Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/73b50fc3-ee32-3cf0-b735-386e45a992a9.roa
File:                     73b50fc3-ee32-3cf0-b735-386e45a992a9.roa (raw, json)
Hash identifier:          Me4TbSZ1ZdIrCEW4Zodv7heneLUl8k7/+ZUzMJNZ6vY=
Subject key identifier:   EB:9C:40:0D:3C:D3:99:86:40:A8:CE:1A:2F:09:94:78:60:EE:13:FB
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584813415A1637513AE0528CDB10
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/73b50fc3-ee32-3cf0-b735-386e45a992a9.roa
Signing time:             Mon 02 Dec 2024 17:38:55 +0000
ROA not before:           Mon 02 Dec 2024 17:38:55 +0000
ROA not after:            Sun 02 Mar 2025 17:38:55 +0000
asID:                     3356
IP address blocks:        23.26.54.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 07 Feb 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:13:41:5a:16:37:51:3a:e0:52:8c:db:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Dec  2 17:38:55 2024 GMT
            Not After : Mar  2 17:38:55 2025 GMT
        Subject: CN=a8724083-16d9-454e-9f4c-daf21c90a9f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:19:96:ff:4c:2e:eb:68:f4:95:69:f0:93:14:
                    1d:91:89:55:7b:b5:b8:db:3b:8b:b2:a7:aa:60:4a:
                    a7:4b:ef:ad:b5:dc:e6:35:0b:60:b7:4b:a4:43:6a:
                    e7:39:1d:64:83:fc:cc:51:ff:dd:fc:ff:3f:f4:b4:
                    a6:ec:cb:85:47:04:8f:a2:a2:c9:ba:5e:fd:24:f1:
                    ce:c3:b8:02:65:c0:c9:c9:37:25:e1:07:6d:ce:53:
                    3f:58:4f:29:34:c7:17:25:0e:7c:fa:70:3d:37:98:
                    fd:49:e9:e5:79:f1:58:d8:82:6e:29:0a:d6:9c:61:
                    5a:b0:ea:04:44:35:be:8c:cf:bb:fe:26:d9:42:8d:
                    e7:7c:26:03:23:32:ac:82:66:d7:f1:8b:15:de:1a:
                    37:0f:84:06:b5:12:46:ac:ca:15:f1:b1:80:76:37:
                    3e:ae:5d:47:d9:57:e6:91:06:98:15:93:60:33:1d:
                    90:77:72:6e:0b:79:ec:e4:70:a0:02:5d:42:1b:42:
                    79:90:fd:27:39:3e:63:4d:f4:7c:ce:d0:d9:23:5e:
                    22:c2:73:ec:b3:80:76:a4:a3:9c:cd:9a:4c:ba:13:
                    2e:25:84:85:42:6f:7f:ef:0c:60:ce:89:a0:d7:cd:
                    25:d0:92:84:08:e5:cf:c1:0b:d6:47:ce:f0:ba:e9:
                    dd:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:9C:40:0D:3C:D3:99:86:40:A8:CE:1A:2F:09:94:78:60:EE:13:FB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/73b50fc3-ee32-3cf0-b735-386e45a992a9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.26.54.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:b4:41:5f:7a:7e:21:30:1a:ca:97:8c:a5:ef:34:ad:97:61:
         2d:9f:59:4a:30:78:5c:a8:7b:0c:23:f3:ee:b5:b6:b6:c1:c5:
         29:ff:27:7e:22:ad:c8:fc:cb:7b:6f:6f:d9:51:93:5b:11:06:
         7e:d0:cb:b2:f1:5c:5d:61:8a:d1:d3:75:65:55:5a:6f:f3:94:
         5f:06:b1:2e:67:a1:fe:16:e1:44:e3:e1:53:9a:cf:cc:b7:0c:
         af:f3:db:dd:6c:62:f0:1d:4d:ab:ba:6e:c5:70:65:ff:1a:4d:
         5b:2e:69:96:07:f4:90:d8:2c:00:86:b8:c1:c1:39:73:0a:5d:
         ec:56:ea:bd:32:dd:c2:c4:ed:71:6a:1b:77:eb:ec:56:c3:9f:
         52:9f:1d:31:33:cb:e7:f8:50:68:d5:2b:de:43:58:90:fa:ed:
         39:a3:85:79:cd:70:d1:74:e6:1c:7a:c9:4b:62:ac:5e:9e:7a:
         34:36:73:50:f6:06:6f:c9:f5:07:8e:80:e5:cc:f1:dd:b6:44:
         41:40:fd:54:a5:44:18:43:6c:36:b5:e3:07:52:ce:dc:da:c0:
         25:80:de:fb:85:e8:8c:b6:4d:3a:4c:69:58:ee:38:c3:7e:9c:
         d2:61:2b:da:6f:44:ce:96:94:e1:f3:19:53:c6:e3:81:42:38:
         5f:d1:c4:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:59:10 2025 by rpki-client