Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/30737597-3413-3e20-a6ce-d471156fd800.roa
File:                     30737597-3413-3e20-a6ce-d471156fd800.roa (raw, json)
Hash identifier:          2yVldylKO9tbiexDBM/zsu7Rq8veJR49lcZXhBuUKUY=
Subject key identifier:   97:2D:55:0C:E5:3E:C4:17:B9:5A:B0:51:66:2D:44:39:E6:DD:BE:A9
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F432858472B007E68B40754FA1E996090
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/30737597-3413-3e20-a6ce-d471156fd800.roa
Signing time:             Tue 10 Sep 2024 13:00:40 +0000
ROA not before:           Tue 10 Sep 2024 13:00:40 +0000
ROA not after:            Mon 09 Dec 2024 14:00:40 +0000
asID:                     5065
IP address blocks:        23.26.113.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:2b:00:7e:68:b4:07:54:fa:1e:99:60:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Sep 10 13:00:40 2024 GMT
            Not After : Dec  9 14:00:40 2024 GMT
        Subject: CN=cb9d27f2-70c5-40c9-83ef-8e2a7e89c6b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:78:84:4b:1a:ae:64:5d:a6:4b:ed:97:b9:b7:
                    7c:9d:4d:02:e8:c9:03:c9:9c:88:d6:88:f6:ae:04:
                    a4:12:b0:7f:91:03:0b:48:56:7a:97:e0:64:a5:ba:
                    cb:93:aa:0e:f5:f6:08:f3:6c:7e:6e:a3:1a:02:a0:
                    3f:6c:81:af:6b:20:60:ac:ed:de:bd:1c:39:92:ed:
                    ee:84:fb:d2:7e:74:f7:2b:07:b3:64:6c:20:ca:2d:
                    cb:13:6c:30:87:21:8b:51:43:af:13:5f:3a:7a:93:
                    64:1c:05:f7:d0:64:49:74:cb:08:64:b9:ae:cc:1d:
                    e6:55:7f:ed:40:83:21:cd:b0:f1:66:fb:ee:ed:83:
                    e8:f7:3d:0e:71:2d:cc:3f:a7:31:35:72:35:de:fb:
                    18:54:a2:57:46:65:d1:61:50:35:91:0c:67:fe:79:
                    46:f8:d7:21:d6:11:84:e7:4a:e7:d0:9e:8e:9c:7c:
                    36:e5:9c:09:fc:85:0f:9c:f4:e3:69:a7:15:13:6c:
                    71:7f:04:b1:d7:b8:79:af:6b:9a:57:2a:5c:36:e1:
                    42:30:7d:e5:6d:ff:05:7b:cb:45:c7:55:d6:cc:a3:
                    84:b0:ee:87:76:81:48:3e:59:40:ae:36:7f:02:84:
                    ab:be:20:27:ce:7d:49:7a:ac:f9:20:7e:78:17:2e:
                    7a:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:2D:55:0C:E5:3E:C4:17:B9:5A:B0:51:66:2D:44:39:E6:DD:BE:A9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/30737597-3413-3e20-a6ce-d471156fd800.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.26.113.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:12:dd:ea:70:58:80:a5:04:d0:b0:d5:65:fd:51:89:8d:4e:
         af:bd:75:dd:da:06:85:02:dd:b8:9b:f3:d0:b3:06:b0:ed:dd:
         7f:ee:60:48:dd:26:b1:61:2e:db:9c:d6:83:5d:a3:27:4d:a8:
         12:c8:e6:c1:ef:eb:2d:b5:5d:50:82:5b:6b:70:cf:3a:31:af:
         8f:a8:0a:97:06:95:79:69:bc:ec:07:cf:32:7e:9f:e4:3c:1e:
         87:c4:a3:e7:8a:f1:45:1b:c7:e4:a2:ed:dd:05:a9:9d:92:6f:
         1a:14:d9:90:79:5f:7c:02:00:5d:c9:05:a6:27:1d:90:36:84:
         8c:db:42:05:ee:9d:52:43:59:60:19:55:39:ff:0a:b3:cc:85:
         85:c2:d6:d5:76:a9:50:ef:28:75:58:d2:3e:02:ec:bf:58:74:
         4c:be:7a:51:62:8e:f4:f9:a7:00:4d:7f:d1:ea:2f:46:66:c2:
         fa:a8:14:34:df:20:61:3b:fe:18:66:5a:3e:c1:68:2d:80:85:
         9c:35:7a:2f:74:b6:d6:26:d6:8c:ea:2b:65:ab:0f:3d:80:70:
         b1:60:7d:ae:b9:10:f8:fb:b3:28:f3:f2:bc:fb:f5:ee:c0:87:
         05:b6:d0:c8:c3:ce:0a:b1:13:2d:98:0e:f9:ec:25:89:5d:dd:
         af:86:1b:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 21:45:40 2024 by rpki-client on console-ams.rpki-client.org