Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/713771d4-bd67-3dd2-bd4f-20cf72ab1365.roa
File:                     713771d4-bd67-3dd2-bd4f-20cf72ab1365.roa (raw, json)
Hash identifier:          iicK5BwOHrrNJoS72iuDkBZs0dSv6AIvrVv0dnyT6og=
Subject key identifier:   D5:20:63:16:17:C4:FA:4F:0E:6A:79:48:37:60:E5:34:50:96:79:6B
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285847DF2F5703687EDC1A70A6FB80
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/713771d4-bd67-3dd2-bd4f-20cf72ab1365.roa
Signing time:             Thu 14 Nov 2024 02:00:27 +0000
ROA not before:           Thu 14 Nov 2024 02:00:27 +0000
ROA not after:            Wed 12 Feb 2025 02:00:27 +0000
asID:                     32514
IP address blocks:        23.26.159.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:df:2f:57:03:68:7e:dc:1a:70:a6:fb:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Nov 14 02:00:27 2024 GMT
            Not After : Feb 12 02:00:27 2025 GMT
        Subject: CN=70d3f1b8-f0db-4756-b8b4-3d3e9fce542f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:eb:b8:65:5a:19:03:df:b0:57:3f:c7:17:a0:
                    5e:d7:70:a5:fb:c4:2b:9a:22:f2:e2:ae:2a:da:dc:
                    4d:64:1a:2c:8e:ff:25:c7:a0:49:3a:ba:33:a7:d7:
                    c0:08:40:b9:8e:e7:f3:c5:73:8e:a6:9c:ad:d8:71:
                    ec:73:db:eb:b4:83:04:48:ed:fd:00:f7:1c:9d:f2:
                    9f:68:dc:2b:46:94:98:fd:a0:28:f1:c4:9a:50:81:
                    7b:1d:57:91:97:62:bd:ab:f3:27:5a:8c:88:c3:58:
                    a8:42:5b:6a:8a:cf:f2:65:c4:dd:cc:31:6b:41:02:
                    9d:6a:80:cb:75:8f:56:17:8f:f1:29:18:b3:ae:26:
                    89:5f:fd:71:f5:d1:da:83:fe:ec:c8:8a:46:0b:32:
                    12:94:3f:b4:11:c5:53:4d:b2:da:38:7d:42:ab:65:
                    6d:9e:10:82:c0:c6:61:14:5a:a1:48:fb:b9:3a:06:
                    9d:87:42:9a:49:ca:43:44:27:ec:82:e0:c9:06:88:
                    62:af:b7:9c:16:2a:cd:39:7a:3a:3f:2e:f1:e6:ea:
                    d3:5c:6e:62:cc:3b:e9:81:e3:b6:dd:ae:7b:57:e8:
                    c5:3f:c6:31:42:a6:b5:2b:89:ca:4c:39:af:1e:0f:
                    e1:b0:76:77:8e:f2:61:b9:34:3a:f3:a8:8f:00:dc:
                    c4:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:20:63:16:17:C4:FA:4F:0E:6A:79:48:37:60:E5:34:50:96:79:6B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/713771d4-bd67-3dd2-bd4f-20cf72ab1365.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.26.159.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         93:2b:27:e5:23:4b:78:30:94:53:30:f7:76:b4:9c:6c:bc:03:
         0e:f1:54:42:fc:9f:9f:d8:06:53:22:e7:d5:ba:71:09:3e:6c:
         59:de:03:42:25:ab:42:eb:fe:6b:e6:95:d5:71:84:3d:6d:2c:
         e3:86:d0:81:22:5a:d1:50:46:c1:7c:ee:90:3b:27:76:62:0b:
         34:6e:05:e7:3f:70:23:90:a1:91:a1:ef:ca:85:33:8c:0c:66:
         5e:47:66:26:64:b0:0e:4c:5e:fc:61:d0:3e:c1:10:eb:63:cf:
         fc:39:37:04:21:73:0c:0e:8b:72:89:3f:00:28:1b:a0:bb:dd:
         a0:1e:3e:a3:f1:77:86:fd:4c:c0:52:ae:55:3d:fc:7b:55:85:
         c9:8e:25:e4:8e:22:47:31:e5:c7:44:9a:25:3a:fa:0f:92:60:
         ce:38:2d:09:32:a4:11:f7:42:d2:b6:41:43:99:95:28:19:50:
         e3:54:91:60:49:b1:11:b0:08:fb:82:50:f9:57:c7:04:c4:dc:
         80:24:59:b1:c6:f0:a4:30:07:19:4c:1d:b3:b1:93:38:4f:9d:
         cf:b9:23:45:cc:39:55:ab:76:ed:37:47:ec:5d:88:6e:8e:64:
         7e:3a:d0:90:ee:43:5e:35:e0:32:c8:9e:d3:fd:ae:c6:a4:37:
         92:da:38:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 06:37:43 2024 by rpki-client on console-ams.rpki-client.org