Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/8889352c-e259-3c3f-b7aa-d2a320ac8f0d.roa
File:                     8889352c-e259-3c3f-b7aa-d2a320ac8f0d.roa (raw, json)
Hash identifier:          QrwKVmXTdlzQK8HAopfefGHMF+fNE65TatodbKAXCmc=
Subject key identifier:   B1:F7:A2:59:15:51:0E:C2:99:EE:E0:4D:B9:9C:B1:E3:EA:1D:69:F4
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285845840DBE3EDD8E8FD8B12A9D80
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/8889352c-e259-3c3f-b7aa-d2a320ac8f0d.roa
Signing time:             Fri 12 Apr 2024 01:00:26 +0000
ROA not before:           Fri 12 Apr 2024 01:00:26 +0000
ROA not after:            Thu 11 Jul 2024 01:00:26 +0000
asID:                     29802
IP address blocks:        23.26.253.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 01 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:84:0d:be:3e:dd:8e:8f:d8:b1:2a:9d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Apr 12 01:00:26 2024 GMT
            Not After : Jul 11 01:00:26 2024 GMT
        Subject: CN=a0e3b3c4-8e1f-479d-b996-ef3dffa657b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:98:8e:19:a5:c9:7b:f0:8d:72:c5:51:5a:55:
                    ca:81:b9:4f:43:5b:91:2a:e7:bb:6f:a9:ea:2a:70:
                    b8:46:a5:fa:ec:ec:be:96:ad:01:4d:d7:4c:f3:50:
                    25:a9:a7:fe:04:99:6a:54:d7:8d:d2:ff:44:a3:5f:
                    0c:36:04:05:11:59:16:1f:44:e0:15:b2:1b:4c:cb:
                    bd:0b:e2:0f:5c:f6:9b:5c:8d:c9:fb:2b:ba:e0:56:
                    41:4e:9e:4a:5f:12:ec:b0:a0:e1:33:76:6a:70:4d:
                    bd:e8:e0:9f:59:bc:0d:b3:2f:d1:4d:fd:13:7c:20:
                    f0:91:ec:db:95:da:af:cf:e0:98:d1:b2:a9:0d:e7:
                    52:b7:a8:ed:f5:db:88:03:92:c9:dd:a6:6d:c9:57:
                    df:42:26:24:49:e7:34:4a:78:95:f5:d9:c3:22:35:
                    dd:6c:94:fb:75:95:1c:0d:de:42:a0:a4:b3:d5:ff:
                    17:6b:9f:44:4c:47:97:61:43:a9:7a:31:79:17:82:
                    6e:f0:77:9e:8d:d4:81:49:db:de:2e:4a:c8:8d:5d:
                    53:ab:a9:aa:3a:05:33:f6:42:90:4b:b9:d1:43:9b:
                    ce:ea:5a:1e:ea:dd:64:22:5f:89:6f:ac:6b:d1:c0:
                    8b:dd:71:81:20:84:b6:27:5b:89:6a:ae:cb:b3:ea:
                    50:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:F7:A2:59:15:51:0E:C2:99:EE:E0:4D:B9:9C:B1:E3:EA:1D:69:F4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/8889352c-e259-3c3f-b7aa-d2a320ac8f0d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.26.253.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ae:ef:6b:65:7a:0f:a6:5c:1d:20:e3:c5:39:60:90:43:35:b8:
         e7:fa:3f:37:cf:78:7b:ec:29:66:39:b2:13:a8:06:39:d0:d4:
         d6:0c:df:78:41:1c:b0:05:98:bc:c3:b4:99:f4:b9:b3:b2:5e:
         f0:54:51:17:71:7f:35:14:1e:01:17:4e:a8:2a:86:ef:e1:d9:
         35:66:95:00:97:91:91:a5:17:0f:0b:63:81:8e:68:4a:27:b6:
         cb:ea:c0:07:c0:b0:88:db:8b:7d:46:ce:be:6e:c6:5e:d5:44:
         37:2a:44:be:39:0c:30:a6:8c:1a:8a:8f:cf:ce:89:63:40:03:
         fa:98:c2:99:8c:92:38:f1:eb:9b:58:2f:90:b8:9a:36:5f:eb:
         f5:14:4a:37:6f:19:77:3c:10:fd:75:c0:bb:d7:80:68:d4:21:
         b6:81:0a:c5:d2:ec:0b:c8:05:f3:bc:23:68:2a:6d:3e:b1:b9:
         a9:24:fb:c3:26:b7:41:82:83:43:ae:8d:76:17:67:2d:06:90:
         85:da:fc:7d:ef:b4:aa:c0:3a:02:eb:65:35:14:4d:84:8c:9b:
         83:e3:e7:1b:d7:70:55:7b:ee:56:5f:06:b5:70:a9:88:6d:da:
         88:66:8d:a1:9c:5c:8e:d6:8b:a5:2b:1f:ec:ab:30:5d:6a:6e:
         00:e9:0d:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 30 10:17:49 2024 by rpki-client on console-fra.rpki-client.org