Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/6ac81dec-7a0c-32f1-a1ff-fcc6c9932e65.roa
File:                     6ac81dec-7a0c-32f1-a1ff-fcc6c9932e65.roa (raw, json)
Hash identifier:          iX0GfBscqbsE9HJ5N0R6+jgT4PBspSTfqNg2DgxSWus=
Subject key identifier:   CC:01:21:A6:31:AB:F3:46:76:83:68:9F:5B:48:C3:0A:26:21:A9:B4
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584521104EF2D566B93F99126680
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/6ac81dec-7a0c-32f1-a1ff-fcc6c9932e65.roa
Signing time:             Thu 07 Mar 2024 14:00:32 +0000
ROA not before:           Thu 07 Mar 2024 14:00:32 +0000
ROA not after:            Wed 05 Jun 2024 13:00:32 +0000
asID:                     212669
IP address blocks:        23.26.203.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 05 May 2024 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:21:10:4e:f2:d5:66:b9:3f:99:12:66:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Mar  7 14:00:32 2024 GMT
            Not After : Jun  5 13:00:32 2024 GMT
        Subject: CN=6082de20-8a10-4365-932d-4f99e88c0455
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:9c:0a:35:82:5d:20:ea:d2:46:20:0e:fa:d7:
                    74:86:89:fb:3b:63:61:7f:0a:bb:45:90:0a:d3:93:
                    6a:d2:fc:d2:b7:bb:ff:81:9d:b0:6e:ba:e4:71:14:
                    bd:04:9c:4e:31:ac:08:29:11:0c:2b:81:fe:5b:35:
                    b5:e3:1d:2a:6c:c5:d6:cf:87:19:d3:da:da:91:b2:
                    56:fd:10:7a:85:d2:20:82:0c:a0:fd:10:91:81:de:
                    85:ff:70:c3:ff:58:f8:4e:99:e0:a9:51:18:5d:dc:
                    b3:2b:34:ed:40:62:cb:6a:56:61:1a:15:b8:bc:6b:
                    ed:82:34:ce:62:60:c5:a1:01:b7:88:63:97:8e:20:
                    47:f1:75:cb:b7:4e:58:a5:cb:8d:a1:e7:e6:54:7c:
                    41:d0:fa:83:5e:ce:8b:15:09:26:85:82:c2:21:b7:
                    f3:57:91:03:f4:5b:f2:29:bb:36:c0:03:86:76:1a:
                    9b:29:61:fd:6d:84:9f:06:d8:af:1c:7b:4a:93:35:
                    7c:a2:7f:85:6f:48:72:84:a9:93:c8:e6:5f:62:47:
                    1e:7e:3f:41:c4:ae:a2:3a:2e:a4:70:82:5e:a6:26:
                    66:61:e1:c5:1f:50:5f:02:72:9d:b7:7c:d0:2d:ac:
                    d7:f5:7a:85:d4:1d:c5:4d:9e:fc:c7:ba:c1:0b:07:
                    5f:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:01:21:A6:31:AB:F3:46:76:83:68:9F:5B:48:C3:0A:26:21:A9:B4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/6ac81dec-7a0c-32f1-a1ff-fcc6c9932e65.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.26.203.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:6d:e8:0a:5f:07:dc:5e:f2:1a:3e:a6:eb:f1:c9:b4:89:50:
         f6:ff:20:d1:a5:5a:f3:ee:27:1a:d5:73:d9:22:fb:51:3c:06:
         32:03:ee:d9:1f:bb:23:a3:56:f3:4d:1e:22:3e:40:7e:88:5d:
         ab:07:60:4d:cb:51:1f:8f:78:24:69:37:bd:fa:3d:e6:0e:03:
         e7:56:4f:d9:2f:f5:66:74:c6:05:c1:21:f3:5f:25:02:e5:e2:
         3f:5a:ea:5e:95:51:0b:66:4c:32:30:72:5b:3f:bc:f3:30:61:
         ff:0a:a0:c8:57:15:5d:2c:52:26:99:40:6d:df:77:20:e5:e2:
         6b:68:ba:d5:82:77:2d:31:4d:fd:54:35:40:6f:76:5e:1e:be:
         4b:e0:0c:67:a1:47:09:0e:b0:57:f2:bb:35:73:85:de:0f:33:
         d8:db:66:58:23:00:23:e2:56:45:30:1e:b5:40:b0:fa:82:ed:
         22:ab:01:3c:1d:b8:da:3a:33:de:c2:2f:c8:d3:c0:65:de:29:
         15:9a:56:45:e4:0e:b4:8f:ce:80:df:a6:e6:fc:b0:7d:66:c1:
         99:5c:e5:b1:3d:54:89:99:5e:64:2c:06:47:22:82:bd:76:1c:
         da:18:c0:7f:cb:f6:09:97:c3:28:e0:ee:de:27:e5:d5:55:8f:
         41:cf:e6:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 02:06:30 2024 by rpki-client on console-ams.rpki-client.org