Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/26ce5288-a5ea-3297-94fb-34e2ac333433.roa
File:                     26ce5288-a5ea-3297-94fb-34e2ac333433.roa (raw, json)
Hash identifier:          ytU0welU7V9v5/FzunDLb9AHT8v6XgJ5GCIZA4YZFOE=
Subject key identifier:   AE:68:41:AF:C6:EF:1B:10:0A:9A:99:79:33:F2:67:BB:30:F2:00:3E
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584AD3A120C1C42522D280A26A00
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/26ce5288-a5ea-3297-94fb-34e2ac333433.roa
Signing time:             Tue 12 Aug 2025 01:00:32 +0000
ROA not before:           Tue 12 Aug 2025 01:00:32 +0000
ROA not after:            Mon 10 Nov 2025 02:00:32 +0000
asID:                     20940
IP address blocks:        23.66.103.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:d3:a1:20:c1:c4:25:22:d2:80:a2:6a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Aug 12 01:00:32 2025 GMT
            Not After : Nov 10 02:00:32 2025 GMT
        Subject: CN=c5dfe692-4091-43ec-b269-0120786aecd2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:2b:28:df:62:03:a8:c4:5b:21:7f:11:96:d7:
                    b2:22:93:0e:44:86:0a:48:22:e0:10:00:1e:ea:dc:
                    08:54:4a:db:98:c5:44:75:99:ec:bd:58:aa:7c:44:
                    45:fd:80:db:9b:8a:b7:e3:20:f0:2f:59:8d:5a:dd:
                    c9:8a:b7:55:8f:7b:b6:ce:58:1f:39:06:13:80:9a:
                    86:35:2d:09:11:67:78:69:b4:aa:ea:b8:3d:97:41:
                    e0:ea:1e:a0:eb:5b:35:95:ca:5d:36:c8:ea:d5:7d:
                    ef:8e:0e:68:f4:75:34:8a:2f:3b:6e:f1:bc:fc:57:
                    c9:a6:de:73:ec:4e:22:8b:66:60:18:d5:91:22:16:
                    42:ad:18:af:02:98:d1:dd:d5:99:0c:f4:71:f0:ca:
                    26:80:f5:11:9b:b9:ac:26:75:ab:34:01:f5:da:6c:
                    d5:73:11:1a:3c:cf:aa:14:07:01:ed:ba:2f:96:6b:
                    aa:6a:1c:3e:13:3a:38:89:48:97:bd:a9:bd:29:cd:
                    47:6b:dd:5e:d4:1c:92:6e:c4:f7:c6:20:2c:09:27:
                    33:49:56:69:5a:2a:55:92:6f:d2:47:ff:73:e8:4b:
                    67:f9:52:e7:a2:76:a8:ad:28:1a:c3:bf:49:1f:5f:
                    e4:2b:44:79:8a:84:f8:b7:63:ca:44:5d:13:f2:b4:
                    36:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:68:41:AF:C6:EF:1B:10:0A:9A:99:79:33:F2:67:BB:30:F2:00:3E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/26ce5288-a5ea-3297-94fb-34e2ac333433.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.66.103.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:1b:f8:c3:b9:43:30:1e:06:0b:9b:62:49:6c:06:58:04:cf:
         80:6c:68:bc:59:47:76:f6:a8:11:9d:90:61:65:2c:2b:76:c4:
         3b:2a:21:58:2c:e7:60:a0:5e:d1:ea:4c:5b:9c:28:79:2f:e9:
         fe:bd:d6:a0:ce:17:cd:66:7b:db:13:7d:c5:c9:35:27:10:42:
         97:77:71:2d:73:79:69:a0:4e:dc:72:0b:44:f3:c5:db:82:69:
         f0:77:75:88:7c:3e:c5:de:d2:35:09:de:c0:a5:f4:7d:77:c1:
         66:9c:35:27:a3:7e:e2:e2:4d:32:6b:77:66:eb:9c:b6:85:f2:
         d7:d2:8d:78:61:88:8d:73:d5:c2:0d:ba:59:90:61:18:34:fb:
         af:15:0f:30:9d:8b:5d:98:b5:1d:b2:9b:21:b8:b2:b8:4c:bf:
         36:b3:5e:f6:74:f8:f0:10:9e:14:96:ef:a4:39:c7:a2:f8:2d:
         e7:cd:4b:d9:47:cc:ab:ed:5e:d3:87:a9:8e:4d:95:90:5a:38:
         8f:dc:29:df:e0:cd:48:87:eb:fc:e9:77:9f:09:b4:d3:1f:ca:
         5f:89:34:ec:4e:60:f9:b8:1f:1f:4f:c6:db:64:4f:a7:99:96:
         50:b7:ce:86:29:3d:ec:1d:68:19:02:65:60:40:10:33:ef:b0:
         0c:75:37:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:57:51 2025 by rpki-client