Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/be31e17a-5329-36b3-8bad-8a5d6ef3f811.roa
File:                     be31e17a-5329-36b3-8bad-8a5d6ef3f811.roa (raw, json)
Hash identifier:          aomTU8J0WOes4h49EoEjm8ZL2D1Z+J96r/VAT3DtI/k=
Subject key identifier:   E9:61:30:34:CD:85:E6:AF:8B:9C:A1:9A:AE:69:80:25:1E:FA:46:A8
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F432858458B088CBB71012D65F7ABF080
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/be31e17a-5329-36b3-8bad-8a5d6ef3f811.roa
Signing time:             Sun 14 Apr 2024 13:00:34 +0000
ROA not before:           Sun 14 Apr 2024 13:00:34 +0000
ROA not after:            Sat 13 Jul 2024 13:00:34 +0000
asID:                     208949
IP address blocks:        23.26.64.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 05 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:8b:08:8c:bb:71:01:2d:65:f7:ab:f0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Apr 14 13:00:34 2024 GMT
            Not After : Jul 13 13:00:34 2024 GMT
        Subject: CN=e94941f6-9f80-41fe-813b-5d3c08827b79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:ea:4c:ba:5d:7f:79:a1:30:69:c1:01:12:b3:
                    9f:ad:ef:57:1f:70:3f:c9:d6:4c:da:9c:66:e2:10:
                    78:5a:92:c0:5b:84:4e:9a:ab:a8:0d:20:11:a8:ac:
                    27:7e:fc:f4:41:b9:61:7f:b6:16:7c:3e:75:16:d6:
                    1c:5f:5a:9e:73:2d:b8:c5:d5:a7:35:11:b8:23:28:
                    22:cf:9a:08:60:6e:7b:08:34:5a:2b:b6:31:56:3d:
                    28:98:f7:9a:90:52:bd:d7:1d:08:ec:31:fb:e2:35:
                    9b:3f:c6:78:f7:26:ae:d7:da:4b:31:a2:f7:e5:cd:
                    d1:ba:eb:e2:c3:65:a2:11:c0:84:5f:32:b2:9a:8c:
                    e3:c4:34:b2:24:4f:1e:d8:b6:28:0b:e7:54:04:6b:
                    c1:ec:18:aa:94:e4:69:47:f5:3a:e8:6e:77:e8:98:
                    37:50:69:08:8d:ae:ab:f0:75:a9:7f:3e:a2:81:1d:
                    60:87:f0:6f:35:19:04:d4:d1:d2:48:01:77:8a:35:
                    53:8f:71:c2:35:d2:68:23:ab:f1:60:b9:8d:a4:18:
                    2c:7b:60:15:55:7b:9a:7e:be:f7:29:62:39:e8:e3:
                    f6:e5:cd:a5:9d:60:1b:08:18:d9:43:3a:d3:33:c8:
                    fb:55:c2:32:41:8a:a3:06:8e:83:cb:7d:2b:29:0c:
                    dd:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:61:30:34:CD:85:E6:AF:8B:9C:A1:9A:AE:69:80:25:1E:FA:46:A8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/be31e17a-5329-36b3-8bad-8a5d6ef3f811.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.26.64.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:51:ba:55:00:ae:2e:dd:ce:1c:51:8e:d2:55:a4:13:f0:f9:
         de:6b:63:24:21:8c:70:0e:a8:88:c8:9d:51:3c:ec:69:66:de:
         8c:01:43:21:3c:2e:8a:c5:3e:b1:4d:92:f2:6e:5b:c2:a8:75:
         a1:6e:c7:c5:a3:1e:fb:cb:0a:0d:f1:b2:4b:40:4a:05:ef:48:
         51:44:5c:9c:0e:e6:c6:58:c9:2f:33:75:f2:3c:87:03:2d:d9:
         17:51:ba:d6:30:f2:aa:37:7d:83:16:85:ab:aa:f3:a4:54:24:
         58:e8:56:bc:71:60:53:da:93:83:a4:80:f9:09:4e:01:20:66:
         13:b8:db:a2:be:34:02:78:9b:3e:c0:c4:2c:b1:be:46:b1:0e:
         d5:9f:f2:44:86:6b:49:7d:16:e2:29:2e:c2:e6:88:78:a9:de:
         62:bb:4b:87:13:a4:84:f9:85:44:ec:92:3f:81:7b:f2:6e:46:
         cb:7e:95:3c:00:53:4d:6e:5d:1f:05:1e:01:09:6e:f7:55:02:
         2d:13:ea:b8:93:68:f4:d0:2c:1f:f6:79:82:9e:1b:30:45:cc:
         ad:03:84:d0:7e:a9:75:2a:62:a6:33:b6:58:b5:cb:5f:f2:3d:
         8e:3c:65:e9:40:74:bc:f5:dd:59:0c:09:c6:68:41:6f:be:00:
         04:9e:dc:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 17:59:07 2024 by rpki-client on console-ams.rpki-client.org