Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/bae195fa-41b0-3944-9e15-47f6fc1f8346.roa
File:                     bae195fa-41b0-3944-9e15-47f6fc1f8346.roa (raw, json)
Hash identifier:          4zsNCLTHeoiJXxmzfyyOVdaW82FdJkJDyHETGdTrF9Q=
Subject key identifier:   13:16:18:13:75:91:67:1C:B0:76:7A:08:81:E5:74:FD:7B:C8:D5:5B
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584805AACCE1E13E0A769A4D0BC0
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/bae195fa-41b0-3944-9e15-47f6fc1f8346.roa
Signing time:             Wed 27 Nov 2024 20:50:04 +0000
ROA not before:           Wed 27 Nov 2024 20:50:04 +0000
ROA not after:            Tue 25 Feb 2025 20:50:04 +0000
asID:                     401152
IP address blocks:        23.26.79.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 07 Feb 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:05:aa:cc:e1:e1:3e:0a:76:9a:4d:0b:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Nov 27 20:50:04 2024 GMT
            Not After : Feb 25 20:50:04 2025 GMT
        Subject: CN=033bfe09-69d4-43c3-8fbd-ac3e112c51c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:50:e8:54:78:8b:7c:66:74:15:7a:5e:2b:fe:
                    87:86:00:b6:0a:46:39:77:a8:2e:b6:7b:4b:e2:1a:
                    43:ff:5d:60:b4:46:87:a2:71:75:2c:a9:03:8d:b4:
                    d1:78:3e:48:6c:6f:c1:da:a8:d8:49:f6:f2:71:7e:
                    48:f8:ca:fc:39:a4:1d:f0:ca:32:af:13:c0:78:dc:
                    bf:f6:d3:4c:83:cc:04:e8:f0:7f:03:0d:6b:5b:a3:
                    c6:97:7f:81:fc:1d:b6:ed:6b:60:c2:3f:22:67:3d:
                    ea:51:53:0b:9e:1a:c8:dc:3f:42:4b:53:1a:84:eb:
                    2c:80:ed:a2:d4:86:98:2d:f5:6b:b0:c8:e5:c5:45:
                    fc:d7:b5:c8:7a:15:9e:55:dc:13:05:97:98:f4:90:
                    7e:05:fd:88:ae:7d:fd:f6:e0:40:0c:b8:60:2c:f5:
                    f0:5c:be:2a:51:c2:24:56:3f:a1:8b:44:ed:da:4b:
                    85:b8:56:48:e9:b0:bd:d2:7b:0f:8e:8b:a3:c8:ce:
                    21:37:95:73:f0:5b:3c:d1:58:54:a7:64:fb:2d:c7:
                    50:b0:30:08:9f:8c:35:7d:8a:09:75:5b:47:6a:94:
                    6f:f7:d7:46:18:ae:d8:fe:c2:bb:cc:49:7c:60:7b:
                    24:2d:72:5b:22:62:46:9f:d1:66:42:b0:b3:1e:6c:
                    ce:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:16:18:13:75:91:67:1C:B0:76:7A:08:81:E5:74:FD:7B:C8:D5:5B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/bae195fa-41b0-3944-9e15-47f6fc1f8346.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.26.79.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:48:12:d3:00:ed:f9:fd:ef:57:85:c8:33:71:22:b2:72:d1:
         d1:94:7c:e8:99:f8:5f:83:3b:cc:6a:03:99:d6:6d:35:2e:8f:
         b3:57:b8:f9:63:7c:e1:6e:bd:53:a8:a7:6d:28:17:79:29:20:
         68:2d:32:0c:3c:46:10:96:9b:75:52:cd:61:ec:29:6f:7f:52:
         a7:d6:2c:84:4d:2e:b1:b8:fb:90:82:e6:c8:94:c3:b1:ae:24:
         6c:0f:20:19:fd:09:9a:a2:4d:a9:3f:a8:63:4d:15:51:aa:1d:
         75:39:93:18:7e:9a:86:2e:1e:4e:0d:46:e8:5d:be:c4:f0:eb:
         f5:b5:31:4b:58:c3:34:f7:8e:c8:b3:3c:e7:9d:87:01:a8:36:
         3d:71:9d:88:cf:c5:1b:a0:2b:77:da:7a:da:71:52:b2:f5:2d:
         59:c9:78:e4:33:92:75:03:98:09:52:9b:1a:3d:d9:e0:21:11:
         a4:95:5a:ce:08:cf:12:ef:c4:07:3d:04:02:96:b9:70:b7:6a:
         0b:38:66:70:ea:7a:a1:f0:04:1c:45:cd:3f:ef:51:1c:54:8d:
         67:81:c7:42:b3:8a:2e:7f:dd:f8:c1:84:cd:2e:29:23:6b:f0:
         88:79:b0:ce:cd:a6:4d:89:df:8a:67:66:c9:71:84:c4:24:16:
         b9:2f:2a:e1
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgFqszh4T4KdppNC8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTI0MTEyNzIwNTAwNFoXDTI1MDIyNTIwNTAwNFowLzEtMCsGA1UEAxMk
MDMzYmZlMDktNjlkNC00M2MzLThmYmQtYWMzZTExMmM1MWMzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs1DoVHiLfGZ0FXpeK/6HhgC2CkY5d6gutntL
4hpD/11gtEaHonF1LKkDjbTReD5IbG/B2qjYSfbycX5I+Mr8OaQd8MoyrxPAeNy/
9tNMg8wE6PB/Aw1rW6PGl3+B/B227Wtgwj8iZz3qUVMLnhrI3D9CS1MahOssgO2i
1IaYLfVrsMjlxUX817XIehWeVdwTBZeY9JB+Bf2Irn399uBADLhgLPXwXL4qUcIk
Vj+hi0Tt2kuFuFZI6bC90nsPjoujyM4hN5Vz8Fs80VhUp2T7LcdQsDAIn4w1fYoJ
dVtHapRv99dGGK7Y/sK7zEl8YHskLXJbImJGn9FmQrCzHmzOCQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBMWGBN1kWccsHZ6CIHldP17yNVbMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvYmFlMTk1ZmEtNDFiMC0z
OTQ0LTllMTUtNDdmNmZjMWY4MzQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFxpPMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAB1IEtMA7fn971eFyDNxIrJy0dGUfOiZ+F+DO8xqA5nWbTUuj7NXuPlj
fOFuvVOop20oF3kpIGgtMgw8RhCWm3VSzWHsKW9/UqfWLIRNLrG4+5CC5siUw7Gu
JGwPIBn9CZqiTak/qGNNFVGqHXU5kxh+moYuHk4NRuhdvsTw6/W1MUtYwzT3jsiz
POedhwGoNj1xnYjPxRugK3faetpxUrL1LVnJeOQzknUDmAlSmxo92eAhEaSVWs4I
zxLvxAc9BAKWuXC3ags4ZnDqeqHwBBxFzT/vURxUjWeBx0Kzii5/3fjBhM0uKSNr
8Ih5sM7Npk2J34pnZslxhMQkFrkvKuE=
-----END CERTIFICATE-----
Generated at Wed Feb 5 09:41:13 2025 by rpki-client