Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/8bc8439b-0c22-30de-be2d-e419b521979f.roa
File:                     8bc8439b-0c22-30de-be2d-e419b521979f.roa (raw, json)
Hash identifier:          vru14o9Hq8tCcVoI1TXDfxOtE5tZDZyh4yOIppE958U=
Subject key identifier:   84:C0:5A:39:48:FB:B0:EA:23:DE:54:D8:C1:52:58:C6:BD:E8:3F:77
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285844D7151EB85BAD227D3C1BCB80
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/8bc8439b-0c22-30de-be2d-e419b521979f.roa
Signing time:             Sat 10 Feb 2024 02:00:26 +0000
ROA not before:           Sat 10 Feb 2024 02:00:26 +0000
ROA not after:            Fri 10 May 2024 01:00:26 +0000
asID:                     212238
IP address blocks:        23.26.39.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 29 Apr 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:d7:15:1e:b8:5b:ad:22:7d:3c:1b:cb:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Feb 10 02:00:26 2024 GMT
            Not After : May 10 01:00:26 2024 GMT
        Subject: CN=fe8ce35e-e35b-4f9c-ba64-a06df215d0dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:8b:39:93:61:b3:91:12:1b:75:20:ad:40:aa:
                    98:81:50:89:31:ef:c0:4d:fc:2a:2c:bb:6c:a0:de:
                    44:e4:9e:ee:35:65:7b:f4:5f:c7:0c:82:2b:16:4b:
                    52:3c:6a:d0:64:a6:8c:fe:03:db:ba:b1:fe:0e:5f:
                    e2:25:6d:ab:6d:0b:a7:dd:b4:24:92:6f:0e:54:b5:
                    12:a8:ea:ac:f0:bb:90:67:0d:2e:da:02:9c:3e:d8:
                    63:eb:7b:e3:f4:2a:20:36:9f:9a:ac:4f:c5:98:07:
                    2d:35:0e:68:80:11:1c:10:08:89:29:de:e3:e4:d6:
                    55:c2:37:27:2d:98:d2:f5:05:ef:82:64:a1:64:41:
                    3b:25:90:8a:23:1b:7d:1c:66:14:25:31:1c:06:3d:
                    a7:a5:51:fb:ae:c1:25:3d:21:9f:af:b5:83:c4:17:
                    50:91:0b:b2:67:34:48:7d:6a:34:da:12:a4:58:6b:
                    3e:f9:07:6e:48:c4:79:8b:8f:89:9f:45:d8:53:47:
                    a2:dc:38:c2:f4:d1:c5:ca:03:59:ea:cd:1c:5d:79:
                    5b:7d:d6:54:8d:89:40:6b:48:24:a1:ea:9b:a4:dc:
                    8b:b0:67:d1:8e:c7:f9:5d:03:6b:7a:03:f3:13:af:
                    5a:ce:07:8f:dd:cb:d5:85:a1:a7:8e:d8:ae:79:76:
                    e6:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:C0:5A:39:48:FB:B0:EA:23:DE:54:D8:C1:52:58:C6:BD:E8:3F:77
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/8bc8439b-0c22-30de-be2d-e419b521979f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.26.39.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:e1:e0:55:e2:0b:a1:69:aa:98:5b:87:fb:8f:00:10:91:6b:
         c4:02:9c:17:de:b1:20:ce:0d:c7:5c:75:5e:fd:39:c2:ad:37:
         6e:82:98:43:bb:f4:49:44:82:ef:26:d8:8c:eb:e5:a2:7d:6d:
         b5:15:fa:37:1b:27:6c:fa:1d:4f:cf:29:4c:32:4b:de:8e:1b:
         de:ec:2a:ed:90:ae:8e:02:dd:f4:bf:78:69:4c:39:80:07:cb:
         32:5d:cd:ec:47:b7:4a:23:47:6b:87:22:05:b2:d8:df:50:9d:
         1a:02:11:55:eb:6b:12:d5:7e:a9:6f:60:da:cf:0e:61:b3:c5:
         b6:a1:38:00:f1:a6:bb:79:ff:b4:23:d0:d4:cc:16:83:47:1e:
         7f:8e:21:18:8c:ea:da:34:e7:ee:d5:0d:96:fc:3c:c8:f5:0c:
         7b:d3:a6:eb:d9:2b:8c:db:27:f4:11:b6:c6:0e:9c:0f:4f:5e:
         18:55:8b:fd:00:64:0c:3c:51:64:45:c2:be:63:05:0f:af:4c:
         e3:e1:ad:27:61:6e:89:86:c6:02:1c:9f:53:40:a3:9c:94:84:
         0e:d2:1f:34:64:7a:18:14:cb:ac:5f:e0:d9:ca:25:73:84:6d:
         23:8f:bb:9f:27:1a:01:2f:df:b5:32:4a:12:d4:16:97:4c:80:
         64:73:e2:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 15:29:02 2024 by rpki-client on console-ams.rpki-client.org