Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/939bc912-aa1b-36f1-8654-f501c58ccf2e.roa
File:                     939bc912-aa1b-36f1-8654-f501c58ccf2e.roa (raw, json)
Hash identifier:          O0Pme6E90kJzTwJjYuPHw0kqUA674OAFhsiJC11vzBc=
Subject key identifier:   0B:08:75:48:FB:80:B2:12:F1:9F:83:62:41:6D:E6:E3:AF:08:F1:2F
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285849D80537ADA23677ECD23A6D80
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/939bc912-aa1b-36f1-8654-f501c58ccf2e.roa
Signing time:             Tue 13 May 2025 21:58:56 +0000
ROA not before:           Tue 13 May 2025 21:58:56 +0000
ROA not after:            Mon 11 Aug 2025 21:58:56 +0000
asID:                     7385
IP address blocks:        23.26.71.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d8:05:37:ad:a2:36:77:ec:d2:3a:6d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: May 13 21:58:56 2025 GMT
            Not After : Aug 11 21:58:56 2025 GMT
        Subject: CN=318f9fd6-ad63-4410-a379-41ad221f344c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:76:ce:5f:60:ad:5d:92:9a:d0:81:4d:7e:a6:
                    ce:48:bb:74:49:80:f1:c1:ba:d3:ba:f4:21:38:cd:
                    48:67:67:8b:1a:3c:43:74:9c:64:71:b1:3b:d6:ca:
                    f7:2b:d6:2d:74:c0:34:af:4b:02:83:be:a2:88:23:
                    1a:5a:f3:f6:cd:0a:0e:53:59:60:d9:cb:05:16:8d:
                    18:71:d3:f1:97:fb:3f:11:9a:2c:0c:e1:0b:7f:7c:
                    54:9c:a6:6a:63:44:5c:2b:d7:89:56:aa:e8:79:11:
                    29:29:02:10:f6:51:35:34:b4:92:8e:90:ce:3f:bd:
                    64:98:3a:95:9c:8f:ac:ba:25:15:ed:bc:c7:99:40:
                    74:bc:66:9d:9d:ed:e3:e0:86:7d:9e:37:5e:b2:b3:
                    20:6b:e2:0c:22:69:6b:2f:11:d2:6c:c5:71:df:3d:
                    b2:a5:35:41:1e:28:ac:2e:c8:78:6d:33:d6:8b:4a:
                    31:6a:3a:94:4c:8e:c3:c0:f2:c8:5d:60:0c:ba:af:
                    f7:46:56:f9:91:c8:9e:c6:37:66:a8:f3:d3:f2:4a:
                    59:c5:f6:8d:28:04:4f:c3:a5:d2:e8:96:ca:ad:b1:
                    c4:d1:97:d1:8b:cd:6f:f4:80:bc:58:2f:a1:96:bc:
                    fb:f9:39:2f:32:45:7a:48:03:fd:36:1e:dc:5d:6c:
                    00:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:08:75:48:FB:80:B2:12:F1:9F:83:62:41:6D:E6:E3:AF:08:F1:2F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/939bc912-aa1b-36f1-8654-f501c58ccf2e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.26.71.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         95:b0:c2:43:a7:26:76:d6:dc:2b:cc:b2:4d:6c:d9:c8:95:44:
         ac:1e:da:5c:5e:99:94:d4:a9:ba:f8:c0:de:ba:d1:7b:8e:4e:
         00:aa:ff:96:96:b6:1c:ab:0c:10:e9:ac:f1:1c:ef:b5:dc:8c:
         54:5c:b6:f0:fb:7a:95:78:3d:11:12:9f:37:99:31:ac:84:f8:
         57:8b:8e:a7:e8:a6:9f:c9:99:7c:f4:3e:bc:6b:32:9b:aa:cd:
         a0:d0:54:86:84:57:f0:50:6e:25:b9:6f:56:b1:0d:0d:11:e4:
         e4:aa:3e:f2:f9:63:25:5e:d0:46:8f:b9:18:20:02:f5:09:7a:
         fb:ad:a9:47:ea:c2:2b:4b:b1:9b:e1:56:e9:52:46:03:f5:9c:
         f0:4d:df:92:e8:4a:88:1f:4f:5c:98:fc:fd:d6:7c:05:33:82:
         f6:25:b3:32:0e:93:e2:67:56:2d:83:85:4c:28:d3:09:c6:aa:
         9a:cc:5f:f9:d6:40:5c:4a:da:f1:6c:df:9f:b4:0b:f7:bf:14:
         56:98:44:65:5b:e2:de:d5:07:d4:a1:41:4b:fd:75:09:0b:55:
         e8:b1:0d:79:25:ba:c8:e4:97:3b:9f:5d:b1:b8:63:8a:5e:4e:
         ed:55:31:7a:bd:ec:27:97:00:da:c5:3b:ff:15:0d:8c:53:de:
         9e:3d:21:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 07:48:00 2025 by rpki-client