Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/cbd815af-8b73-3108-aa2d-1cf1df845bf7.roa
File:                     cbd815af-8b73-3108-aa2d-1cf1df845bf7.roa (raw, json)
Hash identifier:          ljq1zE94LTA3IN4lQZplx1CdM4pf1TpZF/vtD6HK7Ac=
Subject key identifier:   55:FD:10:A1:67:9B:64:17:48:E1:C2:55:9F:08:D5:D8:F5:D0:D6:35
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584EC63C72221C4BAF5279BDFA00
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/cbd815af-8b73-3108-aa2d-1cf1df845bf7.roa
Signing time:             Sun 09 Aug 2026 01:00:12 +0000
ROA not before:           Sun 09 Aug 2026 01:00:12 +0000
ROA not after:            Sat 07 Nov 2026 02:00:12 +0000
asID:                     11798
IP address blocks:        23.26.64.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c6:3c:72:22:1c:4b:af:52:79:bd:fa:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Aug  9 01:00:12 2026 GMT
            Not After : Nov  7 02:00:12 2026 GMT
        Subject: CN=5c558360-3887-4ca8-9a66-a21048160b57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:c9:a4:fc:f6:3c:f7:d4:ff:08:32:e9:b3:45:
                    13:b1:ca:f6:7d:94:96:5b:0a:69:b4:a3:83:73:7b:
                    8c:e1:53:a5:b1:5a:19:95:e6:cc:6b:cb:5b:02:5b:
                    02:fe:d2:1f:5a:85:10:f3:f9:15:bc:c6:b7:28:52:
                    10:70:98:92:84:55:dd:25:7c:d9:e5:ab:47:4f:8a:
                    13:54:f3:dc:16:8c:e7:d9:56:15:de:e8:ad:39:1a:
                    91:78:c3:06:c4:6f:4f:a3:85:c4:9b:c0:91:3f:fc:
                    4c:aa:83:4d:ba:df:c1:7d:32:1f:09:af:f6:0c:c5:
                    76:d2:ac:11:11:f6:47:ff:4f:dc:91:a7:f5:b5:54:
                    46:9c:c9:cf:47:0c:47:e8:5a:fb:b7:15:4b:0a:7f:
                    fb:07:42:c5:79:54:b3:4c:2c:16:0f:10:76:de:0a:
                    6b:7d:06:5d:49:63:01:95:d0:b7:c3:8f:00:81:54:
                    97:c1:e3:ed:d8:38:42:3c:56:9b:3c:04:e4:f9:01:
                    d7:cc:a5:37:84:83:92:0f:db:82:bb:14:e4:e8:ec:
                    e6:5c:c0:e4:bf:7c:4a:25:19:d0:72:85:a2:eb:af:
                    7b:ad:07:5d:03:a8:f0:80:88:8d:45:4e:e8:c2:e3:
                    0f:72:20:3e:29:9d:d0:c5:d5:c0:b5:47:33:7c:2f:
                    72:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:FD:10:A1:67:9B:64:17:48:E1:C2:55:9F:08:D5:D8:F5:D0:D6:35
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/cbd815af-8b73-3108-aa2d-1cf1df845bf7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.26.64.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a1:9f:cd:70:01:0e:05:e9:9b:49:2d:d9:99:92:5d:e4:e4:2f:
         b1:fb:42:e0:01:61:e0:f4:00:7f:98:c0:cf:ff:7a:3f:5d:34:
         08:de:fd:22:91:b9:e5:9e:de:b0:6a:9b:a7:32:7d:0e:b2:36:
         3b:ac:03:5c:c8:46:bf:c5:b2:76:44:2d:c5:4b:df:45:5d:44:
         4e:77:99:3a:96:c3:ba:eb:93:d1:f7:42:8e:c1:e6:a4:33:24:
         6c:79:0c:46:1f:6a:d0:5d:49:be:58:d8:ed:e8:ee:a0:9c:cd:
         17:30:14:81:ae:4c:c6:23:d3:a6:67:bf:48:2d:69:b5:ec:65:
         6c:2f:b6:42:22:b4:a1:2d:de:66:b6:fe:44:d8:64:06:7c:d2:
         c0:b7:1a:78:71:a7:4f:2b:44:d4:35:5a:87:f6:dd:c8:28:03:
         d3:f2:da:d7:22:1d:68:85:07:20:ba:a9:a3:b4:1f:9f:c2:f4:
         ea:dd:55:22:b1:bc:01:8f:df:13:08:6c:7d:03:e8:8e:5c:c1:
         9b:5e:5d:e3:6e:f3:4e:64:d9:52:90:67:8d:0e:94:84:80:24:
         1c:f7:5e:e8:31:3a:11:f8:90:98:58:2a:e6:a6:fa:0f:d4:06:
         7d:88:83:13:23:6a:b5:18:48:bf:b1:c4:9a:a8:57:14:c7:60:
         53:11:65:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 00:58:40 2026 by rpki-client