Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/66108100-1fc2-4d23-b89e-3e81cc652270/c2993940-e56d-327c-b1b8-db0fdb283ec1.roa
File:                     c2993940-e56d-327c-b1b8-db0fdb283ec1.roa (raw, json)
Hash identifier:          dFh1WH+8CPItW0reSqzMSC+LPfCYwyvBn2AP2KPb/tY=
Subject key identifier:   02:52:D5:FF:E6:8C:DA:E2:68:3D:61:C8:16:AF:EF:A2:45:27:EB:82
Certificate issuer:       /CN=66108100-1fc2-4d23-b89e-3e81cc652270
Certificate serial:       010D0C9F4328584AEB5BD05858A2DB0EC82310C0
Authority key identifier: 4B:FB:9B:26:37:29:8C:89:2F:14:BD:D2:0B:59:D6:B0:EE:63:00:47
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/66108100-1fc2-4d23-b89e-3e81cc652270.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/66108100-1fc2-4d23-b89e-3e81cc652270/c2993940-e56d-327c-b1b8-db0fdb283ec1.roa
Signing time:             Wed 20 Aug 2025 13:00:41 +0000
ROA not before:           Wed 20 Aug 2025 13:00:41 +0000
ROA not after:            Tue 18 Nov 2025 14:00:41 +0000
asID:                     13984
IP address blocks:        204.246.26.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/66108100-1fc2-4d23-b89e-3e81cc652270/66108100-1fc2-4d23-b89e-3e81cc652270.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/66108100-1fc2-4d23-b89e-3e81cc652270/66108100-1fc2-4d23-b89e-3e81cc652270.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/66108100-1fc2-4d23-b89e-3e81cc652270.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:eb:5b:d0:58:58:a2:db:0e:c8:23:10:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66108100-1fc2-4d23-b89e-3e81cc652270
        Validity
            Not Before: Aug 20 13:00:41 2025 GMT
            Not After : Nov 18 14:00:41 2025 GMT
        Subject: CN=e733719e-ca7d-40b0-8142-7817f9275a29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:0b:6f:6b:25:b0:23:d9:cb:87:9b:76:63:2e:
                    68:68:11:4a:2d:0c:4b:19:ca:f5:a7:01:69:3b:65:
                    a8:d2:3e:c7:a8:a1:5a:ec:10:95:ee:a1:fe:e7:59:
                    ee:dc:e1:40:48:f6:89:da:26:15:56:22:20:71:79:
                    fc:30:c8:05:a6:33:89:73:48:10:ab:fa:f1:fa:44:
                    49:2f:ce:f3:9c:4e:29:5b:4a:d6:5d:c5:dd:87:5b:
                    8e:1b:4f:df:b8:6a:94:c1:37:7a:b1:3d:0d:80:dd:
                    72:f7:b3:42:86:6f:d9:6c:e6:6f:54:47:a1:9e:dc:
                    5b:59:29:61:fa:e9:99:46:43:0a:59:cb:fe:d5:36:
                    a5:b9:56:95:71:d2:5b:d7:ef:8c:df:ef:bf:20:b1:
                    e2:99:9f:6a:3b:94:81:b4:31:85:b3:c9:a0:78:4c:
                    ef:e3:26:6d:d0:ca:86:28:38:d1:db:38:46:ca:30:
                    93:4a:6e:17:fc:5f:3c:e6:c8:4b:a0:a9:56:cb:cd:
                    1e:e6:dc:b3:2d:5d:0a:dd:55:5c:78:cf:e0:e7:d2:
                    56:6e:27:a8:ad:03:4b:f5:b7:dd:9f:1a:a3:c5:ce:
                    59:3c:cb:be:0c:13:29:9c:b3:8b:ad:40:9f:88:6f:
                    66:30:ef:66:ce:ae:d0:7b:f7:dc:ac:63:6c:d9:1b:
                    8e:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:52:D5:FF:E6:8C:DA:E2:68:3D:61:C8:16:AF:EF:A2:45:27:EB:82
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/66108100-1fc2-4d23-b89e-3e81cc652270/c2993940-e56d-327c-b1b8-db0fdb283ec1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/66108100-1fc2-4d23-b89e-3e81cc652270/66108100-1fc2-4d23-b89e-3e81cc652270.crl

            X509v3 Authority Key Identifier:
                keyid:4B:FB:9B:26:37:29:8C:89:2F:14:BD:D2:0B:59:D6:B0:EE:63:00:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/66108100-1fc2-4d23-b89e-3e81cc652270.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.246.26.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         aa:36:35:6e:8d:77:13:2c:2d:ad:44:96:87:34:ad:c3:81:78:
         86:e2:23:62:c2:b2:dc:75:9d:1a:72:6b:93:b4:2d:c6:f2:7b:
         b2:6c:80:64:5f:21:63:4f:c9:26:72:d3:ad:6f:9b:55:4b:b9:
         49:ad:cf:aa:38:98:2c:0b:26:a0:a6:03:ab:ef:c8:98:59:54:
         0f:93:10:c5:e3:48:9a:ce:97:0d:b8:b8:e7:ac:6f:eb:5e:ab:
         3e:b6:86:5b:97:50:6b:b8:11:45:ed:1f:fb:00:67:c3:a5:ce:
         68:d3:56:34:0d:31:3d:9a:9d:e3:52:63:54:74:d8:62:95:67:
         06:10:2f:0e:ea:86:ea:2e:1f:92:18:be:05:a5:94:23:e3:db:
         96:02:fe:7a:d9:70:b4:33:1b:be:1b:6e:eb:39:b4:12:3e:f8:
         6d:21:3a:5c:31:37:98:df:b3:75:9c:98:06:a9:7e:13:2b:f5:
         aa:d0:e4:ec:ae:eb:ec:97:3e:60:de:02:72:d7:17:ba:27:95:
         99:cf:0d:db:7a:73:f0:f3:f7:56:e8:51:89:bc:c5:8e:d3:0a:
         6c:d3:95:43:c4:50:5d:a7:2d:5b:f6:22:ab:80:e0:06:20:db:
         f8:29:e4:f5:cc:b8:a5:fe:d1:bd:c7:8f:5b:34:6d:ae:1d:7c:
         3d:25:e2:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 22:31:35 2025 by rpki-client