Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/1caa95b4-a04f-33b9-8249-fa10fd54e151.roa
File:                     1caa95b4-a04f-33b9-8249-fa10fd54e151.roa (raw, json)
Hash identifier:          GzS9BEOU49w26kZrQk577uDcsiZ2bxUTLFKqPbjtf3g=
Subject key identifier:   AB:87:50:B9:26:12:24:C7:FE:34:15:CB:40:16:6B:EC:CF:CB:2E:0F
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F432858482D5A910C708EFC62B0ADA900
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/1caa95b4-a04f-33b9-8249-fa10fd54e151.roa
Signing time:             Thu 12 Dec 2024 02:00:38 +0000
ROA not before:           Thu 12 Dec 2024 02:00:38 +0000
ROA not after:            Wed 12 Mar 2025 01:00:38 +0000
asID:                     61317
IP address blocks:        23.26.252.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:2d:5a:91:0c:70:8e:fc:62:b0:ad:a9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Dec 12 02:00:38 2024 GMT
            Not After : Mar 12 01:00:38 2025 GMT
        Subject: CN=eb46d77b-d026-41f8-9baf-c7c8f3486183
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:ed:6f:2b:bf:eb:f2:be:99:f6:87:96:7e:04:
                    59:da:91:5e:0a:15:56:88:28:a6:f2:b7:0c:9f:51:
                    08:24:b6:9c:f8:95:a2:0a:b7:28:e3:34:cf:d3:86:
                    c4:a2:f3:2d:3b:0c:e6:a2:0c:7b:ca:b3:3b:54:47:
                    cc:12:ce:09:1b:06:96:cf:97:a2:60:d2:9a:d4:3b:
                    d0:68:ef:84:08:de:4a:81:ea:06:fc:23:61:6f:8f:
                    af:66:ce:b6:ad:80:54:e5:a0:18:23:dd:03:96:8d:
                    37:ee:a9:ce:42:3e:cf:0e:2f:b9:bf:57:3f:86:5b:
                    2c:8b:48:94:eb:47:28:1c:07:0a:e1:b8:5f:08:75:
                    b4:58:2c:35:9f:2b:32:9f:27:ba:eb:2d:a1:dd:f8:
                    a6:d5:f4:8b:31:7c:3e:83:f7:ab:c8:05:d3:ff:94:
                    62:99:ec:b1:91:9c:78:38:b5:8e:38:c9:3c:0e:77:
                    a2:20:6b:c1:db:c6:6c:08:5b:f0:b3:7b:01:57:e8:
                    53:30:db:d6:6a:81:46:a2:8d:e5:1f:14:e4:d3:e5:
                    ff:66:6e:5c:67:a4:6f:a0:f6:08:88:e9:e2:ca:c3:
                    f6:f5:05:56:1f:09:ff:56:3c:20:e5:cb:1f:28:e0:
                    84:49:b8:ef:79:7f:a5:f0:d3:d9:8d:af:5a:e9:4f:
                    00:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:87:50:B9:26:12:24:C7:FE:34:15:CB:40:16:6B:EC:CF:CB:2E:0F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/1caa95b4-a04f-33b9-8249-fa10fd54e151.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.26.252.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:0b:4a:ac:12:bb:ec:be:6a:6a:37:5c:26:11:d0:e8:e2:ca:
         09:73:77:cf:68:28:c9:f7:5e:23:06:5a:10:a8:93:b9:47:bf:
         a2:4f:a9:fa:35:d0:42:f4:34:d2:77:28:b1:f3:dd:49:5a:92:
         c4:df:e5:07:06:4f:2d:44:4a:09:53:fa:99:68:58:2f:56:4e:
         97:3b:dd:51:ae:17:9e:14:5b:9b:48:1a:77:e6:51:ee:b3:9c:
         85:fd:c2:7b:8d:60:bc:7c:82:d5:cf:59:17:53:47:56:38:85:
         e8:39:96:92:bb:1a:e0:7f:1a:e2:b2:93:9f:f0:a4:a3:33:95:
         a6:a0:b4:a6:02:ff:71:5b:87:cc:73:09:20:e0:f9:b8:59:fd:
         69:c7:f6:97:75:4d:bd:f3:45:0f:47:89:0f:0b:9e:3b:6f:a0:
         a9:09:38:1b:e8:84:11:24:40:eb:14:69:af:7a:7f:7b:1a:09:
         c8:b9:1f:64:67:0c:a7:d4:b5:b0:13:a0:88:9c:b9:93:3e:c2:
         9e:44:c6:a4:90:29:ee:87:c8:cf:e2:1c:52:10:82:a3:4c:a7:
         1e:4f:ae:69:0b:10:53:6b:68:2f:bb:f8:15:45:17:22:5f:f1:
         ca:9a:a7:02:9b:3a:35:6f:9d:d0:ff:64:96:71:70:2b:76:50:
         80:2a:cb:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:54:39 2025 by rpki-client