Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/92c69db4-4566-36a2-8f9f-3fe525706fde.roa
File:                     92c69db4-4566-36a2-8f9f-3fe525706fde.roa (raw, json)
Hash identifier:          LZ5hAyoe3uJcKIPdnMZ7P0LmdOJzdKFQjumnxtAopQA=
Subject key identifier:   FB:38:CF:59:A1:CC:F5:8E:9E:8B:46:A3:77:29:03:9E:71:1B:94:8E
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584750B0A8074A6F19C5142DA8E0
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/92c69db4-4566-36a2-8f9f-3fe525706fde.roa
Signing time:             Tue 24 Sep 2024 01:00:31 +0000
ROA not before:           Tue 24 Sep 2024 01:00:31 +0000
ROA not after:            Mon 23 Dec 2024 02:00:31 +0000
asID:                     394760
IP address blocks:        23.26.129.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:50:b0:a8:07:4a:6f:19:c5:14:2d:a8:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Sep 24 01:00:31 2024 GMT
            Not After : Dec 23 02:00:31 2024 GMT
        Subject: CN=3f833864-a4b3-4141-8ddc-774a262dd32d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:5b:8d:54:6b:a1:1f:57:44:74:bf:14:e7:e8:
                    49:14:08:97:2b:f5:94:3f:0a:bb:d3:e7:4c:21:f4:
                    17:d6:46:db:7b:50:00:f5:52:4f:94:ae:cd:f6:3e:
                    ff:47:39:ce:23:b8:ea:31:c2:85:c3:4d:e8:e1:5c:
                    5b:8d:c0:8b:29:c0:d3:9a:27:51:2c:da:cc:54:a9:
                    b2:13:c0:5f:65:88:d7:8b:11:88:70:5e:82:38:a9:
                    4e:5f:09:0d:7f:eb:7f:de:46:d4:b4:54:7b:8e:dd:
                    b7:e9:50:b9:4b:f7:99:25:a7:46:78:fb:91:ee:e4:
                    10:40:fd:9f:4f:d3:f2:a2:c1:8f:7e:5f:1c:36:c8:
                    06:e3:d2:38:a1:63:74:6f:a6:19:48:ea:1e:ab:06:
                    c9:50:95:11:71:ba:6d:9a:17:98:fa:b4:08:bf:b9:
                    9f:42:cd:8b:35:24:6c:19:8d:1a:bd:31:fd:7d:c8:
                    d0:5f:0b:78:d7:85:2b:59:4c:23:b5:2c:ff:b8:74:
                    14:65:c8:0a:81:4b:98:95:61:04:a5:c2:9d:77:ee:
                    83:26:7b:34:51:05:48:11:bd:77:4f:8d:7b:6d:ee:
                    d5:b4:0c:61:81:20:4e:90:b2:ea:16:8c:30:27:ae:
                    7a:bb:a2:fc:8b:06:ec:e0:93:ca:5e:57:10:c0:bb:
                    c7:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:38:CF:59:A1:CC:F5:8E:9E:8B:46:A3:77:29:03:9E:71:1B:94:8E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/92c69db4-4566-36a2-8f9f-3fe525706fde.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.26.129.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b1:59:3b:ae:e7:b6:9e:0a:dd:b1:30:f1:12:cf:db:65:73:d4:
         ec:11:77:fd:13:57:37:b2:f8:fd:2c:d4:93:de:4c:75:19:8e:
         f6:9c:e1:a4:80:c0:cd:ec:44:4c:92:8b:da:64:e5:3d:eb:3b:
         a3:12:3f:0b:c4:19:41:c5:c4:ff:7f:c6:94:4a:dd:1d:39:9d:
         de:16:98:b6:04:da:90:47:f5:56:37:7d:9b:cf:c8:26:2e:28:
         67:ab:18:95:e7:16:a4:a5:78:6d:4f:88:fd:c6:ed:01:e1:68:
         01:7e:ad:25:0c:b5:b3:3b:b4:5c:1b:b8:d1:2a:10:83:1f:20:
         d9:51:cf:f6:09:77:80:bd:ca:89:4d:52:67:92:31:3b:5d:bd:
         4d:1f:26:3c:11:c2:86:22:6b:79:04:a1:3a:48:56:bc:9e:81:
         e8:33:7e:97:37:8e:d7:9c:66:47:a5:ac:54:ca:10:62:05:bb:
         f9:10:dc:6c:1d:c3:6f:89:15:d1:05:59:0d:66:09:ea:b8:82:
         8a:80:2f:73:ac:77:f0:36:a6:5b:37:f6:31:ca:af:61:14:58:
         74:4f:29:40:1e:fa:5b:1f:50:98:10:75:2a:5a:97:f2:6f:89:
         dd:69:67:42:6c:90:a2:00:e9:6a:65:c7:a0:45:fe:17:3d:00:
         c2:23:90:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 06:37:45 2024 by rpki-client on console-ams.rpki-client.org