Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/55194404-79f7-3f9a-a58f-b55004f8ea2b.roa
File:                     55194404-79f7-3f9a-a58f-b55004f8ea2b.roa (raw, json)
Hash identifier:          YO1Sb2Ev3QOLDnD+8KyI/XExkXhDAp4/FRkKSB+7vCM=
Subject key identifier:   AB:3C:EA:6E:2C:33:CC:2E:B3:8E:75:78:5A:73:5F:95:8B:EB:E0:5D
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285845B7B37FDD41EBDA34C3783580
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/55194404-79f7-3f9a-a58f-b55004f8ea2b.roa
Signing time:             Tue 30 Apr 2024 13:00:34 +0000
ROA not before:           Tue 30 Apr 2024 13:00:34 +0000
ROA not after:            Mon 29 Jul 2024 13:00:34 +0000
asID:                     212238
IP address blocks:        23.26.44.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:b7:b3:7f:dd:41:eb:da:34:c3:78:35:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Apr 30 13:00:34 2024 GMT
            Not After : Jul 29 13:00:34 2024 GMT
        Subject: CN=5173becf-9539-4a5e-a8e8-305e817be483
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:21:ae:bc:49:f4:2b:c1:94:d6:81:ff:97:ce:
                    82:e0:2a:bc:f3:a0:7e:79:87:4e:72:ab:14:34:74:
                    ce:b2:9b:4e:5f:00:09:2a:96:c6:ea:f3:f7:57:15:
                    27:0f:cd:f6:29:7c:48:40:f3:d1:2e:14:0e:dc:b3:
                    09:1b:62:2d:cc:38:1f:0a:25:ae:1d:62:fa:4c:21:
                    fd:ea:96:75:49:4b:45:bf:30:ab:4c:13:32:31:6e:
                    0e:ca:76:a9:64:3b:be:59:d6:31:ce:dc:74:88:b7:
                    6e:8f:60:35:13:f0:5c:97:8e:6e:8f:9d:10:47:ee:
                    cf:64:e6:1c:da:30:6b:e2:62:18:6d:4e:84:7f:91:
                    bc:51:b1:00:f4:5a:f5:41:c7:1e:d5:fd:c8:fe:4b:
                    c9:f9:4f:29:b1:de:a7:4a:17:8c:ce:6b:8e:c6:65:
                    a1:d0:59:33:3f:14:5d:c7:e2:f3:42:4c:68:0c:36:
                    f7:9e:8b:b5:ef:46:7e:fb:84:ca:91:e9:4f:d8:32:
                    a5:60:be:95:77:72:56:44:61:c5:68:8d:79:b0:1d:
                    8a:11:9d:da:28:75:b4:eb:47:79:34:50:90:f6:1c:
                    2e:c4:74:80:05:8e:c7:dd:b8:be:fa:cc:47:08:ab:
                    92:01:b1:ee:f4:50:37:ff:d5:3c:1b:4e:9f:6d:68:
                    12:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:3C:EA:6E:2C:33:CC:2E:B3:8E:75:78:5A:73:5F:95:8B:EB:E0:5D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/55194404-79f7-3f9a-a58f-b55004f8ea2b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.26.44.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:18:9f:30:a5:60:ee:38:e4:45:67:80:af:ec:39:50:95:c3:
         0e:95:58:0b:13:16:4d:6b:e6:e0:67:e5:73:22:1d:cf:03:59:
         ee:43:0e:73:31:c2:8e:d9:5f:05:bf:f9:b0:0a:6b:eb:ea:a2:
         b3:5d:fe:da:13:22:0b:09:b3:01:d7:2b:5a:d8:06:1a:3e:f9:
         cd:93:ce:43:02:69:49:c1:77:a6:f9:89:f1:8e:59:77:f5:f8:
         12:2f:7a:d3:72:6b:a2:d9:3d:d3:3a:6a:e9:e7:dd:3e:d4:c8:
         6f:23:bd:98:82:1b:48:e4:18:86:3a:60:67:ef:be:19:8e:f1:
         35:35:71:56:d5:48:4c:18:8b:f7:98:e2:75:52:f3:e5:b0:25:
         cf:e4:17:94:f0:b8:5d:1b:e6:0e:c5:f9:21:c5:07:63:31:f8:
         b5:a1:2f:b6:57:7e:f6:26:e8:25:a7:fb:ab:f1:07:98:f2:61:
         61:ab:77:27:1d:03:cc:c8:27:32:57:b3:3b:97:da:93:d3:86:
         b8:df:26:f2:72:28:34:8a:64:aa:34:28:e1:eb:00:0c:77:08:
         da:c3:59:44:fd:49:ab:99:84:d2:52:4e:6b:fd:70:93:c7:37:
         e9:ee:bb:19:2c:73:e7:15:3d:b4:94:b5:41:16:42:dd:fc:61:
         a4:a5:57:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 8 20:37:19 2024 by rpki-client on console-ams.rpki-client.org