Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/0c77060b-9c3f-309e-8fd2-ec9327952200.roa
File:                     0c77060b-9c3f-309e-8fd2-ec9327952200.roa (raw, json)
Hash identifier:          rRwdhHmXLTUcEvviExEEiPzlPMsUtVEWQl79t+w7458=
Subject key identifier:   C8:EC:E5:22:C8:7D:34:AD:9E:52:DB:13:98:2D:31:6E:0E:8D:0A:27
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285846B724FEDF4B84ACB1070F6F80
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/0c77060b-9c3f-309e-8fd2-ec9327952200.roa
Signing time:             Wed 31 Jul 2024 01:00:28 +0000
ROA not before:           Wed 31 Jul 2024 01:00:28 +0000
ROA not after:            Tue 29 Oct 2024 01:00:28 +0000
asID:                     152672
IP address blocks:        23.26.98.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Sep 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:b7:24:fe:df:4b:84:ac:b1:07:0f:6f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Jul 31 01:00:28 2024 GMT
            Not After : Oct 29 01:00:28 2024 GMT
        Subject: CN=49b5a057-1278-4581-8d40-a176fec02078
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:94:33:64:5c:13:f4:2c:89:51:a5:20:f0:6b:
                    08:40:df:9f:f3:1c:c5:c2:30:20:4c:6b:af:8a:01:
                    c5:e0:ff:76:d8:fe:f4:0e:7d:6c:94:b7:a7:89:e3:
                    09:af:74:c0:4d:dc:27:68:3d:58:2c:79:6a:9b:10:
                    7f:6e:69:a6:40:6d:43:2e:f4:a5:9f:33:03:d3:1c:
                    c7:80:04:ea:e1:f7:ff:7d:51:70:10:7b:c7:60:76:
                    c6:01:f5:50:55:c6:14:6a:43:f6:e1:bd:03:dd:b8:
                    c5:70:0a:e0:f9:31:8a:cd:96:04:94:be:91:6b:0e:
                    07:69:db:4d:d7:45:2f:57:43:3c:b6:1c:b5:c9:1f:
                    59:8e:18:86:0f:3f:20:1b:a1:52:9d:bb:74:cf:5f:
                    d1:1a:2b:84:a9:75:15:5c:f6:dc:6e:1e:67:d9:82:
                    41:e1:16:ac:10:3f:5f:aa:a8:e0:38:54:c6:92:b9:
                    64:46:cc:35:77:79:5e:e1:02:7b:17:45:af:b2:52:
                    db:7b:69:3f:74:da:5d:64:68:f3:ef:20:17:30:e4:
                    d8:7f:9e:35:45:c3:75:44:e7:f7:0e:a9:d4:3f:e4:
                    5b:76:2a:ad:9c:c4:2d:75:f0:73:6f:35:1b:f7:1f:
                    4c:96:10:95:76:66:66:7c:af:a3:03:f9:6a:52:6c:
                    5a:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:EC:E5:22:C8:7D:34:AD:9E:52:DB:13:98:2D:31:6E:0E:8D:0A:27
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/0c77060b-9c3f-309e-8fd2-ec9327952200.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.26.98.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a7:71:f0:91:94:ae:56:2e:5f:bb:a9:5b:7f:36:38:fa:74:c8:
         39:83:1f:e8:b4:79:5b:ae:00:fc:22:3e:8a:c6:a7:12:e4:1d:
         94:40:4d:3f:9d:06:65:f9:bd:d7:28:8d:9f:89:50:f2:9a:8c:
         e0:e3:f2:4b:00:f0:db:68:9d:ac:ca:f2:32:38:ce:bc:7e:a3:
         97:1e:c1:ad:c8:6b:41:5a:96:dd:d1:fe:b4:b5:1c:64:5c:ec:
         24:e7:8a:2f:d3:ac:46:b9:f2:e5:0d:54:c8:ad:16:45:ef:c2:
         2a:f1:33:f1:aa:fd:8f:84:19:c9:f2:08:40:f0:86:6a:b7:f4:
         61:45:84:db:89:0a:24:57:81:72:47:38:77:92:f1:11:98:a4:
         5d:18:7b:67:80:14:c3:32:55:af:6e:ac:71:62:08:13:64:9c:
         ef:64:9e:61:4f:6c:36:bf:d8:18:7d:8d:4e:3a:25:7e:68:14:
         76:28:ad:3f:bf:80:56:7d:ff:bd:08:52:bd:14:a9:b5:13:30:
         7b:ad:52:10:d2:ab:5c:02:60:c3:26:f6:66:de:29:91:fb:8c:
         f4:31:aa:e1:07:bb:b0:86:c4:57:5b:8d:17:a9:06:74:cd:92:
         00:20:fb:f2:b7:3a:c2:a1:c4:66:3d:b6:21:24:27:19:07:60:
         3e:18:f6:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 06:38:56 2024 by rpki-client on console-ams.rpki-client.org