Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/0af909ab-1156-3784-b0f8-10b7c8819074.roa
File:                     0af909ab-1156-3784-b0f8-10b7c8819074.roa (raw, json)
Hash identifier:          IObm2MhsVEImVnTJ5fvcUMphwAaDJSyjnRGgX3TVW8I=
Subject key identifier:   87:A4:D8:7A:C7:60:67:3C:FD:1E:1A:F4:CB:5F:2A:71:2D:B1:FF:EE
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285847A64DBB5165E5421B22284200
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/0af909ab-1156-3784-b0f8-10b7c8819074.roa
Signing time:             Thu 24 Oct 2024 17:00:45 +0000
ROA not before:           Thu 24 Oct 2024 17:00:45 +0000
ROA not after:            Wed 22 Jan 2025 18:00:45 +0000
asID:                     137409
IP address blocks:        23.26.36.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:a6:4d:bb:51:65:e5:42:1b:22:28:42:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Oct 24 17:00:45 2024 GMT
            Not After : Jan 22 18:00:45 2025 GMT
        Subject: CN=dbbeb5f8-3ee6-45f9-abca-57cc70df041a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:e7:a4:23:d5:5d:ce:c1:0e:c6:fe:f5:f6:29:
                    37:2e:cd:1b:ce:de:8e:be:6c:69:c8:e6:a8:cf:29:
                    1d:86:e4:d0:6d:94:d0:1b:cd:b4:47:47:65:29:cc:
                    f5:c0:e2:db:96:62:e6:e0:f6:06:01:29:32:70:1b:
                    1e:8c:67:7a:cd:62:ed:c9:01:e2:83:ff:5e:ac:82:
                    72:16:de:3f:8d:8e:34:9e:f1:03:2f:94:9e:d6:2b:
                    23:af:01:64:fc:e0:f4:85:a4:08:91:bf:80:fa:c8:
                    8a:48:11:94:a0:64:21:45:9d:6e:71:92:2a:c7:88:
                    cf:ca:9c:d0:b0:83:b3:b5:3b:72:ae:67:c9:3f:1f:
                    c4:8f:1b:39:a9:14:1f:d5:df:b2:5a:ab:86:95:6f:
                    2f:55:10:17:c6:06:6d:35:ca:c8:b2:0a:cb:89:e5:
                    bf:b6:2a:81:3e:87:e1:3e:dc:76:6e:04:46:74:e8:
                    16:52:8e:28:2c:c4:aa:42:88:db:d2:53:46:48:80:
                    8c:2e:ff:04:96:c6:dc:42:09:8d:e6:ea:26:48:6c:
                    d1:ef:3f:20:65:29:9e:8c:26:b6:13:c8:40:df:2e:
                    88:03:a2:e5:cb:35:c4:17:61:43:e6:21:b7:86:c2:
                    fb:c4:6c:f3:a9:20:ff:60:23:44:b5:72:e3:f7:7b:
                    c5:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:A4:D8:7A:C7:60:67:3C:FD:1E:1A:F4:CB:5F:2A:71:2D:B1:FF:EE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/0af909ab-1156-3784-b0f8-10b7c8819074.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.26.36.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a2:b6:65:46:9b:aa:3d:e4:b8:2a:59:ec:e4:9b:65:87:d9:c3:
         73:2c:10:80:12:19:b2:57:9c:2f:5a:72:24:be:97:c5:16:fc:
         c7:58:79:c6:cb:4f:7d:a7:b2:38:a3:e2:5d:f3:8a:5f:ad:6f:
         4a:cd:55:89:1f:98:40:ba:6e:f2:6a:97:b0:59:2a:3a:37:17:
         01:d8:c1:a2:7e:02:36:2f:b4:81:a2:24:d8:d2:96:9b:a3:18:
         56:c2:26:86:68:fd:93:94:80:d3:98:57:86:10:9d:72:b7:65:
         66:b7:a8:d7:27:16:70:a1:56:63:4f:29:4f:e9:37:76:2a:98:
         0a:19:db:7e:21:f5:ec:91:15:e9:11:e6:5d:4e:98:34:a0:0f:
         e2:8b:a8:22:c9:f7:30:d2:b5:a6:3f:3b:a9:cf:86:8f:be:9c:
         26:49:77:04:91:96:ad:bb:e3:94:e5:ac:9a:15:1a:1f:63:a3:
         dd:f7:c9:0c:62:b4:44:ac:cf:5c:d2:f9:91:cf:69:dd:8c:c2:
         09:84:27:ae:3a:0e:d0:74:8b:98:a1:39:3b:22:54:35:ea:96:
         4d:8a:2c:a2:fb:19:31:c8:44:b4:4b:51:df:d1:88:4b:20:82:
         be:b0:13:86:b0:54:89:a6:2a:0c:cf:c5:b6:5e:4d:09:44:85:
         d5:b1:87:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 06:37:36 2024 by rpki-client on console-ams.rpki-client.org