Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/f6b2077f-6ecc-350a-b61f-9e524cbe2be1.roa
File:                     f6b2077f-6ecc-350a-b61f-9e524cbe2be1.roa (raw, json)
Hash identifier:          Mi6QWmYvNyulzP1i/USfHfcxWhY83xC2lETjffKdOok=
Subject key identifier:   B8:C5:62:72:5A:B2:65:C8:FD:62:5B:F6:7D:AC:72:07:99:E3:92:33
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285845B7B380AF0536940BE98C3E70
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/f6b2077f-6ecc-350a-b61f-9e524cbe2be1.roa
Signing time:             Tue 30 Apr 2024 13:00:34 +0000
ROA not before:           Tue 30 Apr 2024 13:00:34 +0000
ROA not after:            Mon 29 Jul 2024 13:00:34 +0000
asID:                     212238
IP address blocks:        23.26.57.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 09 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:b7:b3:80:af:05:36:94:0b:e9:8c:3e:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Apr 30 13:00:34 2024 GMT
            Not After : Jul 29 13:00:34 2024 GMT
        Subject: CN=1e787a25-6951-4c49-a1a4-bd47ba25b9e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:e0:01:8b:aa:1a:33:2e:b0:1f:6f:fa:df:18:
                    e5:0d:b6:3d:e0:6c:a3:08:0d:4c:09:d4:42:0d:95:
                    ec:6b:9b:43:8b:c1:d6:59:72:a0:76:56:f9:c3:1b:
                    75:75:9d:c5:39:aa:ed:ed:16:82:2b:6d:4c:7d:ab:
                    2b:30:5b:2b:3f:d8:88:68:2c:4a:95:8e:27:4a:ae:
                    7f:e7:63:bf:2b:74:ae:19:a8:6d:ae:fe:c6:7c:b8:
                    1a:68:64:f2:52:28:cf:29:49:0b:ef:a7:d2:9f:6a:
                    f2:55:f6:17:bd:ee:ad:10:f9:f3:24:70:f6:0e:8d:
                    47:f9:b3:89:a6:f3:8b:f1:cc:c5:6c:66:89:41:aa:
                    2d:f7:a0:4f:d5:91:00:51:9e:d5:5e:3f:53:72:69:
                    af:4e:37:c5:2b:21:43:b4:95:97:e1:51:86:8f:23:
                    22:a0:fd:b3:99:09:10:60:2a:84:69:4e:c7:6c:2f:
                    31:48:99:02:c2:40:16:6e:8d:1b:1e:b3:d7:4b:ee:
                    8c:41:06:7b:7d:a4:d5:ec:f2:f5:71:9f:1a:8f:12:
                    2a:b4:75:23:0e:e5:d6:73:60:a5:f2:95:80:9e:04:
                    c6:c9:16:4f:0c:f6:d0:b2:55:39:d5:62:a4:f7:28:
                    10:8b:75:de:75:47:c0:96:34:10:53:ec:9f:ec:43:
                    98:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:C5:62:72:5A:B2:65:C8:FD:62:5B:F6:7D:AC:72:07:99:E3:92:33
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/f6b2077f-6ecc-350a-b61f-9e524cbe2be1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.26.57.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:a3:8b:5a:4c:3f:61:0e:65:0c:6a:44:26:ff:35:e0:7a:0b:
         d8:40:1d:58:80:64:77:86:6f:e6:62:2a:e2:5d:e0:99:60:fb:
         72:69:a3:cd:7f:af:35:6a:0f:b2:1a:67:c2:00:59:a5:d0:dc:
         39:f1:66:08:4c:84:32:da:c0:93:9e:b9:2e:93:e9:b7:7f:c0:
         c7:97:10:95:66:7e:53:23:cb:4a:97:ee:ae:09:6d:d7:e5:cc:
         b7:80:c6:64:50:f8:27:de:9b:52:77:4a:91:37:83:f9:da:33:
         5b:ac:38:52:69:3d:32:58:0a:aa:b7:8a:75:16:ea:eb:eb:91:
         9a:11:86:cd:9f:0b:9d:5a:db:06:26:69:80:61:af:a6:ed:3c:
         f7:3e:d2:bd:1b:8e:3b:3a:a4:f5:b8:0b:9e:9a:ca:99:46:5f:
         ee:8f:20:a8:50:1a:b3:7f:68:ac:c1:61:c4:69:e5:e1:46:58:
         ce:43:07:f4:a1:17:46:e5:80:b8:c6:4c:c3:93:1d:0b:0e:72:
         a9:32:d2:17:00:51:0f:60:74:8f:f6:d0:98:91:cb:6f:3f:43:
         4e:5e:e8:7d:e8:6d:9b:62:f4:fc:32:2a:e2:18:79:8f:a9:be:
         79:c6:d6:87:ec:6b:93:5d:2a:a8:05:39:3a:0d:d6:c4:c5:13:
         15:b9:12:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 8 10:09:38 2024 by rpki-client on console-ams.rpki-client.org