Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/96975085-0359-3a71-8c64-433eb59cd882.roa
File:                     96975085-0359-3a71-8c64-433eb59cd882.roa (raw, json)
Hash identifier:          E9bLxVcPzGiae+F9BC2r3hSyu7atgzERLVAEUZ+56t8=
Subject key identifier:   CB:E2:9F:71:5E:3C:EB:71:B7:2D:37:9D:71:E1:AA:8C:12:B7:FA:2C
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584D04E2321787A0D6ABB7113B80
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/96975085-0359-3a71-8c64-433eb59cd882.roa
Signing time:             Sun 01 Mar 2026 02:00:31 +0000
ROA not before:           Sun 01 Mar 2026 02:00:31 +0000
ROA not after:            Sat 30 May 2026 01:00:31 +0000
asID:                     10753
IP address blocks:        23.26.239.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:04:e2:32:17:87:a0:d6:ab:b7:11:3b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Mar  1 02:00:31 2026 GMT
            Not After : May 30 01:00:31 2026 GMT
        Subject: CN=cb3bec9b-1c22-4c8f-9bd2-95c43cae80e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:bb:7b:26:a8:fb:bc:f7:8a:fd:7f:e8:c8:51:
                    03:eb:65:76:54:7f:c5:0f:d2:72:ba:1e:d6:c5:96:
                    36:7a:4e:7a:15:a9:b0:cb:0b:2b:a1:ea:e9:8c:08:
                    f5:8d:8f:1f:73:03:8c:c4:34:15:92:8b:e1:e9:9d:
                    33:eb:f5:4c:12:92:28:18:f7:11:95:d1:22:85:95:
                    f8:e1:9e:43:2e:19:aa:aa:41:44:f6:15:39:9f:dd:
                    59:0b:72:f8:17:f7:a2:5e:5c:fc:08:3b:36:2d:55:
                    c8:fd:0c:5e:21:0d:f6:fc:8b:1e:e9:07:fa:3b:5e:
                    cb:13:ca:1b:56:65:34:72:34:c4:69:41:90:fc:25:
                    e7:73:4c:3e:4b:9a:45:59:c1:39:d9:cc:d7:00:9e:
                    31:bb:17:01:24:17:a3:66:f3:b8:d2:f8:8e:b0:37:
                    0b:90:14:aa:df:0a:fe:a4:48:dc:b8:12:00:14:38:
                    59:ca:7e:22:64:09:a1:7b:19:aa:25:a2:a7:e6:85:
                    2a:95:9e:62:43:bd:ad:a3:51:64:5b:84:bf:92:59:
                    55:33:92:49:0c:50:b4:b2:fa:3c:a4:c3:58:ac:5e:
                    7a:32:56:8b:ab:e8:31:58:f3:57:97:a8:9a:3a:de:
                    69:2c:4d:ee:3b:7f:cf:d3:de:d2:ca:56:0c:a4:5b:
                    46:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:E2:9F:71:5E:3C:EB:71:B7:2D:37:9D:71:E1:AA:8C:12:B7:FA:2C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/96975085-0359-3a71-8c64-433eb59cd882.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.26.239.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:97:be:13:85:e3:75:9a:9b:2c:91:f4:71:72:63:53:75:f9:
         2c:0f:8e:80:d6:ec:d1:57:f5:31:37:93:52:82:09:35:51:43:
         96:ab:a9:01:6f:7e:6d:c9:f4:36:56:8e:f0:a3:0b:c5:c5:ff:
         0e:95:a3:56:0e:6d:59:24:ff:c3:22:4e:7e:b4:79:f0:8a:59:
         0b:28:89:0d:de:ed:a8:18:08:13:4c:6b:d0:66:57:e8:03:12:
         52:65:65:06:79:86:0b:4b:1a:38:b4:cc:45:15:e2:ac:da:8f:
         c9:77:a2:13:c1:67:3a:61:47:3a:a2:4b:3d:e6:49:62:9d:02:
         12:8d:08:20:4d:57:cb:9d:39:17:28:96:a3:7e:d3:63:f3:b6:
         0f:ff:94:83:04:4a:ab:82:a3:0f:75:a7:69:12:4e:5d:0c:99:
         8b:f1:3e:14:62:7c:a9:f4:57:26:4a:5b:46:95:4c:d3:8d:e0:
         09:93:25:a5:e8:5e:bd:d4:8b:a5:32:3a:4d:6e:cb:78:54:d3:
         3a:33:d5:a2:55:75:2c:33:3b:0c:59:76:bd:25:73:5b:38:5d:
         20:d0:05:23:ac:aa:67:12:e6:e9:13:c5:ef:ae:1c:a4:07:27:
         b9:ef:7f:ea:e6:52:ec:bd:b9:0d:2a:78:53:ec:3f:b8:84:a3:
         1d:1a:e7:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:54:03 2026 by rpki-client