:54:f3:d1:05:ec:71:31:75:13:4e:
         0d:be:09:f8:a7:12:26:ab:f4:48:54:79:76:41:a1:8a:93:b7:
         bc:4a:4a:d0:f5:b6:0a:b9:ac:e1:1c:24:4f:1f:a7:e3:c3:15:
         27:cc:68:35:b5:62:3f:cc:07:ff:61:18:a4:7c:13:84:76:34:
         74:47:56:68:2e:c7:b5:17:4b:8f:47:33:7f:4f:b6:7a:1c:70:
         a4:67:5b:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 25 06:32:33 2025 by rpki-client