Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/b9bb4f77-90dd-3078-948d-e7906fecfd25.roa
File:                     b9bb4f77-90dd-3078-948d-e7906fecfd25.roa (raw, json)
Hash identifier:          NRHq/BZ79VkBK0D1jdUFZ2kwsNCm3MtlNmA2Y5aFb+g=
Subject key identifier:   E1:73:E3:7B:AB:AE:84:9C:45:10:7D:2D:15:F5:A8:95:14:BA:35:BB
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F432858486695AF48F090713061511C80
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/b9bb4f77-90dd-3078-948d-e7906fecfd25.roa
Signing time:             Wed 01 Jan 2025 14:00:53 +0000
ROA not before:           Wed 01 Jan 2025 14:00:53 +0000
ROA not after:            Tue 01 Apr 2025 13:00:53 +0000
asID:                     29802
IP address blocks:        23.26.206.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:66:95:af:48:f0:90:71:30:61:51:1c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Jan  1 14:00:53 2025 GMT
            Not After : Apr  1 13:00:53 2025 GMT
        Subject: CN=1111b8e3-6787-4d45-bf2f-fc05ddf4a114
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:18:f2:5a:52:58:fb:a1:78:22:04:3e:38:12:
                    f1:b3:b1:f8:fe:fc:f8:6b:10:de:9f:23:95:e9:33:
                    eb:d5:b4:f5:64:c7:83:06:fa:32:a6:03:51:f1:32:
                    10:90:e5:2c:6f:fe:d7:6c:48:ec:26:6a:90:69:59:
                    5b:62:c8:79:68:b2:ca:20:02:7c:46:b6:af:18:14:
                    db:7d:93:25:ee:66:e8:39:a0:ba:fa:7d:59:7b:7f:
                    56:15:fe:0f:2b:63:e0:e5:de:ec:8d:34:d1:2c:3b:
                    3b:3a:2d:fb:e8:27:36:97:95:e9:6a:0a:ae:0e:bf:
                    47:65:3b:68:8c:15:92:f5:ad:86:f1:6a:19:91:08:
                    f9:22:a6:45:a6:41:0d:4a:8d:f3:de:ef:7f:50:32:
                    17:54:b7:6f:41:34:4a:3a:2a:c4:a9:85:f8:6a:76:
                    60:02:fc:72:85:1c:09:8a:a6:1b:7b:6d:7d:8f:8a:
                    83:b1:dc:21:dd:64:fe:04:3c:8f:ff:13:22:fb:de:
                    c9:83:58:94:18:67:a8:2f:92:8f:8f:c7:4f:ff:d4:
                    90:90:fb:2e:26:c8:19:bd:e8:d4:fe:a8:e1:14:54:
                    62:b5:e4:f5:39:61:62:7d:17:d8:88:16:a4:5c:e2:
                    f1:b1:f2:71:2a:a3:cd:67:60:70:23:f3:1c:22:40:
                    cc:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:73:E3:7B:AB:AE:84:9C:45:10:7D:2D:15:F5:A8:95:14:BA:35:BB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/b9bb4f77-90dd-3078-948d-e7906fecfd25.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.26.206.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ab:45:45:53:8d:f2:a9:70:25:bf:f5:b1:78:53:0d:68:6c:a8:
         59:4a:4d:04:cc:46:52:94:6c:fb:1c:14:c6:54:ca:72:f2:ab:
         ee:bc:a7:ac:c4:d9:9e:94:61:a6:22:08:43:a4:09:79:17:2e:
         22:10:3d:d2:27:03:34:f9:ae:2e:4f:59:aa:63:27:1b:60:ba:
         c7:79:77:80:67:69:31:3a:59:39:35:92:8d:9f:3e:16:2a:7f:
         b3:ef:c5:49:26:8a:8a:b0:ab:0a:8d:f2:25:4a:dd:16:e4:8c:
         ae:2c:fe:49:f3:52:2c:fe:47:fd:91:99:78:2c:7c:9a:f4:f0:
         7b:75:d4:9c:43:4e:d2:b2:46:4b:eb:3a:fa:0d:8f:f4:b8:9d:
         ab:9e:95:fe:13:f8:5d:06:5a:74:24:92:91:49:73:8e:e5:9a:
         f6:bf:39:6a:ff:9c:cd:87:b3:62:ec:f7:e3:3f:c5:32:93:83:
         79:b7:90:ae:76:8a:6a:6f:23:db:a6:92:44:84:65:bd:45:0a:
         ec:4d:06:05:46:4d:cd:54:6f:89:b1:cb:3e:7b:64:0a:9e:10:
         4a:fc:b9:f1:c0:a6:0b:65:de:76:77:d2:0a:63:7b:08:2f:56:
         db:7a:7c:d1:74:50:3e:5f:a5:af:b7:a2:3b:12:43:73:6e:6b:
         90:49:42:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:12:10 2025 by rpki-client