Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/55ada569-be16-3c40-a04b-9260f5cb222c.roa
File:                     55ada569-be16-3c40-a04b-9260f5cb222c.roa (raw, json)
Hash identifier:          Xt51o7LknyUWWGVpxMrvpZOwnpczWMoU7vxVcn3jDx8=
Subject key identifier:   46:9B:9A:DE:EB:1D:8E:A7:18:BD:AD:38:8C:99:64:85:56:1D:D5:FD
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584576184E758729119EB7F7B800
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/55ada569-be16-3c40-a04b-9260f5cb222c.roa
Signing time:             Sun 07 Apr 2024 01:00:24 +0000
ROA not before:           Sun 07 Apr 2024 01:00:24 +0000
ROA not after:            Sat 06 Jul 2024 01:00:24 +0000
asID:                     51847
IP address blocks:        23.26.254.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 05 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:76:18:4e:75:87:29:11:9e:b7:f7:b8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Apr  7 01:00:24 2024 GMT
            Not After : Jul  6 01:00:24 2024 GMT
        Subject: CN=13fee609-2a52-4477-9634-a22e73f43345
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:45:0e:23:28:8b:65:87:3f:d3:2f:c2:17:35:
                    00:c8:03:13:af:53:2a:d1:67:77:ad:81:77:4e:32:
                    dd:25:05:a0:12:01:fc:83:4c:63:5b:7c:66:b3:68:
                    d0:73:93:93:87:84:5d:54:f0:8e:79:40:54:55:0a:
                    b8:6e:1b:0f:d3:88:b9:30:24:75:38:54:17:bf:bf:
                    93:a4:b9:f5:3e:c3:ef:99:f2:f4:e6:2f:47:c0:ca:
                    02:b3:12:13:52:e1:c7:ce:b8:f4:af:a2:85:40:f0:
                    d3:36:d2:27:f7:4f:c5:e4:9f:74:bc:66:58:d8:da:
                    0a:66:1f:03:57:ac:88:83:59:64:70:87:54:10:94:
                    e1:84:8e:4b:b0:93:6f:82:b7:f3:db:43:72:0d:9e:
                    dc:98:7d:0b:e9:e8:0f:2a:81:54:86:1f:d9:2b:bc:
                    76:08:81:dd:0a:61:49:b2:8c:f3:2d:48:b1:58:1c:
                    b7:9d:c5:0b:0d:e3:32:5b:60:3f:3f:f2:a5:68:50:
                    7a:68:bf:4d:90:39:14:86:e3:a4:78:dd:c1:28:cb:
                    2e:94:c9:b1:b7:ca:22:02:e2:7b:69:0c:c5:e7:eb:
                    8a:ff:51:64:f5:44:3b:d3:ef:22:fe:4a:c8:41:2f:
                    e1:58:35:c5:2b:16:2c:5a:83:c2:33:81:f5:7f:62:
                    ed:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:9B:9A:DE:EB:1D:8E:A7:18:BD:AD:38:8C:99:64:85:56:1D:D5:FD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/55ada569-be16-3c40-a04b-9260f5cb222c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.26.254.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:f7:5b:10:69:77:ea:c5:61:d5:32:0a:d7:2f:88:4a:f0:ef:
         d0:a2:32:16:b2:e6:d6:67:fa:26:35:a2:52:f1:32:4c:5f:28:
         02:d5:90:2b:35:d7:a3:84:ee:df:0a:3e:af:06:16:d9:67:b5:
         68:f3:46:bc:ca:e0:28:c9:b5:f8:57:62:5e:80:71:50:81:0c:
         52:0f:c8:37:f3:48:95:86:2a:43:b9:f9:02:1d:75:4e:0f:21:
         66:43:83:50:e8:3e:a7:0d:5d:6f:3c:30:2c:92:71:c7:0e:d3:
         ab:55:01:79:8c:4b:56:cc:67:98:11:f4:69:86:50:45:03:82:
         c3:75:86:1b:93:6b:5e:0f:ab:a4:1c:27:6b:4b:28:e3:2a:7b:
         ae:d1:f8:41:56:f2:ce:60:49:3f:4b:36:8d:49:6a:a5:91:9e:
         e8:25:89:95:42:18:cb:bb:62:3b:71:a2:f0:ce:da:77:24:9e:
         f2:19:8b:84:77:5a:9b:54:c8:33:b7:d8:3a:d0:8a:0f:2e:90:
         37:f1:c8:da:0d:d1:49:6d:b3:96:b6:bf:6f:82:39:e3:0c:23:
         72:f1:7a:0b:2b:53:6a:44:8a:0a:38:3e:be:07:f8:a6:5b:9a:
         3b:7b:1e:c7:9f:78:f2:e5:ba:6e:57:d7:24:20:dc:bc:85:4e:
         e8:ec:dd:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 15:10:20 2024 by rpki-client on console-fra.rpki-client.org