Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/06440faa-42b7-3f25-83f1-a31c4015b338.roa
File:                     06440faa-42b7-3f25-83f1-a31c4015b338.roa (raw, json)
Hash identifier:          w813hBUcbYly/wEuA/S8VwSBWfHeYkyURDKa7hdgNe4=
Subject key identifier:   01:A3:D2:51:6D:AF:AC:21:B3:E0:2C:02:92:EC:A6:22:2C:49:99:19
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285847FD2936FCAE6D0C654924FB80
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/06440faa-42b7-3f25-83f1-a31c4015b338.roa
Signing time:             Sun 24 Nov 2024 19:42:30 +0000
ROA not before:           Sun 24 Nov 2024 19:42:30 +0000
ROA not after:            Sat 22 Feb 2025 19:42:30 +0000
asID:                     11798
IP address blocks:        23.26.93.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:fd:29:36:fc:ae:6d:0c:65:49:24:fb:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Nov 24 19:42:30 2024 GMT
            Not After : Feb 22 19:42:30 2025 GMT
        Subject: CN=d2327a23-c3ee-4bb8-a2cf-297b94787b8f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:58:dd:5d:36:00:7d:79:99:a5:cc:7e:77:da:
                    8e:ba:a2:9b:5a:be:20:b6:7f:e3:be:9e:e6:7b:aa:
                    53:fc:60:44:76:e8:44:3f:41:35:92:7e:27:cc:0f:
                    36:3e:b1:9c:5f:e4:a5:d7:e9:44:c8:e1:4f:b5:96:
                    55:dd:90:d3:2d:67:29:e8:55:52:94:78:0b:ac:b4:
                    ba:7b:c6:b3:0c:84:6e:d4:06:3c:46:f8:62:98:d2:
                    38:63:fa:16:0f:cd:52:d7:3c:a8:6d:8a:d0:37:10:
                    59:97:ef:34:c8:e2:c9:cc:a8:2a:c8:bb:73:9d:33:
                    86:dc:61:07:31:8d:ba:4e:08:7d:2f:5f:0e:29:2d:
                    59:09:16:63:fe:11:8c:30:de:57:72:ba:a4:cf:de:
                    ba:e8:07:a9:3a:15:d7:66:6f:05:bd:89:c7:97:0c:
                    5d:44:79:d7:55:1f:29:7a:fc:2b:cf:78:8b:ae:30:
                    89:fa:30:89:00:87:66:aa:63:6a:82:9b:a9:de:44:
                    ec:df:c5:ee:cd:a4:c8:da:ed:59:03:5d:15:35:60:
                    f9:27:91:59:45:5b:c7:81:17:fe:f5:4e:45:7f:e0:
                    02:28:f3:61:eb:66:64:ff:45:d2:ba:d2:de:1f:15:
                    f3:16:c8:b4:9d:7d:71:cd:f4:5d:9f:6d:7e:24:9e:
                    79:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:A3:D2:51:6D:AF:AC:21:B3:E0:2C:02:92:EC:A6:22:2C:49:99:19
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/06440faa-42b7-3f25-83f1-a31c4015b338.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.26.93.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:e0:d9:09:ef:3c:27:4b:ca:70:4c:71:3c:62:eb:bb:86:9b:
         c5:84:b9:ed:f4:99:21:41:72:e9:c9:86:63:ad:96:62:28:b2:
         f5:7c:eb:6b:9a:ad:5c:be:71:26:90:c6:dd:8c:13:a8:14:70:
         fe:88:da:9e:67:73:a8:62:c8:ef:31:71:10:c3:5f:44:8f:f2:
         3c:a5:73:21:88:77:5c:d2:c9:6e:bf:91:5a:1c:20:81:75:65:
         20:49:e6:0e:52:41:7c:b3:06:04:4c:08:b7:f8:23:aa:1d:72:
         64:c5:4f:55:aa:4d:2b:41:88:27:02:be:29:6f:0e:60:8d:ef:
         94:45:b0:8d:c4:10:b4:f0:77:87:be:18:71:33:fa:9f:e3:c0:
         ce:70:83:8d:f8:25:5b:99:cf:40:56:76:ae:cb:58:01:0a:2c:
         10:10:e6:8e:c8:28:23:72:6a:7e:77:9c:cf:2d:dc:d4:92:4a:
         30:4a:30:e4:35:5d:7c:44:d2:b6:38:46:da:c9:dc:11:44:62:
         30:b4:86:ef:93:36:d3:13:8b:f5:50:66:43:72:3c:70:8b:a0:
         e6:a1:b3:5f:10:2f:c7:c1:31:f8:5f:92:04:22:32:44:43:13:
         39:27:cf:19:76:6c:c1:d3:45:d2:1b:01:d9:29:8c:f9:87:34:
         b4:25:5e:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 13:40:13 2024 by rpki-client on console-ams.rpki-client.org