Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/986a09c5-c446-31e2-b844-f4d9fef307f0.roa
File:                     986a09c5-c446-31e2-b844-f4d9fef307f0.roa (raw, json)
Hash identifier:          YMMDGOMlOv2ZrOkTzKPkAouzY4znHmImu0H0rRxziG0=
Subject key identifier:   49:21:87:57:38:FE:42:81:61:25:BB:AE:19:42:74:0E:AA:74:F9:9C
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285847A09AA44F7EA4B0BC561FFD00
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/986a09c5-c446-31e2-b844-f4d9fef307f0.roa
Signing time:             Tue 22 Oct 2024 16:00:52 +0000
ROA not before:           Tue 22 Oct 2024 16:00:52 +0000
ROA not after:            Mon 20 Jan 2025 17:00:52 +0000
asID:                     55286
IP address blocks:        23.26.150.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:a0:9a:a4:4f:7e:a4:b0:bc:56:1f:fd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Oct 22 16:00:52 2024 GMT
            Not After : Jan 20 17:00:52 2025 GMT
        Subject: CN=26be4c1f-e9a8-4c9b-ab7f-337056065966
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:77:2a:a0:1d:fe:67:c7:5d:95:a6:a3:89:0f:
                    d2:df:b9:18:a4:dd:bf:50:77:bb:01:bc:58:47:7a:
                    10:98:1f:51:e7:f4:00:41:26:00:01:30:0c:c2:e9:
                    d2:54:6a:f9:fe:09:9e:80:7f:f8:6b:68:8d:2b:ad:
                    39:5c:b1:19:74:cf:75:83:7f:a4:8b:21:18:4a:ab:
                    5b:04:6d:72:f4:56:53:a9:9b:4a:12:48:46:ac:9a:
                    bd:32:54:71:a9:75:1e:e2:d1:b4:d3:7c:1c:f3:f1:
                    e1:ea:6f:e9:e0:92:47:25:6e:ca:36:cf:a2:a5:74:
                    9d:84:39:85:31:6e:39:03:a6:87:37:7f:50:0a:68:
                    cf:7d:ee:3f:c5:20:45:22:66:0d:8e:d4:cb:03:b3:
                    b8:54:a5:a1:f0:e6:51:b9:d5:e3:58:4c:7a:94:40:
                    47:10:ed:50:d3:16:c3:6f:f6:6d:c6:d1:a7:80:09:
                    4a:83:d4:b5:45:21:2b:99:d8:7e:1a:0d:55:0f:22:
                    1c:1d:c0:00:15:72:96:f4:84:d5:28:55:47:19:bc:
                    66:2b:d5:2f:18:ca:fe:73:35:eb:fb:86:27:d1:f6:
                    7b:22:9a:de:71:15:44:1b:4e:56:8e:55:86:c8:c8:
                    6e:cb:d9:6e:7f:0f:ac:83:c2:f5:3e:b9:8a:44:54:
                    ae:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:21:87:57:38:FE:42:81:61:25:BB:AE:19:42:74:0E:AA:74:F9:9C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/986a09c5-c446-31e2-b844-f4d9fef307f0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.26.150.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9b:db:53:2e:2d:92:37:1a:fb:35:4a:7c:df:04:6a:4a:1a:ee:
         82:25:a9:54:29:4f:a2:7b:65:97:15:dc:a5:18:95:47:6d:eb:
         67:f6:c8:c9:0e:20:61:47:d5:50:39:6e:25:53:7c:cd:36:93:
         56:aa:a3:a7:aa:b4:d9:fc:10:6a:a5:eb:2a:d2:d7:0a:e7:4e:
         dc:f1:c4:40:d4:63:ac:e6:33:b4:78:00:4a:1e:22:9f:3f:e8:
         a5:d4:2d:e9:c7:d0:fd:dc:a6:48:fe:ed:b5:fe:a3:aa:33:8f:
         08:7b:2c:b9:6f:1e:be:53:13:42:f1:9d:9b:27:8d:4a:ae:85:
         bb:6c:09:bc:f5:ea:25:c8:ea:3e:19:98:b1:b2:71:f9:9a:69:
         3a:6e:f6:b4:c3:ac:5d:c9:40:cc:bc:ed:67:0c:7e:35:ed:9d:
         05:fd:6a:32:f0:7c:76:69:83:0b:d0:a6:cf:cb:62:d4:3b:5e:
         6b:db:5a:3b:9d:b0:82:c5:f1:cc:2c:9b:20:50:28:3e:a1:3b:
         1e:a2:a1:51:0a:6e:92:31:9d:97:ec:1d:17:16:6a:a1:71:af:
         f4:d4:7a:53:e1:3a:34:30:9a:d1:64:8b:50:72:5e:ac:9e:fc:
         82:6f:92:33:27:66:1a:75:2a:b1:11:d1:d6:7c:5d:5e:a9:d0:
         9f:40:53:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:32:20 2024 by rpki-client on console-fra.rpki-client.org