Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/b6025966-d361-3992-b4eb-f3d327417fbe.roa
File:                     b6025966-d361-3992-b4eb-f3d327417fbe.roa (raw, json)
Hash identifier:          NSPQpOK2VFwkiblEMLVzeMmBKCnmjftymRbSyg6IT9w=
Subject key identifier:   F1:B1:BF:01:27:19:70:4F:3C:B2:CE:92:5C:94:F1:AF:60:52:FD:E4
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584550682C626CDF9A2B6B6ABC80
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/b6025966-d361-3992-b4eb-f3d327417fbe.roa
Signing time:             Sun 24 Mar 2024 13:00:33 +0000
ROA not before:           Sun 24 Mar 2024 13:00:33 +0000
ROA not after:            Sat 22 Jun 2024 13:00:33 +0000
asID:                     19437
IP address blocks:        23.26.69.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 05 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:50:68:2c:62:6c:df:9a:2b:6b:6a:bc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Mar 24 13:00:33 2024 GMT
            Not After : Jun 22 13:00:33 2024 GMT
        Subject: CN=56873f38-939f-4c41-8df5-3c5448e1c0a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:cd:20:d0:25:0c:d1:a6:5b:d6:f4:6a:e8:8d:
                    31:8c:57:3f:4b:a0:df:4f:88:03:41:9f:bd:ae:31:
                    3a:50:13:4e:24:57:90:c8:9b:76:65:87:cf:90:97:
                    a3:04:a1:24:51:23:a7:0f:81:06:f4:65:16:6a:a3:
                    32:37:be:65:1a:60:41:f6:53:e6:6b:45:6a:94:c6:
                    7c:68:66:9a:6d:cb:4d:79:1f:eb:73:4b:2e:e2:84:
                    dd:18:39:da:28:88:27:3c:07:24:23:1f:e2:23:57:
                    96:f9:13:6f:76:99:7c:8f:b1:9a:0f:e2:5e:c9:18:
                    3e:1d:8b:0e:8e:23:1c:e9:05:a1:18:5f:5b:55:a4:
                    b4:c1:d3:88:2f:ba:92:84:d9:af:35:a2:84:a5:64:
                    85:0a:57:d0:97:55:28:5e:0f:86:31:53:5a:86:a7:
                    bb:e0:98:bf:15:43:33:04:cd:ae:71:15:22:47:3a:
                    53:8c:35:c2:85:73:06:30:46:42:1a:62:17:a6:38:
                    56:b6:8c:c6:31:96:73:63:09:8d:1a:b8:79:24:92:
                    30:22:7e:2d:73:bb:bc:e6:d9:4a:6f:a2:16:99:23:
                    c7:8c:f1:fc:55:87:64:37:45:0a:0d:1f:61:02:34:
                    c1:ba:52:44:56:99:29:6c:26:b7:9e:d3:50:4c:08:
                    81:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:B1:BF:01:27:19:70:4F:3C:B2:CE:92:5C:94:F1:AF:60:52:FD:E4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/b6025966-d361-3992-b4eb-f3d327417fbe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.26.69.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:ff:ec:94:6d:13:3c:08:82:75:53:b1:fa:0f:11:f5:86:96:
         95:50:b5:66:0b:b0:f4:18:30:13:37:9a:fe:e2:f4:cb:23:70:
         4b:95:c4:82:97:a6:fb:36:4e:e3:60:53:d9:0c:91:df:61:ac:
         07:67:b6:65:2f:c8:ae:81:1b:9a:11:bf:65:53:de:60:d6:eb:
         07:1b:2b:60:a6:e8:f0:ef:04:a7:d3:f9:f0:f1:73:05:86:31:
         a5:7b:c7:9e:f2:c2:6f:62:00:56:7a:d3:4d:2a:22:5d:7f:34:
         6a:d4:41:de:33:7a:5b:3d:48:f8:7f:4c:74:9c:7f:83:78:5e:
         f2:8e:83:5c:30:b9:f3:4a:c1:30:7d:03:15:2f:8f:08:65:3f:
         15:28:f8:86:c4:89:76:0f:53:3c:82:5d:d5:55:74:09:44:90:
         c9:48:a7:e7:ef:73:dc:dd:a8:dd:d8:69:e8:69:d2:10:7f:64:
         2f:fe:35:fb:8e:e7:6e:63:57:fa:03:07:a2:4f:f5:b4:e3:95:
         bc:29:f5:61:f5:cf:14:af:d6:f1:c2:29:75:c9:0b:a7:70:fb:
         e3:7c:28:cd:a6:b0:d4:c2:5d:77:13:68:e2:b3:7b:ed:19:e6:
         f4:f1:11:dc:e5:a4:96:43:07:0b:3d:f0:b1:09:f0:dd:13:81:
         87:1e:35:61
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVQaCxibN+aK2tqvIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTI0MDMyNDEzMDAzM1oXDTI0MDYyMjEzMDAzM1owLzEtMCsGA1UEAxMk
NTY4NzNmMzgtOTM5Zi00YzQxLThkZjUtM2M1NDQ4ZTFjMGExMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAts0g0CUM0aZb1vRq6I0xjFc/S6DfT4gDQZ+9
rjE6UBNOJFeQyJt2ZYfPkJejBKEkUSOnD4EG9GUWaqMyN75lGmBB9lPma0VqlMZ8
aGaabctNeR/rc0su4oTdGDnaKIgnPAckIx/iI1eW+RNvdpl8j7GaD+JeyRg+HYsO
jiMc6QWhGF9bVaS0wdOIL7qShNmvNaKEpWSFClfQl1UoXg+GMVNahqe74Ji/FUMz
BM2ucRUiRzpTjDXChXMGMEZCGmIXpjhWtozGMZZzYwmNGrh5JJIwIn4tc7u85tlK
b6IWmSPHjPH8VYdkN0UKDR9hAjTBulJEVpkpbCa3ntNQTAiBMwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPGxvwEnGXBPPLLOklyU8a9gUv3kMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvYjYwMjU5NjYtZDM2MS0z
OTkyLWI0ZWItZjNkMzI3NDE3ZmJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFxpFMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGv/7JRtEzwIgnVTsfoPEfWGlpVQtWYLsPQYMBM3mv7i9MsjcEuVxIKX
pvs2TuNgU9kMkd9hrAdntmUvyK6BG5oRv2VT3mDW6wcbK2Cm6PDvBKfT+fDxcwWG
MaV7x57ywm9iAFZ6000qIl1/NGrUQd4zels9SPh/THScf4N4XvKOg1wwufNKwTB9
AxUvjwhlPxUo+IbEiXYPUzyCXdVVdAlEkMlIp+fvc9zdqN3Yaehp0hB/ZC/+NfuO
525jV/oDB6JP9bTjlbwp9WH1zxSv1vHCKXXJC6dw++N8KM2msNTCXXcTaOKze+0Z
5vTxEdzlpJZDBws98LEJ8N0TgYceNWE=
-----END CERTIFICATE-----
Generated at Fri May 3 15:32:25 2024 by rpki-client on console-ams.rpki-client.org