Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/78a18aa9-88b9-3dc7-b5d8-44e8c7348430.roa
File:                     78a18aa9-88b9-3dc7-b5d8-44e8c7348430.roa (raw, json)
Hash identifier:          BKCU3UXPpK1Sw08tkuOGkIpg1bNpGEmUiPaka3lAaEY=
Subject key identifier:   B7:0A:A2:9A:21:B9:4B:02:28:E1:75:E6:93:68:C9:5A:3A:B8:FC:F9
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F432858473A5B8E7238F2276DF25A0740
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/78a18aa9-88b9-3dc7-b5d8-44e8c7348430.roa
Signing time:             Mon 16 Sep 2024 01:00:29 +0000
ROA not before:           Mon 16 Sep 2024 01:00:29 +0000
ROA not after:            Sun 15 Dec 2024 02:00:29 +0000
asID:                     19437
IP address blocks:        23.26.243.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:3a:5b:8e:72:38:f2:27:6d:f2:5a:07:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Sep 16 01:00:29 2024 GMT
            Not After : Dec 15 02:00:29 2024 GMT
        Subject: CN=24440182-d6cb-4a00-a4a2-31c5503aacb5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:5c:b8:87:60:50:43:79:34:48:f6:39:6c:cc:
                    63:49:ce:48:4f:bd:97:c2:9f:4e:1c:3d:ee:f4:dc:
                    9f:ab:36:19:eb:a4:da:7f:e7:f8:36:ec:54:bd:eb:
                    bd:aa:f7:f4:52:47:f2:b1:44:1c:18:ff:e3:d1:77:
                    78:95:0c:5d:fe:c9:58:45:d9:db:1e:15:02:f9:1a:
                    69:ae:fc:95:27:fc:a2:15:cd:43:bd:65:93:f0:c4:
                    df:a9:1d:48:da:95:12:68:ad:32:5f:a9:db:a0:ab:
                    8a:4e:b1:df:d9:6a:fc:df:3b:e2:58:eb:ff:90:36:
                    65:03:a6:18:0d:47:53:5f:62:ae:08:06:a5:fe:c4:
                    32:72:42:d0:98:9f:40:dc:4e:af:f4:15:cd:a4:4c:
                    45:08:8a:e2:04:4a:2a:5f:80:bc:ea:73:ae:e9:a0:
                    bc:3b:99:96:9e:b2:df:fd:85:9a:cb:b4:c2:0b:e3:
                    11:71:2a:ed:83:a2:d2:12:29:d9:1e:c7:71:2d:76:
                    3b:8f:10:40:6e:2b:7f:40:96:3a:08:4a:ce:9c:be:
                    be:39:e7:17:af:7f:a7:20:d1:2c:36:37:73:4e:aa:
                    90:82:c1:b2:f1:cc:3a:f1:fd:c9:dc:04:75:6a:fe:
                    58:fd:03:19:18:f6:dc:45:32:1b:fd:75:fa:42:3c:
                    f4:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:0A:A2:9A:21:B9:4B:02:28:E1:75:E6:93:68:C9:5A:3A:B8:FC:F9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/78a18aa9-88b9-3dc7-b5d8-44e8c7348430.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.26.243.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:51:79:a0:dd:73:ec:1d:5d:46:8f:ed:95:a7:0e:5c:c1:f0:
         31:dc:c4:07:67:f4:a1:65:40:81:8c:c4:86:44:fe:50:d8:10:
         1e:1c:b3:3c:30:75:45:8c:07:e6:31:6a:3b:f1:01:f9:70:67:
         43:27:fe:50:92:56:8c:18:c5:e2:17:31:27:aa:9a:2c:ef:a8:
         84:11:96:46:c5:b1:7e:0d:bc:76:62:05:a5:ce:34:9d:36:cf:
         0a:ce:d9:b9:0a:9d:3d:6a:1e:0e:76:66:3c:56:e1:9f:d3:ea:
         0c:9a:4b:8d:cb:01:c7:c1:36:a7:cf:ab:dc:fa:9b:98:f8:dd:
         e5:92:af:5f:a2:95:19:62:a1:8d:8f:83:b2:db:66:84:66:76:
         fb:9a:63:1a:e1:69:2e:e8:53:5c:15:de:6b:63:70:be:78:58:
         2b:f9:3b:6a:15:70:6b:f9:de:2f:54:1e:5c:8e:a5:86:cd:23:
         36:61:e3:1a:c0:6b:eb:bd:9d:d5:4a:a1:5d:e8:89:a4:62:58:
         11:9d:15:73:fe:09:00:9f:bf:87:67:f2:13:cf:21:13:4f:fa:
         f1:3f:41:c8:04:39:3b:4c:d9:b1:fc:53:44:be:e4:05:b3:56:
         87:61:99:b6:5e:2f:bd:b0:0c:55:1d:e4:50:9f:cb:ba:e1:a5:
         de:98:72:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 06:37:43 2024 by rpki-client on console-ams.rpki-client.org