Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/206cafb6-fbc7-30e6-b93a-2198b8d0c859.roa
File:                     206cafb6-fbc7-30e6-b93a-2198b8d0c859.roa (raw, json)
Hash identifier:          KMpZBlhK5f7R49bSTYqbxF2dPc9yHSw15nOxAWArgPI=
Subject key identifier:   B5:32:35:B6:81:A1:3A:5E:ED:BA:13:EC:5E:80:F0:E4:0E:E4:CF:BF
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285845BD48E1B9029C81D301E5B3A0
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/206cafb6-fbc7-30e6-b93a-2198b8d0c859.roa
Signing time:             Thu 02 May 2024 13:00:34 +0000
ROA not before:           Thu 02 May 2024 13:00:34 +0000
ROA not after:            Wed 31 Jul 2024 13:00:34 +0000
asID:                     7029
IP address blocks:        23.26.236.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 05 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:bd:48:e1:b9:02:9c:81:d3:01:e5:b3:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: May  2 13:00:34 2024 GMT
            Not After : Jul 31 13:00:34 2024 GMT
        Subject: CN=cdf6497b-8ea1-4e72-88d5-7eb900ee404d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:3a:7d:60:7c:6b:13:77:91:d7:d2:24:5d:30:
                    b2:4a:0c:94:3e:4f:ce:03:9d:54:dc:7e:c0:8e:79:
                    01:23:f2:4f:9a:23:4f:34:fe:9b:87:0a:5f:2c:8f:
                    28:6f:51:71:96:1f:96:81:ac:82:33:a5:78:03:c7:
                    35:7c:81:6f:d4:81:6b:11:54:d5:59:f7:e2:aa:11:
                    f3:b5:10:3f:95:67:9e:e4:06:ca:91:76:5d:bd:7b:
                    80:c8:82:90:a3:28:23:5e:ee:a5:32:cd:6b:85:01:
                    65:47:f9:29:f9:77:51:30:33:87:06:28:75:e0:cc:
                    20:00:4d:31:78:c4:3b:d5:7e:bb:cc:4a:de:a1:b8:
                    56:b9:16:2b:15:ff:3b:e8:ae:a6:db:19:9b:2f:7e:
                    8c:56:50:21:1a:94:8a:5f:11:72:cb:1f:ce:dc:98:
                    79:89:c2:c2:96:85:48:eb:1c:c0:e9:37:a9:b8:20:
                    ca:ca:33:76:17:37:9f:be:ab:d0:93:e9:01:10:d0:
                    24:dd:55:e5:57:16:f4:da:b2:b5:7b:8d:76:87:28:
                    1a:14:bc:12:5e:c6:27:5f:38:ca:c4:4f:9c:2d:48:
                    d6:7c:ce:48:47:92:ce:18:aa:b1:dd:c5:f6:2c:42:
                    17:55:52:16:52:c8:4e:d8:f8:b8:d4:d3:7b:80:45:
                    76:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:32:35:B6:81:A1:3A:5E:ED:BA:13:EC:5E:80:F0:E4:0E:E4:CF:BF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/206cafb6-fbc7-30e6-b93a-2198b8d0c859.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.26.236.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a3:b6:89:a2:7d:6f:75:98:72:8b:cb:36:88:8b:3d:0d:69:9b:
         50:23:a9:42:bb:c3:a7:16:89:ef:93:e7:91:6a:f0:f0:03:a5:
         46:95:41:92:c2:98:b5:92:92:ca:1e:87:b4:6c:01:1b:1b:bc:
         31:2e:fe:6f:1a:d2:24:29:d9:82:32:59:12:40:b2:7f:4e:16:
         50:f4:16:bc:dc:e8:0a:83:af:6e:90:27:1e:17:b5:f6:76:21:
         0b:7a:c6:18:45:bc:74:00:2a:26:d3:bb:f5:db:9d:4a:4d:a9:
         01:ce:9a:f9:55:f1:5f:91:c8:3f:ac:94:0c:0e:68:c0:e5:a6:
         bf:ec:14:6f:65:9b:d1:a4:92:11:07:5e:7e:0f:e3:88:b0:fe:
         ef:ae:11:bc:23:f9:16:db:6f:f9:9e:d1:1b:e7:9b:a0:6e:4c:
         92:da:e2:dc:17:04:07:70:f7:0e:a2:f3:40:15:f7:5a:04:31:
         83:1e:1f:12:b9:93:b0:91:d8:65:86:a1:92:60:dd:43:22:a2:
         2b:db:37:ff:ff:78:a9:22:62:91:34:84:11:12:b7:b5:2d:ba:
         c2:a7:c2:d7:2c:41:a6:01:a4:cd:66:23:a2:44:17:b9:09:af:
         91:47:04:12:e4:bd:d6:60:de:3c:9d:08:a4:c0:98:00:1f:23:
         c3:2a:4d:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 15:10:15 2024 by rpki-client on console-fra.rpki-client.org