Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/0e3cc82e-e1ed-385d-ab72-bc0dd7c9dafc.roa
File:                     0e3cc82e-e1ed-385d-ab72-bc0dd7c9dafc.roa (raw, json)
Hash identifier:          tb1opLVLN5Ad/Iqo+ldli6hSPpFoPKMWEeZhR6tYmgE=
Subject key identifier:   EB:D1:4B:8E:7B:21:81:05:F1:44:2E:80:A4:A1:B7:69:59:25:A0:80
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584AB737A05777758E76158AE480
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/0e3cc82e-e1ed-385d-ab72-bc0dd7c9dafc.roa
Signing time:             Fri 01 Aug 2025 20:45:46 +0000
ROA not before:           Fri 01 Aug 2025 20:45:46 +0000
ROA not after:            Thu 30 Oct 2025 20:45:46 +0000
asID:                     401152
IP address blocks:        23.26.245.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b7:37:a0:57:77:75:8e:76:15:8a:e4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Aug  1 20:45:46 2025 GMT
            Not After : Oct 30 20:45:46 2025 GMT
        Subject: CN=4c9f347a-d7f5-4cbb-bc9c-2092710b4ef6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:2f:0b:c5:c6:c0:0a:c6:35:24:ab:84:9a:d6:
                    bd:c0:8f:a5:37:fb:bf:81:ea:66:c0:12:d8:e6:d0:
                    42:f3:ae:68:38:f6:31:4b:a1:e0:94:8e:04:47:1b:
                    5e:86:b4:2b:0c:d1:7c:56:1a:f9:03:c3:e5:6a:59:
                    a6:21:a3:13:24:39:19:50:3d:c0:80:53:56:3b:87:
                    f1:53:09:ff:5a:ab:77:a6:e8:c7:77:cf:49:6f:c2:
                    2f:15:a5:8d:54:66:f1:05:97:cb:03:4a:c5:64:b7:
                    2b:f7:a2:d3:60:f7:5d:07:53:4c:ef:8a:7c:3b:9c:
                    65:6c:85:66:22:06:4e:84:59:c3:d7:1c:6e:52:97:
                    d2:fb:1f:d8:17:7b:34:61:46:f5:6f:35:f8:14:78:
                    a9:87:71:c8:fa:32:b1:70:14:06:4f:d7:65:60:8f:
                    ab:a9:1b:fb:96:3b:d3:fd:40:03:fa:53:83:78:8c:
                    85:f2:4d:77:7b:90:70:90:3f:7a:9b:ac:81:93:36:
                    55:20:2f:07:64:10:05:74:21:41:ac:9e:e5:f4:fe:
                    f8:f3:d1:f1:95:1c:70:c8:a5:5c:8a:e2:d6:34:6c:
                    29:f6:87:a6:f7:d3:33:a6:bd:35:99:0f:5d:a1:a8:
                    fd:fe:c4:92:e3:6c:fa:92:4a:53:61:27:26:ef:35:
                    0f:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:D1:4B:8E:7B:21:81:05:F1:44:2E:80:A4:A1:B7:69:59:25:A0:80
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/0e3cc82e-e1ed-385d-ab72-bc0dd7c9dafc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.26.245.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8e:16:69:f8:00:e6:b1:3e:c7:ea:55:dc:53:1c:24:21:b3:d3:
         6e:d9:23:3d:82:fe:d2:67:e0:f0:b2:d6:d3:fe:53:75:39:0e:
         b1:09:5b:dc:2e:d4:87:ed:dd:ce:0c:78:36:3d:91:37:06:27:
         9b:e1:9a:a3:c9:75:89:a3:6c:ae:24:48:b3:0b:dc:bc:00:7b:
         c5:89:9f:3e:46:b7:fb:91:f7:79:0b:e0:13:bf:92:9c:d3:bf:
         1f:ff:39:3d:01:7c:31:af:95:3c:b2:4f:b5:5d:ae:b5:00:26:
         48:18:70:80:da:44:ad:3c:6f:ac:53:c1:a2:74:ff:8e:73:c6:
         87:99:a2:63:d3:d3:00:d3:cf:f8:88:bf:e9:48:fd:46:74:34:
         b2:2a:c7:0b:8c:be:65:5d:3e:e9:68:84:6a:d7:af:d5:2d:dc:
         d9:14:60:23:92:c3:fa:2e:39:8d:40:a7:0d:ac:5a:1b:8d:20:
         5a:4b:1b:30:85:83:46:cc:b6:3a:a4:5b:32:a2:20:4e:d3:f2:
         f9:ba:f0:ab:18:fb:29:12:81:9d:f9:6b:59:72:6d:62:5c:1e:
         74:7d:9e:c8:5a:7f:67:c7:a2:21:c9:60:53:45:e9:b0:8c:e2:
         2a:96:7a:5b:68:2f:78:85:0c:6d:0f:64:77:b5:88:37:aa:e3:
         8b:8f:41:62
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq3N6BXd3WOdhWK5IAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTI1MDgwMTIwNDU0NloXDTI1MTAzMDIwNDU0NlowLzEtMCsGA1UEAxMk
NGM5ZjM0N2EtZDdmNS00Y2JiLWJjOWMtMjA5MjcxMGI0ZWY2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoC8LxcbACsY1JKuEmta9wI+lN/u/gepmwBLY
5tBC865oOPYxS6HglI4ERxtehrQrDNF8Vhr5A8PlalmmIaMTJDkZUD3AgFNWO4fx
Uwn/Wqt3pujHd89Jb8IvFaWNVGbxBZfLA0rFZLcr96LTYPddB1NM74p8O5xlbIVm
IgZOhFnD1xxuUpfS+x/YF3s0YUb1bzX4FHiph3HI+jKxcBQGT9dlYI+rqRv7ljvT
/UAD+lODeIyF8k13e5BwkD96m6yBkzZVIC8HZBAFdCFBrJ7l9P7489HxlRxwyKVc
iuLWNGwp9oem99Mzpr01mQ9doaj9/sSS42z6kkpTYScm7zUPnQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOvRS457IYEF8UQugKSht2lZJaCAMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvMGUzY2M4MmUtZTFlZC0z
ODVkLWFiNzItYmMwZGQ3YzlkYWZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFxr1MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAI4WafgA5rE+x+pV3FMcJCGz027ZIz2C/tJn4PCy1tP+U3U5DrEJW9wu
1Ift3c4MeDY9kTcGJ5vhmqPJdYmjbK4kSLML3LwAe8WJnz5Gt/uR93kL4BO/kpzT
vx//OT0BfDGvlTyyT7VdrrUAJkgYcIDaRK08b6xTwaJ0/45zxoeZomPT0wDTz/iI
v+lI/UZ0NLIqxwuMvmVdPulohGrXr9Ut3NkUYCOSw/ouOY1Apw2sWhuNIFpLGzCF
g0bMtjqkWzKiIE7T8vm68KsY+ykSgZ35a1lybWJcHnR9nshaf2fHoiHJYFNF6bCM
4iqWeltoL3iFDG0PZHe1iDeq44uPQWI=
-----END CERTIFICATE-----
Generated at Mon Aug 4 07:50:56 2025 by rpki-client