Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/65b2bb8f-32a9-39a6-9fd9-319f7776741c.roa
File:                     65b2bb8f-32a9-39a6-9fd9-319f7776741c.roa (raw, json)
Hash identifier:          4rcnOYsIHNK4QfuxsvUMYraRKYPnlW6qNEF4IYKihXE=
Subject key identifier:   3D:C5:C1:C4:05:23:7C:1C:79:55:4E:CC:A8:81:D5:C2:B6:D2:5B:1F
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285845B7B38157A2CC427B281DBBC0
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/65b2bb8f-32a9-39a6-9fd9-319f7776741c.roa
Signing time:             Tue 30 Apr 2024 13:00:34 +0000
ROA not before:           Tue 30 Apr 2024 13:00:34 +0000
ROA not after:            Mon 29 Jul 2024 13:00:34 +0000
asID:                     212238
IP address blocks:        23.26.93.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:b7:b3:81:57:a2:cc:42:7b:28:1d:bb:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Apr 30 13:00:34 2024 GMT
            Not After : Jul 29 13:00:34 2024 GMT
        Subject: CN=178f23c5-2fc7-43bd-97f5-784f76c49248
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:ff:57:8b:1b:33:b7:21:d2:27:09:82:80:8a:
                    a7:2b:52:05:54:31:56:3d:2e:3d:e6:f8:f9:86:28:
                    cd:6b:0e:84:2c:e2:c8:bd:80:aa:0d:4c:28:c7:54:
                    c8:d8:b6:1f:39:68:6e:b6:58:17:55:f4:34:c1:3d:
                    ad:ff:04:e0:2c:5e:a5:b8:e0:2e:aa:52:e5:c3:04:
                    f2:60:fa:c4:bd:05:74:27:a6:f7:de:7b:02:9f:f2:
                    31:0d:f6:8a:32:54:cd:30:70:d0:b7:82:ad:45:3e:
                    17:b2:8a:f8:d4:63:7e:7b:32:b8:96:25:b4:6b:51:
                    17:0c:e9:b8:e2:69:f8:97:2a:84:42:3c:4c:60:4c:
                    0c:f7:48:98:3c:75:3f:cf:86:6a:88:d0:de:85:ae:
                    eb:c5:93:77:df:9c:ea:61:70:3b:09:5e:42:a5:3b:
                    93:1a:c2:52:c7:c4:85:c5:3c:06:cb:13:db:53:6b:
                    f2:dd:51:ae:49:a1:57:37:e5:36:f3:96:68:73:b8:
                    5f:b7:c5:60:16:62:d9:42:33:18:27:97:67:98:04:
                    4e:c6:68:3b:ac:6b:98:f4:fa:52:2c:96:c7:60:09:
                    d1:bb:96:11:98:d4:d8:d6:73:00:e4:67:21:30:04:
                    7e:85:b6:15:0f:b7:51:04:0c:47:ba:56:a1:03:e6:
                    fc:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:C5:C1:C4:05:23:7C:1C:79:55:4E:CC:A8:81:D5:C2:B6:D2:5B:1F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/65b2bb8f-32a9-39a6-9fd9-319f7776741c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.26.93.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:a5:e5:2e:d3:31:63:38:65:50:1a:62:ff:af:c1:bb:df:ff:
         91:0e:9b:03:a4:a4:db:a9:1f:ec:f5:4e:12:cd:bc:df:43:b8:
         94:da:d4:e3:e3:31:97:80:8d:5f:9b:64:5c:d6:41:0d:0b:53:
         38:de:e9:87:5b:16:7e:7d:73:22:de:39:a8:3a:0d:fe:2f:e7:
         70:c3:22:dd:bf:b9:14:ec:9e:ca:30:77:8d:91:d3:c4:7e:34:
         d8:f0:0f:4c:fb:a2:e0:68:c7:8c:13:b8:81:5d:05:9d:22:9a:
         b2:98:66:cd:f6:b7:53:03:56:22:51:ac:56:3d:f6:39:97:1b:
         fc:68:7a:ae:8b:ff:1f:20:cd:44:4a:66:d9:cf:f9:d5:41:67:
         a1:2a:e7:ea:40:b8:16:81:c3:c4:2b:00:0a:5a:fc:41:86:bc:
         20:75:88:b5:34:35:7b:d1:cc:5c:12:82:1d:25:0e:6d:eb:90:
         7b:c6:5c:a5:df:58:a3:c7:b3:76:51:51:8f:53:34:1d:99:b0:
         7c:f1:b8:16:21:a8:0d:ea:44:1e:f6:2e:6d:b8:1d:89:d4:ae:
         9c:53:21:9b:4f:9b:2e:9d:73:d8:c9:e1:94:42:2f:a7:b8:83:
         22:d2:80:e2:73:bd:10:cd:9f:4d:fe:73:b9:36:27:0b:22:32:
         9e:8c:2e:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 8 15:27:12 2024 by rpki-client on console-fra.rpki-client.org