Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/35b21dcc-9cb8-342c-a211-5697064d9522.roa
File:                     35b21dcc-9cb8-342c-a211-5697064d9522.roa (raw, json)
Hash identifier:          4zPZZqKU3USal8O36maDK/jUxO2LhvWeWGbb4UEc1Sc=
Subject key identifier:   61:2A:EF:4F:FC:6A:C0:9D:1C:D9:1B:FB:6B:0D:B5:8A:4A:D2:1C:00
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584E1E44905BB3F6EA41597F3100
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/35b21dcc-9cb8-342c-a211-5697064d9522.roa
Signing time:             Tue 09 Jun 2026 21:00:12 +0000
ROA not before:           Tue 09 Jun 2026 21:00:12 +0000
ROA not after:            Mon 07 Sep 2026 21:00:12 +0000
asID:                     63023
IP address blocks:        23.26.145.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:1e:44:90:5b:b3:f6:ea:41:59:7f:31:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Jun  9 21:00:12 2026 GMT
            Not After : Sep  7 21:00:12 2026 GMT
        Subject: CN=b82388aa-aa33-4eb0-8c75-4b17432cb9d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:f5:2a:bc:f5:98:2d:45:86:cc:5a:4c:06:e3:
                    ef:c0:51:b7:85:e7:8c:4b:88:cc:8a:b7:d7:ad:c9:
                    b6:75:51:3d:38:2d:4f:d4:cf:dc:a6:0b:63:da:d4:
                    52:36:70:75:db:be:02:e5:4e:6c:53:e5:6e:0a:99:
                    01:fb:57:4d:de:72:7a:97:8c:7e:08:35:81:98:86:
                    1e:93:3e:fc:e1:8e:a1:2c:93:cc:47:74:6f:25:43:
                    e8:ca:db:54:cb:5c:46:a8:3b:38:d2:f4:f4:af:5a:
                    59:e6:a6:83:05:77:58:cf:3f:9b:2f:ad:38:4f:aa:
                    d1:ca:f4:c7:3e:1e:78:7f:ac:51:43:3c:49:d6:90:
                    d3:d3:11:bb:17:63:fa:56:d9:9c:68:d5:fc:ae:69:
                    68:33:ec:12:b1:7e:47:32:07:15:06:7a:1e:ab:0d:
                    fb:72:b4:1a:74:3a:32:c4:ed:c8:b1:93:0a:b1:de:
                    db:ce:40:4d:07:02:30:ee:5e:42:b7:12:0e:e1:82:
                    bb:5c:c2:70:9f:7a:6a:a4:b0:3b:91:ad:01:2e:75:
                    5e:04:77:3b:03:08:17:dd:57:36:51:9b:b5:68:50:
                    57:83:c5:f6:aa:72:e8:c9:46:de:63:7a:eb:d2:5d:
                    02:0f:bc:03:3c:1f:ba:74:ca:6e:34:50:34:fb:ef:
                    c5:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:2A:EF:4F:FC:6A:C0:9D:1C:D9:1B:FB:6B:0D:B5:8A:4A:D2:1C:00
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/35b21dcc-9cb8-342c-a211-5697064d9522.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.26.145.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         98:90:50:52:2e:bd:ee:89:ad:5f:b8:3b:cb:22:6a:02:e0:f1:
         fd:b8:3e:ed:d7:fc:f3:b6:92:47:a3:5c:4e:1b:4a:cd:c4:5f:
         fb:06:e3:64:61:a4:cd:7e:c4:c8:c2:a0:9d:28:de:d4:b8:97:
         08:17:e8:22:de:fd:40:2a:7f:2c:66:60:e3:63:30:3e:63:22:
         7c:66:4f:29:8a:09:14:16:25:4a:4e:95:cb:ef:cf:59:cc:a8:
         2b:19:89:c3:13:e2:7c:f1:26:4c:cc:60:71:5a:b9:4e:85:8a:
         6c:0b:88:02:03:ba:c2:60:bd:7f:79:b0:02:1a:94:a8:11:1d:
         3b:2c:5a:c1:d1:de:e7:fd:50:cc:e8:9c:b3:4e:80:f5:d6:4a:
         77:f3:7a:21:87:18:89:66:9d:6f:89:23:c8:85:57:2a:02:e3:
         e3:eb:d0:9c:0c:01:3a:a2:6d:69:4b:1d:88:23:bb:8a:77:65:
         7e:91:55:65:de:8e:44:51:65:d8:0d:01:aa:3d:06:07:1c:22:
         2b:d9:a6:e6:89:b8:1b:c8:74:69:ab:96:6b:0a:c6:32:5d:30:
         64:f5:72:8e:89:9a:c3:14:7b:87:49:20:20:42:50:98:ba:7c:
         53:fb:de:1b:06:ee:de:9b:68:29:af:3b:58:ad:03:73:ea:89:
         46:03:ad:31
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4eRJBbs/bqQVl/MQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTI2MDYwOTIxMDAxMloXDTI2MDkwNzIxMDAxMlowLzEtMCsGA1UEAxMk
YjgyMzg4YWEtYWEzMy00ZWIwLThjNzUtNGIxNzQzMmNiOWQ5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhPUqvPWYLUWGzFpMBuPvwFG3heeMS4jMirfX
rcm2dVE9OC1P1M/cpgtj2tRSNnB1274C5U5sU+VuCpkB+1dN3nJ6l4x+CDWBmIYe
kz784Y6hLJPMR3RvJUPoyttUy1xGqDs40vT0r1pZ5qaDBXdYzz+bL604T6rRyvTH
Ph54f6xRQzxJ1pDT0xG7F2P6VtmcaNX8rmloM+wSsX5HMgcVBnoeqw37crQadDoy
xO3IsZMKsd7bzkBNBwIw7l5CtxIO4YK7XMJwn3pqpLA7ka0BLnVeBHc7AwgX3Vc2
UZu1aFBXg8X2qnLoyUbeY3rr0l0CD7wDPB+6dMpuNFA0++/FFwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGEq70/8asCdHNkb+2sNtYpK0hwAMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvMzViMjFkY2MtOWNiOC0z
NDJjLWEyMTEtNTY5NzA2NGQ5NTIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFxqRMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJiQUFIuve6JrV+4O8siagLg8f24Pu3X/PO2kkejXE4bSs3EX/sG42Rh
pM1+xMjCoJ0o3tS4lwgX6CLe/UAqfyxmYONjMD5jInxmTymKCRQWJUpOlcvvz1nM
qCsZicMT4nzxJkzMYHFauU6FimwLiAIDusJgvX95sAIalKgRHTssWsHR3uf9UMzo
nLNOgPXWSnfzeiGHGIlmnW+JI8iFVyoC4+Pr0JwMATqibWlLHYgju4p3ZX6RVWXe
jkRRZdgNAao9BgccIivZpuaJuBvIdGmrlmsKxjJdMGT1co6JmsMUe4dJICBCUJi6
fFP73hsG7t6baCmvO1itA3PqiUYDrTE=
-----END CERTIFICATE-----
Generated at Sat Jun 13 20:21:59 2026 by rpki-client