Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/7b4ee087-c0e6-3b7d-b246-2c4f4ecd5c8d.roa
File:                     7b4ee087-c0e6-3b7d-b246-2c4f4ecd5c8d.roa (raw, json)
Hash identifier:          60nFEvJGCWNGcXZZpV/0zabniQmJgIwBcvKSYEAy8Aw=
Subject key identifier:   F3:A2:F0:58:2A:4E:C7:A2:9B:E8:A5:1D:63:3B:A2:E6:A8:28:9E:38
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584511B578CB1DEA4BFE6FE7C600
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/7b4ee087-c0e6-3b7d-b246-2c4f4ecd5c8d.roa
Signing time:             Sat 02 Mar 2024 02:00:26 +0000
ROA not before:           Sat 02 Mar 2024 02:00:26 +0000
ROA not after:            Fri 31 May 2024 01:00:26 +0000
asID:                     25846
IP address blocks:        23.26.137.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 05 May 2024 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:11:b5:78:cb:1d:ea:4b:fe:6f:e7:c6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Mar  2 02:00:26 2024 GMT
            Not After : May 31 01:00:26 2024 GMT
        Subject: CN=b044b9c9-777f-47c5-b7cf-ddbcc8742ff0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:07:02:e5:da:ca:44:e7:84:e0:fe:5c:b5:bc:
                    c9:e5:4f:2f:30:45:4c:92:b6:90:a6:fb:50:0d:b8:
                    c6:2a:de:cb:31:97:08:1d:db:86:55:17:de:84:4b:
                    2f:89:c3:eb:a1:1c:2f:01:14:4e:86:4b:06:f4:32:
                    90:80:56:56:d7:21:a6:75:71:52:1a:9f:0e:0c:e9:
                    cd:62:22:70:41:68:72:df:1b:bd:bf:62:cc:0f:86:
                    db:26:58:0c:f9:b9:61:70:61:81:1c:84:f6:75:76:
                    bf:cd:b3:24:85:fc:55:6a:e6:d4:70:72:93:5e:9d:
                    70:a1:b6:88:f1:12:c1:42:0a:aa:b6:40:47:e6:2b:
                    70:6d:98:32:b5:11:21:f4:78:19:51:2b:c5:84:76:
                    9a:22:47:cd:00:c8:52:e7:e2:07:c2:83:ab:33:5d:
                    7f:ae:7f:d3:a2:72:36:1b:a0:53:b3:30:e9:0f:a0:
                    80:2b:53:05:7b:04:ea:53:99:4a:b4:db:ef:c6:0f:
                    1b:a4:19:2e:b2:89:bc:c4:9c:11:7c:8d:65:22:cb:
                    2c:7c:fa:a3:48:32:72:9e:78:5b:0a:1b:d1:17:15:
                    71:55:de:40:07:5f:12:59:da:5a:c8:a3:96:7e:17:
                    7b:dd:40:c3:06:d3:c8:99:93:16:24:09:99:20:57:
                    7d:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:A2:F0:58:2A:4E:C7:A2:9B:E8:A5:1D:63:3B:A2:E6:A8:28:9E:38
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/7b4ee087-c0e6-3b7d-b246-2c4f4ecd5c8d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.26.137.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:65:6d:24:6f:83:f2:cb:76:2d:a6:87:30:ec:ad:31:67:88:
         e4:9f:d3:3f:af:4b:0f:2c:de:e1:39:4c:f6:01:03:1b:0a:23:
         a0:69:dd:f0:76:27:e4:f9:1f:14:27:35:48:d9:b2:cb:1c:36:
         55:62:b6:d2:27:d5:b7:99:78:4b:f3:46:87:70:f1:f9:9f:b6:
         14:0f:9d:d7:a5:33:02:9b:96:f3:df:55:c2:47:17:51:e4:0a:
         35:fb:65:87:d1:91:0b:10:85:7f:a8:5f:dd:44:c9:e5:46:4c:
         30:a7:ad:e9:3c:64:99:ff:89:da:b6:f8:e4:f4:9b:80:ce:52:
         a5:fa:16:c9:51:83:d3:fc:fb:0f:53:ab:23:32:4a:80:43:a6:
         95:6d:fc:c8:cd:ee:4f:e2:19:dc:5a:db:80:49:59:96:9f:37:
         28:5a:a3:45:8f:d1:6f:60:67:70:dd:83:72:20:49:5f:b0:e6:
         c2:1d:85:25:ec:60:a9:0a:83:44:10:5a:38:a7:6e:24:be:55:
         c7:4b:7e:3e:f4:85:e4:90:e7:09:43:71:98:80:f0:8b:02:a7:
         17:b4:41:2a:c1:e8:1d:a9:b4:3f:6c:dc:ba:08:fd:8a:88:b0:
         08:3a:62:37:26:25:08:a8:a2:59:ad:33:a0:c6:85:4f:29:d3:
         9f:54:30:d4
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEURtXjLHepL/m/nxgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTI0MDMwMjAyMDAyNloXDTI0MDUzMTAxMDAyNlowLzEtMCsGA1UEAxMk
YjA0NGI5YzktNzc3Zi00N2M1LWI3Y2YtZGRiY2M4NzQyZmYwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsAcC5drKROeE4P5ctbzJ5U8vMEVMkraQpvtQ
DbjGKt7LMZcIHduGVRfehEsvicProRwvARROhksG9DKQgFZW1yGmdXFSGp8ODOnN
YiJwQWhy3xu9v2LMD4bbJlgM+blhcGGBHIT2dXa/zbMkhfxVaubUcHKTXp1wobaI
8RLBQgqqtkBH5itwbZgytREh9HgZUSvFhHaaIkfNAMhS5+IHwoOrM11/rn/TonI2
G6BTszDpD6CAK1MFewTqU5lKtNvvxg8bpBkusom8xJwRfI1lIsssfPqjSDJynnhb
ChvRFxVxVd5AB18SWdpayKOWfhd73UDDBtPImZMWJAmZIFd9owIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPOi8FgqTseim+ilHWM7ouaoKJ44MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvN2I0ZWUwODctYzBlNi0z
YjdkLWIyNDYtMmM0ZjRlY2Q1YzhkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFxqJMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAItlbSRvg/LLdi2mhzDsrTFniOSf0z+vSw8s3uE5TPYBAxsKI6Bp3fB2
J+T5HxQnNUjZssscNlVittIn1beZeEvzRodw8fmfthQPndelMwKblvPfVcJHF1Hk
CjX7ZYfRkQsQhX+oX91EyeVGTDCnrek8ZJn/idq2+OT0m4DOUqX6FslRg9P8+w9T
qyMySoBDppVt/MjN7k/iGdxa24BJWZafNyhao0WP0W9gZ3Ddg3IgSV+w5sIdhSXs
YKkKg0QQWjinbiS+VcdLfj70heSQ5wlDcZiA8IsCpxe0QSrB6B2ptD9s3LoI/YqI
sAg6YjcmJQioolmtM6DGhU8p059UMNQ=
-----END CERTIFICATE-----
Generated at Sat May 4 02:06:30 2024 by rpki-client on console-ams.rpki-client.org