Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/60eea67b-99fe-3d3c-a0e0-f2f78a63085a.roa
File:                     60eea67b-99fe-3d3c-a0e0-f2f78a63085a.roa (raw, json)
Hash identifier:          yyygEMpIg5a5ndAzIg2DTU8MXPHj2g4360abFZxFz5Y=
Subject key identifier:   08:D1:68:89:E3:1E:F6:6A:D3:55:66:DF:82:89:DD:6F:EB:9E:FF:A3
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285849045134F481895EF31FEC3C00
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/60eea67b-99fe-3d3c-a0e0-f2f78a63085a.roa
Signing time:             Thu 27 Feb 2025 02:00:39 +0000
ROA not before:           Thu 27 Feb 2025 02:00:39 +0000
ROA not after:            Wed 28 May 2025 01:00:39 +0000
asID:                     7029
IP address blocks:        23.26.219.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 20 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:04:51:34:f4:81:89:5e:f3:1f:ec:3c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Feb 27 02:00:39 2025 GMT
            Not After : May 28 01:00:39 2025 GMT
        Subject: CN=0e9c910c-6bb2-4d1c-af68-44cc4396b6a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:37:e7:67:38:8b:7c:aa:9f:ac:77:dc:15:55:
                    a8:42:52:42:85:44:21:be:1b:2e:bf:1a:a0:f3:ae:
                    a3:18:80:9e:e2:85:e5:61:d4:ec:2e:a9:9b:3f:e2:
                    55:c1:24:a3:d0:47:2a:13:d3:30:06:9b:7b:0f:75:
                    1c:4f:5f:91:e8:82:0c:58:31:8e:68:be:81:c8:6f:
                    3d:e3:d3:80:7d:df:43:be:73:ef:26:da:25:b7:c3:
                    ad:55:e9:4a:50:09:82:a9:5e:6e:d1:e6:68:3d:3f:
                    79:bb:7a:ab:49:b8:c1:9b:64:2e:0e:ce:4d:fb:b8:
                    c1:97:24:22:4d:9c:87:84:51:74:32:37:16:ed:53:
                    48:02:2d:cf:7d:34:20:5a:b7:12:a8:85:4e:22:1f:
                    18:90:b5:11:08:e5:bb:5a:25:4f:2e:7f:d7:08:92:
                    d9:55:e3:32:47:f2:bf:ee:99:90:6c:78:52:8c:7b:
                    1b:54:03:4a:de:2d:eb:43:74:c3:fa:98:ed:c8:9b:
                    c4:21:b0:8c:21:0c:94:45:1a:29:c4:6a:c6:4d:a6:
                    e9:f6:c4:bc:2c:1e:62:be:20:04:c4:60:54:95:e5:
                    16:a6:3a:5d:60:68:a3:54:0f:9d:13:d3:a8:dc:fa:
                    69:50:50:01:db:ad:b9:95:ca:1b:2f:a1:bf:19:cd:
                    6c:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:D1:68:89:E3:1E:F6:6A:D3:55:66:DF:82:89:DD:6F:EB:9E:FF:A3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/60eea67b-99fe-3d3c-a0e0-f2f78a63085a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.26.219.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:39:4f:55:56:15:9e:eb:94:57:a1:77:8e:3b:b6:fb:be:69:
         13:85:3c:de:9b:6c:02:dd:dc:dd:fa:cb:26:84:c5:f4:6c:e7:
         16:2b:35:0f:59:b1:88:dd:08:3c:c3:c0:90:ed:a6:66:c9:51:
         fd:cb:f2:76:2b:bc:21:94:60:6d:8b:07:8c:9f:49:b2:76:58:
         ae:88:23:15:f2:2b:06:71:44:1f:68:c3:ab:f9:bf:89:52:92:
         05:fa:d7:7d:28:86:c6:ac:26:5b:bb:d3:7d:28:7c:62:ee:1e:
         a1:34:7c:f9:52:21:97:9b:e0:c3:12:dc:ec:ba:e0:04:80:5b:
         ef:c6:c9:4e:26:43:f8:88:e0:c9:61:4f:69:3e:5e:51:86:f5:
         9f:de:0d:5f:55:2a:b0:f1:bb:79:d8:c6:05:fe:d3:79:30:e6:
         1d:7a:f3:bd:82:55:41:ec:b8:26:3f:a2:56:0c:81:8f:11:4a:
         c2:73:14:77:b1:69:2a:a3:cc:4f:e2:ff:b9:97:0c:5a:f2:44:
         fa:4c:fa:2d:af:cd:5e:50:a7:c4:e6:9e:8e:22:53:76:67:53:
         d8:cc:3f:38:5e:d7:8c:ea:6b:0c:9d:62:f4:35:ef:4d:18:85:
         06:22:e8:5d:fb:39:ea:86:77:92:ec:b7:3a:95:69:cf:f8:db:
         35:02:5e:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 05:02:49 2025 by rpki-client