Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/41e9c4bb-b370-3025-a201-20c211ac3676.roa
File:                     41e9c4bb-b370-3025-a201-20c211ac3676.roa (raw, json)
Hash identifier:          rSdyTBI82UJ0NbFqKozN9jIdIvlLMtXTNlz9c7M3yAA=
Subject key identifier:   07:D5:A6:57:83:5A:A7:A5:CF:FF:80:86:C9:7E:30:38:A7:C7:69:5A
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584968051A553898B3A3C91FA300
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/41e9c4bb-b370-3025-a201-20c211ac3676.roa
Signing time:             Thu 03 Apr 2025 19:08:10 +0000
ROA not before:           Thu 03 Apr 2025 19:08:10 +0000
ROA not after:            Wed 02 Jul 2025 19:08:10 +0000
asID:                     401152
IP address blocks:        23.26.158.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:68:05:1a:55:38:98:b3:a3:c9:1f:a3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Apr  3 19:08:10 2025 GMT
            Not After : Jul  2 19:08:10 2025 GMT
        Subject: CN=3576eae6-525e-48f3-8eb1-4c74db255c95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:3a:f8:9e:19:7d:02:d8:7f:b7:a9:c9:da:b1:
                    e7:90:a8:c0:89:e2:0d:9c:c9:a5:98:ba:2a:81:90:
                    65:97:8c:63:77:7e:7d:ea:5e:02:76:a9:3f:ae:7a:
                    bd:7f:d1:83:60:be:29:a6:d9:ff:4c:10:8b:f6:44:
                    0d:9d:e3:50:62:b9:94:30:9c:aa:bd:aa:98:0a:93:
                    98:1e:83:ae:a3:f7:44:37:66:86:37:66:44:b1:d3:
                    56:58:b1:e4:6a:40:35:eb:ef:46:fc:f9:cf:3c:a3:
                    6d:e2:f9:12:b4:b1:1e:75:11:89:be:ff:e3:d6:86:
                    fc:62:3f:23:41:47:9a:f1:67:08:d1:52:c7:13:ba:
                    d1:96:93:93:5a:17:11:61:46:e6:2c:8a:f1:bf:55:
                    3c:25:7d:e2:5b:ed:71:02:99:9f:6e:f0:c7:3d:98:
                    73:5e:6c:5b:7a:14:ab:a4:38:21:01:69:82:8c:81:
                    70:fc:60:6f:d4:7b:a5:82:bb:9f:14:a9:17:44:67:
                    a1:81:28:e9:79:e7:96:e0:f1:20:da:16:a5:51:7a:
                    3f:3f:28:ae:8d:ee:62:c8:b8:5d:ad:bc:29:53:c3:
                    b3:c1:94:56:c8:16:94:57:fa:d7:6b:1a:81:c3:cc:
                    63:4f:77:a8:84:57:ba:f8:09:3f:ac:3a:0c:d0:70:
                    58:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:D5:A6:57:83:5A:A7:A5:CF:FF:80:86:C9:7E:30:38:A7:C7:69:5A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/41e9c4bb-b370-3025-a201-20c211ac3676.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.26.158.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8f:e5:d1:04:c8:2b:da:7c:23:05:ed:44:4e:a1:91:82:7a:26:
         02:dc:d2:58:0f:05:36:1b:5a:04:c6:4d:37:e8:65:b2:5b:a7:
         dd:82:55:d0:51:7c:17:a4:cf:6c:44:1a:a7:9c:af:37:83:af:
         e4:55:7f:23:4b:87:90:3d:4d:02:9a:34:80:56:6a:cc:72:1c:
         83:67:48:22:bd:92:2f:c1:c6:ea:b9:77:48:00:a4:75:f0:d0:
         52:77:6a:7d:ff:d3:9c:49:21:13:97:04:46:30:b0:e3:86:78:
         c1:84:55:de:84:f2:c2:6c:1b:e1:cb:96:1a:b7:68:9a:74:e4:
         0c:e5:8b:8a:a1:e6:4d:c5:d8:7d:21:b4:3e:8c:e8:7a:70:3c:
         5b:a4:1b:80:05:9c:98:43:58:b5:cd:22:46:66:8f:5c:17:02:
         e4:53:e4:96:5d:f1:7e:c7:3b:7c:4f:df:ad:7f:da:cf:a2:ca:
         4e:33:2e:9a:b8:e1:2f:22:93:51:c0:b6:f3:ca:44:68:ed:c4:
         3d:c8:8e:6c:a8:ca:3f:30:d3:46:b9:1f:96:3b:b6:da:a3:27:
         19:64:e4:cc:3f:ea:bd:01:73:32:e2:2c:bb:86:03:12:93:96:
         7c:86:50:61:b9:e9:f1:31:82:4e:5f:f1:b7:36:79:89:ae:b1:
         d1:5f:a8:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:28:07 2025 by rpki-client