Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/55194404-79f7-3f9a-a58f-b55004f8ea2b.roa
File:                     55194404-79f7-3f9a-a58f-b55004f8ea2b.roa (raw, json)
Hash identifier:          xx7daNt/uxlqVEWXAqEPL0QmysLznLaYQgKrTkWKrO0=
Subject key identifier:   93:D4:84:32:21:6A:AC:D3:34:39:AE:79:D6:D4:A6:DB:34:AE:E6:F8
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285844D7151ECC62A49956F94E4880
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/55194404-79f7-3f9a-a58f-b55004f8ea2b.roa
Signing time:             Sat 10 Feb 2024 02:00:26 +0000
ROA not before:           Sat 10 Feb 2024 02:00:26 +0000
ROA not after:            Fri 10 May 2024 01:00:26 +0000
asID:                     212238
IP address blocks:        23.26.44.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 29 Apr 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:d7:15:1e:cc:62:a4:99:56:f9:4e:48:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Feb 10 02:00:26 2024 GMT
            Not After : May 10 01:00:26 2024 GMT
        Subject: CN=e06c5701-2e4a-4070-b049-0bc3ef341842
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:28:56:a8:2a:e2:8f:a4:a6:ef:2f:9e:7b:16:
                    51:75:43:2d:11:7e:3f:25:ef:4a:c2:34:53:49:bf:
                    ab:2e:12:34:0b:05:ea:54:22:64:f5:58:38:c8:b0:
                    24:c7:69:5e:cb:01:1f:4a:00:2c:45:4d:59:2b:a0:
                    c9:0b:d7:8b:ba:5a:c2:a8:ad:25:55:54:65:96:8b:
                    30:36:94:e8:a1:3c:1d:e5:e7:f6:bb:0a:d8:6e:0d:
                    1a:56:67:30:3b:f9:bc:3e:f2:a6:94:eb:63:11:44:
                    c3:79:14:14:40:f9:d7:6b:cd:b1:f9:a0:2c:c1:9e:
                    17:87:00:8e:64:ff:c7:61:b8:a0:e0:68:fe:8e:ea:
                    a3:0b:27:d3:f1:b5:32:82:1b:b6:1f:a9:dc:78:6b:
                    82:78:b2:72:a5:fd:d7:5c:43:63:3a:52:78:c5:67:
                    7e:6a:2e:20:fc:23:cb:8c:c2:b5:0c:75:7a:e3:79:
                    79:32:af:f5:8e:3d:14:a4:28:56:1d:e5:0a:08:cc:
                    c7:21:58:6b:60:e8:ca:71:80:cb:d2:1d:79:77:47:
                    83:3a:8a:0a:f9:b4:c6:1e:19:38:8d:40:3a:40:fe:
                    13:fd:2c:2f:bf:53:3a:3f:7b:83:f0:86:e7:2e:76:
                    e4:8c:54:3d:dc:40:c6:b3:38:20:fd:93:38:2b:b8:
                    fb:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:D4:84:32:21:6A:AC:D3:34:39:AE:79:D6:D4:A6:DB:34:AE:E6:F8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/55194404-79f7-3f9a-a58f-b55004f8ea2b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.26.44.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:18:67:59:39:c8:c7:e9:4d:8d:ea:19:b2:8e:72:e8:fe:66:
         10:f4:6d:ec:aa:02:d2:c8:b4:e6:98:a3:8f:31:d4:94:98:76:
         09:32:b7:85:d1:92:a4:ad:9a:ef:ce:c1:23:bb:56:63:0b:08:
         51:e0:76:eb:51:25:cd:c6:e8:24:70:73:56:7d:21:9c:db:2e:
         c6:79:bf:a7:f3:28:99:fc:a3:0e:a0:64:50:8c:d3:31:bc:14:
         a1:d3:11:dc:03:9e:93:c4:59:21:bb:e3:5e:56:2e:e6:56:c4:
         1c:74:5a:c4:50:97:a0:4e:99:bf:5a:0c:c1:8c:1d:34:44:e5:
         19:a7:fe:22:3d:0e:da:1e:f7:06:23:d9:2b:81:b3:29:87:81:
         0e:8b:ac:66:85:b7:38:c7:72:d5:ab:12:2f:1d:71:bf:60:71:
         ea:70:45:30:e4:29:9e:ba:65:40:3b:b0:82:b0:07:db:71:11:
         db:1e:ae:2e:5d:68:0b:d7:bc:c6:29:3d:50:6f:5a:73:26:95:
         1f:5e:d4:22:61:3d:6b:f2:94:18:55:af:c9:c8:ba:d3:c7:6f:
         85:0b:41:4a:10:70:78:ac:f1:fe:51:e8:91:f4:60:7e:3f:93:
         66:74:dc:40:a7:2b:93:2f:5d:ac:40:fd:0e:28:6a:c2:2e:fc:
         72:b2:06:d0
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWETXFR7MYqSZVvlOSIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTI0MDIxMDAyMDAyNloXDTI0MDUxMDAxMDAyNlowLzEtMCsGA1UEAxMk
ZTA2YzU3MDEtMmU0YS00MDcwLWIwNDktMGJjM2VmMzQxODQyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArChWqCrij6Sm7y+eexZRdUMtEX4/Je9KwjRT
Sb+rLhI0CwXqVCJk9Vg4yLAkx2leywEfSgAsRU1ZK6DJC9eLulrCqK0lVVRllosw
NpTooTwd5ef2uwrYbg0aVmcwO/m8PvKmlOtjEUTDeRQUQPnXa82x+aAswZ4XhwCO
ZP/HYbig4Gj+juqjCyfT8bUyghu2H6nceGuCeLJypf3XXENjOlJ4xWd+ai4g/CPL
jMK1DHV643l5Mq/1jj0UpChWHeUKCMzHIVhrYOjKcYDL0h15d0eDOooK+bTGHhk4
jUA6QP4T/Swvv1M6P3uD8IbnLnbkjFQ93EDGszgg/ZM4K7j7rQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJPUhDIhaqzTNDmuedbUpts0rub4MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvNTUxOTQ0MDQtNzlmNy0z
ZjlhLWE1OGYtYjU1MDA0ZjhlYTJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFxosMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAH0YZ1k5yMfpTY3qGbKOcuj+ZhD0beyqAtLItOaYo48x1JSYdgkyt4XR
kqStmu/OwSO7VmMLCFHgdutRJc3G6CRwc1Z9IZzbLsZ5v6fzKJn8ow6gZFCM0zG8
FKHTEdwDnpPEWSG7415WLuZWxBx0WsRQl6BOmb9aDMGMHTRE5Rmn/iI9Dtoe9wYj
2SuBsymHgQ6LrGaFtzjHctWrEi8dcb9gcepwRTDkKZ66ZUA7sIKwB9txEdseri5d
aAvXvMYpPVBvWnMmlR9e1CJhPWvylBhVr8nIutPHb4ULQUoQcHis8f5R6JH0YH4/
k2Z03ECnK5MvXaxA/Q4oasIu/HKyBtA=
-----END CERTIFICATE-----
Generated at Sat Apr 27 15:28:56 2024 by rpki-client on console-ams.rpki-client.org