Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/7aced76e-d4f5-3d8b-9848-378bccff1d9f.roa
File:                     7aced76e-d4f5-3d8b-9848-378bccff1d9f.roa (raw, json)
Hash identifier:          V97iNmNGuFLQ9Gl2SZbPFklpsSqesq9osy0NaZ+A6Eo=
Subject key identifier:   85:78:74:08:DC:8E:6E:27:D9:A1:77:72:B4:04:0E:99:56:35:CC:08
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F432858456F1DAFC397F994030F96FB80
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/7aced76e-d4f5-3d8b-9848-378bccff1d9f.roa
Signing time:             Thu 04 Apr 2024 13:00:36 +0000
ROA not before:           Thu 04 Apr 2024 13:00:36 +0000
ROA not after:            Wed 03 Jul 2024 13:00:36 +0000
asID:                     140902
IP address blocks:        23.26.249.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 05 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:6f:1d:af:c3:97:f9:94:03:0f:96:fb:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Apr  4 13:00:36 2024 GMT
            Not After : Jul  3 13:00:36 2024 GMT
        Subject: CN=23f142d4-2835-41bc-b43a-b1edf23bf1ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:85:69:2b:69:d4:12:a3:1b:7c:e0:1d:67:93:
                    c1:f3:0a:2d:01:93:e0:0c:63:c5:2e:c3:57:79:d3:
                    82:e1:fc:f7:9a:4d:04:d5:39:73:b8:69:72:f2:61:
                    e8:ea:40:5a:cf:3a:c4:15:ac:b2:97:d0:41:b3:89:
                    e4:5c:12:9c:21:25:6b:24:d6:62:e9:d1:60:8a:7e:
                    fd:f7:21:71:65:79:a3:49:c9:08:75:80:b2:07:62:
                    56:6b:02:dd:7b:69:44:ea:8a:7e:d7:ee:86:c0:41:
                    b2:51:1f:82:e6:75:76:f7:0b:c4:95:56:8d:88:8f:
                    71:ac:a2:c1:4a:4c:65:0a:57:d2:dc:0b:b6:b5:92:
                    7b:5e:cf:2b:ff:a2:61:cf:1a:08:c9:32:ac:07:86:
                    da:74:46:09:87:c4:da:c2:c0:0e:a1:7c:f2:53:1d:
                    dc:f4:ba:c4:5a:bb:41:25:bf:4e:c8:4e:89:93:41:
                    ec:70:11:cb:9c:6c:bb:eb:54:a3:9f:03:f5:52:59:
                    20:53:26:b1:a1:ea:03:b5:6b:60:10:f1:c5:a0:34:
                    7c:00:39:3c:5a:be:58:19:9b:2d:48:c7:69:51:85:
                    6d:91:8e:06:2c:82:42:b9:88:aa:aa:97:bd:31:de:
                    60:66:7e:57:e9:cc:92:71:33:db:e9:5f:a6:d8:38:
                    db:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:78:74:08:DC:8E:6E:27:D9:A1:77:72:B4:04:0E:99:56:35:CC:08
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/7aced76e-d4f5-3d8b-9848-378bccff1d9f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.26.249.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:af:ce:da:80:2a:4d:3d:91:c6:33:1c:27:13:e6:24:dc:e1:
         64:be:49:d1:3b:1d:27:6c:bc:c6:dd:74:84:ea:16:0d:f9:3a:
         5f:0a:f9:10:ee:80:04:08:ca:67:ea:73:e3:c5:80:07:09:99:
         b9:07:1c:3a:65:3c:97:2a:f4:28:75:8a:9b:38:10:5e:df:9f:
         03:86:e4:0d:ed:ad:24:da:e4:97:9e:96:c7:ba:48:fd:89:6d:
         bc:44:c9:25:8c:2c:38:b3:17:ea:ff:c7:20:d6:59:ac:01:1a:
         62:cc:d3:e7:48:6e:46:d3:2c:d5:52:36:fa:53:4a:68:ce:da:
         c4:8c:e9:6d:c9:de:7a:97:38:f8:d2:75:00:b5:ca:dc:3d:0e:
         7c:de:4c:cf:b8:45:8d:2f:9e:d4:34:f3:89:42:80:d6:75:5e:
         e7:57:14:ad:63:ea:72:7e:a2:38:e7:00:15:87:48:78:bd:c2:
         ef:82:6c:50:04:82:63:d8:fc:45:8b:5e:f2:fa:16:db:06:ee:
         67:22:f8:59:28:69:8b:e6:e9:3d:13:63:d0:15:bf:bf:d3:ec:
         24:17:54:31:4b:50:b2:30:c2:f1:59:05:1e:12:0f:9f:b5:d9:
         c4:f6:f0:78:9a:4d:e4:7d:89:97:1e:27:fb:48:5d:8f:43:46:
         08:46:27:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 22:27:23 2024 by rpki-client on console-ams.rpki-client.org