Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/18f5d9e0-2e61-3ee7-b39d-8c3f7ddefa03.roa
File:                     18f5d9e0-2e61-3ee7-b39d-8c3f7ddefa03.roa (raw, json)
Hash identifier:          lv81Cs2xxQALj9s2EUbry0x9DA/cAQrZUNiF2Vs7CPA=
Subject key identifier:   CB:CE:D7:A0:93:FF:4B:B6:1A:05:A1:75:CC:75:E5:A7:D4:81:2B:44
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285849ABB49406DACD5DD3F7620E00
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/18f5d9e0-2e61-3ee7-b39d-8c3f7ddefa03.roa
Signing time:             Mon 28 Apr 2025 01:00:48 +0000
ROA not before:           Mon 28 Apr 2025 01:00:48 +0000
ROA not after:            Sun 27 Jul 2025 01:00:48 +0000
asID:                     401152
IP address blocks:        23.26.208.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 10 May 2025 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ab:b4:94:06:da:cd:5d:d3:f7:62:0e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Apr 28 01:00:48 2025 GMT
            Not After : Jul 27 01:00:48 2025 GMT
        Subject: CN=c4adb982-4640-4b7b-92a8-0ecf02943c35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:ad:ab:b9:87:2b:ad:86:90:a7:41:45:54:bc:
                    47:ab:8d:cf:05:ec:99:88:b3:7f:91:ec:ec:b3:c8:
                    71:26:b5:ba:a9:5b:49:90:27:5c:2a:01:51:35:a5:
                    f2:9a:8d:28:c0:96:b8:1b:e2:a7:eb:bc:ca:f4:09:
                    86:71:2d:1b:90:a6:94:b1:08:32:f2:3f:1a:84:86:
                    3d:c3:32:84:29:a2:a4:6a:3e:6b:bc:7e:3a:7b:80:
                    c3:ec:c7:7f:5b:39:b4:7f:a4:31:37:8a:3f:5f:0c:
                    c2:dc:6d:64:2c:03:4d:cf:f5:49:70:a1:69:4d:74:
                    94:a4:35:0e:d4:9f:3e:31:e4:b4:a5:a9:7d:68:80:
                    4a:a3:fa:69:dc:57:47:5f:6f:60:7f:29:a7:49:b8:
                    43:da:78:a8:b8:d7:7d:60:4c:0a:c6:54:f6:1d:34:
                    9d:d5:9f:61:a9:0b:c4:3c:05:99:43:e1:3f:20:9d:
                    17:35:19:0e:07:14:be:f9:39:e4:af:c4:17:83:b1:
                    90:75:20:78:eb:b2:ff:38:d5:a1:f5:79:66:35:26:
                    79:c4:12:a8:d9:8e:f6:db:1c:11:c7:eb:88:2e:6f:
                    67:c7:ac:06:9c:0e:66:8c:03:69:46:7a:02:3d:73:
                    a5:4e:0f:ea:76:34:c1:c1:2a:ca:01:af:07:6f:0f:
                    be:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:CE:D7:A0:93:FF:4B:B6:1A:05:A1:75:CC:75:E5:A7:D4:81:2B:44
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/18f5d9e0-2e61-3ee7-b39d-8c3f7ddefa03.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.26.208.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ae:c3:ff:e1:cd:54:44:fa:a5:fc:f6:d0:a4:1d:eb:7c:2b:d8:
         a0:d2:4c:13:5c:1c:b7:bf:1f:e9:9f:9b:21:f5:8b:de:c1:e3:
         39:99:df:38:b7:17:71:09:fd:6a:77:95:be:1f:bd:36:bb:e3:
         30:49:83:ed:4a:4e:4d:3c:9f:12:ad:74:bc:ea:4d:8a:50:a1:
         b5:72:c4:6b:40:9e:b8:0d:10:0c:36:15:01:59:30:c9:14:40:
         91:54:d6:82:d0:f1:e7:0f:f7:44:41:64:fe:87:90:5b:18:5b:
         02:77:ea:7b:81:50:8d:5e:3a:b6:57:bc:ac:57:fa:3a:00:c6:
         34:ab:de:be:92:40:f4:41:55:b0:aa:61:fa:3b:45:c1:52:ea:
         59:2e:67:6a:51:26:6f:21:a7:4b:0c:e1:89:d0:b1:32:4c:f4:
         67:6a:02:84:69:9a:eb:41:2a:4c:10:0d:c4:36:46:7e:1e:d2:
         97:3b:ef:08:d2:51:34:d8:86:35:e5:52:b4:00:2e:27:30:00:
         ca:d1:e4:75:47:36:40:d5:6a:1d:65:d2:bb:b4:e8:d4:17:a0:
         c0:e1:99:10:8b:1c:67:75:89:56:4a:a0:ee:6f:28:5c:5e:fe:
         14:15:8e:ce:b9:23:12:73:0e:1c:e7:7a:f7:63:79:59:86:f8:
         08:72:d1:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 05:11:03 2025 by rpki-client