Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/4d9e954d-a3dd-3f3a-aa7e-d394246e9733.roa
File:                     4d9e954d-a3dd-3f3a-aa7e-d394246e9733.roa (raw, json)
Hash identifier:          CTt95n6bUR7tUiL05PELqqWn+/pASzxvczgMzOxCf1o=
Subject key identifier:   13:26:B2:18:99:F0:64:41:95:27:87:44:2E:15:84:9F:33:7A:30:89
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F432858475910B3BD47386B1F5F324480
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/4d9e954d-a3dd-3f3a-aa7e-d394246e9733.roa
Signing time:             Fri 27 Sep 2024 01:00:31 +0000
ROA not before:           Fri 27 Sep 2024 01:00:31 +0000
ROA not after:            Thu 26 Dec 2024 02:00:31 +0000
asID:                     51847
IP address blocks:        23.26.154.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:59:10:b3:bd:47:38:6b:1f:5f:32:44:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Sep 27 01:00:31 2024 GMT
            Not After : Dec 26 02:00:31 2024 GMT
        Subject: CN=4f656314-8022-4b65-b674-56940e9994a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:9e:f2:3e:72:03:9f:90:91:d9:68:ed:86:14:
                    31:37:a3:a9:78:0c:d9:35:cb:49:23:b7:f8:63:0b:
                    04:d7:ae:7e:2d:3c:d4:4f:91:3e:b4:ae:23:82:20:
                    c4:b2:b2:b9:fb:db:a1:22:38:15:e1:64:0d:74:6b:
                    ef:45:8f:8e:8b:7d:28:7c:45:34:e1:76:83:65:68:
                    53:e7:47:72:a9:b1:0d:6e:45:70:d8:fe:e6:50:a2:
                    ac:1a:18:68:70:28:39:69:9e:ca:1b:e2:c2:c8:ba:
                    d8:b8:7b:60:2f:2a:e5:80:de:30:e8:8b:46:ee:79:
                    e1:73:47:7d:a9:a6:ba:8f:fd:fe:8a:76:9e:e1:6a:
                    a7:71:29:ea:48:51:58:e9:a7:49:5c:62:f3:f6:98:
                    82:53:bd:71:04:ac:19:b3:1b:72:72:8c:ff:95:b7:
                    85:26:79:b3:e0:f7:6e:d9:12:19:f5:db:40:fe:64:
                    61:20:36:5d:48:6f:ac:c1:27:44:a0:19:ca:68:96:
                    e4:6a:25:a2:55:86:28:67:5a:06:21:17:a7:ae:e0:
                    d4:bc:4c:6a:cd:9a:c2:9c:13:62:4c:6d:7c:fb:50:
                    f8:d7:db:95:58:f0:8f:ea:35:f8:0c:93:70:5f:14:
                    0c:19:0d:27:d0:fc:64:de:4e:8f:65:06:61:d8:25:
                    92:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:26:B2:18:99:F0:64:41:95:27:87:44:2E:15:84:9F:33:7A:30:89
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/4d9e954d-a3dd-3f3a-aa7e-d394246e9733.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.26.154.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:11:12:66:5e:2e:4e:b5:ce:8d:9f:d1:61:3c:09:5b:f5:43:
         5a:df:e6:55:25:59:e1:53:f1:3e:12:c3:f3:e7:3b:b1:70:0f:
         ff:79:fc:70:96:60:2a:b6:5f:d1:fe:12:2b:24:3c:dc:3c:ca:
         66:86:73:0a:33:b7:f9:1e:3b:e3:5b:6d:71:5e:94:80:32:7d:
         10:66:4d:2c:2e:84:d4:41:ef:11:e4:76:ba:52:62:ff:13:0c:
         fe:99:b6:0c:dd:f0:c7:1a:6c:98:0f:89:01:10:91:3d:3c:bf:
         85:60:a3:17:0d:78:0c:c2:f1:f6:73:27:5e:a5:b4:38:e9:90:
         9c:7b:cb:71:60:79:b9:83:b1:aa:ed:ad:13:18:2b:c7:00:ec:
         6e:9f:1d:6e:ce:8f:62:27:45:82:1f:b9:d9:4f:aa:bf:ee:b3:
         54:c4:ec:17:8c:89:bb:1e:4b:a3:5a:a9:9a:4f:b4:1f:a0:ec:
         31:e0:aa:ff:1a:2e:11:1b:89:01:61:d5:f7:7a:ed:4e:96:14:
         4f:9a:16:4d:e6:1e:a6:12:d0:21:11:3f:e4:3f:1b:4e:e2:9c:
         1d:e8:cf:e8:64:ae:a9:97:b0:2e:9b:6e:bf:b1:b4:40:a4:f2:
         07:b9:23:31:4d:55:03:e2:db:c6:8a:62:c9:4f:bc:bc:64:38:
         15:f2:d8:22
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdZELO9RzhrH18yRIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTI0MDkyNzAxMDAzMVoXDTI0MTIyNjAyMDAzMVowLzEtMCsGA1UEAxMk
NGY2NTYzMTQtODAyMi00YjY1LWI2NzQtNTY5NDBlOTk5NGEyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgJ7yPnIDn5CR2WjthhQxN6OpeAzZNctJI7f4
YwsE165+LTzUT5E+tK4jgiDEsrK5+9uhIjgV4WQNdGvvRY+Oi30ofEU04XaDZWhT
50dyqbENbkVw2P7mUKKsGhhocCg5aZ7KG+LCyLrYuHtgLyrlgN4w6ItG7nnhc0d9
qaa6j/3+inae4WqncSnqSFFY6adJXGLz9piCU71xBKwZsxtycoz/lbeFJnmz4Pdu
2RIZ9dtA/mRhIDZdSG+swSdEoBnKaJbkaiWiVYYoZ1oGIRenruDUvExqzZrCnBNi
TG18+1D419uVWPCP6jX4DJNwXxQMGQ0n0Pxk3k6PZQZh2CWS/wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBMmshiZ8GRBlSeHRC4VhJ8zejCJMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvNGQ5ZTk1NGQtYTNkZC0z
ZjNhLWFhN2UtZDM5NDI0NmU5NzMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFxqaMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIcREmZeLk61zo2f0WE8CVv1Q1rf5lUlWeFT8T4Sw/PnO7FwD/95/HCW
YCq2X9H+EiskPNw8ymaGcwozt/keO+NbbXFelIAyfRBmTSwuhNRB7xHkdrpSYv8T
DP6Ztgzd8McabJgPiQEQkT08v4VgoxcNeAzC8fZzJ16ltDjpkJx7y3FgebmDsart
rRMYK8cA7G6fHW7Oj2InRYIfudlPqr/us1TE7BeMibseS6NaqZpPtB+g7DHgqv8a
LhEbiQFh1fd67U6WFE+aFk3mHqYS0CERP+Q/G07inB3oz+hkrqmXsC6bbr+xtECk
8ge5IzFNVQPi28aKYslPvLxkOBXy2CI=
-----END CERTIFICATE-----
Generated at Fri Nov 22 06:37:41 2024 by rpki-client on console-ams.rpki-client.org