Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/42512d9f-b02a-36e0-b60b-8dcb5a61f70b.roa
File:                     42512d9f-b02a-36e0-b60b-8dcb5a61f70b.roa (raw, json)
Hash identifier:          oVv47D6mJz/T2J29QG1Ijyb4THpm9YV7JJlCieT9Fj4=
Subject key identifier:   FF:DD:58:F6:47:C3:39:BA:4E:46:5D:32:32:E4:56:AF:F6:18:94:69
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F432858456128516B05E055F1D66CE700
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/42512d9f-b02a-36e0-b60b-8dcb5a61f70b.roa
Signing time:             Sat 30 Mar 2024 13:00:38 +0000
ROA not before:           Sat 30 Mar 2024 13:00:38 +0000
ROA not after:            Fri 28 Jun 2024 13:00:38 +0000
asID:                     19786
IP address blocks:        23.26.89.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 05 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:61:28:51:6b:05:e0:55:f1:d6:6c:e7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Mar 30 13:00:38 2024 GMT
            Not After : Jun 28 13:00:38 2024 GMT
        Subject: CN=d92b5683-3fe2-4dda-aea7-76860ee29f03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:fe:5a:b0:a4:d2:7c:1f:52:a6:9f:e9:02:28:
                    c7:b9:c0:06:36:c0:7a:d4:8e:d8:a0:4f:b7:67:e6:
                    b9:d6:96:0c:3b:5f:21:42:4f:7c:68:02:92:2c:f5:
                    09:22:fa:93:48:c7:b5:c2:b8:3a:6c:52:c7:ce:4f:
                    3e:46:e1:b6:eb:db:33:4c:ec:ec:68:f8:f9:33:4d:
                    c1:0c:c1:14:0e:ba:3e:39:b6:ab:eb:a4:6d:f8:82:
                    c6:93:f6:96:db:3f:44:9d:de:68:ed:07:60:bb:96:
                    09:e2:8e:bf:a8:2f:fb:9e:24:79:3a:76:6b:ab:9a:
                    bf:5c:62:73:c0:45:71:51:97:61:6a:26:d6:5c:6f:
                    7b:49:85:2c:1e:08:f1:0b:57:08:b8:bc:d3:cd:3f:
                    a0:d0:e0:70:e0:c0:37:87:72:a1:af:c9:84:24:df:
                    69:92:58:45:c5:fc:14:6f:38:d3:cb:11:af:bc:05:
                    e4:5f:6e:bf:95:09:71:f8:98:4d:5c:8b:74:9f:81:
                    be:10:e1:49:83:56:ab:0b:db:d0:fa:89:53:8d:fe:
                    59:d8:12:c8:26:31:5d:d4:e8:f8:b6:ae:61:ef:f1:
                    19:cc:86:e0:6b:19:dd:90:6f:c5:d1:e3:26:39:57:
                    e6:0b:17:bd:41:23:95:62:b3:22:a8:69:6a:e5:06:
                    37:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:DD:58:F6:47:C3:39:BA:4E:46:5D:32:32:E4:56:AF:F6:18:94:69
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/42512d9f-b02a-36e0-b60b-8dcb5a61f70b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.26.89.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:d8:9d:b0:ea:f8:3c:38:ca:d3:da:56:3a:a8:78:26:3f:96:
         30:88:b6:2c:26:1a:56:89:76:6e:9a:b5:87:25:51:1c:45:53:
         7b:c2:0d:61:d9:01:63:ba:30:c6:ab:e1:00:a7:dd:e3:40:75:
         e3:d7:d8:e5:0e:55:6e:85:7d:24:47:92:af:c0:6f:5f:b8:36:
         49:28:ed:11:40:9e:86:ae:ca:6a:c0:15:e7:48:15:ca:3b:3d:
         f3:f6:d3:f0:bd:91:82:b6:5a:ce:34:64:cd:c9:b6:92:a8:93:
         93:5b:2a:de:01:96:65:20:d1:8c:4d:5c:bf:4c:35:5a:83:51:
         6a:d5:a1:9d:de:66:27:34:bb:2e:9b:c4:21:92:42:87:6a:8a:
         94:c2:53:82:e6:05:b3:dd:54:3f:28:65:8a:93:29:60:48:67:
         da:30:3f:e0:46:87:63:e3:10:dc:66:4f:73:78:84:d5:77:53:
         d8:e6:55:39:dc:f1:0e:ef:d0:3e:3e:48:87:7f:95:70:67:2e:
         4c:70:7a:f4:65:bf:e9:72:ef:70:27:6b:0c:42:ef:59:08:a1:
         e7:5f:96:53:55:e9:2e:88:76:94:b9:22:f0:f4:fa:5a:6b:d2:
         b0:48:a7:d6:a3:b0:a1:1c:62:41:fe:b5:14:4c:c4:40:3d:4f:
         6f:b1:f9:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 21:45:36 2024 by rpki-client on console-fra.rpki-client.org