Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/f2cfebae-606c-34c4-aeb0-26d8f44e6f2a.roa
File:                     f2cfebae-606c-34c4-aeb0-26d8f44e6f2a.roa (raw, json)
Hash identifier:          XW51BtLPiPrBUBse6rvAJ2XNLpxkJF3Q4udnCb+ShVw=
Subject key identifier:   F0:9C:FF:5F:7D:1C:F2:7C:0C:D9:9D:75:31:E4:CD:C7:6F:69:A3:34
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584E0A7010344A716670E42DE9C0
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/f2cfebae-606c-34c4-aeb0-26d8f44e6f2a.roa
Signing time:             Tue 02 Jun 2026 18:32:03 +0000
ROA not before:           Tue 02 Jun 2026 18:32:03 +0000
ROA not after:            Mon 31 Aug 2026 18:32:03 +0000
asID:                     6079
IP address blocks:        23.26.219.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:0a:70:10:34:4a:71:66:70:e4:2d:e9:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Jun  2 18:32:03 2026 GMT
            Not After : Aug 31 18:32:03 2026 GMT
        Subject: CN=50373a1d-3f60-4ad0-9e58-1b5e07543ef3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:e0:cb:c1:0a:9b:1c:30:ba:2e:b7:b5:02:34:
                    47:6a:cf:42:dc:00:51:47:f3:28:ef:3b:75:f8:53:
                    b9:8a:fb:0d:d9:c0:6e:2c:07:ef:04:d5:6a:89:80:
                    d1:8f:00:cf:64:3e:b9:ed:a2:f6:9a:02:48:c4:2d:
                    ed:ba:cf:de:7c:ce:1f:3b:dd:78:09:f8:40:0f:41:
                    47:36:89:b9:3d:e3:13:b0:13:88:b0:ad:d0:f7:07:
                    11:1a:96:ee:04:62:1a:e0:31:66:61:a2:fc:ae:e8:
                    9c:e1:c4:64:79:e9:cf:42:74:ac:fd:bf:9b:40:58:
                    10:24:35:bc:f7:74:53:9a:04:e0:aa:8c:96:e6:f2:
                    cd:b6:8a:3c:c5:84:1a:6e:54:96:63:55:00:1c:97:
                    66:2f:97:58:f0:53:58:f7:c1:bf:99:13:a5:f0:49:
                    eb:f5:7e:7a:d9:18:7a:d3:00:02:81:5d:9e:08:1b:
                    74:4b:b1:4f:b7:16:77:79:66:97:79:62:8a:ed:88:
                    a6:8f:aa:27:6a:59:05:15:15:b8:f1:9e:19:73:61:
                    ab:61:8d:7f:2d:1b:4a:f0:0e:5d:0b:07:79:ce:b7:
                    68:67:dd:8a:e5:07:63:3b:7a:9b:7e:be:a1:a2:c0:
                    39:ea:dd:bd:53:3c:ce:19:bb:ba:64:f6:ba:7a:85:
                    40:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:9C:FF:5F:7D:1C:F2:7C:0C:D9:9D:75:31:E4:CD:C7:6F:69:A3:34
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/f2cfebae-606c-34c4-aeb0-26d8f44e6f2a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.26.219.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ac:da:aa:c4:02:30:43:fe:e5:b6:b2:04:dc:4d:77:db:7d:4e:
         84:28:51:a4:c4:07:e8:30:a2:9c:28:32:ff:0c:af:f8:b3:ff:
         1d:58:c5:48:c0:61:e8:3c:cc:a5:73:dd:a4:4a:c3:fc:28:a7:
         07:0d:f1:f7:41:84:19:dc:5d:8b:79:68:49:1c:ae:4b:62:4f:
         93:4e:ff:3d:74:d1:5e:fd:f8:21:88:2e:bb:85:ce:b6:c8:b7:
         8a:fd:99:7e:15:51:18:2d:b3:12:08:34:3c:aa:17:3c:78:72:
         2f:0d:21:0c:72:90:09:63:e5:b9:2f:8a:9c:08:78:36:43:36:
         ed:f1:41:ff:77:d8:4a:7b:77:c1:c8:f7:9a:00:04:a2:85:70:
         85:3d:22:23:d1:29:09:2d:db:71:89:52:b6:e1:35:d6:3f:bb:
         e5:0f:15:8e:d5:2b:63:51:18:45:ee:b8:be:88:18:de:a3:52:
         d8:1f:30:de:38:e1:a2:29:3b:21:2b:e5:af:21:d1:39:79:02:
         be:e1:e8:90:dd:2b:ad:a6:b9:41:1b:95:53:96:bc:fe:07:c3:
         32:73:05:ef:83:5a:83:c2:86:e1:f6:26:b0:3b:7b:de:b1:70:
         c7:98:c8:f4:c1:29:61:e8:02:a7:c3:27:9b:ba:8e:64:fd:3f:
         16:60:46:5a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4KcBA0SnFmcOQt6cAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTI2MDYwMjE4MzIwM1oXDTI2MDgzMTE4MzIwM1owLzEtMCsGA1UEAxMk
NTAzNzNhMWQtM2Y2MC00YWQwLTllNTgtMWI1ZTA3NTQzZWYzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh+DLwQqbHDC6Lre1AjRHas9C3ABRR/Mo7zt1
+FO5ivsN2cBuLAfvBNVqiYDRjwDPZD657aL2mgJIxC3tus/efM4fO914CfhAD0FH
Nom5PeMTsBOIsK3Q9wcRGpbuBGIa4DFmYaL8ruic4cRkeenPQnSs/b+bQFgQJDW8
93RTmgTgqoyW5vLNtoo8xYQablSWY1UAHJdmL5dY8FNY98G/mROl8Enr9X562Rh6
0wACgV2eCBt0S7FPtxZ3eWaXeWKK7Yimj6onalkFFRW48Z4Zc2GrYY1/LRtK8A5d
Cwd5zrdoZ92K5QdjO3qbfr6hosA56t29UzzOGbu6ZPa6eoVAvQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPCc/199HPJ8DNmddTHkzcdvaaM0MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvZjJjZmViYWUtNjA2Yy0z
NGM0LWFlYjAtMjZkOGY0NGU2ZjJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFxrbMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKzaqsQCMEP+5bayBNxNd9t9ToQoUaTEB+gwopwoMv8Mr/iz/x1YxUjA
Yeg8zKVz3aRKw/wopwcN8fdBhBncXYt5aEkcrktiT5NO/z100V79+CGILruFzrbI
t4r9mX4VURgtsxIINDyqFzx4ci8NIQxykAlj5bkvipwIeDZDNu3xQf932Ep7d8HI
95oABKKFcIU9IiPRKQkt23GJUrbhNdY/u+UPFY7VK2NRGEXuuL6IGN6jUtgfMN44
4aIpOyEr5a8h0Tl5Ar7h6JDdK62muUEblVOWvP4HwzJzBe+DWoPChuH2JrA7e96x
cMeYyPTBKWHoAqfDJ5u6jmT9PxZgRlo=
-----END CERTIFICATE-----
Generated at Sat Jun 13 07:17:40 2026 by rpki-client