Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/18f26c8f-3cab-3e5f-b965-910653d41ba0.roa
File:                     18f26c8f-3cab-3e5f-b965-910653d41ba0.roa (raw, json)
Hash identifier:          9/fHsvLYFhnoKUj5fIl0V1bYOKcykCs8/+qhrLaUFWs=
Subject key identifier:   35:99:A1:AF:9E:16:6C:59:DE:05:18:36:90:EE:86:D3:D5:1D:32:E0
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285845B7B3818C39939250DCC41A80
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/18f26c8f-3cab-3e5f-b965-910653d41ba0.roa
Signing time:             Tue 30 Apr 2024 13:00:34 +0000
ROA not before:           Tue 30 Apr 2024 13:00:34 +0000
ROA not after:            Mon 29 Jul 2024 13:00:34 +0000
asID:                     212238
IP address blocks:        23.26.71.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:b7:b3:81:8c:39:93:92:50:dc:c4:1a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Apr 30 13:00:34 2024 GMT
            Not After : Jul 29 13:00:34 2024 GMT
        Subject: CN=54840bc6-edcf-45f6-9f67-defe74b5f378
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:7a:a4:e1:a9:14:9c:09:fb:64:22:5c:48:ca:
                    e6:11:79:8e:3c:72:6f:d7:8b:2d:9a:36:77:fe:a4:
                    c3:cf:ce:33:24:e6:16:23:f4:5a:f9:ac:20:4a:c1:
                    2f:dc:e8:3d:07:94:81:5c:f2:df:14:e8:88:c5:4b:
                    95:1c:01:31:a6:1b:4b:fa:2e:f1:df:5c:72:83:74:
                    c7:b6:1a:e8:c9:b2:b3:25:ca:6d:a1:69:db:e5:db:
                    8e:81:11:a0:33:6b:e9:a1:1a:25:25:cc:3d:b5:59:
                    fb:f8:1a:89:c4:d3:5e:e0:73:13:85:df:ef:71:c1:
                    36:ba:f9:74:b6:49:3c:20:27:09:6a:21:45:ac:c9:
                    32:6b:67:85:44:df:31:3e:8c:f4:83:60:e8:79:7f:
                    ee:2f:9f:64:dd:b7:86:52:93:2f:a1:5e:f3:e6:ab:
                    1d:b0:d2:6c:f5:49:d0:a4:f7:65:ba:6d:f1:72:cf:
                    78:bc:0d:20:fd:08:c0:65:5c:65:89:e0:f9:2f:28:
                    1c:56:40:44:be:6a:9d:6a:3a:20:72:a6:af:d0:7a:
                    f1:fa:c3:54:41:ef:99:b6:95:5b:e4:f5:04:ab:7c:
                    dd:54:f0:95:87:96:f5:16:a6:63:e4:c0:31:01:40:
                    c1:2e:c5:97:ad:d9:9f:5f:7f:43:f4:44:55:28:5b:
                    3f:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:99:A1:AF:9E:16:6C:59:DE:05:18:36:90:EE:86:D3:D5:1D:32:E0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/18f26c8f-3cab-3e5f-b965-910653d41ba0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.26.71.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:d5:c7:ea:ae:96:39:2d:e4:3c:3e:b3:37:64:c4:73:39:5e:
         43:5a:3b:4f:8c:47:32:d4:a5:df:ca:3a:d6:59:65:23:49:94:
         49:9f:e0:74:fd:84:fd:b9:37:f8:b6:7c:bc:dc:2d:f0:5e:94:
         9c:e9:fe:c7:ab:c1:2d:00:eb:19:59:1e:5e:eb:6d:2f:f9:17:
         a5:69:a0:c2:f8:aa:48:88:71:7c:e0:1d:95:f4:39:2e:92:5e:
         2f:08:c5:c2:bc:9d:89:13:06:1d:ff:83:ae:e7:21:62:81:a9:
         5f:90:c2:fa:66:02:ca:b2:16:8f:15:1d:cd:fa:e5:54:3f:b8:
         9e:8b:52:1d:6f:f7:c3:75:74:86:6a:00:6f:74:68:99:bb:e3:
         a7:98:df:73:b7:e9:ce:43:77:f6:25:1b:61:1b:04:cb:c3:3f:
         66:b1:c0:c6:b8:84:b5:f7:c1:5c:57:cd:54:33:c1:1a:b5:1d:
         00:e5:26:1a:6f:1e:54:eb:1f:df:90:8b:47:ea:72:2e:bc:85:
         d4:ff:e2:ee:57:b0:6c:c7:00:25:97:2a:55:81:52:8b:a8:73:
         19:2c:38:75:9b:f5:61:37:bc:53:55:d3:33:0c:30:a5:0a:47:
         81:f1:1c:0e:dd:ba:5a:b4:d0:c9:66:f0:49:5a:2b:b3:8c:8b:
         13:dd:ad:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 8 15:10:04 2024 by rpki-client on console-ams.rpki-client.org