Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/b6025966-d361-3992-b4eb-f3d327417fbe.roa
File:                     b6025966-d361-3992-b4eb-f3d327417fbe.roa (raw, json)
Hash identifier:          D5y38CeK88jXIwKyXYxDFwhP2auV6bpil1KfCna9ITQ=
Subject key identifier:   64:E5:35:26:CE:5B:5A:D1:03:7C:81:C2:21:DD:C2:C0:15:BF:22:FF
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285848D0ABAFE6B187AC65BE7CB330
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/b6025966-d361-3992-b4eb-f3d327417fbe.roa
Signing time:             Sat 08 Feb 2025 14:00:52 +0000
ROA not before:           Sat 08 Feb 2025 14:00:52 +0000
ROA not after:            Fri 09 May 2025 13:00:52 +0000
asID:                     19437
IP address blocks:        23.26.69.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:d0:ab:af:e6:b1:87:ac:65:be:7c:b3:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Feb  8 14:00:52 2025 GMT
            Not After : May  9 13:00:52 2025 GMT
        Subject: CN=7536d578-9cb8-413a-9f3b-0275917c649c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:eb:06:e4:c4:17:b7:3c:9f:36:59:fa:91:4d:
                    f6:46:1f:d0:85:81:e7:f8:82:f7:c2:8e:ba:05:7f:
                    58:82:e6:6d:35:61:91:5e:d4:ee:57:e4:60:d3:81:
                    cf:93:89:96:6f:87:78:d8:35:96:e9:38:ee:69:66:
                    43:56:98:cb:ee:de:50:7d:9b:6e:a7:91:49:ac:6f:
                    e4:ae:1b:e6:f6:36:41:a6:4f:04:0e:33:2a:a3:16:
                    e9:49:88:c0:5a:01:cd:48:8a:eb:90:33:e2:60:c4:
                    be:75:c1:88:00:67:c8:b9:08:a1:a4:64:6d:c7:2f:
                    30:35:2e:08:35:0a:37:5d:bd:c3:45:b4:a3:73:1f:
                    c8:ff:5d:e0:e4:8c:2b:00:40:b5:8e:1f:63:64:13:
                    94:58:9b:c0:ab:85:42:6e:82:31:db:a5:c2:a4:11:
                    36:ae:a7:28:c1:70:5a:7c:7e:c9:c2:7d:a7:a8:97:
                    26:29:a2:89:e6:63:29:57:8b:9c:b1:ea:ad:58:18:
                    97:31:e8:db:17:b9:9a:7e:7d:23:19:ef:0a:eb:80:
                    6c:04:2b:27:3b:33:5a:77:2d:4d:91:b8:f4:7e:81:
                    52:eb:b5:9d:ef:11:a4:c8:d1:dd:5c:ca:d6:ee:c3:
                    21:0f:6d:08:b8:26:93:70:6a:26:4d:60:e8:b5:3d:
                    e4:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:E5:35:26:CE:5B:5A:D1:03:7C:81:C2:21:DD:C2:C0:15:BF:22:FF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/b6025966-d361-3992-b4eb-f3d327417fbe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.26.69.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:e2:84:29:34:77:90:43:4e:3f:8d:23:3f:d8:af:22:c2:ba:
         69:fb:92:ee:86:a9:5a:b6:e5:db:f6:c4:85:c2:3c:06:f0:88:
         15:7f:cb:19:e9:1c:93:14:8c:aa:62:2b:41:de:56:d7:9d:9f:
         9c:81:1a:05:67:f0:8b:69:69:ee:ce:43:f3:af:97:b8:03:32:
         d1:d6:18:5c:4f:be:16:36:8b:50:ec:f5:59:ad:90:a9:4b:35:
         6e:b3:6b:77:92:65:c9:0d:d1:84:82:c8:c5:23:e7:6b:b4:2d:
         87:28:f5:09:27:eb:3d:4c:99:dd:74:32:bc:0d:63:a4:4d:c9:
         21:a8:d1:f4:f3:18:19:07:fb:41:53:40:6f:72:07:86:11:89:
         a5:0f:be:f5:8b:a6:28:dd:4e:7a:32:6b:1a:c8:17:6a:f2:ec:
         49:30:d9:6e:31:4b:15:6e:73:70:46:05:86:25:cc:31:97:66:
         5a:e8:84:75:52:6e:d6:9e:55:de:6b:b3:16:0f:9f:bd:be:46:
         16:b5:d0:81:77:cb:cc:61:51:46:55:d6:6c:ad:45:8f:2a:29:
         e5:29:15:32:9d:f2:4e:42:26:f5:c9:aa:c9:30:52:0e:93:f5:
         eb:c0:52:74:1b:73:a1:00:7d:54:e2:7e:1a:5b:5c:90:73:a5:
         ff:fc:8a:9d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjQq6/msYesZb58szAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTI1MDIwODE0MDA1MloXDTI1MDUwOTEzMDA1MlowLzEtMCsGA1UEAxMk
NzUzNmQ1NzgtOWNiOC00MTNhLTlmM2ItMDI3NTkxN2M2NDljMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnesG5MQXtzyfNln6kU32Rh/QhYHn+IL3wo66
BX9YguZtNWGRXtTuV+Rg04HPk4mWb4d42DWW6TjuaWZDVpjL7t5QfZtup5FJrG/k
rhvm9jZBpk8EDjMqoxbpSYjAWgHNSIrrkDPiYMS+dcGIAGfIuQihpGRtxy8wNS4I
NQo3Xb3DRbSjcx/I/13g5IwrAEC1jh9jZBOUWJvAq4VCboIx26XCpBE2rqcowXBa
fH7Jwn2nqJcmKaKJ5mMpV4ucseqtWBiXMejbF7mafn0jGe8K64BsBCsnOzNady1N
kbj0foFS67Wd7xGkyNHdXMrW7sMhD20IuCaTcGomTWDotT3kTwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGTlNSbOW1rRA3yBwiHdwsAVvyL/MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvYjYwMjU5NjYtZDM2MS0z
OTkyLWI0ZWItZjNkMzI3NDE3ZmJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFxpFMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIrihCk0d5BDTj+NIz/YryLCumn7ku6GqVq25dv2xIXCPAbwiBV/yxnp
HJMUjKpiK0HeVtedn5yBGgVn8Itpae7OQ/Ovl7gDMtHWGFxPvhY2i1Ds9VmtkKlL
NW6za3eSZckN0YSCyMUj52u0LYco9Qkn6z1Mmd10MrwNY6RNySGo0fTzGBkH+0FT
QG9yB4YRiaUPvvWLpijdTnoyaxrIF2ry7Ekw2W4xSxVuc3BGBYYlzDGXZlrohHVS
btaeVd5rsxYPn72+Rha10IF3y8xhUUZV1mytRY8qKeUpFTKd8k5CJvXJqskwUg6T
9evAUnQbc6EAfVTifhpbXJBzpf/8ip0=
-----END CERTIFICATE-----
Generated at Sat Apr 12 00:30:19 2025 by rpki-client