Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/a30d4435-3552-3820-9cdf-67a612b13af9.roa
File:                     a30d4435-3552-3820-9cdf-67a612b13af9.roa (raw, json)
Hash identifier:          vx+6GE32MgLAJIwvXsLFFm3hykJzRIaPWQLt1T9sY44=
Subject key identifier:   2D:83:86:B8:F4:87:AC:54:79:0C:B4:19:69:B2:AF:B8:46:97:C7:86
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285848AC60DEEB005F3985CEACD400
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/a30d4435-3552-3820-9cdf-67a612b13af9.roa
Signing time:             Sun 26 Jan 2025 14:00:52 +0000
ROA not before:           Sun 26 Jan 2025 14:00:52 +0000
ROA not after:            Sat 26 Apr 2025 13:00:52 +0000
asID:                     395839
IP address blocks:        23.26.233.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:ac:60:de:eb:00:5f:39:85:ce:ac:d4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Jan 26 14:00:52 2025 GMT
            Not After : Apr 26 13:00:52 2025 GMT
        Subject: CN=991e7573-7324-4049-9a51-601f163c3369
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:0a:b9:c8:09:c8:49:ca:26:00:f5:de:64:ba:
                    b9:ec:f1:f8:93:87:a7:1f:a9:48:24:cc:65:48:da:
                    7a:28:13:04:46:0d:82:72:8d:ae:24:73:00:8a:e2:
                    82:b2:65:15:c9:e2:87:8f:7a:03:53:a1:e6:c2:11:
                    18:d6:33:a1:e7:56:eb:1c:37:56:70:9b:ce:b7:fc:
                    b5:85:c8:76:17:89:6e:76:bd:ce:78:9a:f5:94:cd:
                    25:d8:d6:36:86:c1:c6:68:a6:a4:ac:14:0a:c6:24:
                    1b:2a:1d:6a:88:bb:80:90:2d:95:23:8d:90:cd:1a:
                    a6:9d:08:8d:d5:fa:00:ba:0c:06:57:40:8c:29:6f:
                    5e:13:b1:c9:a0:93:c0:60:1b:78:37:cb:d6:99:0f:
                    1a:17:61:bb:1b:a5:9d:66:10:ba:cf:b5:30:3e:3c:
                    6e:f4:67:2c:e1:de:57:2c:6f:6a:1e:29:fb:34:d6:
                    a7:93:6e:3e:f2:5d:9f:61:9a:3c:c9:db:de:de:75:
                    d4:67:5b:91:0d:4a:46:bd:89:19:73:a6:c2:18:ef:
                    4b:a6:ef:1a:8b:87:a2:a4:23:39:a0:69:64:ae:4a:
                    ea:d4:f2:57:d3:d2:ea:70:ec:ac:dd:72:b6:c4:e3:
                    6f:c1:9d:31:c2:27:ff:61:c5:57:c4:69:7e:54:a8:
                    05:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:83:86:B8:F4:87:AC:54:79:0C:B4:19:69:B2:AF:B8:46:97:C7:86
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/a30d4435-3552-3820-9cdf-67a612b13af9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.26.233.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:f5:bb:f2:08:a3:d6:bb:68:ec:ca:92:10:70:ff:46:ee:15:
         53:ea:94:99:e2:87:e5:d7:6e:25:33:c3:01:56:6d:4e:ea:c0:
         3e:2d:dd:e8:8f:44:7f:a5:10:ca:03:19:12:2f:24:53:d1:d6:
         57:f8:55:be:de:9c:19:12:75:e1:c8:94:c8:24:d6:ce:d2:73:
         ad:8c:96:ef:66:e4:ba:fa:c4:f0:98:59:76:a2:e8:29:07:33:
         12:8f:12:a0:58:a0:e2:ba:b6:74:ac:66:43:10:24:54:df:99:
         6a:2e:21:5c:2f:78:47:f1:7e:d1:8c:eb:84:79:97:8b:76:ca:
         c7:22:7f:6f:52:30:90:e4:3b:27:90:08:42:09:40:66:c8:34:
         4d:62:7c:1e:69:22:92:5f:c8:8c:0b:2e:ec:5c:c4:cd:87:eb:
         3a:28:05:dc:64:af:89:f3:b8:b7:9a:e2:a2:25:fb:f0:7b:1f:
         02:82:02:81:85:ac:6f:76:e3:c1:89:a2:92:58:fc:91:49:d3:
         76:ed:54:8b:ec:57:ba:cb:a5:61:70:02:d3:65:fd:0e:18:b4:
         f6:55:4d:2c:a6:18:83:12:e7:77:79:c8:ee:43:6d:23:ce:53:
         98:c6:0d:30:d8:8d:01:72:18:77:8a:90:75:d5:48:30:62:f2:
         55:64:81:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 21:36:33 2025 by rpki-client