Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/6f7294df-f688-35b8-a0d2-852a30d35b92.roa
File:                     6f7294df-f688-35b8-a0d2-852a30d35b92.roa (raw, json)
Hash identifier:          zAzxjm7g3tnagf4yq0Vspdy9JrkjN5p0diNmoFFirEQ=
Subject key identifier:   D4:41:D4:35:73:33:DB:7F:14:BB:8D:62:86:EB:5D:F4:60:D3:05:F0
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584E9EB018F587387EC555867320
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/6f7294df-f688-35b8-a0d2-852a30d35b92.roa
Signing time:             Sat 25 Jul 2026 21:00:12 +0000
ROA not before:           Sat 25 Jul 2026 21:00:12 +0000
ROA not after:            Fri 23 Oct 2026 21:00:12 +0000
asID:                     200173
IP address blocks:        23.26.10.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:9e:b0:18:f5:87:38:7e:c5:55:86:73:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Jul 25 21:00:12 2026 GMT
            Not After : Oct 23 21:00:12 2026 GMT
        Subject: CN=ffac21f4-860e-4b29-8a2a-ddb37299485c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:4d:b0:8f:95:a7:a6:9c:5e:7f:4e:20:09:b8:
                    75:64:7b:2d:f5:6e:40:24:88:fd:0f:12:a7:c8:e3:
                    98:59:7f:1b:42:f9:f7:89:40:9b:ae:20:f1:fe:d4:
                    4c:2a:d2:e9:f9:65:41:d1:a9:0c:d8:9d:5a:6f:10:
                    35:59:ae:24:61:7a:b7:86:aa:ba:41:31:a8:dc:de:
                    7f:83:22:56:20:cb:ca:a0:71:5e:8f:80:07:e3:e1:
                    9a:30:36:4c:ef:05:38:36:ad:8d:de:84:81:79:3f:
                    c7:4c:e7:02:ef:56:73:bb:f4:bd:93:01:b5:e7:c3:
                    cb:8e:1f:02:75:bd:9e:8c:5a:6f:ed:a8:f6:c8:bb:
                    80:3f:71:a8:53:0f:ab:6a:bc:37:80:98:69:12:4b:
                    b9:20:11:45:cc:9e:d3:9e:e9:6a:8a:f4:52:d5:9f:
                    17:8c:ae:17:91:37:30:39:e6:a8:84:dc:57:59:95:
                    2a:1f:e8:51:1f:a6:b1:a4:f5:56:a2:79:fc:b4:10:
                    6d:76:da:e5:7d:7c:bd:ad:af:19:8c:a1:4b:73:26:
                    9e:8a:76:17:af:38:cc:23:7c:34:32:27:4a:fb:62:
                    ab:f6:c3:9e:c0:98:32:56:3f:d5:a3:6f:68:ba:a9:
                    b7:84:f6:1b:e5:f6:93:b4:15:08:a9:4a:3e:0c:b9:
                    2a:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:41:D4:35:73:33:DB:7F:14:BB:8D:62:86:EB:5D:F4:60:D3:05:F0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/6f7294df-f688-35b8-a0d2-852a30d35b92.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.26.10.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:9c:e8:35:f1:dd:b2:44:b1:cc:b7:87:e3:0a:ff:c7:2e:8c:
         0c:fe:e5:7e:36:cb:d0:9e:55:67:c1:b4:ab:70:df:08:0a:39:
         d7:71:17:18:fe:2b:dc:7e:e0:b8:ed:c1:a7:b0:0b:71:20:41:
         c9:69:c7:46:cc:b3:43:4f:2a:4f:ac:b1:46:3b:4f:de:f6:7a:
         23:9d:39:f6:98:aa:07:28:b2:11:97:83:b4:e5:f2:81:9b:64:
         fe:2e:65:a1:4a:bd:9c:f9:f2:c5:91:e3:ed:88:ee:0d:82:f1:
         fd:c5:5e:a9:a9:af:87:6d:3c:d6:85:49:3d:3d:f2:26:4c:e5:
         fa:61:3b:bb:e3:2d:48:20:95:1d:2a:71:28:d1:36:ea:96:4a:
         9f:eb:cb:23:2b:c8:d8:b4:fe:eb:4b:99:b9:f0:f3:13:cb:6a:
         ef:6e:68:43:b9:40:99:fb:c2:6d:49:64:60:5e:b6:35:29:7a:
         ca:c1:d0:be:e6:90:a4:f7:35:dc:c7:37:77:a0:c4:a7:b0:dc:
         d4:b8:6f:de:93:a4:4b:49:5b:ae:58:e5:e0:50:e4:04:a0:37:
         39:82:ef:58:4a:32:03:fc:56:a1:eb:e7:84:15:20:52:ec:bb:
         a1:ce:cb:92:01:36:a8:cc:a7:1b:ec:bc:cc:e4:5d:42:54:6d:
         80:23:6d:9f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6esBj1hzh+xVWGcyAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTI2MDcyNTIxMDAxMloXDTI2MTAyMzIxMDAxMlowLzEtMCsGA1UEAxMk
ZmZhYzIxZjQtODYwZS00YjI5LThhMmEtZGRiMzcyOTk0ODVjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAok2wj5Wnppxef04gCbh1ZHst9W5AJIj9DxKn
yOOYWX8bQvn3iUCbriDx/tRMKtLp+WVB0akM2J1abxA1Wa4kYXq3hqq6QTGo3N5/
gyJWIMvKoHFej4AH4+GaMDZM7wU4Nq2N3oSBeT/HTOcC71Zzu/S9kwG158PLjh8C
db2ejFpv7aj2yLuAP3GoUw+rarw3gJhpEku5IBFFzJ7TnulqivRS1Z8XjK4XkTcw
OeaohNxXWZUqH+hRH6axpPVWonn8tBBtdtrlfXy9ra8ZjKFLcyaeinYXrzjMI3w0
MidK+2Kr9sOewJgyVj/Vo29ouqm3hPYb5faTtBUIqUo+DLkqmwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNRB1DVzM9t/FLuNYobrXfRg0wXwMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvNmY3Mjk0ZGYtZjY4OC0z
NWI4LWEwZDItODUyYTMwZDM1YjkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFxoKMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEec6DXx3bJEscy3h+MK/8cujAz+5X42y9CeVWfBtKtw3wgKOddxFxj+
K9x+4LjtwaewC3EgQclpx0bMs0NPKk+ssUY7T972eiOdOfaYqgcoshGXg7Tl8oGb
ZP4uZaFKvZz58sWR4+2I7g2C8f3FXqmpr4dtPNaFST098iZM5fphO7vjLUgglR0q
cSjRNuqWSp/ryyMryNi0/utLmbnw8xPLau9uaEO5QJn7wm1JZGBetjUpesrB0L7m
kKT3NdzHN3egxKew3NS4b96TpEtJW65Y5eBQ5ASgNzmC71hKMgP8VqHr54QVIFLs
u6HOy5IBNqjMpxvsvMzkXUJUbYAjbZ8=
-----END CERTIFICATE-----
Generated at Wed Jul 29 01:51:53 2026 by rpki-client