Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/ad3cdf2e-1900-3e35-9d56-8ce7bbe3cd85.roa
File:                     ad3cdf2e-1900-3e35-9d56-8ce7bbe3cd85.roa (raw, json)
Hash identifier:          f3zUpaSAAgs9AD1ieF3NzSqGhR+klReC8uH2r3hV8/o=
Subject key identifier:   2A:CA:FC:18:B7:43:7E:E5:EB:67:ED:EE:85:9E:F1:F2:4E:12:C9:6A
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285844D7152033D096413DB9DFDC80
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/ad3cdf2e-1900-3e35-9d56-8ce7bbe3cd85.roa
Signing time:             Sat 10 Feb 2024 02:00:26 +0000
ROA not before:           Sat 10 Feb 2024 02:00:26 +0000
ROA not after:            Fri 10 May 2024 01:00:26 +0000
asID:                     212238
IP address blocks:        23.26.88.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 29 Apr 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:d7:15:20:33:d0:96:41:3d:b9:df:dc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Feb 10 02:00:26 2024 GMT
            Not After : May 10 01:00:26 2024 GMT
        Subject: CN=ceab6094-dbe6-4118-87b0-eff3a33ab9b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:3a:1e:bb:b7:5b:02:bc:a8:45:1c:8c:d1:c9:
                    9d:ca:c0:7d:40:94:1e:b4:27:17:19:0d:0e:73:e8:
                    37:00:3c:bb:36:77:fb:4b:c5:ea:ab:e4:19:38:96:
                    85:19:a0:be:28:0c:e6:7b:d9:3f:9b:2d:2f:81:e7:
                    9c:ea:56:9b:28:53:64:e2:d3:f7:72:95:1d:5b:8f:
                    f3:f0:7b:6b:ab:a8:75:7c:21:d3:ad:b0:91:d6:c3:
                    bf:59:06:01:5b:f9:32:bc:48:67:e0:54:a9:3e:02:
                    72:9e:71:3c:cc:02:b2:27:8c:0e:3b:94:8b:f6:a3:
                    34:14:ed:50:88:0b:7d:7c:40:4c:09:1e:d5:18:b1:
                    7d:a3:87:f5:a6:21:e8:25:ad:ca:be:88:41:58:a2:
                    f8:5f:f4:61:bf:55:d8:5a:b2:d2:31:23:43:6e:cd:
                    3c:54:11:f2:2f:55:20:b3:e4:ec:29:bf:ac:1e:50:
                    0c:98:3b:e4:61:dc:86:7c:fd:5b:6f:ae:37:34:fa:
                    30:6d:03:a2:d4:ee:b0:9a:7b:ac:29:0e:66:23:69:
                    36:08:11:6a:32:e9:db:fa:e0:89:50:a0:15:81:c1:
                    e0:ab:b8:60:1f:09:4d:37:25:36:90:db:17:35:3d:
                    6a:e5:53:e5:27:2c:2e:01:29:7b:3c:2d:37:40:e3:
                    4c:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:CA:FC:18:B7:43:7E:E5:EB:67:ED:EE:85:9E:F1:F2:4E:12:C9:6A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/ad3cdf2e-1900-3e35-9d56-8ce7bbe3cd85.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.26.88.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:5a:8c:0c:5f:c3:4e:2b:8e:71:f4:25:76:bb:94:dd:4c:29:
         30:12:a1:62:65:dd:6c:f2:b9:db:94:05:af:b6:54:4f:0f:1b:
         25:1a:65:0b:fd:a2:22:9f:d5:ea:87:7c:72:4b:e8:86:f0:aa:
         d6:e0:9d:99:e7:22:e3:34:f6:24:33:d3:e0:39:58:3d:9e:84:
         0e:9d:1a:d8:16:45:a4:d1:53:06:15:6c:b8:f3:29:4c:02:4e:
         ad:c9:e7:23:98:49:c1:59:ea:43:ea:6a:f1:3e:be:4c:60:81:
         61:bf:0f:73:c4:85:7e:d4:78:f4:11:1c:07:8e:e3:08:c1:7e:
         cd:ad:14:9b:20:80:3a:2c:cc:58:d0:87:70:be:ac:ca:26:ca:
         88:12:66:ad:7f:b5:05:f4:8f:ef:88:46:1c:d3:fa:e4:d8:bd:
         3b:0d:66:2e:30:23:0b:e5:81:ba:50:91:65:b2:ad:c0:17:26:
         51:14:8e:1d:ac:08:5c:ad:a1:81:6e:cc:54:89:48:e6:9e:4f:
         0e:70:89:be:07:77:c4:3b:d2:f2:10:82:8f:24:85:cb:15:2b:
         12:39:db:18:2f:c6:61:46:85:f5:0b:ce:3d:65:6a:d5:7c:ec:
         fc:fe:8c:38:7b:54:6d:fb:b0:55:43:4c:94:af:b1:7c:aa:e1:
         2e:56:90:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 15:29:04 2024 by rpki-client on console-ams.rpki-client.org