Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/0ceb9730-efcf-3ba3-b7d6-5a2073cf543c.roa
File:                     0ceb9730-efcf-3ba3-b7d6-5a2073cf543c.roa (raw, json)
Hash identifier:          0k9Bgkx/ynaZQoVPwCfBUTa1DAzl0IjKA/LFwB9hK+w=
Subject key identifier:   8D:1A:D4:B1:55:5D:2B:F3:7D:FB:03:E3:C7:6C:05:CA:8C:B6:D4:42
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285847B5314FE3D4C1983D5B480900
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/0ceb9730-efcf-3ba3-b7d6-5a2073cf543c.roa
Signing time:             Wed 30 Oct 2024 01:00:32 +0000
ROA not before:           Wed 30 Oct 2024 01:00:32 +0000
ROA not after:            Tue 28 Jan 2025 02:00:32 +0000
asID:                     2914
IP address blocks:        23.26.4.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:b5:31:4f:e3:d4:c1:98:3d:5b:48:09:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Oct 30 01:00:32 2024 GMT
            Not After : Jan 28 02:00:32 2025 GMT
        Subject: CN=b998a292-659d-456b-bb29-1ccaec79cb24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:91:d5:a9:21:07:13:fe:06:f6:f7:7e:c1:43:
                    5b:24:ce:8f:0f:79:1d:75:d1:ff:ea:95:f6:c4:48:
                    6d:19:72:68:02:d5:d6:79:95:bd:7e:0b:75:67:2c:
                    da:1b:da:3e:0b:92:7b:24:b5:6c:ec:03:17:9e:f8:
                    f0:b2:4f:44:39:76:c4:c3:f8:3e:30:76:93:1e:07:
                    fd:b0:99:2e:8b:bc:fb:42:30:a9:5e:6a:19:5c:7f:
                    10:40:f6:78:d0:78:bf:36:29:82:1c:d8:79:fd:da:
                    59:ba:c6:db:63:be:bf:37:74:7f:42:93:e6:90:d9:
                    f0:c8:90:3f:91:a9:52:b6:d1:09:47:3f:1e:a0:eb:
                    6c:a4:8a:da:4a:51:f2:ee:b7:99:39:39:ad:7c:4b:
                    08:c4:27:d7:76:e3:eb:0a:82:05:22:96:80:be:68:
                    40:3a:ab:1a:b5:09:37:2e:89:12:6e:12:29:0a:97:
                    bc:86:e0:e2:e5:a0:23:11:03:87:e2:3f:57:45:7f:
                    e8:f5:bf:4e:10:dc:76:0c:b8:3a:61:eb:60:bb:f5:
                    ab:42:d9:61:5a:d0:34:45:a8:1a:f3:fd:8f:dd:80:
                    9f:1e:a0:6e:e1:36:77:74:31:0b:61:f6:69:8b:82:
                    e9:8b:f3:ec:50:ce:4d:47:e4:86:a5:23:88:6e:c9:
                    70:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:1A:D4:B1:55:5D:2B:F3:7D:FB:03:E3:C7:6C:05:CA:8C:B6:D4:42
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/0ceb9730-efcf-3ba3-b7d6-5a2073cf543c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.26.4.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:d8:4d:8e:09:ac:de:a3:5f:2d:91:a4:bc:be:05:cc:27:23:
         0d:e9:90:c1:d8:e5:f1:60:91:f9:26:4d:8c:a9:e5:76:a3:d0:
         5e:2a:7a:ea:95:9d:66:9f:b7:62:9a:36:00:df:d5:74:1b:ae:
         dc:1d:6c:df:4f:5a:e6:25:5f:a5:95:fb:c9:12:55:bc:f4:28:
         3f:4f:fb:66:ab:f6:1f:d4:2b:5d:7b:1a:66:32:a4:9b:43:56:
         ba:35:93:61:0e:d2:24:29:2c:7a:73:8b:18:af:14:48:b9:33:
         de:fd:e8:2c:24:c8:f0:8b:5f:72:8c:bd:64:42:07:11:8f:da:
         c1:33:a3:6f:2a:13:75:ab:b7:f5:d7:23:1c:73:0b:84:15:5f:
         4b:0c:0c:33:cc:cf:d5:69:19:36:bc:bb:2e:01:a9:29:d8:45:
         ba:fe:41:5f:7c:26:0a:a4:c4:3a:9e:2f:44:2a:76:92:33:e0:
         c2:1d:f2:6a:7c:63:da:b0:6d:a0:fe:3b:67:b3:90:55:b3:e2:
         9f:de:d5:66:0d:fe:10:38:8a:2b:5b:c1:1e:3e:e0:76:a4:43:
         3a:01:96:e0:c5:dd:35:da:82:0e:2d:9d:fe:82:7e:27:21:dd:
         26:36:a6:bf:06:80:5a:c6:e3:17:c8:3f:2e:cb:01:84:b0:e2:
         db:3d:e1:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 19:15:31 2024 by rpki-client on console-fra.rpki-client.org