Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/797d70cd-0bce-3b21-b178-5af624a6a1ec.roa
File:                     797d70cd-0bce-3b21-b178-5af624a6a1ec.roa (raw, json)
Hash identifier:          BOk8v4CKmvjXFNZVqSJnIOCIasKaXB/dTQO+RAHfIJI=
Subject key identifier:   24:BE:B1:AC:86:ED:59:9E:E6:78:F7:A8:E1:5B:04:03:CC:21:97:DB
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285845A15E1A622DA48D6185C64140
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/797d70cd-0bce-3b21-b178-5af624a6a1ec.roa
Signing time:             Mon 22 Apr 2024 13:00:33 +0000
ROA not before:           Mon 22 Apr 2024 13:00:33 +0000
ROA not after:            Sun 21 Jul 2024 13:00:33 +0000
asID:                     210542
IP address blocks:        23.26.34.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 05 May 2024 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:a1:5e:1a:62:2d:a4:8d:61:85:c6:41:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Apr 22 13:00:33 2024 GMT
            Not After : Jul 21 13:00:33 2024 GMT
        Subject: CN=0ae4d2cd-6803-4fdb-a9b9-deb6331a3038
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:dc:67:b6:0a:50:c0:c0:42:22:e6:fd:b4:13:
                    d3:bd:22:6d:f2:fe:95:98:dd:f4:1f:5d:3d:df:b9:
                    e2:e6:62:d1:e8:46:4d:f4:7f:c5:39:ce:7d:f0:6a:
                    e8:aa:27:37:84:3d:f3:fe:09:97:4f:44:47:64:f1:
                    26:e4:d5:a8:46:62:35:95:f0:5b:b7:1b:9b:02:7b:
                    c3:39:e0:75:e4:31:c7:c0:09:13:82:dc:96:b1:2e:
                    54:85:29:27:be:4b:dd:73:42:d2:3d:d3:ba:4f:2f:
                    f0:0e:f0:57:33:8a:27:07:ad:54:4a:c1:f8:7e:e1:
                    84:6d:bc:ca:f0:60:ba:3a:f9:6a:57:ef:6e:79:66:
                    f1:dc:92:5c:e3:1b:83:a1:0e:d7:68:2c:01:c0:0f:
                    41:c0:b0:f8:94:b1:0a:e7:b5:b8:d1:11:db:ad:0d:
                    f4:7e:d2:d0:00:92:ee:82:bd:a6:4d:bb:92:4d:65:
                    e5:ea:e4:08:14:67:e4:0f:25:e0:b4:4f:0a:ee:ea:
                    89:22:51:70:46:f2:fd:26:4d:ac:a0:35:74:3a:38:
                    cc:6f:9e:91:b0:ac:c9:cd:fb:52:5a:7f:84:83:1e:
                    99:39:04:2b:ee:ff:3a:bf:f3:5a:78:05:a5:dc:e0:
                    8c:97:04:0e:02:47:ac:dd:31:51:fb:db:be:11:00:
                    5f:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:BE:B1:AC:86:ED:59:9E:E6:78:F7:A8:E1:5B:04:03:CC:21:97:DB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/797d70cd-0bce-3b21-b178-5af624a6a1ec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.26.34.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:68:71:d7:34:d9:8a:19:14:4a:34:ec:2e:9c:71:f4:74:87:
         ad:95:3c:94:1b:2b:d7:38:57:f7:4b:2f:16:64:1f:d4:8b:6d:
         37:35:74:3f:35:76:40:a4:ed:c1:7b:69:02:e4:0f:42:00:c6:
         eb:d6:4a:9e:7c:91:d9:cc:e6:82:bd:8f:db:09:03:dc:33:14:
         9b:6c:9c:05:28:5d:b4:d3:1c:00:13:74:13:9f:59:8d:ed:b3:
         4a:a0:ce:c3:de:6e:44:31:52:4f:34:ce:07:90:6e:83:b5:84:
         31:9c:77:aa:46:eb:ab:dc:37:23:b1:65:d4:36:da:27:08:fd:
         dc:5d:93:5d:52:5c:79:7a:94:02:32:f3:0e:70:4e:b1:68:9b:
         77:06:67:2f:35:50:15:eb:7e:0b:c5:c7:64:1a:9e:cd:b1:49:
         8f:d5:ef:dc:9c:a7:b0:37:e8:fb:b2:f6:9e:23:43:51:cd:e2:
         7e:06:75:89:88:13:fb:bd:2c:10:52:d1:8b:dd:95:da:a9:0e:
         57:48:32:e4:c3:b3:dd:c0:ad:54:70:76:58:64:10:a3:e7:dc:
         95:5f:64:1e:94:e0:fe:50:1c:25:83:2e:15:53:ea:44:dc:c4:
         3a:d6:f2:fe:bd:2a:d1:4b:c4:93:d5:8c:2b:40:93:e6:ef:ce:
         0f:15:0d:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 02:55:50 2024 by rpki-client on console-fra.rpki-client.org