Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/3d4d2593-f35d-3140-aa3f-05a01464bcb9.roa
File:                     3d4d2593-f35d-3140-aa3f-05a01464bcb9.roa (raw, json)
Hash identifier:          tSZ68elPSm88wF50Ybh/ECtTA1oLUMyxuCKZhng+1TE=
Subject key identifier:   D0:9F:3D:77:76:FF:69:BB:5B:33:71:BA:97:3C:2A:9B:8E:05:B7:73
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F432858492CAE9A6FF1FF5C69B5744800
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/3d4d2593-f35d-3140-aa3f-05a01464bcb9.roa
Signing time:             Thu 13 Mar 2025 13:00:52 +0000
ROA not before:           Thu 13 Mar 2025 13:00:52 +0000
ROA not after:            Wed 11 Jun 2025 13:00:52 +0000
asID:                     13576
IP address blocks:        23.26.117.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:2c:ae:9a:6f:f1:ff:5c:69:b5:74:48:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Mar 13 13:00:52 2025 GMT
            Not After : Jun 11 13:00:52 2025 GMT
        Subject: CN=34f2dad4-fa2f-40b0-b443-d8d46ecaba44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:7c:8c:e7:69:a2:ff:8d:e1:f3:55:c8:8a:c7:
                    54:c4:a4:7a:bf:ff:69:8c:cf:48:18:d5:15:d2:d5:
                    9b:a1:2c:af:98:91:99:a8:bc:e2:2b:bb:f9:60:a5:
                    de:db:4d:26:69:f0:a4:73:ff:db:69:88:bd:01:c2:
                    a4:4e:f1:28:fc:e5:73:c7:fd:bb:3d:92:21:1a:fe:
                    8f:18:f2:07:33:20:ad:5b:42:b5:bc:66:6c:6b:85:
                    15:a6:b6:58:62:4d:e4:21:c7:10:7b:a9:20:ad:18:
                    05:8f:dc:c1:b6:89:89:4d:59:39:37:9a:8d:80:29:
                    45:45:4d:03:36:b1:24:62:2c:8f:61:f5:b8:7e:67:
                    9e:09:90:8d:d7:9b:f4:b4:01:d2:b0:5c:19:cf:ef:
                    f7:78:41:22:6b:11:db:9e:4e:9a:df:d5:51:fb:24:
                    d3:3a:27:cb:b7:9a:83:20:59:02:cb:ac:f7:81:5d:
                    84:a1:56:84:07:8e:60:9f:c9:b4:e0:44:a7:bf:4f:
                    58:d0:8c:40:c5:ee:86:41:19:b5:d9:fe:fd:c1:05:
                    81:b4:7d:d4:65:e0:0d:cd:0f:13:93:f5:0a:54:de:
                    78:69:60:7e:60:e2:97:38:bf:11:a3:cd:bc:99:b1:
                    c7:ec:00:b4:40:89:86:f2:14:3d:09:84:03:63:fa:
                    43:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:9F:3D:77:76:FF:69:BB:5B:33:71:BA:97:3C:2A:9B:8E:05:B7:73
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/3d4d2593-f35d-3140-aa3f-05a01464bcb9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.26.117.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:e0:16:33:f3:52:d6:0d:67:62:11:66:48:ba:83:b1:ad:ac:
         e8:e7:ce:fb:b7:c3:1a:90:cd:41:68:7d:5c:10:3b:3d:ee:c9:
         73:81:fc:e6:41:e9:2d:34:92:95:da:7a:79:8c:3b:ce:92:cc:
         f3:f1:0f:07:9a:4e:36:cb:4b:d2:40:3c:8f:79:7a:77:b6:21:
         bd:2e:f6:51:e3:00:de:c3:1c:ef:92:b4:55:3a:b8:66:b2:d0:
         f9:df:04:e3:cd:03:88:7a:0c:e0:4a:50:e0:88:ab:41:73:83:
         fd:dc:e7:ca:64:2f:b7:41:b7:b2:c0:a7:07:5c:5a:33:72:3d:
         19:e9:d6:5b:c8:d2:42:b6:ad:d1:f1:bb:ab:68:34:3a:16:01:
         09:e7:23:30:20:05:ba:c4:05:72:3d:4b:0e:74:40:6e:8e:e8:
         a4:28:f6:3e:b2:b9:f5:75:27:f4:c8:b1:90:00:9a:34:f3:eb:
         47:d0:de:56:4e:bd:e2:d6:7c:68:8d:c9:57:c4:dd:89:89:92:
         09:bd:51:a0:51:b0:b3:69:69:8d:3c:0d:31:70:67:8f:24:2d:
         12:95:12:c2:af:f9:79:e1:1d:0c:23:6b:d0:fe:63:b1:db:21:
         b6:b0:b9:20:1e:89:9b:88:c2:5a:15:4e:83:f6:1e:c9:b0:9d:
         57:37:ea:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 15:04:42 2025 by rpki-client