Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/6ac81dec-7a0c-32f1-a1ff-fcc6c9932e65.roa
File:                     6ac81dec-7a0c-32f1-a1ff-fcc6c9932e65.roa (raw, json)
Hash identifier:          gh7DMyVD0TDS42Dsn3fZ0agKdZLtd6fzIxEEPnZWhPM=
Subject key identifier:   A8:F4:75:32:94:06:F8:15:27:BF:6B:AF:F8:45:FD:C0:D8:91:14:0E
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285847BEF6D3075B13845633ECB500
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/6ac81dec-7a0c-32f1-a1ff-fcc6c9932e65.roa
Signing time:             Sat 02 Nov 2024 13:00:42 +0000
ROA not before:           Sat 02 Nov 2024 13:00:42 +0000
ROA not after:            Fri 31 Jan 2025 14:00:42 +0000
asID:                     212669
IP address blocks:        23.26.203.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:be:f6:d3:07:5b:13:84:56:33:ec:b5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Nov  2 13:00:42 2024 GMT
            Not After : Jan 31 14:00:42 2025 GMT
        Subject: CN=28f77b31-2fce-47a2-8952-9fab07f916e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:fb:5d:88:4d:02:98:51:89:81:c8:d7:6f:61:
                    d3:5d:3a:d4:de:b5:4b:db:83:3a:3d:5b:68:b4:4b:
                    0d:4e:8d:60:43:ca:2c:d7:6f:b4:63:42:89:75:9d:
                    9c:03:c5:4d:34:f6:8a:32:99:05:67:bf:d1:1d:8d:
                    1b:22:6f:d3:cf:4d:3d:0b:f8:92:b4:07:de:ee:a3:
                    35:24:a0:d2:ae:9d:4f:15:64:b3:58:41:cb:7d:07:
                    67:95:5b:0c:a6:73:7c:06:c5:ec:4b:6e:96:37:98:
                    af:1c:f9:49:43:64:a6:7b:ae:46:69:b4:95:98:f7:
                    58:05:6b:ee:d1:3f:59:91:0c:dd:04:c7:8f:3e:ae:
                    16:5c:30:b4:7d:e9:7d:da:d4:9a:43:b2:b1:03:3d:
                    39:7a:cb:a2:20:3f:24:20:35:1f:49:bc:40:68:87:
                    e6:fa:3d:e4:9e:70:e4:da:02:ea:de:e1:a3:62:93:
                    24:e8:00:4d:bc:3a:a2:37:7d:2e:ba:85:74:5b:7a:
                    eb:a4:40:81:5c:45:37:c4:62:64:b3:db:04:14:21:
                    a8:bf:de:e6:f1:57:c8:65:3b:4f:42:9a:4a:c4:48:
                    92:1d:d5:db:ec:72:1d:77:44:05:ab:9b:b8:27:f0:
                    ae:8c:e2:dd:01:9a:60:90:89:87:61:35:84:bc:f7:
                    26:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:F4:75:32:94:06:F8:15:27:BF:6B:AF:F8:45:FD:C0:D8:91:14:0E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/6ac81dec-7a0c-32f1-a1ff-fcc6c9932e65.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.26.203.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:b8:2b:65:f4:5f:d9:5d:db:7e:be:f4:ad:a5:19:fe:4a:3a:
         0f:cb:10:2e:48:14:33:81:10:f9:54:81:15:cc:ce:70:97:87:
         e7:98:13:f8:fb:f8:c5:31:b5:cb:95:e8:fc:b9:d2:35:b3:d3:
         16:e2:5b:c0:e5:e1:51:d3:0e:34:47:27:8c:ef:fc:55:a6:86:
         d0:3d:be:b4:ec:10:37:b9:be:08:35:74:92:a2:4a:eb:3d:c6:
         b2:01:07:53:7a:b0:4e:6c:ea:b0:a1:9d:d6:35:d9:e9:f7:f7:
         35:d1:d9:02:a2:d6:da:e5:df:09:15:48:c9:93:5e:dc:a7:7a:
         9c:57:ad:be:02:94:3d:80:c2:ba:1e:7c:c1:71:e8:8a:14:f3:
         cc:9c:5b:3c:16:52:30:fb:6b:ca:eb:72:19:31:89:6f:53:8d:
         0e:aa:d7:53:6a:19:1a:79:66:c9:8f:4d:07:ce:00:68:b3:ef:
         e3:04:ca:ce:75:ab:ca:a8:4d:ee:65:75:ec:10:66:ff:62:0b:
         96:aa:b9:0b:28:c8:f6:87:6e:e4:b3:72:47:b4:3a:eb:7d:02:
         9e:58:7e:a5:0f:74:57:7c:10:58:63:29:90:95:3b:bb:da:c0:
         38:d3:19:51:e6:21:44:f9:be:05:6a:5d:39:1e:86:9d:98:04:
         15:ba:94:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 06:37:42 2024 by rpki-client on console-ams.rpki-client.org