Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/4fa08e35-b15b-3c4f-b678-d12494e16e91.roa
File:                     4fa08e35-b15b-3c4f-b678-d12494e16e91.roa (raw, json)
Hash identifier:          20jziInlqet+Jq0rNDF1jZQS4W3efPE/XOJQbNsJujg=
Subject key identifier:   F6:B0:32:A5:B9:A8:C4:3A:0B:70:A1:F9:E2:A9:DA:14:44:16:41:B3
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584546A2AF54E9B3ACAA96F07540
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/4fa08e35-b15b-3c4f-b678-d12494e16e91.roa
Signing time:             Thu 21 Mar 2024 01:00:25 +0000
ROA not before:           Thu 21 Mar 2024 01:00:25 +0000
ROA not after:            Wed 19 Jun 2024 01:00:25 +0000
asID:                     1239
IP address blocks:        23.26.202.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 27 Apr 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:46:a2:af:54:e9:b3:ac:aa:96:f0:75:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Mar 21 01:00:25 2024 GMT
            Not After : Jun 19 01:00:25 2024 GMT
        Subject: CN=521bc3ca-f50d-4d4e-90ea-47e611285225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:82:1e:2c:20:d0:9d:d9:ff:3e:cf:24:bf:ba:
                    30:74:0f:9a:cb:6c:5c:38:6a:b7:1c:9f:62:e2:11:
                    36:6e:9d:ec:ac:9f:f9:1a:b1:b6:22:06:a8:b0:e9:
                    7f:f6:80:41:1a:31:61:f0:c0:55:cd:c3:39:73:4e:
                    05:39:1b:4f:b2:61:13:cb:2d:73:42:dd:4f:e3:c3:
                    01:98:a0:c8:ca:df:82:c5:3e:19:93:1f:d7:61:44:
                    30:27:e2:7b:63:8c:ee:c7:00:bf:bd:de:bb:a7:80:
                    79:ee:53:03:38:a1:49:db:7e:ed:cf:54:8a:be:da:
                    79:c8:c1:95:3c:21:52:91:c5:fd:3b:38:65:be:21:
                    ff:98:70:6d:33:76:d1:e2:52:67:0f:7f:e3:44:d1:
                    c7:73:18:a0:98:2c:6c:c0:5f:4b:e0:cb:1d:6f:59:
                    3d:a3:86:32:84:c8:1c:d8:89:a9:62:2b:b9:a7:a3:
                    b6:65:a2:c1:2b:a5:65:1e:81:57:b6:e0:82:27:6b:
                    be:8b:1f:e5:2f:79:58:17:b5:08:67:3b:93:c5:28:
                    f2:97:db:5f:e0:6c:6e:fc:4b:ea:47:19:76:d0:e8:
                    5d:99:6a:65:58:5e:c8:b1:18:eb:98:a8:b9:ed:9e:
                    e5:d5:05:d4:0d:b4:11:06:78:e5:a6:89:c0:1d:86:
                    ef:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:B0:32:A5:B9:A8:C4:3A:0B:70:A1:F9:E2:A9:DA:14:44:16:41:B3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/4fa08e35-b15b-3c4f-b678-d12494e16e91.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.26.202.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8c:3f:70:23:ab:a6:0d:9b:de:96:1c:e7:c7:65:96:df:5f:40:
         19:2a:d4:c4:c1:c5:8f:4c:52:ae:fb:0d:b9:9d:74:b4:cc:95:
         ef:0c:8c:0d:86:46:ef:9e:27:15:d8:c4:87:fe:d0:e1:64:e9:
         b0:96:7c:73:ed:ac:7d:ab:40:22:a7:70:e8:dd:6c:80:ed:20:
         7c:2e:97:05:3c:19:86:3c:59:2e:a2:03:05:e1:cb:49:b7:db:
         04:ce:62:40:b0:91:cb:04:e6:22:77:8f:0c:21:d7:80:85:3d:
         1f:ce:56:24:6a:c0:48:5c:9a:5e:8d:69:7a:66:32:e0:32:12:
         a9:06:75:4c:ba:02:10:c6:a5:7f:80:5b:f2:ad:ef:42:38:73:
         4a:50:24:c8:bd:38:35:2f:c9:76:c5:b1:d1:6a:15:17:a5:cc:
         ee:8b:cd:17:75:63:3b:96:e5:02:b9:9f:37:c2:40:98:43:7b:
         09:8f:06:61:33:a8:c8:34:9d:63:0b:71:07:ad:f4:70:62:17:
         84:d7:e7:74:86:00:a8:94:fb:2e:57:0e:55:10:a0:17:64:11:
         34:2c:9c:ac:f5:59:0a:c4:86:da:7b:bf:ad:96:6d:28:04:b3:
         97:e9:ce:3b:99:40:7e:83:6b:77:89:3a:af:d1:e8:2b:7e:db:
         27:58:f2:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 26 11:11:50 2024 by rpki-client on console-ams.rpki-client.org