Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/47594d9b-6aff-32a5-94d3-f7089dac1450.roa
File:                     47594d9b-6aff-32a5-94d3-f7089dac1450.roa (raw, json)
Hash identifier:          MJTU2ozxd447cIMzMISdvFKPQRZGg2JXUlyIlHJAfv0=
Subject key identifier:   15:06:CF:C4:7B:E8:0B:E3:D4:F0:03:E6:DB:C6:E0:48:AE:83:0A:46
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285849115CB1646F6A23EBF5A7A080
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/47594d9b-6aff-32a5-94d3-f7089dac1450.roa
Signing time:             Mon 03 Mar 2025 18:09:20 +0000
ROA not before:           Mon 03 Mar 2025 18:09:20 +0000
ROA not after:            Sun 01 Jun 2025 17:09:20 +0000
asID:                     48925
IP address blocks:        23.26.121.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:11:5c:b1:64:6f:6a:23:eb:f5:a7:a0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Mar  3 18:09:20 2025 GMT
            Not After : Jun  1 17:09:20 2025 GMT
        Subject: CN=8b9cd961-7ea5-48cc-b4e7-512cd2855802
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:fe:b9:6d:37:c9:99:f4:13:30:3d:c2:a3:0b:
                    b0:5e:8b:c3:2a:c5:17:50:40:37:45:d2:e1:b1:6f:
                    94:6c:8b:4c:47:e7:2f:3f:5a:4a:71:35:41:53:59:
                    a8:99:21:a0:ea:ad:7b:ed:13:10:e9:54:f6:3a:2e:
                    f5:3c:bf:c9:28:b7:5c:c4:79:eb:3f:21:cb:4f:6e:
                    64:d8:37:67:f6:e5:69:29:ae:8b:aa:8b:d8:66:6b:
                    52:e1:80:f4:32:c9:f1:b9:63:48:b9:67:31:87:81:
                    b1:fb:eb:cd:d7:47:be:0c:42:d0:ad:42:ca:9c:c5:
                    b0:b7:00:36:85:14:84:6f:d3:9a:8f:ce:37:35:71:
                    29:83:f8:e6:fb:af:53:9d:df:38:35:6a:c4:a7:a1:
                    1b:0a:c1:3a:88:bb:b2:8f:ec:ec:d4:72:2e:50:1f:
                    97:a1:50:5e:db:b8:cc:52:60:64:85:d9:e4:0e:6b:
                    8d:5f:7c:e2:cb:05:dd:4f:9a:57:eb:97:3a:8a:bf:
                    e8:69:70:bc:c4:9a:f0:f5:54:12:f8:28:48:d9:bb:
                    cb:33:89:66:7e:0e:33:20:4c:67:ca:92:6e:3c:86:
                    38:40:b6:c0:28:77:3f:9f:51:1b:90:2b:24:da:ba:
                    d9:18:d8:da:bb:53:c2:9e:87:42:e8:f9:07:18:29:
                    df:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:06:CF:C4:7B:E8:0B:E3:D4:F0:03:E6:DB:C6:E0:48:AE:83:0A:46
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/47594d9b-6aff-32a5-94d3-f7089dac1450.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.26.121.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:fb:33:10:3b:9c:4c:03:28:52:67:27:1b:22:09:31:79:ad:
         2d:6f:04:c1:58:2b:73:60:c6:e3:f9:01:f9:db:4d:f1:81:73:
         b6:50:a0:e7:12:05:1d:59:21:2a:b2:7f:66:99:de:df:3c:19:
         ed:2f:10:20:94:e2:aa:27:97:b7:ab:24:aa:7f:55:08:81:c5:
         c6:35:ff:e5:44:aa:dd:bb:5e:ff:89:47:d9:57:7e:62:5d:b6:
         43:5f:2c:92:a6:06:b9:3c:5e:da:b6:97:c2:a7:57:5e:63:06:
         68:24:0c:3a:39:a2:09:27:27:e1:d0:73:e0:94:df:1c:ff:14:
         d8:92:fe:63:90:2c:c7:5f:4e:81:7e:7c:45:b9:61:3a:a2:d1:
         6d:be:8b:b1:b1:79:dd:e5:b8:9b:c0:62:1e:ab:b8:49:24:47:
         c0:02:f7:9f:1f:b2:f7:bc:a7:f6:d1:02:25:4f:ea:59:d3:d6:
         88:1d:8d:c4:e7:81:f7:a4:1b:2e:98:92:1d:f1:d8:82:be:8d:
         74:00:26:e2:e9:bd:9a:12:97:b9:61:7e:36:41:8a:3d:1b:25:
         ec:bc:16:9d:60:21:c5:60:6f:68:da:e2:e5:7f:9d:11:bc:5b:
         18:fa:77:7d:9d:7a:46:6e:7c:0d:4f:41:ce:c7:b1:0e:be:2a:
         26:8f:da:96
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkRXLFkb2oj6/WnoIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTI1MDMwMzE4MDkyMFoXDTI1MDYwMTE3MDkyMFowLzEtMCsGA1UEAxMk
OGI5Y2Q5NjEtN2VhNS00OGNjLWI0ZTctNTEyY2QyODU1ODAyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw/65bTfJmfQTMD3CowuwXovDKsUXUEA3RdLh
sW+UbItMR+cvP1pKcTVBU1momSGg6q177RMQ6VT2Oi71PL/JKLdcxHnrPyHLT25k
2Ddn9uVpKa6LqovYZmtS4YD0MsnxuWNIuWcxh4Gx++vN10e+DELQrULKnMWwtwA2
hRSEb9Oaj843NXEpg/jm+69Tnd84NWrEp6EbCsE6iLuyj+zs1HIuUB+XoVBe27jM
UmBkhdnkDmuNX3ziywXdT5pX65c6ir/oaXC8xJrw9VQS+ChI2bvLM4lmfg4zIExn
ypJuPIY4QLbAKHc/n1EbkCsk2rrZGNjau1PCnodC6PkHGCnfVQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBUGz8R76Avj1PAD5tvG4EiugwpGMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvNDc1OTRkOWItNmFmZi0z
MmE1LTk0ZDMtZjcwODlkYWMxNDUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFxp5MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAB/7MxA7nEwDKFJnJxsiCTF5rS1vBMFYK3NgxuP5AfnbTfGBc7ZQoOcS
BR1ZISqyf2aZ3t88Ge0vECCU4qonl7erJKp/VQiBxcY1/+VEqt27Xv+JR9lXfmJd
tkNfLJKmBrk8Xtq2l8KnV15jBmgkDDo5ogknJ+HQc+CU3xz/FNiS/mOQLMdfToF+
fEW5YTqi0W2+i7Gxed3luJvAYh6ruEkkR8AC958fsve8p/bRAiVP6lnT1ogdjcTn
gfekGy6Ykh3x2IK+jXQAJuLpvZoSl7lhfjZBij0bJey8Fp1gIcVgb2ja4uV/nRG8
Wxj6d32dekZufA1PQc7HsQ6+KiaP2pY=
-----END CERTIFICATE-----
Generated at Sun Apr 6 01:06:17 2025 by rpki-client