Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/3822542a-102e-3de0-b69b-5866a80fb751.roa
File:                     3822542a-102e-3de0-b69b-5866a80fb751.roa (raw, json)
Hash identifier:          AFrCZ/3oH+CpLKYF5ujS2dLaGoddi5IBhWWNMW53aag=
Subject key identifier:   D1:C4:F7:36:8F:90:9D:6E:5D:D8:1B:47:5C:36:F9:B6:EA:50:22:22
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584F5E62B9371A68A77849D16A30
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/3822542a-102e-3de0-b69b-5866a80fb751.roa
Signing time:             Fri 02 Oct 2026 13:00:13 +0000
ROA not before:           Fri 02 Oct 2026 13:00:13 +0000
ROA not after:            Thu 31 Dec 2026 14:00:13 +0000
asID:                     399646
IP address blocks:        23.26.133.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 06 Oct 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:5e:62:b9:37:1a:68:a7:78:49:d1:6a:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Oct  2 13:00:13 2026 GMT
            Not After : Dec 31 14:00:13 2026 GMT
        Subject: CN=55b27763-4f9a-45d9-8157-43df0f70d2a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:e3:37:f8:10:16:c1:8d:bf:34:7b:27:7f:d5:
                    9b:fc:cf:97:b2:10:69:82:12:39:a7:b2:9d:d7:e1:
                    c9:2d:12:8b:d0:70:da:66:50:b6:66:5e:88:0a:1e:
                    ed:af:bc:b8:ba:3b:d2:de:21:b2:7a:ca:fc:ed:24:
                    5c:14:fe:59:b6:7b:1e:3c:e2:ba:ea:bf:e7:2e:b7:
                    0d:52:81:4f:f7:dd:48:77:cf:81:c0:9d:a8:a4:95:
                    c8:b9:96:66:07:bb:c9:36:05:20:59:a6:19:f6:29:
                    13:b7:d9:ea:d7:b1:5e:87:f8:98:3b:e4:f4:81:6b:
                    a9:9a:c7:38:49:bd:33:17:78:ef:6d:b9:08:dd:44:
                    e0:60:24:4e:0b:94:63:62:e9:01:9c:66:e0:c2:1f:
                    6c:2e:cc:15:9a:56:67:85:b0:53:6f:9b:b4:c4:bf:
                    2f:e3:07:b0:42:29:56:53:89:74:f6:09:38:bb:93:
                    de:30:0a:02:c9:a9:72:a8:9f:0a:91:47:e6:7f:b4:
                    90:d7:05:f8:87:b0:01:e9:6e:c2:4b:f7:5b:70:a5:
                    f3:ac:40:84:ac:cd:2d:53:c6:e4:60:62:0f:fa:6e:
                    63:5b:b8:cf:4c:5e:d3:d2:76:00:98:7b:2a:32:19:
                    e5:a8:81:ee:72:7b:a5:65:8f:29:17:cc:8a:87:6c:
                    3e:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:C4:F7:36:8F:90:9D:6E:5D:D8:1B:47:5C:36:F9:B6:EA:50:22:22
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/3822542a-102e-3de0-b69b-5866a80fb751.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.26.133.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:8f:bb:ac:57:cf:27:9b:0f:42:4b:a1:66:c9:e9:93:0c:79:
         80:23:ab:29:12:6e:75:47:1c:fc:6e:df:cd:e1:b6:03:ea:02:
         60:90:47:d1:ce:d9:89:d2:74:1c:c1:d9:62:cb:52:f4:16:b3:
         28:86:bb:8f:6b:6c:fe:f7:03:bc:9d:46:8d:92:bd:c2:15:72:
         65:bd:e7:51:15:dd:73:78:0f:fa:b3:88:ca:0d:c7:47:d3:f8:
         cd:ba:5b:21:0f:0f:3b:05:b3:50:a1:71:82:a7:4c:4e:15:a9:
         55:30:ff:7e:90:b6:d0:de:2d:e8:45:99:cc:f1:42:4a:20:b5:
         93:a0:36:b6:af:49:67:ef:a3:59:3b:39:ef:ff:f0:f0:dc:7e:
         a8:b9:a0:e4:66:88:31:f5:ac:8f:eb:64:bb:97:3c:48:d9:62:
         06:18:ad:50:bf:36:74:6a:c1:6c:8b:97:a4:b0:5b:1b:2a:87:
         47:28:54:6c:c7:2a:e0:e1:96:8e:ed:32:dc:db:c3:7a:46:4d:
         b5:51:6b:d5:28:5d:62:b9:59:7f:2c:c8:b0:bb:a1:ad:87:fc:
         d1:88:af:90:63:25:a9:62:53:76:c2:df:3a:1b:f7:69:49:27:
         e0:ae:05:25:25:d7:df:05:9a:ba:54:b4:b0:09:90:ff:48:72:
         57:a3:ed:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 21:13:51 2026 by rpki-client