Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/70365891-18d6-30a9-a7af-33e07c728b40.roa
File:                     70365891-18d6-30a9-a7af-33e07c728b40.roa (raw, json)
Hash identifier:          erkQSN6XmZUf8M/vUw1dt5rp32zN4xkf64dezQtlDSU=
Subject key identifier:   B5:CF:ED:CE:F0:F5:73:7A:FD:ED:89:BE:4F:8E:AE:57:8F:9C:9D:25
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285845AC88C60834A3BF2C92B12400
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/70365891-18d6-30a9-a7af-33e07c728b40.roa
Signing time:             Fri 26 Apr 2024 13:00:35 +0000
ROA not before:           Fri 26 Apr 2024 13:00:35 +0000
ROA not after:            Thu 25 Jul 2024 13:00:35 +0000
asID:                     14315
IP address blocks:        23.26.82.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 05 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:ac:88:c6:08:34:a3:bf:2c:92:b1:24:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Apr 26 13:00:35 2024 GMT
            Not After : Jul 25 13:00:35 2024 GMT
        Subject: CN=24325ff7-0612-4940-8363-50ba284a332c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:f8:21:15:ef:c7:3b:5f:72:14:65:08:04:df:
                    a6:02:5d:de:21:88:b8:6f:4b:68:27:a4:6c:b1:54:
                    2f:92:3d:38:91:2d:b6:4e:cd:db:8b:5a:6a:04:f1:
                    0c:4e:69:9a:59:7a:91:a5:a5:0d:7a:81:07:00:b9:
                    db:74:0d:7a:34:24:c9:44:39:9b:9e:0f:bc:6c:b3:
                    77:76:c7:0b:a6:85:c4:47:9f:dd:fb:87:99:39:c7:
                    74:77:ec:d2:6b:f2:b7:45:c5:45:c8:aa:db:d6:be:
                    62:8f:d9:da:c4:6f:6c:db:d5:19:bb:00:b5:cd:50:
                    5e:67:b0:d0:99:f4:c3:c7:da:b1:f4:aa:20:74:1c:
                    5c:ea:ac:14:32:74:ca:47:c0:ac:2b:0f:f1:7c:e2:
                    49:9f:dc:0e:17:c6:5a:8d:f6:51:f3:0b:74:1f:37:
                    47:30:85:37:6d:4a:d9:81:53:e3:f2:fa:ee:be:28:
                    22:4b:04:e2:ea:4f:4a:96:96:24:a2:87:fd:51:74:
                    30:c5:0d:8d:da:6d:2d:6d:cc:e1:61:da:8d:f8:d4:
                    0d:29:8c:52:e9:ac:65:fa:23:7e:c1:e0:09:27:d9:
                    5b:18:62:7f:50:05:f4:f1:fc:62:12:f0:e1:03:f8:
                    39:33:b1:37:b8:16:e6:c4:01:b9:7f:ac:c2:db:a4:
                    31:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:CF:ED:CE:F0:F5:73:7A:FD:ED:89:BE:4F:8E:AE:57:8F:9C:9D:25
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/70365891-18d6-30a9-a7af-33e07c728b40.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.26.82.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:0b:3e:9f:b5:a6:76:d7:8b:d4:fa:d7:d2:00:a6:dd:1d:48:
         76:f8:e7:8d:31:46:12:cd:87:c9:52:4e:5e:4c:d3:78:ec:ea:
         29:8f:4d:f6:14:45:b0:cb:47:cc:a8:02:5e:47:2d:aa:77:90:
         87:cb:dc:d0:73:55:ee:fa:03:a9:c4:a2:bf:a4:96:2f:8f:71:
         69:bd:bf:82:26:e3:ff:95:24:de:cf:0c:8e:58:5c:e5:68:ad:
         93:93:4a:ab:69:19:1c:b3:de:95:09:2f:e1:c4:a5:53:c3:ee:
         2d:f9:87:d7:f1:f2:f7:19:d4:d0:d1:33:2b:65:73:52:b4:35:
         26:58:23:ca:aa:05:c8:0a:16:4b:1a:6e:c3:ab:fb:6f:d1:6b:
         02:4a:4e:77:61:72:ef:87:e7:15:33:8c:60:4f:ab:19:45:0d:
         09:a6:bf:cb:4e:af:98:01:71:e2:05:a9:d7:6f:20:1b:b8:fa:
         ef:b8:08:e1:fe:34:06:b9:c5:3b:06:67:c2:e8:5b:c0:a2:4e:
         d9:54:1f:b2:23:6a:d0:6d:51:5e:6b:2e:4b:2a:5f:05:45:bb:
         a7:c2:88:83:d0:01:31:fe:f9:18:15:37:88:6f:7a:86:0f:fd:
         96:b4:b0:88:7f:6d:d0:ac:4c:d3:4b:06:d5:d4:63:4f:99:f6:
         d4:0a:ca:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 22:27:23 2024 by rpki-client on console-ams.rpki-client.org