Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/476f7c8f-fa15-3546-81eb-c60b2db22635.roa
File:                     476f7c8f-fa15-3546-81eb-c60b2db22635.roa (raw, json)
Hash identifier:          NJKyemO9UrOcp30D18nOToqP5rUGuEsC1a826KcFv3o=
Subject key identifier:   F0:DD:58:30:8F:CD:1D:7D:1E:96:4F:E2:3A:A3:4D:3C:A8:2B:9E:F0
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584500F560453FCBE92EFD279B00
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/476f7c8f-fa15-3546-81eb-c60b2db22635.roa
Signing time:             Sun 25 Feb 2024 02:00:26 +0000
ROA not before:           Sun 25 Feb 2024 02:00:26 +0000
ROA not after:            Sat 25 May 2024 01:00:26 +0000
asID:                     212238
IP address blocks:        23.26.220.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 29 Apr 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:00:f5:60:45:3f:cb:e9:2e:fd:27:9b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Feb 25 02:00:26 2024 GMT
            Not After : May 25 01:00:26 2024 GMT
        Subject: CN=f56b312d-879e-41d6-a090-5d2b3764f73c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:03:1c:dd:65:96:0d:52:0c:db:5c:c1:ed:8c:
                    fc:0a:17:91:06:2f:e5:73:a0:77:74:80:6f:73:92:
                    72:14:ec:c9:52:1e:24:15:dd:c8:f6:3b:ae:0e:45:
                    e0:45:80:1f:44:cc:a5:cd:a0:b3:26:2e:94:de:89:
                    d1:c4:5d:81:3e:c8:71:21:77:6d:fa:a5:39:b7:e2:
                    ec:9e:61:e5:ce:83:20:65:2d:ba:66:1e:7d:c0:b3:
                    79:4d:ba:b8:61:e8:75:5f:ac:20:81:b1:8c:a7:25:
                    68:80:aa:af:2c:02:80:a3:38:96:96:24:ae:0a:b8:
                    67:f2:45:62:b1:af:7a:89:e8:1d:e4:d6:0a:74:c9:
                    dd:e3:99:03:d0:90:04:99:b0:7f:3e:60:1e:23:3d:
                    c0:9d:9a:b4:eb:61:f1:d9:da:c6:a0:9e:6f:f1:95:
                    b2:56:76:43:c0:f1:3d:79:30:e8:6d:ca:bf:4a:04:
                    12:cc:a5:2e:4c:99:97:75:d6:e4:24:3c:22:55:fe:
                    40:f3:02:34:9a:25:04:c5:4a:32:39:d8:57:b9:24:
                    0e:31:0b:7f:14:04:8a:7a:9d:5d:2b:27:dc:43:8e:
                    df:24:6c:1b:84:27:5a:52:9c:8d:49:ea:54:96:3b:
                    c9:55:1d:e3:a8:70:0a:f8:a9:22:b3:58:ac:5a:d6:
                    f9:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:DD:58:30:8F:CD:1D:7D:1E:96:4F:E2:3A:A3:4D:3C:A8:2B:9E:F0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/476f7c8f-fa15-3546-81eb-c60b2db22635.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.26.220.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:fc:f7:a5:eb:fd:1f:d2:00:63:fe:a3:e0:b6:27:99:f4:9a:
         e9:d1:5a:46:d3:53:d0:a5:db:95:21:e8:87:66:e6:a2:db:72:
         25:48:70:2c:ec:ef:04:78:8c:50:7a:de:43:50:d9:cf:a8:7c:
         06:71:36:3c:e0:c4:0e:33:ea:ec:b6:4a:47:87:68:60:fd:f7:
         d0:eb:ed:86:87:0a:93:be:77:18:7b:ce:e2:ae:e2:e4:73:d4:
         a0:20:cd:a3:8c:0a:17:17:91:ec:e2:f2:10:8c:1d:77:b0:aa:
         15:e9:b4:84:79:37:13:3a:06:6f:2c:44:43:b1:9a:2f:19:c6:
         39:c5:d8:94:ba:c5:29:56:51:67:ff:79:15:ff:7f:18:32:ca:
         cb:04:64:d7:f3:1c:d3:80:76:8b:77:94:5d:8a:1a:92:1e:0c:
         d6:13:72:3b:d3:e7:ca:e3:e2:be:11:0d:29:c3:98:df:73:f7:
         73:87:4d:70:18:ea:35:47:a8:2c:6a:c3:39:d2:86:d7:89:86:
         3d:71:ef:53:68:e3:d0:14:e3:e5:64:94:70:75:bf:e6:ea:7c:
         1d:43:63:4d:3d:fb:3b:b7:2f:7e:b4:77:c6:7d:1b:ba:64:5b:
         4b:0e:f0:3b:6e:09:81:70:a1:e4:76:f8:d7:1b:27:b4:ea:17:
         a4:84:db:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 09:04:39 2024 by rpki-client on console-ams.rpki-client.org