Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/b7a4e970-79a9-3897-8289-1065a5bcb2d5.roa
File:                     b7a4e970-79a9-3897-8289-1065a5bcb2d5.roa (raw, json)
Hash identifier:          umgujDKcKF7uZkPjSW3ooRy06B/HDuLFTh9jnAPze4k=
Subject key identifier:   78:83:E8:D5:74:AD:D0:7E:91:45:63:9A:F7:A1:0E:B0:B6:0E:94:5A
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285845B7B3805623B3AE3A991F30C0
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/b7a4e970-79a9-3897-8289-1065a5bcb2d5.roa
Signing time:             Tue 30 Apr 2024 13:00:34 +0000
ROA not before:           Tue 30 Apr 2024 13:00:34 +0000
ROA not after:            Mon 29 Jul 2024 13:00:34 +0000
asID:                     212238
IP address blocks:        23.26.51.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:b7:b3:80:56:23:b3:ae:3a:99:1f:30:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Apr 30 13:00:34 2024 GMT
            Not After : Jul 29 13:00:34 2024 GMT
        Subject: CN=3d0e8d98-0202-4140-8257-f4d6e1f13852
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:58:f6:2f:5b:3e:86:8d:61:91:bf:ec:6d:ff:
                    38:e6:db:18:f6:67:c8:b0:7e:09:af:47:a6:37:16:
                    3d:a1:1e:12:6b:68:e6:2a:ad:e8:ee:c9:39:f6:fd:
                    c4:d5:32:73:0c:2b:eb:1f:86:8b:ba:88:1a:35:bb:
                    d3:63:83:6a:a6:fa:ee:fe:04:9a:ab:50:87:51:c6:
                    5a:a2:fb:dc:ce:cd:5e:66:be:2d:22:bc:19:8e:d4:
                    d6:14:e5:4a:6c:f0:93:63:c4:ea:a5:c0:86:c3:2e:
                    36:5c:25:6b:fe:c3:3b:d5:b3:de:bf:37:43:56:4b:
                    02:e8:c0:65:16:0c:b6:92:96:02:a2:80:3a:26:dc:
                    76:2f:e9:b2:15:a1:34:92:c3:0c:44:f3:c3:01:dd:
                    6b:ed:44:3b:4a:2e:ef:32:9f:75:4b:d1:d1:04:a9:
                    be:63:9b:66:e5:4f:30:d3:60:94:47:18:a4:bb:bf:
                    22:55:e0:a6:cd:41:63:1b:fa:40:80:c6:6d:32:57:
                    bf:27:10:4a:2e:92:c8:14:2c:18:ca:11:31:46:5f:
                    65:64:ff:a4:de:47:01:77:1d:24:23:05:1f:35:71:
                    17:e6:f3:f6:2e:0e:93:bb:3b:7b:d4:46:2f:11:16:
                    aa:1b:16:f2:a9:6d:58:58:55:5c:f0:7d:f0:69:9e:
                    b7:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:83:E8:D5:74:AD:D0:7E:91:45:63:9A:F7:A1:0E:B0:B6:0E:94:5A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/b7a4e970-79a9-3897-8289-1065a5bcb2d5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.26.51.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:fc:43:60:8a:0a:23:61:f5:c7:65:2f:e7:db:ae:ed:f4:4d:
         cc:b9:23:64:1b:e1:5e:98:34:16:d7:7d:3e:6e:04:a3:20:95:
         d1:b4:02:50:f0:41:50:3b:b3:02:b2:cd:dc:c2:f0:ef:2a:5b:
         61:b3:5c:ea:32:3c:4a:e1:78:dc:f0:d7:49:ed:bd:ae:99:7c:
         8e:5f:6f:08:50:5c:59:f4:53:1f:8f:d6:7a:d5:fa:6d:bc:7f:
         95:5f:58:b0:1a:91:71:3e:26:48:22:a4:7b:1b:47:d2:43:72:
         9e:55:ca:95:34:3a:0f:b8:52:1c:63:92:e2:39:a2:e2:c5:41:
         d9:eb:ca:31:be:ed:4a:cb:58:c3:3d:ab:f9:a0:19:c3:d9:fb:
         87:6d:fb:d8:1c:91:c8:29:5f:2a:44:1f:b3:e3:52:e6:0e:30:
         91:c9:20:5e:9c:02:0f:3b:fd:35:a9:a2:74:08:88:39:9c:e8:
         fc:95:7f:34:05:5c:df:f8:b7:0b:5c:97:34:c3:40:6d:bd:c3:
         1e:ed:82:92:7e:97:bc:1b:d1:28:6f:dd:d6:e8:71:db:98:05:
         a9:83:2e:35:5a:63:e0:cc:3d:c1:aa:ad:d9:c5:6f:c5:74:a3:
         6e:7b:fe:12:c0:d1:af:01:68:66:c6:d2:54:7a:cd:be:39:cc:
         cb:c1:9c:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 8 18:22:53 2024 by rpki-client on console-fra.rpki-client.org