Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/2e679322-54dc-3373-a9af-9508bb80699b.roa
File:                     2e679322-54dc-3373-a9af-9508bb80699b.roa (raw, json)
Hash identifier:          BZXz7vLEKT1NbMdgxBXf0MQ+0+dmzO60t3T7kbGJN78=
Subject key identifier:   8F:19:6F:0E:56:6C:22:47:FC:C6:15:6E:AB:44:B4:E0:4A:6C:EA:98
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285844D7151F18D67171B05F658B00
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/2e679322-54dc-3373-a9af-9508bb80699b.roa
Signing time:             Sat 10 Feb 2024 02:00:26 +0000
ROA not before:           Sat 10 Feb 2024 02:00:26 +0000
ROA not after:            Fri 10 May 2024 01:00:26 +0000
asID:                     212238
IP address blocks:        23.26.49.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 29 Apr 2024 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:d7:15:1f:18:d6:71:71:b0:5f:65:8b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Feb 10 02:00:26 2024 GMT
            Not After : May 10 01:00:26 2024 GMT
        Subject: CN=846c7991-0f21-4ed9-bcde-aa9fc459116b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:05:37:ea:6d:f3:2b:d9:d2:f9:04:01:18:7e:
                    68:18:56:8b:1f:e7:9f:82:48:59:81:97:5f:cb:0a:
                    17:dd:36:73:8e:c6:e7:20:ac:ea:86:13:54:c7:de:
                    18:31:30:b3:ce:f8:ef:1e:80:9a:9f:b5:a5:7d:71:
                    98:af:7d:90:dd:7c:94:8b:c2:0b:04:f9:28:fb:7d:
                    e8:ae:36:4c:ae:df:f1:28:91:65:78:2c:a7:3a:63:
                    1f:68:fb:e4:92:42:45:cf:63:5f:7d:78:76:f8:7d:
                    00:0c:37:92:8d:8d:be:47:b2:c0:ce:11:cf:3b:d4:
                    9c:d2:ed:2c:db:17:8f:0f:fc:d4:01:e5:b7:ed:b9:
                    57:77:b7:5e:40:87:9a:b7:7f:f2:09:b3:b3:e5:33:
                    a7:c7:2c:91:0e:36:3a:fc:1a:38:27:bf:0d:ed:04:
                    be:d5:7c:dd:26:7d:cc:77:8d:73:5d:3a:b7:7a:d3:
                    74:3f:47:da:67:b5:21:68:0f:ef:9a:40:56:53:79:
                    ca:7e:df:25:53:e6:13:55:db:19:c0:0c:8e:d7:6f:
                    d0:c0:2e:85:f2:7f:13:4f:25:7a:13:98:2c:68:21:
                    75:2e:47:31:b2:7d:84:8f:8e:5e:11:95:f6:91:2d:
                    d1:97:c7:bf:b3:3f:c8:2a:c6:5e:4e:82:87:55:20:
                    9e:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:19:6F:0E:56:6C:22:47:FC:C6:15:6E:AB:44:B4:E0:4A:6C:EA:98
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/2e679322-54dc-3373-a9af-9508bb80699b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.26.49.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:4d:6f:7a:14:0e:b9:74:dd:24:fb:60:d0:fd:c5:4e:4f:49:
         00:85:0d:3f:37:12:db:3c:7d:eb:3d:1e:04:e7:01:ba:cf:94:
         90:0a:9f:ab:b3:12:24:35:f1:f3:28:58:77:ab:41:6c:99:5a:
         dd:dc:a1:a1:9b:cd:2b:c4:f8:fe:97:cd:ec:95:e6:b9:4e:cd:
         8c:59:8f:07:c9:18:7e:35:f9:88:a1:a8:60:a2:72:97:b9:c1:
         1e:5f:0d:64:db:dc:e8:ac:6b:9d:f2:21:78:01:4a:8d:56:ac:
         80:a6:37:3e:9c:4c:53:76:50:95:b1:75:c8:d5:4d:1d:ad:96:
         b0:ef:5d:2c:76:77:39:0a:c7:7d:b2:51:01:4f:4b:5b:45:fb:
         2f:94:db:e8:6f:49:68:4e:f8:59:a5:0c:5e:25:ce:84:c9:48:
         a4:4c:f0:f0:44:cf:69:17:43:8a:f4:30:a1:5e:43:48:db:7b:
         bc:d0:3b:de:f3:a2:5d:b0:a9:a6:40:fd:d3:2b:95:76:ea:28:
         53:02:14:dc:f7:4e:07:37:d7:fa:5d:7b:03:09:93:20:ec:aa:
         5d:2b:27:38:3f:e4:67:78:ce:6a:02:3a:60:be:4f:5a:dd:37:
         35:01:22:51:2c:97:b0:49:0e:c6:e5:72:d9:70:b5:85:06:2b:
         47:2c:0c:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 05:33:41 2024 by rpki-client on console-ams.rpki-client.org