Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/8c3d21dd-10e2-3b00-9566-e06d2ad070b7.roa
File:                     8c3d21dd-10e2-3b00-9566-e06d2ad070b7.roa (raw, json)
Hash identifier:          6iLtNvgEGawe2hyGI4h5qbqZRxvChVpKaoIiLqVGeqk=
Subject key identifier:   F4:DB:37:1E:A8:C2:B4:EF:93:2C:35:AF:84:26:A5:A1:D9:24:41:18
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F432858455ECB309BB3D2249A0F63CD54
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/8c3d21dd-10e2-3b00-9566-e06d2ad070b7.roa
Signing time:             Fri 29 Mar 2024 16:41:28 +0000
ROA not before:           Fri 29 Mar 2024 16:41:28 +0000
ROA not after:            Thu 27 Jun 2024 16:41:28 +0000
asID:                     399989
IP address blocks:        23.26.20.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 05 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:5e:cb:30:9b:b3:d2:24:9a:0f:63:cd:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Mar 29 16:41:28 2024 GMT
            Not After : Jun 27 16:41:28 2024 GMT
        Subject: CN=eccad414-e9b3-4504-8a04-e8e895d26627
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:d9:01:33:7c:85:54:81:6c:47:73:e2:d3:b6:
                    b9:46:14:eb:05:ec:6b:94:43:41:67:a7:2d:3e:37:
                    32:f5:d9:32:22:9f:35:f4:3f:a1:b1:8f:10:6a:20:
                    77:9b:53:24:71:0c:10:da:1a:f7:c5:71:a9:ef:d3:
                    22:d9:9b:de:e0:46:66:0d:99:94:6a:f7:1e:5f:1b:
                    80:4a:3f:59:95:86:dc:7a:ef:a8:1e:14:0d:34:c0:
                    f2:32:8c:d5:f3:5b:ea:c5:94:a4:d3:78:07:b5:0c:
                    05:5e:6f:46:93:c8:f5:e9:16:05:c1:5b:e9:43:ae:
                    c6:2b:d9:6f:06:7b:ac:c2:88:21:f6:76:6c:61:9d:
                    a8:40:1e:83:28:77:16:2c:85:55:ca:f6:0f:76:d2:
                    85:e0:0d:15:65:89:a6:5f:2e:7c:91:f4:fe:bb:86:
                    85:9f:b7:5d:a5:1d:44:47:ea:cc:d3:87:d9:bd:e8:
                    22:39:e2:b2:41:de:91:33:4c:c5:6a:16:ad:84:05:
                    88:c7:03:d9:4d:e2:49:13:ee:d4:ff:4e:e4:b1:8d:
                    3f:39:37:5e:0d:d0:bd:81:d2:7d:9c:28:34:ad:d5:
                    8a:01:18:0b:42:f2:92:87:1d:cd:d0:eb:9e:37:5c:
                    41:12:2c:ef:0e:02:50:2b:4f:e9:f0:c4:c3:69:57:
                    45:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:DB:37:1E:A8:C2:B4:EF:93:2C:35:AF:84:26:A5:A1:D9:24:41:18
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/8c3d21dd-10e2-3b00-9566-e06d2ad070b7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.26.20.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a7:29:1f:c1:11:40:d9:10:2c:01:11:c4:9d:80:43:84:b8:fb:
         0b:97:32:0f:61:9a:9a:28:d2:ae:10:a9:49:5f:c3:ea:91:4d:
         cb:a3:4d:0e:ca:c2:be:65:8b:fd:7c:9e:e2:48:64:d5:c4:57:
         ca:bc:b4:cf:96:d3:5b:6d:3c:fb:7a:6d:10:79:a4:ea:91:d3:
         1a:83:fe:37:3a:32:a5:c6:c4:72:04:3a:02:a9:49:a5:85:d3:
         d8:dd:84:17:26:2f:c5:04:e0:9f:a5:0b:6e:2d:15:74:05:4e:
         1a:51:4b:3d:27:7a:f8:6e:9d:93:36:be:3e:87:b6:99:0f:f1:
         25:dc:83:09:b4:61:23:db:46:20:0f:c3:b1:b2:0c:1d:e8:57:
         8c:df:7f:a2:b4:7f:56:73:c5:f1:d2:ef:44:bc:72:b4:3a:2a:
         d3:82:a5:82:11:8b:eb:5c:4f:af:ca:bf:e8:ff:83:42:7c:94:
         67:05:b2:96:86:22:bc:28:a3:ac:e6:21:00:1b:73:d7:08:b4:
         69:78:3c:57:ac:d0:7d:fb:0e:32:88:0d:ed:ac:ef:c6:72:12:
         52:2b:86:da:30:d4:55:55:85:8f:d0:cb:cc:21:eb:fc:7b:7c:
         d2:ae:2d:33:61:62:50:47:c2:4a:ca:b4:57:d9:8b:ee:cb:b0:
         50:0b:20:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 09:10:51 2024 by rpki-client on console-fra.rpki-client.org