Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/a7fab7c4-2be6-3283-b966-f47a8f1c1461.roa
File:                     a7fab7c4-2be6-3283-b966-f47a8f1c1461.roa (raw, json)
Hash identifier:          IEgcfVgbYIagbto2TPlKSfXxHslBO//fFIQF3Kac60Y=
Subject key identifier:   A0:9B:15:25:5A:43:FE:F9:4F:E6:23:C7:D7:15:52:0B:3D:54:C5:D9
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F432858455B92EFA45814CFEE3D104720
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/a7fab7c4-2be6-3283-b966-f47a8f1c1461.roa
Signing time:             Thu 28 Mar 2024 13:00:36 +0000
ROA not before:           Thu 28 Mar 2024 13:00:36 +0000
ROA not after:            Wed 26 Jun 2024 13:00:36 +0000
asID:                     30644
IP address blocks:        23.26.121.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 05 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:5b:92:ef:a4:58:14:cf:ee:3d:10:47:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Mar 28 13:00:36 2024 GMT
            Not After : Jun 26 13:00:36 2024 GMT
        Subject: CN=82a553cb-9fcd-4e3b-b08f-52a9030ffb49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:34:f0:e6:39:8e:fe:79:bd:bb:ae:d9:dc:bc:
                    0d:c3:51:10:dd:35:38:5b:26:c8:0b:68:1b:a3:d7:
                    d3:89:fd:c7:db:49:47:15:89:57:95:e3:e1:c6:87:
                    81:47:e3:4b:c4:e1:79:a8:75:67:fd:c9:b7:4d:3d:
                    47:b3:f1:0c:85:e5:bd:98:b0:22:d7:9c:d6:fa:77:
                    69:1f:ba:78:fc:57:4e:4c:96:0c:6d:c9:68:50:6c:
                    fb:04:8b:db:eb:cf:05:ef:4e:da:1d:67:62:f8:7c:
                    82:0f:2e:20:1a:99:20:6a:1e:1a:7d:4d:b4:8a:dc:
                    23:8f:91:6d:29:2c:e8:b2:3d:7b:da:d8:40:78:fc:
                    59:5c:1a:80:1b:6b:42:4a:2b:5e:f1:31:90:1b:04:
                    e6:53:0b:aa:e8:44:13:67:83:ef:0a:63:55:32:67:
                    6d:d5:f6:5d:f0:e7:ad:22:36:55:e8:ca:1f:66:ba:
                    88:f9:69:d9:61:2b:a5:94:a2:30:15:a9:a2:84:9d:
                    b3:a2:97:74:a6:09:31:4a:29:89:ab:a4:91:9d:87:
                    7f:ff:4b:68:3b:da:c5:bf:4c:cf:bb:a0:9c:90:29:
                    42:e1:d7:f2:0d:ea:86:72:c8:f5:49:6e:39:14:c5:
                    e1:1b:35:f2:af:db:32:64:28:24:ab:ed:6e:12:1a:
                    d3:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:9B:15:25:5A:43:FE:F9:4F:E6:23:C7:D7:15:52:0B:3D:54:C5:D9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/a7fab7c4-2be6-3283-b966-f47a8f1c1461.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.26.121.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:77:08:04:69:3a:79:33:ca:77:11:60:f7:ae:dd:8e:2a:17:
         c9:05:22:2d:0c:c6:f0:79:e0:5e:89:72:33:61:8f:1f:81:5a:
         3c:ea:45:e1:a6:bc:f7:e4:b4:51:c6:3c:48:cd:0d:b9:86:89:
         44:98:7d:7b:1d:ce:b2:0f:f6:54:b7:a8:45:24:e6:1f:1b:8e:
         f6:15:b6:8b:52:a4:f0:38:3a:ae:bb:7e:68:e6:0c:7c:1d:c2:
         ac:e6:74:5d:1c:9a:9b:fd:4f:1a:1e:c3:96:9a:0e:c9:45:e1:
         b3:71:61:41:f8:0a:8e:9c:14:e8:d1:b4:64:00:e4:a5:5b:4d:
         ee:b4:15:10:74:4b:4a:e0:92:53:04:04:8f:5a:dc:2f:61:52:
         f7:1a:5e:77:d8:45:1b:09:43:d7:40:37:b4:45:df:59:b5:a7:
         e4:fc:ab:f5:4d:bb:cc:31:37:1e:58:60:59:a4:bf:51:e3:3b:
         6e:5a:7e:c1:24:c8:4c:c5:2b:b5:37:0b:b1:dd:13:f9:ab:a9:
         57:0e:38:b8:8a:ed:e7:2c:b3:b0:c3:e9:70:9d:9d:03:94:f8:
         47:0c:b7:7e:8d:cc:bf:0e:b4:c4:e9:57:06:d8:35:b6:87:27:
         1e:00:30:ea:cd:19:df:e1:dd:e3:8f:f7:bd:b5:b1:f0:db:75:
         c8:24:d6:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 10:48:43 2024 by rpki-client on console-ams.rpki-client.org