Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/b7a4e970-79a9-3897-8289-1065a5bcb2d5.roa
File:                     b7a4e970-79a9-3897-8289-1065a5bcb2d5.roa (raw, json)
Hash identifier:          A1UP7BqSDni8icsQPU5QKXD/WT6Itf7OkQYrbXxdGRg=
Subject key identifier:   1E:EE:3F:67:A3:79:91:90:37:C4:51:25:25:50:CF:A9:36:EC:4D:B8
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285844D7151F3B806E8232C64575B0
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/b7a4e970-79a9-3897-8289-1065a5bcb2d5.roa
Signing time:             Sat 10 Feb 2024 02:00:26 +0000
ROA not before:           Sat 10 Feb 2024 02:00:26 +0000
ROA not after:            Fri 10 May 2024 01:00:26 +0000
asID:                     212238
IP address blocks:        23.26.51.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 29 Apr 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:d7:15:1f:3b:80:6e:82:32:c6:45:75:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Feb 10 02:00:26 2024 GMT
            Not After : May 10 01:00:26 2024 GMT
        Subject: CN=235aac89-42cb-44bf-ae91-1fbbc9cfe12b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:54:eb:1f:7c:82:1e:28:8f:13:d2:78:b3:0c:
                    ab:a4:66:35:b2:e2:f1:9c:29:e2:a5:b0:ad:c5:5a:
                    cd:44:83:20:58:42:3e:c4:f4:42:b7:41:08:ee:4b:
                    9a:ad:0c:f6:68:74:18:a0:9a:d7:13:02:dc:be:2f:
                    9f:ee:e7:3d:bd:2c:3e:72:7c:a3:09:f8:b2:10:40:
                    20:b0:c2:9d:0e:93:04:80:55:fb:ff:7e:69:8f:7e:
                    35:49:d2:c8:8a:36:75:e2:3c:14:03:67:c1:e9:7c:
                    6f:be:f2:d6:41:17:16:1b:05:f5:08:32:56:c1:7f:
                    7c:47:c9:44:65:d3:d0:45:1c:81:ea:03:90:49:9e:
                    3b:80:ac:9c:3d:93:65:d8:bb:55:9e:04:ce:55:ad:
                    04:0e:ed:e6:36:f8:f6:a7:2c:03:7c:fd:09:26:7b:
                    88:ea:85:2f:93:3a:fb:e0:01:2a:60:05:75:4e:17:
                    e1:bb:73:f1:b1:ca:da:55:25:b7:06:c1:f7:51:7b:
                    96:db:7b:74:c1:aa:cb:47:91:43:b3:97:19:86:8a:
                    a0:a6:09:19:33:b6:36:50:65:31:e9:c9:9a:17:bc:
                    19:a8:4b:f2:5b:0e:41:c2:db:51:27:cd:79:ec:38:
                    4e:6b:6f:b1:a2:9e:bf:35:67:02:e9:8f:c3:06:85:
                    9b:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:EE:3F:67:A3:79:91:90:37:C4:51:25:25:50:CF:A9:36:EC:4D:B8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/b7a4e970-79a9-3897-8289-1065a5bcb2d5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.26.51.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:6f:fb:11:c4:b6:15:f6:9d:ea:61:de:e1:51:69:65:07:1f:
         de:8d:1b:35:15:74:76:d8:b9:9e:14:27:d1:a7:16:11:97:fa:
         29:ca:e4:d8:b5:2e:29:7a:20:73:3e:07:ef:d5:7d:fe:40:b6:
         1e:28:fb:86:1a:00:f7:fe:76:76:45:df:c0:e0:a8:16:91:2d:
         ad:83:04:93:3d:4b:ae:c6:7b:9e:c3:8c:e1:8d:4e:4b:bf:9e:
         21:d4:fd:98:c6:4b:e4:f3:7f:3d:e7:ca:0b:0f:a5:3f:0e:bd:
         bf:df:07:e2:b0:9e:4b:70:96:7f:0a:c5:9c:dc:63:09:2f:87:
         31:8e:da:21:8e:87:5c:5c:1c:82:f3:c9:6a:83:e3:89:33:63:
         2b:79:94:2e:7c:bb:6b:6d:e2:d7:a2:0e:aa:a5:a0:5b:a0:53:
         2e:6e:00:10:c4:87:39:bc:29:ae:85:5d:d4:fb:50:b2:ba:d5:
         81:c4:48:47:6e:5e:54:93:a8:14:f4:32:5c:31:05:d4:d8:3d:
         18:21:e6:ae:6b:4f:78:55:ef:a6:29:7a:f5:8b:6b:56:7d:1b:
         5e:49:28:2d:6e:34:f1:c8:30:d6:1f:d0:22:a1:46:5e:45:3a:
         4f:d9:43:cb:39:42:6d:1f:a6:b7:ac:83:62:89:42:1c:04:2d:
         aa:20:bc:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 09:04:44 2024 by rpki-client on console-ams.rpki-client.org