Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/24f9b699-123b-3c45-87be-71dcbfe873d8.roa
File:                     24f9b699-123b-3c45-87be-71dcbfe873d8.roa (raw, json)
Hash identifier:          rRCgQ7DybZP67Xlb4CcZez42ay0rg0XyolsrgDlvDJs=
Subject key identifier:   3B:E9:DC:45:B5:97:02:DF:E9:2B:77:6A:A3:F6:1F:DB:7D:34:14:13
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584A90A0B2A8BFC4D2ADC635F640
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/24f9b699-123b-3c45-87be-71dcbfe873d8.roa
Signing time:             Sat 19 Jul 2025 01:00:49 +0000
ROA not before:           Sat 19 Jul 2025 01:00:49 +0000
ROA not after:            Fri 17 Oct 2025 01:00:49 +0000
asID:                     209043
IP address blocks:        23.26.104.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:90:a0:b2:a8:bf:c4:d2:ad:c6:35:f6:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Jul 19 01:00:49 2025 GMT
            Not After : Oct 17 01:00:49 2025 GMT
        Subject: CN=0b0936a4-25c8-48d3-9849-8142824801f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:e3:db:41:94:a4:98:7f:2f:6f:ee:64:ad:19:
                    c4:9d:e0:da:d3:6a:b4:ae:a5:c5:8f:78:f2:c2:a9:
                    64:67:7a:34:10:2f:eb:d3:ae:a2:6a:60:35:0f:eb:
                    8a:35:d7:6a:31:c9:30:ad:ad:8e:7d:ef:62:c6:71:
                    3a:1d:30:67:30:63:13:ad:d4:26:78:bc:a9:ce:2c:
                    b5:19:ed:d7:92:92:2b:85:ab:3a:01:88:c4:10:8a:
                    96:8d:c2:09:30:4c:74:59:a4:aa:28:aa:d0:72:c7:
                    5c:0e:ed:79:d4:a7:f5:87:9f:00:30:e2:21:0d:84:
                    e8:21:51:48:84:9d:47:9f:41:d0:b3:e8:75:f6:1f:
                    64:d8:a9:23:93:0d:ec:d9:01:2c:f4:c2:e8:56:cc:
                    99:1a:db:ea:7b:2a:23:df:f1:49:78:c6:9b:41:21:
                    92:b1:da:c4:af:12:71:4d:55:a1:a7:b2:69:3f:f7:
                    c2:91:17:0b:df:b7:87:a9:75:1e:19:db:6b:38:ae:
                    65:65:37:a7:63:a0:1e:74:61:99:5c:32:09:e8:3d:
                    c9:ef:75:9c:73:13:7a:d4:33:27:82:0b:7b:7c:d5:
                    67:71:3d:65:40:81:cc:c0:67:40:ef:53:90:30:f3:
                    43:bc:a3:de:67:d2:4b:7e:e1:90:b3:e4:c8:e7:62:
                    6a:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:E9:DC:45:B5:97:02:DF:E9:2B:77:6A:A3:F6:1F:DB:7D:34:14:13
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/24f9b699-123b-3c45-87be-71dcbfe873d8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.26.104.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:33:3e:74:5d:78:b3:31:0c:c0:cf:e6:5f:a7:74:37:e7:14:
         c3:cf:3a:22:47:a9:1c:84:6d:fa:09:7f:e7:2b:1b:62:3a:d1:
         42:bb:20:f6:e4:47:aa:32:ff:6b:dd:15:74:b4:1d:2d:77:26:
         a2:c4:b8:94:36:63:a3:5d:ad:38:54:4f:f0:af:24:42:05:17:
         4c:74:35:94:6a:8f:62:a9:60:07:e9:cb:30:95:3f:c1:dd:06:
         9f:9e:94:4d:76:df:08:c9:bd:69:c1:e5:a4:1f:db:e4:4a:0f:
         cc:98:96:d3:12:ad:1d:bb:2a:2f:b8:0e:12:3b:69:1a:f5:d8:
         66:11:b5:74:e4:ac:ec:6c:19:c4:0c:12:2f:52:f5:3b:d0:3e:
         67:4a:cc:c6:86:cf:82:da:01:d7:4c:a5:1c:11:13:00:56:66:
         8a:b5:41:40:c8:dd:6e:62:03:3f:67:3a:4e:fd:cf:e2:74:8b:
         25:fd:58:fd:6c:e0:16:f8:22:73:45:bb:df:be:ff:16:e5:1a:
         b0:64:55:b3:fd:ae:8b:62:a3:56:2d:7a:8c:50:55:cd:9a:15:
         a2:94:26:f9:b4:50:88:13:09:30:41:47:44:2a:f0:46:6e:c2:
         3d:e9:03:7c:bb:b3:4c:6b:6b:51:b9:0e:cb:f9:7b:23:df:ef:
         7e:5b:5d:78
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqQoLKov8TSrcY19kAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTI1MDcxOTAxMDA0OVoXDTI1MTAxNzAxMDA0OVowLzEtMCsGA1UEAxMk
MGIwOTM2YTQtMjVjOC00OGQzLTk4NDktODE0MjgyNDgwMWY5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1+PbQZSkmH8vb+5krRnEneDa02q0rqXFj3jy
wqlkZ3o0EC/r066iamA1D+uKNddqMckwra2Ofe9ixnE6HTBnMGMTrdQmeLypziy1
Ge3XkpIrhas6AYjEEIqWjcIJMEx0WaSqKKrQcsdcDu151Kf1h58AMOIhDYToIVFI
hJ1Hn0HQs+h19h9k2Kkjkw3s2QEs9MLoVsyZGtvqeyoj3/FJeMabQSGSsdrErxJx
TVWhp7JpP/fCkRcL37eHqXUeGdtrOK5lZTenY6AedGGZXDIJ6D3J73WccxN61DMn
ggt7fNVncT1lQIHMwGdA71OQMPNDvKPeZ9JLfuGQs+TI52JqcwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDvp3EW1lwLf6St3aqP2H9t9NBQTMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvMjRmOWI2OTktMTIzYi0z
YzQ1LTg3YmUtNzFkY2JmZTg3M2Q4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFxpoMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADEzPnRdeLMxDMDP5l+ndDfnFMPPOiJHqRyEbfoJf+crG2I60UK7IPbk
R6oy/2vdFXS0HS13JqLEuJQ2Y6NdrThUT/CvJEIFF0x0NZRqj2KpYAfpyzCVP8Hd
Bp+elE123wjJvWnB5aQf2+RKD8yYltMSrR27Ki+4DhI7aRr12GYRtXTkrOxsGcQM
Ei9S9TvQPmdKzMaGz4LaAddMpRwREwBWZoq1QUDI3W5iAz9nOk79z+J0iyX9WP1s
4Bb4InNFu9++/xblGrBkVbP9rotio1YteoxQVc2aFaKUJvm0UIgTCTBBR0Qq8EZu
wj3pA3y7s0xra1G5Dsv5eyPf735bXXg=
-----END CERTIFICATE-----
Generated at Thu Aug 7 03:56:09 2025 by rpki-client