Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/578c077c-06c4-3014-bd5d-6221fa6c5d47.roa
File:                     578c077c-06c4-3014-bd5d-6221fa6c5d47.roa (raw, json)
Hash identifier:          Oy+PavvY+ADlFlpPE2iMIJ6m6WAJgd5qoJB19Cvy0+o=
Subject key identifier:   3F:3E:E3:AA:D8:60:50:24:5A:E8:5D:AB:17:D6:F1:5B:B3:A9:5B:5D
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584ABBE634845B50DD2C1E2FC300
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/578c077c-06c4-3014-bd5d-6221fa6c5d47.roa
Signing time:             Sun 03 Aug 2025 13:00:40 +0000
ROA not before:           Sun 03 Aug 2025 13:00:40 +0000
ROA not after:            Sat 01 Nov 2025 13:00:40 +0000
asID:                     134351
IP address blocks:        23.26.61.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:bb:e6:34:84:5b:50:dd:2c:1e:2f:c3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Aug  3 13:00:40 2025 GMT
            Not After : Nov  1 13:00:40 2025 GMT
        Subject: CN=c5aa39fd-cab0-447f-8cef-d246da1fed47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:eb:5e:85:9c:34:2f:f2:0a:a2:48:c7:1c:d7:
                    a3:7f:87:14:ae:16:7a:30:24:9b:c5:0a:f9:34:11:
                    65:a9:6d:e2:42:1c:f6:e0:fc:e4:13:b2:8f:82:d3:
                    e2:1a:48:6d:85:21:e3:df:aa:13:c2:45:9f:bb:c0:
                    b6:10:5c:1e:05:07:9b:16:6a:ac:8a:26:27:13:96:
                    32:f4:98:74:2f:13:81:27:65:b3:2f:6f:21:61:9f:
                    01:bb:47:cd:f5:aa:70:47:af:d6:81:80:ae:2d:79:
                    8b:df:9e:c5:9c:c3:8f:aa:12:f6:39:16:a2:5a:5b:
                    c2:6f:eb:85:83:7a:bc:0f:67:06:ce:27:ae:e7:3a:
                    32:93:db:17:1a:aa:39:61:e2:cf:13:2c:48:5e:82:
                    9f:8f:0a:01:d8:64:87:fe:eb:96:0e:cb:fb:c6:b3:
                    cb:d1:49:91:d4:f5:11:7d:d3:58:a8:5e:5d:8d:f0:
                    e0:18:c3:64:ee:95:39:4d:65:8a:16:5c:b3:28:53:
                    59:c2:8a:b2:cd:86:9c:83:10:3d:56:0d:49:5f:0c:
                    d0:0f:f8:9f:0f:79:98:75:c7:95:08:6e:89:20:85:
                    a6:50:71:e1:e5:80:7c:e4:ed:7f:c7:62:f9:6e:fc:
                    f7:66:64:9a:b4:53:24:c8:8a:50:01:d6:af:00:25:
                    b6:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:3E:E3:AA:D8:60:50:24:5A:E8:5D:AB:17:D6:F1:5B:B3:A9:5B:5D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/578c077c-06c4-3014-bd5d-6221fa6c5d47.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.26.61.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:c4:eb:69:40:5b:2a:0a:c2:f7:08:fa:fb:fe:81:6b:d8:c5:
         61:9b:dd:21:ba:8b:3d:78:81:c5:af:6f:9a:e3:68:6d:cd:5e:
         36:d7:df:f3:84:1d:b4:20:8e:2f:21:48:61:68:5c:d7:ba:b3:
         f1:3d:6c:f2:d3:bf:7e:1d:02:31:c8:a8:b4:31:41:52:2d:14:
         97:26:7b:9d:aa:8a:69:90:75:ce:bc:d4:a9:ee:33:8f:30:05:
         4f:b7:dc:22:a5:24:0c:2f:c8:3d:4f:38:34:69:91:25:29:b0:
         41:68:ac:36:66:60:8f:87:c2:5b:d1:1a:65:28:7b:2c:ab:85:
         bf:ff:14:63:29:5e:df:f3:d7:3d:22:18:0f:64:d9:10:19:bf:
         99:0e:1b:f7:08:4e:36:09:f2:3c:97:77:ee:84:38:ae:08:1c:
         6d:84:44:99:fe:be:eb:01:98:02:cc:fc:61:0e:01:5c:4c:bb:
         68:f9:ca:c1:b3:7f:03:27:ad:8c:7e:ef:bd:99:55:45:7c:90:
         4d:10:c6:37:b7:cd:bd:65:dd:71:a5:80:73:5c:29:15:eb:ee:
         c3:a2:b9:1e:e9:eb:d3:b2:51:79:93:a3:3b:f4:a4:be:44:38:
         16:a7:60:e8:ac:b9:48:ab:27:ab:76:54:aa:5d:82:a9:87:e8:
         16:7f:93:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 09:40:24 2025 by rpki-client