Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/0dc2a6ad-45cc-30c7-bdd7-7003a0036273.roa
File:                     0dc2a6ad-45cc-30c7-bdd7-7003a0036273.roa (raw, json)
Hash identifier:          RH+eaXXZQ3eYOO61QClf+nrurbEHZEUv0QB46HveNTk=
Subject key identifier:   42:97:14:29:58:A6:75:9E:20:01:76:BD:3D:C9:B6:8C:4A:D9:B4:03
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584EA78F3019D1159030688C27A0
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/0dc2a6ad-45cc-30c7-bdd7-7003a0036273.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     40676
IP address blocks:        23.26.17.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:8f:30:19:d1:15:90:30:68:8c:27:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=2b392c52-2214-4ddf-8fcd-74ef0f975cfd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:de:c7:b1:e5:bc:fd:80:8f:c8:a6:d6:59:17:
                    c8:cc:0c:42:56:05:00:1f:45:ff:40:d7:88:1c:cc:
                    a2:af:36:3f:33:d2:66:20:26:03:8f:d7:aa:c7:8d:
                    e9:bd:95:33:df:81:af:64:32:14:ba:82:6f:a4:27:
                    1d:21:e1:dd:08:05:bb:21:c1:f2:44:30:10:8f:26:
                    9b:9c:ac:77:af:01:eb:dc:41:47:7f:e1:ce:17:f7:
                    1c:e5:5d:3f:73:97:91:45:fe:20:5e:18:04:bc:d9:
                    1b:f2:6e:9f:cc:c8:59:87:0a:77:f4:a4:36:20:b2:
                    cf:05:b0:bf:67:9f:d2:cd:35:fc:ec:0d:10:9a:87:
                    b3:31:91:05:73:13:27:92:31:cc:6b:64:18:ed:c3:
                    a0:bf:86:41:9e:9c:52:31:a3:4b:9e:55:10:46:2f:
                    07:6a:ff:ec:b4:d5:c2:a1:8e:19:e6:f3:04:27:61:
                    f8:22:8d:b7:27:07:15:75:fa:a1:96:1d:ad:7b:7c:
                    2d:3f:c7:9b:e2:3d:47:13:3e:2d:f6:6b:d5:5f:ce:
                    41:a4:21:ef:a5:9a:e1:c2:82:98:4e:81:e8:ac:4e:
                    e4:cb:f5:9a:17:1f:d9:2b:70:c0:e0:1f:eb:ef:e7:
                    0f:5a:62:95:a3:c7:e2:a9:94:4b:d7:ac:d3:4b:67:
                    40:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:97:14:29:58:A6:75:9E:20:01:76:BD:3D:C9:B6:8C:4A:D9:B4:03
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/0dc2a6ad-45cc-30c7-bdd7-7003a0036273.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.26.17.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:ae:fa:bf:a4:2a:85:75:83:90:75:b7:e6:f6:06:ac:58:bc:
         2a:f5:12:f7:65:2b:34:06:d5:25:74:65:43:83:2d:d7:ca:48:
         a4:51:ed:70:36:e8:69:0b:88:fa:45:e4:30:f9:bc:9b:f5:dc:
         bb:eb:7a:62:2f:9a:8a:d4:d3:4f:ae:73:bc:d3:96:2e:a7:28:
         81:7d:63:e4:75:bf:e7:70:de:cc:6f:91:97:ba:bc:ab:54:c0:
         0b:be:90:2b:77:61:fb:07:65:43:95:b8:37:b6:8c:29:e5:d2:
         46:37:bd:3f:65:6c:27:cc:28:a3:2b:83:b2:53:35:50:3b:c1:
         08:40:6b:cf:bd:cc:0c:da:59:1c:bb:0b:8a:e7:f3:79:06:d3:
         d5:1b:f4:f7:eb:34:71:85:90:82:06:a0:a7:9d:c5:17:b2:50:
         61:4c:7f:96:9a:a0:50:eb:6a:6c:50:a4:d9:3c:a4:54:4e:a4:
         81:5a:df:7a:2d:20:c7:23:09:b1:16:39:a5:52:22:f9:10:01:
         34:fb:1b:24:81:85:c1:0e:3b:86:a0:4d:89:8a:b2:ad:c4:04:
         bb:de:e3:67:8b:e9:ce:c1:41:0f:c0:74:71:3d:e0:95:c4:0e:
         3e:c3:a6:2c:05:0a:03:b8:ea:e3:24:88:00:62:9d:62:d4:de:
         bc:80:7b:96
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6njzAZ0RWQMGiMJ6AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk
MmIzOTJjNTItMjIxNC00ZGRmLThmY2QtNzRlZjBmOTc1Y2ZkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyN7HseW8/YCPyKbWWRfIzAxCVgUAH0X/QNeI
HMyirzY/M9JmICYDj9eqx43pvZUz34GvZDIUuoJvpCcdIeHdCAW7IcHyRDAQjyab
nKx3rwHr3EFHf+HOF/cc5V0/c5eRRf4gXhgEvNkb8m6fzMhZhwp39KQ2ILLPBbC/
Z5/SzTX87A0QmoezMZEFcxMnkjHMa2QY7cOgv4ZBnpxSMaNLnlUQRi8Hav/stNXC
oY4Z5vMEJ2H4Io23JwcVdfqhlh2te3wtP8eb4j1HEz4t9mvVX85BpCHvpZrhwoKY
ToHorE7ky/WaFx/ZK3DA4B/r7+cPWmKVo8fiqZRL16zTS2dAkwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEKXFClYpnWeIAF2vT3JtoxK2bQDMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvMGRjMmE2YWQtNDVjYy0z
MGM3LWJkZDctNzAwM2EwMDM2MjczLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFxoRMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEOu+r+kKoV1g5B1t+b2BqxYvCr1EvdlKzQG1SV0ZUODLdfKSKRR7XA2
6GkLiPpF5DD5vJv13LvremIvmorU00+uc7zTli6nKIF9Y+R1v+dw3sxvkZe6vKtU
wAu+kCt3YfsHZUOVuDe2jCnl0kY3vT9lbCfMKKMrg7JTNVA7wQhAa8+9zAzaWRy7
C4rn83kG09Ub9PfrNHGFkIIGoKedxReyUGFMf5aaoFDramxQpNk8pFROpIFa33ot
IMcjCbEWOaVSIvkQATT7GySBhcEOO4agTYmKsq3EBLve42eL6c7BQQ/AdHE94JXE
Dj7DpiwFCgO46uMkiABinWLU3ryAe5Y=
-----END CERTIFICATE-----
Generated at Wed Jul 29 09:20:23 2026 by rpki-client