Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/ebf70955-1584-3fe3-987f-441d3ee6d44c.roa
File:                     ebf70955-1584-3fe3-987f-441d3ee6d44c.roa (raw, json)
Hash identifier:          rEtl2/Cc0rHuDS2484yvxmgQ0R78/Yl1/lJ3v0AqmNo=
Subject key identifier:   EC:CA:AC:1D:2D:97:02:42:15:5B:5A:65:AD:4E:C3:3E:A4:35:1A:D3
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285845B7B3810C44391B4A54F75EA0
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/ebf70955-1584-3fe3-987f-441d3ee6d44c.roa
Signing time:             Tue 30 Apr 2024 13:00:34 +0000
ROA not before:           Tue 30 Apr 2024 13:00:34 +0000
ROA not after:            Mon 29 Jul 2024 13:00:34 +0000
asID:                     212238
IP address blocks:        23.26.63.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 09 May 2024 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:b7:b3:81:0c:44:39:1b:4a:54:f7:5e:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Apr 30 13:00:34 2024 GMT
            Not After : Jul 29 13:00:34 2024 GMT
        Subject: CN=004c3259-9114-40dd-9686-39b199af57fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:c1:9a:13:cf:84:3f:db:82:a3:2e:6d:62:21:
                    f7:b2:63:b9:07:88:3b:96:b2:6b:e9:d1:19:58:0f:
                    3c:65:6d:b1:3e:e0:f9:68:f9:0c:14:9a:cc:d1:54:
                    c3:28:76:56:4a:93:86:2a:83:31:97:08:ec:21:99:
                    89:8e:dc:76:0d:67:f2:59:e1:bc:8e:9d:6d:cc:df:
                    75:ba:cb:77:22:d3:9b:70:eb:0f:d3:1d:a8:bd:7e:
                    af:59:30:fc:38:4b:31:4e:97:e0:83:ed:79:d1:55:
                    c1:3a:b0:93:98:3a:32:4c:11:0f:e2:a8:b6:8d:07:
                    f1:ed:86:a8:12:e6:02:ee:a8:56:75:4c:e4:30:c5:
                    b2:5d:b0:5e:29:2f:37:cd:c9:1a:fe:65:65:bc:1c:
                    d4:00:3d:bb:cc:08:70:c5:8f:4f:4a:52:fb:bb:19:
                    8a:07:7e:a0:4d:c4:66:e2:16:c7:ce:48:b5:00:e9:
                    ff:e8:01:23:e3:40:72:94:fe:11:ba:45:eb:05:b1:
                    3a:3f:0c:49:d3:9a:9f:69:ea:44:7d:28:20:44:56:
                    b2:f1:17:ba:6a:d2:cf:c8:e8:da:14:75:57:07:c6:
                    b7:2e:ea:22:15:a3:4f:55:c1:66:c8:ce:b5:ac:dc:
                    31:4f:33:26:86:7e:0a:34:b3:98:d0:8d:54:e7:58:
                    5f:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:CA:AC:1D:2D:97:02:42:15:5B:5A:65:AD:4E:C3:3E:A4:35:1A:D3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/ebf70955-1584-3fe3-987f-441d3ee6d44c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.26.63.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:fd:49:74:75:3e:58:0e:68:9d:91:3a:69:47:76:c9:47:ea:
         85:41:87:7a:54:f1:98:db:64:15:e8:32:4d:ed:16:71:e0:1c:
         7b:d4:c7:37:f8:14:0b:c2:4f:79:42:f2:50:41:6a:85:33:c4:
         56:6f:9f:a1:3e:4b:c0:29:ef:2e:0d:59:f4:4b:18:29:2d:52:
         4b:8d:9a:a3:85:06:cb:09:d9:2d:74:49:20:e9:fe:88:01:3f:
         bb:82:f7:d6:d5:a5:6e:67:89:9c:fb:e9:ea:dd:0e:4d:12:30:
         b4:fa:f6:76:bb:dc:da:2e:c6:4f:f1:e2:2c:d7:a8:70:2f:b4:
         d9:64:51:36:b2:17:82:92:60:1c:df:b9:cc:37:77:9e:11:e2:
         35:64:c3:76:60:d0:30:61:de:48:75:6f:e8:10:aa:80:67:98:
         d5:19:c3:f2:fc:07:5a:df:ec:38:1f:2e:f0:9c:bf:00:56:fd:
         c5:10:fe:c1:46:26:2a:f1:55:ba:58:8f:8c:91:84:94:d6:9d:
         d8:ad:27:76:19:37:5a:32:6f:be:b8:4a:b6:c1:26:d6:f2:2a:
         e9:49:5d:37:bb:16:f1:02:1f:83:47:76:39:7c:cf:67:eb:c9:
         0c:14:7a:09:0b:45:38:3f:33:3d:25:0b:b9:50:18:d6:06:06:
         1f:cc:17:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 8 01:58:17 2024 by rpki-client on console-fra.rpki-client.org