Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/2a61a8f5-8eb0-3edf-9c42-c38589398765.roa
File:                     2a61a8f5-8eb0-3edf-9c42-c38589398765.roa (raw, json)
Hash identifier:          UlrnWgx1Tkh2lQLfCd3jjF6v98H+zkPApYKKiqC09U0=
Subject key identifier:   5C:D1:D2:BB:B8:A4:99:BA:69:BF:A4:70:ED:6B:17:9E:C4:8F:41:F2
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285845968FC0BF72109A346E403F80
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/2a61a8f5-8eb0-3edf-9c42-c38589398765.roa
Signing time:             Thu 18 Apr 2024 16:06:58 +0000
ROA not before:           Thu 18 Apr 2024 16:06:58 +0000
ROA not after:            Wed 17 Jul 2024 16:06:58 +0000
asID:                     61317
IP address blocks:        23.26.46.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 05 May 2024 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:96:8f:c0:bf:72:10:9a:34:6e:40:3f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Apr 18 16:06:58 2024 GMT
            Not After : Jul 17 16:06:58 2024 GMT
        Subject: CN=8309ffca-cdf6-41be-88ad-1730e8614fda
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:b6:c2:fc:23:61:c4:e9:ee:43:8a:f5:a8:5a:
                    95:01:3b:77:49:05:15:79:ae:67:f7:2d:83:ab:01:
                    60:d2:0d:44:53:0b:04:27:3d:19:38:bc:56:91:00:
                    2b:39:3b:dd:d3:ff:17:b5:55:3d:55:2b:f9:3e:4b:
                    0c:5d:9f:99:3b:80:e5:8c:29:43:68:a5:6f:c6:6c:
                    7b:cf:d7:a9:30:61:d3:cb:3f:ab:b0:ea:ac:13:e9:
                    fa:e2:2b:5e:70:e8:0f:96:ba:f3:3b:55:4a:5e:f2:
                    7c:0d:47:c9:ba:5a:11:bc:63:03:d2:82:5e:dc:b0:
                    5b:a8:6c:32:88:13:af:5a:ce:85:a1:55:d7:38:6f:
                    ec:9f:5f:6a:d3:ba:a2:21:7c:23:80:2f:69:d5:15:
                    34:e1:62:57:b9:5c:6d:be:fa:c5:51:83:bb:fa:ae:
                    0b:62:e2:a9:22:ee:fe:da:f1:5c:ec:51:65:f8:9f:
                    cf:29:03:8a:6a:f6:b3:a6:79:cd:78:75:f3:8a:68:
                    fa:d9:db:10:96:bf:74:8b:c0:e8:e1:2a:10:30:40:
                    df:f6:fa:3f:f0:5b:45:2f:f7:fe:7d:cf:66:45:81:
                    90:f3:42:65:4f:67:7b:d1:2f:06:fe:6f:ee:25:d1:
                    99:b9:cb:95:87:d2:4a:49:04:be:ef:1e:fa:2f:9c:
                    66:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:D1:D2:BB:B8:A4:99:BA:69:BF:A4:70:ED:6B:17:9E:C4:8F:41:F2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/2a61a8f5-8eb0-3edf-9c42-c38589398765.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.26.46.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:0c:84:d0:ba:91:91:c8:a0:36:d0:fa:d1:1e:2d:fe:fb:09:
         99:ad:fb:ee:5b:4e:95:98:c3:3b:59:19:39:79:0f:11:9b:c2:
         8e:87:91:49:18:03:64:6e:61:e6:08:fc:29:c8:34:31:54:66:
         e2:6a:ab:fd:ca:8b:3f:7a:63:a8:18:16:2b:7e:db:90:c0:c1:
         26:3f:77:aa:44:b7:e8:82:25:40:49:03:7b:b0:20:e4:aa:fd:
         fb:d3:eb:e6:bd:d8:d4:ce:68:5d:a0:5e:0f:51:53:b7:92:c8:
         47:95:d2:45:23:1f:58:17:76:5a:f0:ed:6f:04:72:71:1e:3c:
         bc:56:13:3b:26:9a:a0:08:c4:06:07:56:68:c6:a8:3d:db:29:
         57:7c:ae:ad:5f:8f:56:92:e4:c5:17:fd:08:d1:15:f9:6b:9f:
         73:01:5c:b2:fc:27:35:d6:2d:98:18:25:e8:20:0f:08:c9:67:
         ee:cd:a8:6d:f3:ac:4d:4e:8c:84:39:e4:0f:5b:77:df:e4:7b:
         dc:40:12:cf:cb:4d:6c:e5:43:fe:4e:c6:84:aa:9b:85:9b:50:
         7c:a7:a6:17:17:64:8f:8c:4c:1c:8e:92:29:4e:e2:fc:13:fa:
         64:68:7e:f7:ff:d9:49:b8:2b:2f:7c:8b:b8:c3:c0:e6:7d:44:
         32:89:00:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 02:06:24 2024 by rpki-client on console-ams.rpki-client.org