Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/07f954c5-43e6-33f6-9784-4e25b83d4072.roa
File:                     07f954c5-43e6-33f6-9784-4e25b83d4072.roa (raw, json)
Hash identifier:          t4hLA38FBvQbUswWjjiO/lKJKVhWg/e7yICKRLRkyqY=
Subject key identifier:   4B:A2:6F:B4:C4:2D:0D:30:F1:A7:10:82:9B:64:A6:12:CF:5A:81:18
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285844E50A92BDE0E005217D1FBA00
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/07f954c5-43e6-33f6-9784-4e25b83d4072.roa
Signing time:             Thu 15 Feb 2024 02:00:26 +0000
ROA not before:           Thu 15 Feb 2024 02:00:26 +0000
ROA not after:            Wed 15 May 2024 01:00:26 +0000
asID:                     174
IP address blocks:        23.26.32.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 29 Apr 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:e5:0a:92:bd:e0:e0:05:21:7d:1f:ba:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Feb 15 02:00:26 2024 GMT
            Not After : May 15 01:00:26 2024 GMT
        Subject: CN=7e0e0aa8-f7d3-41ab-bd27-f37157596375
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:36:09:3a:b2:61:06:22:f7:a5:1e:64:9b:db:
                    58:ee:e5:5e:64:01:8a:67:8d:cc:f9:90:f7:be:12:
                    7d:2f:93:53:08:59:78:dd:d2:6f:cc:05:47:79:24:
                    a7:9b:ba:02:f3:8f:7b:24:3e:2d:e3:9b:be:64:8b:
                    6d:4e:aa:7e:18:1e:d3:52:67:3b:64:cb:c0:a1:20:
                    51:01:a3:4b:70:c3:ac:01:2d:ab:75:f2:99:85:26:
                    0d:07:3e:b0:e1:4e:7e:62:11:0f:de:c4:29:f2:01:
                    e4:ac:26:46:53:ad:44:6f:a1:46:d5:9b:05:1c:32:
                    a9:bd:2c:97:bd:12:64:9f:f2:ca:4d:85:86:68:df:
                    c5:49:b5:7e:8e:a5:4b:f0:12:31:c7:68:22:34:02:
                    47:bc:54:74:f0:23:e8:e0:00:b1:ad:e8:12:d4:5e:
                    1d:15:2f:1c:84:f7:9d:85:35:38:b8:8e:8e:09:db:
                    88:47:63:1e:25:a4:49:35:b4:f2:ab:2b:a1:0a:9d:
                    a6:8b:b7:c9:dd:3a:32:2c:13:c1:43:06:97:27:15:
                    20:e0:14:74:f8:fd:87:55:c2:59:68:9e:25:35:b6:
                    f1:08:90:9f:65:a5:64:a5:67:04:ba:3e:c5:57:b3:
                    c4:7a:04:52:56:bd:0e:de:0b:77:04:9c:b1:9d:83:
                    7a:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:A2:6F:B4:C4:2D:0D:30:F1:A7:10:82:9B:64:A6:12:CF:5A:81:18
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/07f954c5-43e6-33f6-9784-4e25b83d4072.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.26.32.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:a4:23:d3:89:a4:9f:ad:4f:3d:31:32:6c:e2:24:f1:89:cf:
         9e:a6:d5:4b:22:68:2c:fc:09:67:db:7b:45:6d:21:17:60:f0:
         42:44:b4:9a:54:4e:fb:b0:02:3a:d0:fe:e2:8d:6e:48:06:42:
         80:78:d3:25:cb:09:24:0f:38:74:88:13:4e:2b:99:d9:8f:b1:
         c7:fd:61:03:4a:31:03:57:49:1a:13:01:14:e2:03:54:6f:2f:
         a9:ea:7a:90:f8:d1:8c:e6:0e:71:44:9f:25:65:fb:ec:87:56:
         f2:ea:ed:09:27:92:25:48:ab:d5:1c:75:22:22:52:4d:2b:9d:
         50:f1:59:89:05:88:6e:ac:2a:9c:0f:aa:42:ab:07:6e:b9:0b:
         3b:0d:f0:f2:2a:9d:d9:a5:b9:fc:fe:3b:e5:26:69:65:52:66:
         c5:d7:e8:e5:13:a2:30:13:55:07:f9:79:84:d4:0f:2c:1f:e1:
         bd:8d:4b:1a:2e:97:54:cd:b7:79:f4:d6:84:ce:86:3b:e2:38:
         bf:7f:c3:0a:4f:a7:0b:83:24:e4:9f:30:bd:5e:f1:d3:ec:df:
         11:32:8e:f0:f8:32:b2:e3:0b:90:88:69:60:96:db:ac:35:ba:
         9d:fa:cd:d9:79:4c:bd:ed:5a:cd:0a:dd:ba:bd:47:55:8c:4d:
         7a:e1:ea:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 09:04:36 2024 by rpki-client on console-ams.rpki-client.org