Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/8bd58994-7a40-32e7-9074-946a83698374.roa
File:                     8bd58994-7a40-32e7-9074-946a83698374.roa (raw, json)
Hash identifier:          2JPkuba6dLJ5+9GxAUUxenpDfWboJmvqwjOJ+ZH+ipA=
Subject key identifier:   A8:84:48:9F:95:C8:A8:0C:A5:1E:2F:56:74:5C:0E:8B:79:9A:F9:99
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F432858488DFF826FBDA5B99D9D1222E0
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/8bd58994-7a40-32e7-9074-946a83698374.roa
Signing time:             Wed 15 Jan 2025 16:50:41 +0000
ROA not before:           Wed 15 Jan 2025 16:50:41 +0000
ROA not after:            Tue 15 Apr 2025 15:50:41 +0000
asID:                     51847
IP address blocks:        23.26.140.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 07 Feb 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:8d:ff:82:6f:bd:a5:b9:9d:9d:12:22:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Jan 15 16:50:41 2025 GMT
            Not After : Apr 15 15:50:41 2025 GMT
        Subject: CN=5c7cf109-34c1-49d8-b481-1bedb5bd443a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:8f:bc:67:c6:9e:28:14:32:99:d5:12:7d:bb:
                    31:0e:e0:1b:dc:39:29:5f:e0:0e:9a:8f:5c:2c:6a:
                    79:fc:57:a6:4b:f4:dd:d0:a1:3d:b9:1a:97:eb:31:
                    5f:98:ce:00:c2:94:82:23:4a:d8:d9:93:0a:2f:bd:
                    65:65:4f:fa:51:f4:af:7e:52:ce:44:70:2e:77:8b:
                    6d:30:ec:57:d2:8d:3b:75:f2:ad:73:5d:fd:76:7a:
                    e0:03:29:d6:86:d5:3b:6a:73:90:bc:aa:21:b0:35:
                    6c:3f:67:11:2d:19:4b:15:db:14:be:a5:58:dd:a6:
                    75:d4:9e:c5:a5:49:9a:3b:24:44:89:b4:80:54:c1:
                    09:76:69:43:60:2b:07:65:b4:f5:ef:f6:27:7b:b9:
                    9d:97:4f:7a:74:cb:ca:4f:91:de:f6:9f:30:f6:b7:
                    a5:f8:2b:60:a8:c1:4b:a2:8f:75:ab:0f:3d:08:2c:
                    d7:67:b5:bb:05:ed:3f:70:c8:94:07:e5:15:09:0e:
                    52:8b:d1:e6:d8:f7:4e:40:f1:77:62:05:a6:ec:db:
                    13:cf:9e:4a:1d:cd:8b:12:41:13:06:6a:87:7e:f6:
                    81:f8:35:99:a3:7b:52:02:1c:2b:67:c3:42:97:7e:
                    45:5b:d2:32:d6:de:a4:22:10:59:09:b3:ed:79:b2:
                    ef:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:84:48:9F:95:C8:A8:0C:A5:1E:2F:56:74:5C:0E:8B:79:9A:F9:99
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/8bd58994-7a40-32e7-9074-946a83698374.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.26.140.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:c2:7b:46:ba:cb:45:3b:5b:9d:5d:ca:ea:9f:94:ab:69:8b:
         fb:f5:8c:4b:ff:a4:af:3a:77:f2:79:ed:61:20:f3:70:b0:b1:
         77:b5:18:79:71:f3:bd:d2:57:4d:2f:51:d1:b8:a4:7c:1d:22:
         64:27:20:10:09:43:42:5f:dc:48:da:14:eb:a7:a2:d4:cf:07:
         74:e9:e4:0e:4e:21:f2:49:0e:8f:f6:73:f2:60:fc:e0:b7:5a:
         52:fe:56:34:09:d9:6d:d3:d8:ff:d9:b5:18:5a:52:41:71:ec:
         43:23:a0:0f:d0:e2:22:42:ec:b9:fb:9c:35:f1:ec:f3:a6:10:
         10:8c:f4:c8:38:91:e9:9c:f5:27:7a:51:69:e4:db:4c:63:2c:
         24:48:96:9d:68:6c:c1:6f:41:75:a1:b7:9c:72:c4:2b:b3:e0:
         37:60:95:0d:5c:ad:d6:c1:59:07:07:42:9b:d3:fe:c5:ab:91:
         16:e7:bf:eb:ca:ab:dd:f4:f3:82:73:9c:f4:fb:17:d5:a6:29:
         fe:b5:2f:51:19:39:a2:a7:d4:49:b3:36:79:b7:e9:fb:6f:29:
         ec:be:08:c6:df:e2:4b:22:ac:d8:e6:4b:d7:31:7e:58:16:05:
         3a:a3:19:e7:fc:a1:cb:ef:3e:ce:f6:75:ec:7d:e1:77:83:4a:
         cc:f1:0f:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:51:12 2025 by rpki-client