Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/eb3370a6-eb49-3fc8-973f-d534b049951a.roa
File:                     eb3370a6-eb49-3fc8-973f-d534b049951a.roa (raw, json)
Hash identifier:          +2lcguUUlFOaeQGuAVSKra5FrUNN0DxFuC6PNuiwCVY=
Subject key identifier:   97:DB:20:1C:F1:FA:C9:38:61:78:4A:E1:85:B9:15:E5:D0:79:B9:9B
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584DF7A5E180679CC30CF3A3AF00
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/eb3370a6-eb49-3fc8-973f-d534b049951a.roa
Signing time:             Wed 27 May 2026 01:00:14 +0000
ROA not before:           Wed 27 May 2026 01:00:14 +0000
ROA not after:            Tue 25 Aug 2026 01:00:14 +0000
asID:                     401152
IP address blocks:        23.26.210.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:f7:a5:e1:80:67:9c:c3:0c:f3:a3:af:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: May 27 01:00:14 2026 GMT
            Not After : Aug 25 01:00:14 2026 GMT
        Subject: CN=c9536d4a-6a1e-4601-b092-7f3107d5e021
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:37:c5:0b:6e:9e:ce:a2:ab:a0:d5:6a:85:49:
                    e6:dd:4c:5b:64:6e:4a:f0:0d:e5:5d:43:6a:18:1e:
                    55:2a:20:6f:7c:1b:c6:b8:4c:63:da:52:f0:b4:ed:
                    b8:04:43:58:44:f5:fe:9b:0f:39:fb:27:02:d2:ee:
                    9c:c3:8a:a6:c1:74:74:f8:2c:1d:a3:e8:15:fe:03:
                    21:84:3c:81:16:9f:5d:6c:1a:5c:5f:82:c0:88:f6:
                    d6:8f:1d:9e:ad:9a:85:f9:0b:40:2c:48:59:8f:3e:
                    b2:3e:e9:1d:9f:00:20:cb:b4:dc:08:2f:cf:4e:19:
                    57:4b:52:19:ee:a3:b1:91:78:8a:5c:4f:44:9a:90:
                    95:65:41:a6:dc:94:98:f7:d2:78:d4:74:33:61:e3:
                    5b:f4:0f:68:38:e9:31:e0:1e:4b:e1:ad:64:10:4b:
                    41:86:c2:ed:56:36:16:23:52:5c:87:6c:6e:65:1f:
                    57:64:7e:63:e9:77:5f:76:4e:df:38:2c:13:f7:98:
                    c4:c3:0a:73:b1:0b:08:f1:bb:da:0e:5a:f8:2d:54:
                    74:19:49:f2:c6:04:86:36:29:fb:73:0f:8f:0d:f2:
                    cc:4c:4c:e1:ce:c1:0d:a0:e8:a6:64:48:78:8e:61:
                    b6:33:dc:a5:f1:11:01:56:ac:db:d8:9c:2c:8d:f1:
                    10:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:DB:20:1C:F1:FA:C9:38:61:78:4A:E1:85:B9:15:E5:D0:79:B9:9B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/eb3370a6-eb49-3fc8-973f-d534b049951a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.26.210.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:64:4f:bf:9f:5e:41:c2:f6:db:70:ae:46:90:fd:25:4d:90:
         e4:ca:2d:22:44:52:6c:15:f0:89:da:37:91:ee:6b:bd:b6:4f:
         69:59:bf:42:50:dc:ba:7e:f2:d3:f9:c2:dc:60:74:22:8a:ae:
         5a:ea:62:a1:95:90:e0:67:72:96:4e:35:82:c1:59:df:ac:df:
         a5:e9:b6:cc:53:81:fe:b2:ca:fc:9c:84:cc:ca:05:7c:e8:8e:
         ed:cd:22:a6:ed:84:13:5b:05:a8:e2:24:69:8f:b0:81:06:48:
         ed:2a:a3:90:64:e0:6e:e2:31:14:b8:ab:ab:45:c4:a2:a7:42:
         a7:17:7d:e1:59:8e:45:d5:c0:af:09:78:93:79:ff:44:6d:eb:
         e3:69:a1:bd:88:8b:99:41:e8:28:35:b0:18:24:6b:d2:a8:06:
         89:17:2a:55:bb:a6:eb:83:63:b3:96:28:92:d6:fb:52:f0:f9:
         a6:4d:c0:ca:43:7c:81:ef:67:a4:ac:f5:31:94:ab:ac:48:c4:
         89:b6:b6:bb:dd:ae:0b:ed:e7:4f:0f:99:03:9d:2d:1e:4a:1f:
         ed:4e:31:ac:f5:6b:13:37:8c:d9:50:68:37:c7:41:cf:4c:f0:
         c9:b8:2d:f0:c9:fa:2e:ea:f7:b4:39:86:da:ab:10:e6:f1:89:
         61:73:54:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 10:32:10 2026 by rpki-client