Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/40fa6496-0728-3f85-816f-def69dc3c4c1.roa
File:                     40fa6496-0728-3f85-816f-def69dc3c4c1.roa (raw, json)
Hash identifier:          hCiwqJg1Qo5w7uK1zUP148oaUxJAyxR1MfOY4j0pESU=
Subject key identifier:   99:5F:1C:D5:CE:DE:74:E8:C4:27:28:2F:E6:B6:3E:DD:E6:47:55:48
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584797E13F38F193DA37B34CEC10
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/40fa6496-0728-3f85-816f-def69dc3c4c1.roa
Signing time:             Sat 19 Oct 2024 13:00:42 +0000
ROA not before:           Sat 19 Oct 2024 13:00:42 +0000
ROA not after:            Fri 17 Jan 2025 14:00:42 +0000
asID:                     13737
IP address blocks:        23.26.250.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:97:e1:3f:38:f1:93:da:37:b3:4c:ec:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Oct 19 13:00:42 2024 GMT
            Not After : Jan 17 14:00:42 2025 GMT
        Subject: CN=b1bf3cb8-827a-4796-a6a3-4c722f415823
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:e5:51:f2:ac:7d:6b:9f:c9:43:07:35:b4:d8:
                    94:f7:1b:ce:b4:1d:a1:e6:7f:d1:d2:aa:86:09:7c:
                    19:b9:f0:fb:2c:ea:77:57:3e:42:99:1b:01:31:12:
                    14:f1:c7:9e:04:09:cc:5b:68:5e:71:68:3f:28:69:
                    cf:bd:7d:24:a0:e7:4a:56:3f:10:c6:53:c7:8b:87:
                    1e:c7:a8:4b:43:63:82:a8:c2:0e:81:dd:1d:d0:b7:
                    f8:40:d7:f4:36:3b:9e:69:7d:98:5e:2b:dd:20:cc:
                    62:6a:0e:ed:90:71:74:31:ad:32:ea:2e:13:66:ef:
                    f6:d6:bb:16:af:06:62:25:9c:53:28:9d:8e:70:46:
                    92:2f:04:4d:46:ed:d5:00:c6:11:b2:07:7f:60:71:
                    27:9f:0a:b9:3c:33:92:ed:cb:ae:97:1d:13:d6:b9:
                    36:22:8b:73:5c:70:9e:e7:de:31:57:c3:02:a6:f6:
                    ea:49:1f:d0:1f:12:c3:ab:a9:c2:6b:0c:85:4e:66:
                    f5:fd:d4:9a:7b:2d:63:be:5d:0a:cf:0a:1f:7b:c8:
                    33:80:8b:67:27:e2:38:d1:ed:7d:7e:0d:24:97:63:
                    cc:63:55:9a:8a:98:a0:6f:15:ed:25:4d:bd:9b:b8:
                    8f:fc:6b:6c:01:73:71:dc:5e:83:35:c9:a8:43:55:
                    1c:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:5F:1C:D5:CE:DE:74:E8:C4:27:28:2F:E6:B6:3E:DD:E6:47:55:48
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/40fa6496-0728-3f85-816f-def69dc3c4c1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.26.250.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:01:3a:17:f6:18:00:c5:8b:37:c8:55:7d:75:37:ec:b4:ec:
         b8:22:9b:e3:af:e0:17:13:76:51:08:eb:ef:31:f5:53:b6:1c:
         91:0b:78:a7:c6:0f:5d:6e:35:ef:50:b1:49:dd:76:de:4c:d4:
         63:4f:59:40:a7:b2:5c:2d:40:d9:fa:74:08:fa:2c:18:0d:e6:
         a2:0f:8f:49:da:50:80:03:d8:26:d5:42:91:68:42:27:f8:32:
         b3:ba:32:1e:f7:96:a9:7b:d0:fa:cf:f4:5e:08:a7:60:bd:16:
         66:ff:a7:f0:49:ad:26:c9:82:91:a4:0d:e2:4c:43:06:6a:3a:
         a3:6f:ad:0a:e2:60:6a:6d:71:3d:69:b8:1b:f5:1f:45:76:86:
         13:2b:3a:0b:71:af:18:02:83:0e:69:8b:bc:82:b9:9e:9f:39:
         89:ca:a4:c2:e2:79:46:ac:62:15:62:a6:52:12:9e:0a:0b:e5:
         8f:cc:eb:79:44:74:e2:9d:4b:e8:cb:de:3a:75:7e:bb:ba:40:
         65:18:93:2a:01:60:2e:7f:4f:c5:6b:ef:fe:01:53:b7:c5:77:
         14:a3:58:ee:64:27:d4:9e:22:b1:19:b0:df:90:81:34:b8:e1:
         a7:ac:d5:8c:49:4f:99:27:eb:e1:1b:be:03:db:2d:9b:93:42:
         48:5e:22:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 06:37:40 2024 by rpki-client on console-ams.rpki-client.org