Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/214d1f53-071a-3ca2-b840-5e4790dc57a3.roa
File:                     214d1f53-071a-3ca2-b840-5e4790dc57a3.roa (raw, json)
Hash identifier:          rfpVp10bQvuWc891t85Dmzvzxsu7g6WnlXGkPi8W4Nw=
Subject key identifier:   4C:8E:93:23:AC:E9:3A:E9:64:D1:32:55:93:4D:34:B0:46:22:17:1E
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F432858471E70584E75A796F6473D92A0
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/214d1f53-071a-3ca2-b840-5e4790dc57a3.roa
Signing time:             Fri 06 Sep 2024 01:00:31 +0000
ROA not before:           Fri 06 Sep 2024 01:00:31 +0000
ROA not after:            Thu 05 Dec 2024 02:00:31 +0000
asID:                     33601
IP address blocks:        23.26.144.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:1e:70:58:4e:75:a7:96:f6:47:3d:92:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Sep  6 01:00:31 2024 GMT
            Not After : Dec  5 02:00:31 2024 GMT
        Subject: CN=cae4fc21-16f5-4f7b-80ca-f39175afe2cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:ee:86:4f:44:ab:65:f1:1b:f0:9e:f4:a0:7b:
                    34:4e:47:0a:95:28:24:4d:4b:8b:e7:60:bb:b6:c5:
                    02:8c:d8:2a:36:47:11:1d:81:d8:d0:22:d2:87:dd:
                    e7:38:e4:da:b2:1d:95:0d:ea:e7:0e:3f:25:a4:43:
                    3a:a7:68:c8:c5:f5:fc:5c:dc:db:b2:3d:67:19:bd:
                    72:92:30:3b:19:7d:fb:72:53:da:82:88:3a:5a:8e:
                    a3:7e:ac:64:15:1d:67:7d:e1:6d:f4:1c:55:09:ec:
                    35:e7:72:cf:9e:08:bd:f4:0b:75:66:e4:66:d8:25:
                    58:49:65:05:f0:14:e6:6f:74:7d:34:dc:5b:fe:d9:
                    5f:c4:0f:2d:92:67:81:9f:18:ec:4a:a3:87:3d:61:
                    2a:10:5e:6c:f8:16:82:b9:cb:37:31:a8:c3:61:23:
                    9b:a3:f6:a2:04:ff:3b:c7:8e:77:6e:68:66:bf:40:
                    f5:3c:2d:41:29:bd:87:12:68:66:84:4b:66:53:20:
                    57:dc:f0:bb:1d:61:b9:17:1a:ef:d1:01:92:96:2a:
                    9c:2f:0e:12:b2:2e:2a:dd:6d:ce:79:51:57:04:30:
                    bf:49:25:ac:43:d5:b8:3f:9a:a7:07:f1:72:34:74:
                    81:d8:d7:63:1d:3c:a4:a1:c3:32:af:17:49:6a:be:
                    c8:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:8E:93:23:AC:E9:3A:E9:64:D1:32:55:93:4D:34:B0:46:22:17:1E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/214d1f53-071a-3ca2-b840-5e4790dc57a3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.26.144.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:be:14:2e:c1:ea:44:9f:ab:a6:1d:f7:a1:db:af:8d:5e:1a:
         1a:62:f0:c7:37:48:d8:0c:40:9a:f5:77:77:a7:3d:da:0e:69:
         26:a3:10:e4:bd:1c:b3:45:48:8b:6f:d1:48:5b:c0:6d:7e:18:
         92:75:97:f5:e1:71:8b:74:69:98:a9:78:87:32:6f:9e:2b:9e:
         83:37:02:3c:d6:e1:7a:f0:87:df:76:c0:c3:0c:3d:32:72:56:
         31:3e:a1:ec:a0:1e:e2:4f:c3:30:76:55:15:70:a6:fb:75:f2:
         ee:5a:df:2b:65:d0:88:95:4c:d1:ef:9f:7b:d1:60:ba:9d:3e:
         7a:fb:17:56:41:23:f9:d7:bf:d4:8a:1c:fd:79:76:21:36:7c:
         ee:fd:50:80:0c:e6:24:54:e0:b3:86:7b:a0:c4:93:a2:b5:2f:
         58:aa:58:c3:ed:2e:ca:ef:0a:28:28:5d:01:70:4d:1e:46:01:
         2a:be:a2:0e:bb:20:79:6d:ea:9a:43:59:5f:35:13:e4:8b:ba:
         65:37:b6:1d:2e:26:93:61:ac:dc:73:81:84:1e:ba:2e:6c:f5:
         6c:58:41:74:34:fc:20:91:d2:49:93:4e:1b:3e:97:51:df:11:
         28:b8:a5:1d:bd:ce:47:5b:25:a7:08:6e:40:48:9f:7d:0a:76:
         9f:c7:9c:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 06:37:38 2024 by rpki-client on console-ams.rpki-client.org