Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/6281cc12-f3b7-3043-8b8e-5fd296d3d44d.roa
File:                     6281cc12-f3b7-3043-8b8e-5fd296d3d44d.roa (raw, json)
Hash identifier:          cypRYYj3gCyMyu9xmYzNqTOdXdOcB2451HH0greEBZg=
Subject key identifier:   32:C9:14:9A:E5:DE:A2:17:BA:18:E8:06:15:64:C1:FA:63:44:57:75
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584730EDBC6E63B7F121E38B4540
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/6281cc12-f3b7-3043-8b8e-5fd296d3d44d.roa
Signing time:             Thu 12 Sep 2024 15:57:46 +0000
ROA not before:           Thu 12 Sep 2024 15:57:46 +0000
ROA not after:            Wed 11 Dec 2024 16:57:46 +0000
asID:                     205220
IP address blocks:        23.26.86.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:30:ed:bc:6e:63:b7:f1:21:e3:8b:45:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Sep 12 15:57:46 2024 GMT
            Not After : Dec 11 16:57:46 2024 GMT
        Subject: CN=6440c656-45fe-4054-a11d-5e37a6354518
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:79:ff:b3:2f:9f:38:cb:b1:5c:54:b0:2b:88:
                    6a:50:50:88:33:99:be:b6:db:f2:8d:05:6f:98:d5:
                    97:03:3d:bd:a2:ca:1d:e1:69:21:0e:bd:44:d7:98:
                    47:77:65:4c:dd:ee:6d:8c:79:8f:03:59:d6:73:f2:
                    9e:7b:a8:5e:82:13:fd:34:c9:6b:79:84:8d:78:28:
                    46:11:f4:c6:56:c4:09:ab:99:c3:d9:21:a1:df:1a:
                    9e:86:5f:03:13:a7:a6:4d:e0:f5:6b:47:ef:47:4c:
                    84:b8:1f:38:23:5a:7a:2e:2c:ca:35:9b:68:11:13:
                    c2:dc:8c:6d:b5:a9:28:b5:bc:a6:a5:ae:23:43:9e:
                    3b:73:79:f7:71:e3:81:19:cd:aa:26:e0:3e:95:22:
                    0c:9f:2d:a0:e9:f5:7a:24:05:6c:20:31:5b:4f:6f:
                    1b:27:ab:a6:f0:18:a9:a0:05:7d:7f:a3:0e:8f:ce:
                    f6:65:cb:fb:ec:c5:22:b9:f3:60:54:90:e5:f6:2f:
                    4e:57:eb:ce:80:11:9b:6f:c0:a2:8c:f7:8a:79:c1:
                    da:a9:be:21:cc:f8:e4:54:e6:32:2d:5e:e1:8c:c0:
                    a4:20:0f:36:97:1b:f6:7b:40:ea:ae:20:8e:9b:3f:
                    d9:a1:eb:c5:0e:da:6a:91:03:1d:4e:eb:8e:72:ba:
                    00:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:C9:14:9A:E5:DE:A2:17:BA:18:E8:06:15:64:C1:FA:63:44:57:75
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/6281cc12-f3b7-3043-8b8e-5fd296d3d44d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.26.86.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:c3:49:33:7d:fa:55:a7:4e:3d:61:b6:92:ef:5c:20:4a:cc:
         be:8b:3a:7b:c8:c2:79:62:a7:e1:85:4f:b4:5b:8f:1c:aa:7d:
         e4:50:fe:fe:57:5e:bd:54:50:16:48:0d:c7:c7:78:7b:6b:bd:
         ac:de:49:22:3c:88:c0:6a:57:d1:81:56:12:27:3b:6e:de:bf:
         d6:ea:e2:0c:bb:8e:26:e8:41:8b:fa:ff:e2:9e:30:44:bd:6c:
         3c:7a:b9:98:a1:0e:6b:da:1c:e0:6b:e2:08:93:bf:8e:a2:91:
         42:4e:1f:aa:23:0c:68:67:8b:d9:a0:2c:f2:9b:38:a9:de:93:
         45:f3:56:f1:9b:08:0e:4d:6b:17:6d:ef:71:2b:5d:fc:3d:96:
         76:b4:b8:53:a1:33:2b:53:3e:6c:35:a9:16:a7:33:8c:a9:b9:
         30:ce:39:01:5b:5a:8b:bd:45:e0:cc:23:00:99:0c:d4:0b:f2:
         76:a9:bf:00:ed:79:1f:8c:a6:13:1f:c4:63:dd:b4:c5:1e:63:
         4e:22:b3:e1:7a:ce:5e:b2:37:33:f1:d3:b9:16:03:b9:06:7d:
         99:cf:b1:b0:22:39:7b:55:61:90:2a:cc:36:db:2e:9e:cf:6b:
         e8:18:77:61:a3:f1:f6:0a:74:85:08:7f:58:a3:0a:33:a7:86:
         95:6b:f6:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 05:50:20 2024 by rpki-client on console-fra.rpki-client.org