Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/962fc68c-4c73-3774-a6fe-f88289fe1a68.roa
File:                     962fc68c-4c73-3774-a6fe-f88289fe1a68.roa (raw, json)
Hash identifier:          tC6UdzCMwWjiEF/iY9SNnBjrL+GsYlcmnRSi2SQz3fQ=
Subject key identifier:   74:DC:52:0A:2B:F9:97:C9:24:BA:AF:5B:D5:5B:DE:2C:B5:F9:40:02
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285844F73003F5B92188A74170DB40
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/962fc68c-4c73-3774-a6fe-f88289fe1a68.roa
Signing time:             Wed 21 Feb 2024 14:00:32 +0000
ROA not before:           Wed 21 Feb 2024 14:00:32 +0000
ROA not after:            Tue 21 May 2024 13:00:32 +0000
asID:                     30633
IP address blocks:        23.26.240.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 05 May 2024 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:f7:30:03:f5:b9:21:88:a7:41:70:db:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Feb 21 14:00:32 2024 GMT
            Not After : May 21 13:00:32 2024 GMT
        Subject: CN=c18d592e-eb57-4f9f-9c7f-7f48f5a58b4c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:de:22:48:f1:0c:06:7e:50:87:3b:22:8d:47:
                    b6:90:50:bb:c8:b1:97:80:ea:90:1e:14:ed:4c:ea:
                    85:af:61:f5:18:73:b3:44:03:ef:1a:fc:e9:c0:31:
                    9d:3a:fb:0c:15:d3:2a:d8:ee:18:94:3e:7c:ba:a6:
                    41:da:0d:81:3e:3e:b4:39:52:96:b7:dd:bf:a4:10:
                    dc:ae:8a:9e:57:fc:fd:a9:30:26:64:4e:8a:fe:e6:
                    65:2b:19:39:81:b0:58:8f:b2:41:4c:23:65:0c:18:
                    93:08:3a:86:ab:64:1f:fa:8b:1c:7f:ea:85:07:ae:
                    0f:a5:7c:02:0c:ab:eb:0c:32:20:e1:96:98:2e:2d:
                    94:13:f3:f5:42:2a:97:7e:0c:69:75:5d:9d:b5:9a:
                    e3:57:ad:62:1f:bd:bb:cb:c3:fd:6e:6d:88:13:04:
                    99:cb:5e:ae:3b:e4:41:5e:9a:66:62:d4:3b:93:34:
                    1e:52:4b:eb:1e:38:30:c7:88:2a:53:0c:9a:0d:84:
                    b1:65:00:8d:88:0b:07:b2:c8:97:b4:c6:f3:e1:2c:
                    56:c9:3a:2a:7c:af:fd:39:e8:e1:e2:81:5d:ff:fe:
                    73:ca:2e:0b:45:dd:c9:15:41:a0:44:2a:76:05:af:
                    3b:03:df:ef:c8:a6:a9:3b:e2:d6:03:f1:83:1f:58:
                    9b:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:DC:52:0A:2B:F9:97:C9:24:BA:AF:5B:D5:5B:DE:2C:B5:F9:40:02
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/962fc68c-4c73-3774-a6fe-f88289fe1a68.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.26.240.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:92:6b:89:93:66:cb:c9:14:af:28:9a:a8:ce:91:96:d3:f2:
         de:c0:bb:2d:10:78:85:7f:37:a7:0f:37:21:6b:1e:a7:cb:c4:
         49:f5:a1:ab:64:84:cf:c8:02:b3:40:44:c4:ca:2d:c0:e6:5d:
         91:0e:c3:3a:7c:df:71:d8:09:ba:3b:28:c1:5d:84:1a:9a:9c:
         c6:bd:e5:e4:47:d8:1a:25:de:c8:c6:30:49:8b:d2:b9:b8:85:
         a0:e4:e9:36:be:b5:91:32:98:1d:b7:77:06:4a:74:02:2a:ed:
         2a:fe:a1:30:c2:cc:ea:98:da:1b:63:10:fb:71:6c:3d:1c:aa:
         f4:5b:27:e0:b9:46:eb:c3:d0:28:ae:14:a3:88:77:34:01:79:
         16:96:c0:82:cc:83:06:a9:a2:8a:cf:0d:d6:d3:ff:43:26:53:
         fa:7f:cc:c7:e1:19:b6:e7:fa:72:8a:64:0b:40:8f:3d:33:db:
         70:a5:32:52:73:0d:c2:ec:d4:5f:a9:7a:8c:3b:e4:6b:26:f8:
         84:4d:e9:62:0e:b4:04:d2:e4:db:82:4a:b9:b7:fd:0b:89:b8:
         40:ca:79:27:58:dd:e7:db:60:f6:02:97:36:97:94:7b:53:75:
         61:48:05:85:fc:ec:1a:cb:9d:f2:da:81:37:e0:1b:44:11:d1:
         5e:68:99:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 02:55:52 2024 by rpki-client on console-fra.rpki-client.org