Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/797d70cd-0bce-3b21-b178-5af624a6a1ec.roa
File:                     797d70cd-0bce-3b21-b178-5af624a6a1ec.roa (raw, json)
Hash identifier:          8YSZUCI9TiBYH9huNMvy1K6mW32HC4QizBdPgSs9UOk=
Subject key identifier:   A9:C3:2A:A8:4F:20:21:6F:B7:68:F1:F0:6E:99:E7:38:5F:98:B9:03
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285847600B909670A95A6157FE6A80
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/797d70cd-0bce-3b21-b178-5af624a6a1ec.roa
Signing time:             Sun 29 Sep 2024 13:00:41 +0000
ROA not before:           Sun 29 Sep 2024 13:00:41 +0000
ROA not after:            Sat 28 Dec 2024 14:00:41 +0000
asID:                     210542
IP address blocks:        23.26.34.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:60:0b:90:96:70:a9:5a:61:57:fe:6a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Sep 29 13:00:41 2024 GMT
            Not After : Dec 28 14:00:41 2024 GMT
        Subject: CN=668eda73-97f6-4885-b549-9225135e926b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:2a:7c:9a:00:28:75:38:58:18:0f:ed:29:45:
                    d3:fa:60:81:77:1b:78:46:4f:90:af:21:b9:9b:46:
                    75:0e:62:ad:81:ba:32:1c:0f:97:79:49:6c:d0:4b:
                    80:e6:80:ac:88:a3:ed:5a:d9:b5:16:d1:e2:5b:4e:
                    73:5d:30:d7:b0:51:3c:e2:6d:e7:87:f0:d6:26:cb:
                    95:a6:17:35:20:45:d1:f5:3b:bf:75:82:18:5e:01:
                    1c:0e:d7:d8:92:2e:60:a4:40:ae:29:27:8e:0c:f5:
                    80:72:78:8b:72:c2:f8:54:f5:ac:a0:50:d3:9b:48:
                    58:8a:69:9f:c1:b8:66:6e:01:0c:fe:74:43:94:59:
                    21:ec:1c:44:d6:98:7e:65:ef:e1:f5:cf:e5:ae:28:
                    54:46:58:d2:ca:9e:67:ec:95:6b:24:09:de:ca:4e:
                    5e:2a:ae:5e:c9:95:b8:51:cb:d9:20:2e:3f:03:bc:
                    5e:7f:52:e5:ac:2b:eb:5d:b7:79:e9:8c:36:a7:4a:
                    7a:f0:e8:6d:63:da:46:c2:8c:20:59:90:11:e2:9d:
                    1b:23:34:85:59:f5:6e:e5:0a:0a:a6:48:55:65:7d:
                    88:5f:35:4b:fa:38:32:ce:e8:58:58:ca:a2:66:7b:
                    08:64:fa:db:e3:25:1f:b8:01:90:99:c7:3e:49:e2:
                    13:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:C3:2A:A8:4F:20:21:6F:B7:68:F1:F0:6E:99:E7:38:5F:98:B9:03
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/797d70cd-0bce-3b21-b178-5af624a6a1ec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.26.34.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:ac:ed:44:44:fa:7f:bc:52:12:70:a0:8f:56:9e:2c:76:0c:
         bc:cc:ba:c0:28:d5:fa:2a:e0:ef:97:5a:b8:94:ba:05:13:73:
         54:37:1c:ee:28:ca:da:e6:e9:d6:ab:8b:f4:72:fb:34:73:6c:
         3f:c9:12:26:fa:dc:44:ba:91:a3:87:7d:ef:4b:e5:18:97:58:
         be:e1:2c:68:d8:0e:80:82:7e:f1:1a:b1:58:8d:d2:b9:0b:19:
         e9:a5:1b:0b:9d:41:02:00:fc:3f:53:52:24:35:24:0e:34:d8:
         26:49:3d:10:f9:6a:d5:f5:63:34:15:ae:50:7d:40:10:ec:61:
         6a:8c:c6:24:c7:a8:b5:7b:4e:d6:6f:3c:15:68:0e:22:9b:e1:
         06:19:65:b6:ae:c6:65:05:a9:87:27:f2:85:0e:15:aa:23:1d:
         7b:90:2d:3e:e5:aa:3b:98:b5:cd:02:c6:c1:41:7f:a4:67:be:
         bc:2f:16:77:9b:78:27:34:c1:71:38:72:60:55:28:a4:0f:09:
         60:43:83:d6:cf:e5:50:4b:bd:ae:66:57:23:ab:16:eb:27:93:
         f1:87:5f:ab:87:32:35:69:cd:95:d0:73:d4:b9:c5:83:1f:4e:
         7e:28:52:d1:2b:a2:1c:14:4f:7a:ad:26:a8:90:2c:b4:c7:55:
         93:e2:51:93
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdgC5CWcKlaYVf+aoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTI0MDkyOTEzMDA0MVoXDTI0MTIyODE0MDA0MVowLzEtMCsGA1UEAxMk
NjY4ZWRhNzMtOTdmNi00ODg1LWI1NDktOTIyNTEzNWU5MjZiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3ip8mgAodThYGA/tKUXT+mCBdxt4Rk+QryG5
m0Z1DmKtgboyHA+XeUls0EuA5oCsiKPtWtm1FtHiW05zXTDXsFE84m3nh/DWJsuV
phc1IEXR9Tu/dYIYXgEcDtfYki5gpECuKSeODPWAcniLcsL4VPWsoFDTm0hYimmf
wbhmbgEM/nRDlFkh7BxE1ph+Ze/h9c/lrihURljSyp5n7JVrJAneyk5eKq5eyZW4
UcvZIC4/A7xef1LlrCvrXbd56Yw2p0p68OhtY9pGwowgWZAR4p0bIzSFWfVu5QoK
pkhVZX2IXzVL+jgyzuhYWMqiZnsIZPrb4yUfuAGQmcc+SeITVQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKnDKqhPICFvt2jx8G6Z5zhfmLkDMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvNzk3ZDcwY2QtMGJjZS0z
YjIxLWIxNzgtNWFmNjI0YTZhMWVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFxoiMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFCs7URE+n+8UhJwoI9Wnix2DLzMusAo1foq4O+XWriUugUTc1Q3HO4o
ytrm6dari/Ry+zRzbD/JEib63ES6kaOHfe9L5RiXWL7hLGjYDoCCfvEasViN0rkL
GemlGwudQQIA/D9TUiQ1JA402CZJPRD5atX1YzQVrlB9QBDsYWqMxiTHqLV7TtZv
PBVoDiKb4QYZZbauxmUFqYcn8oUOFaojHXuQLT7lqjuYtc0CxsFBf6RnvrwvFneb
eCc0wXE4cmBVKKQPCWBDg9bP5VBLva5mVyOrFusnk/GHX6uHMjVpzZXQc9S5xYMf
Tn4oUtErohwUT3qtJqiQLLTHVZPiUZM=
-----END CERTIFICATE-----
Generated at Fri Nov 22 05:50:22 2024 by rpki-client on console-fra.rpki-client.org