Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/b5b340aa-16c2-39d3-815a-742cd3428a6d.roa
File:                     b5b340aa-16c2-39d3-815a-742cd3428a6d.roa (raw, json)
Hash identifier:          wppRYpEyYbmWEaUzSyJ2JD41wWuo99FMdOE1L4KsdsE=
Subject key identifier:   35:97:FF:86:4F:B6:4C:CF:C9:43:FA:3E:72:4C:BC:7E:17:24:F9:89
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F432858497C3EF4D8B95C34D093077580
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/b5b340aa-16c2-39d3-815a-742cd3428a6d.roa
Signing time:             Fri 11 Apr 2025 01:00:48 +0000
ROA not before:           Fri 11 Apr 2025 01:00:48 +0000
ROA not after:            Thu 10 Jul 2025 01:00:48 +0000
asID:                     205220
IP address blocks:        23.26.123.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:7c:3e:f4:d8:b9:5c:34:d0:93:07:75:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Apr 11 01:00:48 2025 GMT
            Not After : Jul 10 01:00:48 2025 GMT
        Subject: CN=ea86395f-174a-4674-a701-cb33ffc27614
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:d1:3b:cd:ca:6b:89:a9:dd:bd:29:2e:9d:29:
                    d3:49:36:26:fb:af:60:fe:a1:25:a6:54:24:36:78:
                    15:31:54:d2:b1:e9:cf:fa:e9:63:a0:3d:bc:c2:49:
                    ce:63:d7:c7:35:ad:e0:46:96:60:3f:8c:c6:d5:db:
                    ff:4f:2d:20:5e:2a:77:ed:80:e6:aa:37:cc:d9:1e:
                    10:03:35:57:2a:7c:f0:9e:d6:6c:2f:3d:e6:39:d6:
                    a7:48:c8:8a:76:b9:37:dd:e6:7f:1d:9c:64:80:b2:
                    0f:ee:ee:7a:a3:d0:64:49:e3:84:48:a4:97:74:0a:
                    68:6c:4a:45:c4:7a:6e:ae:0c:b9:9a:ec:1c:24:41:
                    fa:75:61:e8:ea:8b:f2:0f:85:9b:e2:a2:40:52:51:
                    f5:1a:cf:ad:f3:62:6b:94:ff:44:22:75:86:b2:ac:
                    62:c1:4f:c3:5a:dd:e3:b7:25:5a:d1:21:27:4f:b5:
                    06:b2:31:99:3d:f3:44:e8:28:c7:8c:c6:5e:51:93:
                    21:ff:eb:2c:cf:c7:99:92:50:8c:c9:73:fd:c1:c4:
                    b1:be:da:2f:3b:01:aa:74:d5:8e:a8:72:e4:ac:4c:
                    28:44:b1:93:74:b2:ee:60:e6:5a:4f:23:d2:bc:7d:
                    b7:c9:63:9c:1b:54:07:49:aa:0f:79:7b:ae:1e:b1:
                    48:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:97:FF:86:4F:B6:4C:CF:C9:43:FA:3E:72:4C:BC:7E:17:24:F9:89
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/b5b340aa-16c2-39d3-815a-742cd3428a6d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.26.123.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:26:ee:8c:50:4f:7a:d4:dc:6f:58:e2:35:6a:c1:c4:65:60:
         e6:5d:23:8d:4c:37:18:fd:f8:1f:2a:82:5c:d1:49:cd:6e:66:
         68:eb:9c:eb:96:8e:c9:39:af:54:72:1b:3e:8a:92:bc:68:43:
         fd:45:08:db:53:42:58:0e:62:c8:fd:60:8d:d6:fa:dd:65:ad:
         b9:b5:70:bb:49:b0:69:88:95:9f:e1:bb:1d:39:2d:0d:61:6b:
         0c:3f:ab:bf:b5:e6:6b:45:e0:59:b5:b1:17:e6:eb:e2:12:f2:
         a1:46:53:40:ad:d3:9c:17:7a:3b:52:c1:80:ae:ae:85:a1:a6:
         aa:35:40:a4:90:40:f8:ad:0f:b2:79:0b:82:9b:79:5e:56:1c:
         dc:96:c1:4b:c3:f7:35:24:84:9f:73:01:65:b7:e1:65:f6:45:
         50:03:34:0f:fd:fb:6e:2c:70:5d:2f:c6:bf:5e:c0:73:f9:e9:
         6d:81:11:a3:83:4c:a9:9a:b9:40:f8:37:85:d5:c7:51:32:a8:
         f4:cd:53:a9:7d:54:dd:3b:9f:d7:d1:f3:f6:b4:31:ba:a5:04:
         3b:0b:db:24:3d:c0:fe:a9:b0:c7:95:a4:5a:7d:f6:01:6b:a1:
         a5:7b:a5:3c:17:ef:43:aa:1c:eb:93:0f:a9:9c:38:a4:4c:b1:
         d4:e2:d0:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 15:24:56 2025 by rpki-client