Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/5b046b9a-6ec5-364e-8da6-8e48d5ef1c5f.roa
File:                     5b046b9a-6ec5-364e-8da6-8e48d5ef1c5f.roa (raw, json)
Hash identifier:          WUOw9hwjQwyT+6l1Sgf02i+/9WFQVDcQhO6NexDL7ug=
Subject key identifier:   C8:B1:B9:DD:E9:C1:57:1B:CE:CD:E2:39:FB:0C:52:02:09:FA:E6:E0
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F432858454D9D7C2A2016676A7FF29610
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/5b046b9a-6ec5-364e-8da6-8e48d5ef1c5f.roa
Signing time:             Sat 23 Mar 2024 13:00:32 +0000
ROA not before:           Sat 23 Mar 2024 13:00:32 +0000
ROA not after:            Fri 21 Jun 2024 13:00:32 +0000
asID:                     400810
IP address blocks:        23.26.227.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 05 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:4d:9d:7c:2a:20:16:67:6a:7f:f2:96:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Mar 23 13:00:32 2024 GMT
            Not After : Jun 21 13:00:32 2024 GMT
        Subject: CN=541f9bb7-e25f-4eef-9326-2febd02fc1fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:48:28:75:c1:bc:59:5c:cd:e6:62:89:58:f5:
                    d2:d4:bf:da:bb:f3:1f:17:53:7b:8d:56:31:85:22:
                    91:be:f5:d2:31:dd:21:b9:0d:79:98:3b:0e:ef:fd:
                    c8:8e:a0:e5:0e:9c:64:01:e2:d1:08:7a:d0:08:68:
                    5d:32:f6:62:cf:79:72:c2:5f:54:09:d9:b5:89:f6:
                    40:87:37:fd:64:5d:73:a1:8a:a3:00:b3:d8:ad:0b:
                    92:8c:27:49:14:73:4e:c4:ad:b7:36:c3:3f:10:c2:
                    0d:7c:bf:6a:2a:54:a1:20:21:da:05:23:6b:3d:92:
                    1e:6a:1c:60:c8:47:cf:71:fe:21:3e:2d:8b:69:86:
                    4b:57:84:3c:94:bd:75:8b:a7:3f:94:1d:80:c8:94:
                    5b:ce:83:64:78:9f:0e:cd:fa:33:05:f1:62:ad:52:
                    73:23:83:cf:68:00:11:fd:96:54:9f:2b:1c:c1:8d:
                    23:5b:f7:62:ba:95:f4:f0:8b:d4:97:63:25:d9:fd:
                    b6:69:49:4f:d9:1e:dc:3e:0a:f9:2c:7b:2a:24:e4:
                    16:4e:6d:2c:b0:ff:e3:f3:2c:bc:03:fe:eb:84:b5:
                    05:56:de:0d:62:dc:43:be:72:89:52:b4:50:2d:7e:
                    94:23:dd:1f:aa:3d:9a:53:28:96:70:45:98:e2:ed:
                    82:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:B1:B9:DD:E9:C1:57:1B:CE:CD:E2:39:FB:0C:52:02:09:FA:E6:E0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/5b046b9a-6ec5-364e-8da6-8e48d5ef1c5f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.26.227.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:47:f2:6b:05:ac:09:9a:41:6e:00:e5:f0:ef:81:6a:25:24:
         45:e2:0f:7c:82:a4:ec:f8:58:8f:81:09:23:b8:ac:1c:4e:8d:
         72:79:8a:34:71:50:06:99:5e:9b:9b:c7:35:6d:31:99:70:02:
         88:3f:2f:15:08:66:21:10:05:e1:a0:31:4c:a5:3d:91:26:6d:
         08:ee:ea:9e:94:43:a8:6a:07:92:e8:80:d7:46:94:4f:5b:95:
         32:33:41:2a:31:83:a8:a8:64:49:fc:6c:5d:a0:29:97:e1:3e:
         f8:8a:38:c7:d5:5f:29:e2:6c:12:f2:bd:23:88:cf:77:0c:51:
         77:69:3d:31:af:13:69:f2:1b:9b:bc:b9:ab:14:a0:49:99:71:
         03:85:b2:73:3e:9f:ee:46:3e:1d:5b:a9:76:a7:8c:b8:6d:72:
         a6:e7:97:ee:c7:6e:cf:c1:ca:de:2a:5c:1d:da:af:6e:1f:fd:
         80:0e:b4:92:04:6c:5c:6a:76:36:09:93:0f:88:53:64:bd:f3:
         ba:1d:34:ea:e4:67:33:a2:38:14:58:42:26:e9:aa:c6:c1:f9:
         60:54:a5:01:e0:7a:90:3f:20:b8:13:60:09:ca:39:97:fd:6c:
         d8:82:c8:c6:94:93:69:cc:fe:6e:27:7f:6d:a1:26:3d:05:0c:
         f6:4e:a8:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 10:48:40 2024 by rpki-client on console-ams.rpki-client.org