Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/08cd2a48-2b4a-3952-a619-d6785511b52f.roa
File:                     08cd2a48-2b4a-3952-a619-d6785511b52f.roa (raw, json)
Hash identifier:          jIXbgbRpg0Vc+8Vnmh0FTxrmTOGEWPv5GDlTdAeBYYk=
Subject key identifier:   2E:FC:6B:BC:0C:32:F4:07:01:2E:AC:D2:78:5E:33:00:F8:C8:81:89
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285847A08B4CD52DADB59A40BE6D00
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/08cd2a48-2b4a-3952-a619-d6785511b52f.roa
Signing time:             Tue 22 Oct 2024 15:29:57 +0000
ROA not before:           Tue 22 Oct 2024 15:29:57 +0000
ROA not after:            Mon 20 Jan 2025 16:29:57 +0000
asID:                     11798
IP address blocks:        23.26.56.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:a0:8b:4c:d5:2d:ad:b5:9a:40:be:6d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Oct 22 15:29:57 2024 GMT
            Not After : Jan 20 16:29:57 2025 GMT
        Subject: CN=e8055cd6-e6dc-42af-939d-1d47fee5272a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:56:dc:54:94:e7:1d:2b:0c:37:4f:8b:47:cc:
                    f8:85:ff:04:a9:36:24:80:5e:19:78:6f:bd:27:b7:
                    ba:7f:33:4e:e5:86:1f:11:32:79:65:f9:b1:75:97:
                    39:5b:42:6d:bc:b4:be:19:ae:92:3a:db:b6:19:b7:
                    61:a5:fc:5c:50:cb:33:7d:1f:c1:58:e5:55:ec:ca:
                    9b:a8:ae:9a:b2:17:10:98:4a:0b:c4:69:b2:99:af:
                    d8:c9:20:22:ac:87:1c:94:de:a3:13:8d:18:a8:94:
                    ec:4a:97:d4:bb:62:ec:58:28:b2:4b:09:71:8a:15:
                    2a:17:e4:7a:90:67:e0:89:1f:db:f2:d5:b8:c4:fc:
                    62:76:e5:c8:5b:9b:c9:6f:64:1e:c5:a9:3f:2e:b3:
                    5f:b6:78:d4:7b:b5:81:a8:56:27:ff:60:3b:92:58:
                    62:db:23:b7:86:94:2f:14:d0:1e:e5:c1:11:24:61:
                    e9:5f:08:f7:d7:05:37:74:55:3b:62:a2:24:0a:b0:
                    36:40:b0:4e:4a:53:5c:62:b5:00:71:d3:af:26:cb:
                    d5:99:41:26:c6:62:d8:a8:57:16:bb:e5:78:75:f5:
                    c3:f1:d6:05:9c:7e:4a:da:76:1d:ae:00:e6:dd:3a:
                    83:11:ea:54:20:ec:ea:2a:93:db:7d:75:cf:d1:5d:
                    23:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:FC:6B:BC:0C:32:F4:07:01:2E:AC:D2:78:5E:33:00:F8:C8:81:89
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/08cd2a48-2b4a-3952-a619-d6785511b52f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.26.56.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:ae:2f:8b:81:1a:de:f4:10:2c:0e:41:5e:ac:07:63:2d:0b:
         8d:8c:e4:e2:e5:68:c7:65:75:9b:ae:08:3b:73:30:fa:33:57:
         82:34:05:9f:f1:6f:3e:96:a2:a8:c1:4c:37:b2:77:06:79:b4:
         56:e9:05:96:de:30:4b:84:4f:bd:56:47:ef:78:dd:19:99:dd:
         5a:bd:88:17:96:61:1a:0d:0d:ee:3d:bf:49:6b:16:d7:13:f2:
         ac:37:b4:82:23:6b:ca:9c:ef:dd:f2:a1:46:f4:32:fa:60:d0:
         f1:5a:c1:ba:43:39:2e:9d:e1:e9:27:35:b8:8c:32:62:ff:ee:
         20:c9:17:15:17:69:3a:e2:f6:c4:ec:dc:e9:22:1b:ca:43:89:
         a9:93:7a:a4:b2:4e:2d:c9:7f:5d:24:89:06:c8:33:ed:b1:1d:
         92:8c:70:d1:56:dc:bb:09:37:89:02:1c:7d:b6:fe:47:9f:64:
         cc:89:7f:4f:80:e7:21:13:36:d7:9a:5e:35:30:ae:e3:97:8a:
         ed:a4:1a:ab:68:51:5a:63:fc:a0:d9:8b:c9:2f:d8:06:09:1b:
         bb:7d:ae:8f:2d:cc:c8:86:00:db:d9:37:0e:82:56:95:9e:01:
         f1:4e:6b:f2:86:08:73:72:10:97:93:9e:ac:60:27:fd:a6:d9:
         2d:3c:18:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:41:44 2024 by rpki-client on console-ams.rpki-client.org