Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/11548410-5476-36aa-9ab1-dc9c7d499387.roa
File:                     11548410-5476-36aa-9ab1-dc9c7d499387.roa (raw, json)
Hash identifier:          Ba2KXVvDdCHCpdpisGknlWmGczxON8ucz0eNzC1ykXQ=
Subject key identifier:   EE:6F:5C:70:EC:FC:93:B8:A9:79:EA:09:EE:B2:08:58:16:B4:77:48
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584E23D997196B397ACEBD46B600
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/11548410-5476-36aa-9ab1-dc9c7d499387.roa
Signing time:             Thu 11 Jun 2026 21:00:11 +0000
ROA not before:           Thu 11 Jun 2026 21:00:11 +0000
ROA not after:            Wed 09 Sep 2026 21:00:11 +0000
asID:                     6830
IP address blocks:        23.26.106.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:23:d9:97:19:6b:39:7a:ce:bd:46:b6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Jun 11 21:00:11 2026 GMT
            Not After : Sep  9 21:00:11 2026 GMT
        Subject: CN=c9f7f40e-0807-4040-a466-ab859a017aa0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:4c:15:5e:5b:b7:7e:ff:a4:b4:e7:f8:2e:f7:
                    c2:76:38:b8:f4:2f:fc:59:d9:be:7c:89:23:52:e1:
                    c0:27:62:aa:05:3d:ca:1a:b9:82:6e:b4:f4:7f:00:
                    a6:36:20:da:e8:66:19:88:ac:4b:8b:ea:23:31:86:
                    72:f5:4a:52:7c:07:bd:d7:6d:98:be:87:2b:91:af:
                    66:49:be:68:69:19:90:10:76:f4:2b:e4:f0:d8:61:
                    2e:9a:88:89:c6:3a:0f:01:7b:9d:ac:a5:64:11:3d:
                    82:00:2d:a8:04:55:58:01:0d:b6:55:3a:c1:fd:f1:
                    01:4a:91:6b:79:bf:48:75:cb:4d:04:d8:7e:50:3e:
                    90:50:1c:52:31:61:3c:7c:02:6f:69:50:e4:bb:ba:
                    8b:da:5c:a1:0e:f2:10:78:8a:99:01:12:6c:ca:7e:
                    46:22:d5:b7:74:5e:a1:20:91:b4:ad:c6:79:b5:1a:
                    a9:fd:af:fa:07:ae:dd:8c:d4:ea:54:c7:0e:8b:e9:
                    a9:b8:5d:9a:59:fa:55:2e:96:8b:95:88:21:c6:04:
                    91:bd:5a:66:00:35:8b:e2:a0:6b:bf:03:49:81:58:
                    0d:44:26:b8:83:ee:a4:1e:fa:8a:73:bf:ba:3f:1c:
                    b5:62:90:aa:a9:e7:80:d5:1f:ff:ce:ec:cd:38:ca:
                    5c:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:6F:5C:70:EC:FC:93:B8:A9:79:EA:09:EE:B2:08:58:16:B4:77:48
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/11548410-5476-36aa-9ab1-dc9c7d499387.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.26.106.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:55:1e:f7:9c:f0:74:1d:5c:37:9a:01:57:4b:af:09:f8:19:
         6a:2b:7b:d6:e2:53:7b:aa:fa:20:90:9f:01:9d:0a:7f:1a:b4:
         47:91:90:ab:4d:b5:f9:9e:fd:54:1d:3f:c2:4c:77:21:cb:22:
         1f:3f:d3:59:4c:97:a1:68:17:05:de:48:74:f2:a0:be:d0:fe:
         54:05:b8:96:4f:28:0e:78:28:38:6d:41:41:25:46:66:fd:1e:
         7c:e2:35:89:35:d8:ad:71:af:b9:07:c6:cd:65:42:85:86:fe:
         69:24:ff:e7:94:56:57:c5:b8:99:9c:6c:7c:9a:95:c2:e6:3a:
         b8:c6:10:5c:4f:ae:f2:3a:a3:08:03:89:79:a5:9f:08:e0:d0:
         ca:ce:1d:01:bf:bf:83:f4:70:41:12:11:b0:95:b6:6d:1e:d7:
         f3:a1:5f:f4:01:a6:4b:1f:64:16:f4:dd:5e:9e:40:93:c9:32:
         fd:ee:35:85:a2:e3:73:33:e4:0c:25:4c:b7:d6:be:95:5a:e9:
         26:00:1a:23:ba:96:b5:db:e2:b8:5b:35:9c:3b:fb:58:60:b3:
         83:d9:f4:94:23:c1:9d:ee:d5:1e:08:38:d3:0e:19:88:fb:09:
         fa:66:53:ab:3a:83:4a:7d:f8:ca:55:4f:e7:8b:b1:ee:98:74:
         cc:a0:5a:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 23:09:04 2026 by rpki-client