Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/986a09c5-c446-31e2-b844-f4d9fef307f0.roa
File:                     986a09c5-c446-31e2-b844-f4d9fef307f0.roa (raw, json)
Hash identifier:          KYfEg4+FqilqSJPFurTov06zzAxtZ/02QDamNxKuWFE=
Subject key identifier:   36:F5:B4:24:49:D5:10:62:5F:A9:5D:C7:F3:77:84:66:FD:D9:9E:35
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584960541FEC450E864364E36280
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/986a09c5-c446-31e2-b844-f4d9fef307f0.roa
Signing time:             Tue 01 Apr 2025 01:00:47 +0000
ROA not before:           Tue 01 Apr 2025 01:00:47 +0000
ROA not after:            Mon 30 Jun 2025 01:00:47 +0000
asID:                     55286
IP address blocks:        23.26.150.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:60:54:1f:ec:45:0e:86:43:64:e3:62:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Apr  1 01:00:47 2025 GMT
            Not After : Jun 30 01:00:47 2025 GMT
        Subject: CN=919b0822-4ce7-45d9-890b-2f0ac5185aec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:fb:e5:aa:05:a9:c5:2e:d4:c1:c1:67:52:12:
                    6d:21:4d:d4:37:05:03:67:8d:45:9e:41:f7:54:9c:
                    2f:63:cf:75:7b:cd:f9:00:89:63:d0:53:c4:c8:9d:
                    5f:91:8b:ad:98:c3:c7:e7:e7:66:b3:70:d3:f2:4d:
                    47:9e:76:c8:5a:1f:67:08:6c:a8:fd:6a:02:ee:a7:
                    7d:fc:2a:d2:97:6c:27:b0:83:0e:77:5f:d0:87:a4:
                    f3:5b:ec:78:34:b7:49:3e:6e:38:b8:65:00:b4:7f:
                    78:30:9d:39:ba:a5:2c:e5:bb:1d:e9:c1:c0:1e:95:
                    fa:68:90:17:01:79:f4:67:9b:38:cc:56:42:f3:1f:
                    83:57:ca:d2:94:04:c7:7c:ae:27:16:9e:3a:a0:8b:
                    3c:aa:59:76:d1:01:d3:31:bf:e3:f0:68:fb:7b:61:
                    26:82:c7:07:ff:8f:f1:fa:41:f6:32:02:b9:3e:db:
                    01:b1:2f:97:5d:cb:1c:12:93:7a:84:e4:44:da:9b:
                    6d:32:16:a8:56:a1:0d:12:31:fb:b8:d5:9d:ee:d9:
                    93:e7:60:7f:78:87:95:c7:97:4b:83:49:c4:7f:50:
                    eb:e8:56:24:71:d6:f0:5d:44:5d:80:ee:4c:bc:12:
                    69:79:e7:df:2d:0d:58:d0:37:d1:e4:3d:89:a4:1b:
                    38:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:F5:B4:24:49:D5:10:62:5F:A9:5D:C7:F3:77:84:66:FD:D9:9E:35
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/986a09c5-c446-31e2-b844-f4d9fef307f0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.26.150.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:eb:2e:ce:77:0e:97:c4:1d:43:ff:f7:82:bd:5e:5c:93:52:
         48:9e:da:09:d0:1b:cb:75:0a:6f:16:6f:21:2f:ad:cc:a1:99:
         d4:88:7c:5c:71:0a:b8:60:0f:61:cc:cd:ee:81:b5:e3:43:bd:
         e8:e7:35:39:25:50:ba:1f:69:56:b1:4b:91:45:36:97:9a:c2:
         e8:a0:b2:5b:a2:d8:06:64:75:39:b0:8a:ab:c7:bb:d4:94:73:
         4e:63:73:e0:2e:7c:d3:6e:08:70:51:a8:d1:90:c6:60:52:19:
         84:cb:7e:ca:99:77:c2:3d:71:6e:02:ed:b7:ea:48:e4:f7:c6:
         d8:cb:ae:fe:3b:23:17:87:3e:fc:22:7c:01:ca:03:e5:14:4a:
         e6:6f:3b:57:6c:bf:46:e1:80:f6:7e:12:36:12:80:ef:57:e6:
         e8:37:19:6f:25:8d:46:76:57:ff:a8:be:05:d0:69:fc:25:d9:
         7b:86:55:6b:c9:0f:05:75:69:ec:f7:0d:0b:da:15:ef:c2:85:
         71:4a:f3:86:4e:ea:d4:1f:37:77:99:a2:08:25:02:d9:62:ad:
         6c:28:d8:e9:17:60:cc:6f:0b:e9:ee:51:35:26:a4:2e:53:cb:
         f5:46:5f:06:2b:cd:3f:1f:c3:19:46:f1:22:4e:77:ee:f7:be:
         e6:34:63:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 21:33:02 2025 by rpki-client