Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/a86221bb-b95d-3d93-a765-5e87b04d0238.roa
File:                     a86221bb-b95d-3d93-a765-5e87b04d0238.roa (raw, json)
Hash identifier:          MuFCys7k2HUFbjSrgEnf2jFG31H9o6Xfpo4y0udB+Do=
Subject key identifier:   ED:08:E7:2B:62:A3:15:DE:7F:DB:D7:B0:D6:68:CA:2E:2C:55:AA:DE
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F432858452952949635B47A84877B5680
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/a86221bb-b95d-3d93-a765-5e87b04d0238.roa
Signing time:             Sun 10 Mar 2024 13:00:31 +0000
ROA not before:           Sun 10 Mar 2024 13:00:31 +0000
ROA not after:            Sat 08 Jun 2024 13:00:31 +0000
asID:                     19786
IP address blocks:        23.26.111.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 05 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:29:52:94:96:35:b4:7a:84:87:7b:56:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Mar 10 13:00:31 2024 GMT
            Not After : Jun  8 13:00:31 2024 GMT
        Subject: CN=47cc05e3-ccdd-48a0-9740-317b9c99612c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:0b:21:2b:f6:d0:25:5e:f0:16:28:73:8d:32:
                    f8:2a:25:07:49:6d:55:89:62:ad:e0:83:7b:5a:ae:
                    0e:a6:01:5e:92:e9:66:7d:63:38:33:1d:f7:8c:e4:
                    8f:a0:d7:6d:f0:31:a4:ed:20:5e:f1:ea:4a:94:56:
                    98:1b:ce:0a:5b:07:a7:7e:d4:0c:0a:a3:c9:8c:12:
                    08:78:c2:64:86:a5:a5:3f:d0:8f:1b:d0:94:51:0c:
                    a2:c3:f6:99:2b:5d:d1:22:45:ac:a5:78:0c:9f:ca:
                    80:3e:62:0e:d8:e9:e3:fe:95:f8:a9:ba:3e:60:01:
                    86:1d:62:e1:7c:d8:b3:c0:9f:d2:7a:22:1c:83:c1:
                    f7:79:8e:fe:47:8b:82:b5:64:9c:42:b0:fc:eb:a9:
                    e8:46:c8:9f:2c:8f:20:cc:d4:aa:f9:12:66:28:46:
                    69:6c:6f:5e:ab:69:57:07:a7:bc:6c:c4:de:a6:93:
                    4a:4c:7c:de:65:88:6c:b0:94:73:5e:45:db:21:bc:
                    b6:5b:70:a1:03:65:17:20:b4:b3:64:76:ac:58:d6:
                    d4:38:a6:9e:02:fb:82:5f:33:d8:fb:75:4a:1f:6b:
                    a2:e6:9b:ef:ad:a1:c2:ff:4e:93:b5:5d:26:45:e1:
                    bb:a5:85:60:50:34:8c:d6:fe:98:d4:14:57:24:d0:
                    e1:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:08:E7:2B:62:A3:15:DE:7F:DB:D7:B0:D6:68:CA:2E:2C:55:AA:DE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/a86221bb-b95d-3d93-a765-5e87b04d0238.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.26.111.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:47:bc:3b:c5:64:5d:64:7b:d0:e9:94:10:7e:18:bb:25:f0:
         e6:7f:e2:af:56:07:bc:61:e2:f6:e8:8d:81:08:24:82:cf:90:
         66:e4:1f:2d:89:33:70:8e:86:29:b3:71:3e:0b:a1:70:98:62:
         ac:fc:75:08:a6:6c:d6:7f:9d:75:12:97:dd:63:26:97:f0:3e:
         93:e3:4d:b9:eb:bc:f6:28:f7:9a:84:cf:fe:39:db:f0:05:2d:
         ee:ef:cf:05:ce:15:dc:d4:4a:f1:57:7f:6b:1e:7e:28:5f:a6:
         16:bc:10:ec:fb:c6:e6:59:73:f0:b5:95:71:a1:08:31:dd:85:
         db:47:8e:1d:8a:a3:35:9b:5e:cb:48:b6:ab:0e:e1:01:d4:ac:
         0d:cb:dd:80:20:d0:6c:03:06:0e:64:16:dc:83:40:b0:f3:ed:
         d1:df:f9:e9:80:90:a7:e8:c4:46:81:6c:ca:08:fb:a7:eb:ac:
         30:86:0d:e0:f6:d5:51:20:96:25:c4:c4:f3:7c:7a:a0:5a:54:
         d2:60:50:ee:c5:d8:10:cc:3c:84:8f:af:1e:8a:d8:75:87:bc:
         0f:69:c8:d9:bc:a8:0f:5d:e6:21:f7:14:06:9d:e9:b7:bf:ee:
         ff:6c:e3:f5:37:e0:1a:d6:d2:55:79:98:12:4c:d5:f7:68:19:
         af:c7:bf:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 09:10:54 2024 by rpki-client on console-fra.rpki-client.org