Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/bf81c5ca-1fa7-31a5-9b5f-b01815ff4978.roa
File:                     bf81c5ca-1fa7-31a5-9b5f-b01815ff4978.roa (raw, json)
Hash identifier:          oWD5k3TdwgYWbuj93kTxtlNcs1UPhm1FK5nKcYMPqss=
Subject key identifier:   96:87:00:C1:AA:D6:3C:C6:6C:71:6C:8E:51:08:2A:49:8E:A8:B0:BF
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285847C05C0EDBFE7DE14764FA9600
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/bf81c5ca-1fa7-31a5-9b5f-b01815ff4978.roa
Signing time:             Sun 03 Nov 2024 01:00:36 +0000
ROA not before:           Sun 03 Nov 2024 01:00:36 +0000
ROA not after:            Sat 01 Feb 2025 02:00:36 +0000
asID:                     5065
IP address blocks:        23.26.223.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:c0:5c:0e:db:fe:7d:e1:47:64:fa:96:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Nov  3 01:00:36 2024 GMT
            Not After : Feb  1 02:00:36 2025 GMT
        Subject: CN=10b7f404-6d60-4b13-bebc-92aa9083fa7e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:07:97:03:9e:a5:e5:01:2d:31:36:4f:73:29:
                    40:f8:90:c6:d7:66:1c:0d:73:3f:ce:7f:10:7f:01:
                    e5:66:a6:c3:44:ed:7b:9c:35:7d:9c:f0:a6:2b:32:
                    3d:fa:f0:91:75:f9:88:0a:16:94:9d:85:76:2a:90:
                    ee:83:b2:2d:4e:8a:fa:62:fc:f1:01:ac:57:94:d9:
                    c5:9c:94:13:58:1d:a5:4f:4f:29:49:a6:3d:e0:33:
                    eb:de:76:a2:33:f2:29:d6:98:9c:78:7b:a1:77:13:
                    9d:e4:a1:04:c8:ed:b6:34:83:f1:0d:0f:5a:f1:1f:
                    d6:4d:fb:d3:a9:be:b9:cc:51:bd:b6:f3:cf:02:30:
                    2d:b2:c2:06:2b:d1:17:cc:e1:b9:bb:06:2c:dc:c8:
                    cc:9f:1c:a1:2c:8d:18:b1:f0:3a:e3:1a:6e:95:cb:
                    99:64:a7:d9:2d:32:97:a4:28:da:fb:c2:ef:46:75:
                    3f:13:df:65:76:35:6c:2f:c8:0a:53:45:60:3a:e4:
                    04:7f:94:b1:2d:0d:1b:3e:2c:f9:aa:d8:a5:aa:f5:
                    a6:3e:17:fb:b7:dd:bb:4d:e6:7d:70:70:9d:d0:d3:
                    76:65:09:b4:2a:5e:a8:2f:1d:34:c3:d6:7c:fe:67:
                    66:99:8e:d9:9e:7a:27:c0:1e:f8:37:42:b6:f0:c2:
                    e4:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:87:00:C1:AA:D6:3C:C6:6C:71:6C:8E:51:08:2A:49:8E:A8:B0:BF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/bf81c5ca-1fa7-31a5-9b5f-b01815ff4978.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.26.223.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:ab:44:1c:fd:aa:3f:c3:cd:d8:74:93:93:d8:65:53:06:7c:
         a9:e6:5f:3e:08:eb:97:2c:97:7e:70:3e:7e:4c:f6:f1:cc:a6:
         22:84:bd:8b:27:73:e1:c8:df:75:1e:ee:5f:94:2a:d7:73:88:
         4f:47:44:7d:d4:e5:f5:47:fb:d2:5b:ee:8e:de:a5:ea:44:77:
         9e:f7:86:b3:fd:fd:78:ce:bc:22:28:11:83:12:61:af:cb:85:
         fa:30:36:30:43:17:f8:52:67:2c:b3:31:9f:0c:2e:f7:87:7c:
         92:6c:3a:29:e1:e3:81:31:e1:5b:60:f8:f3:ca:ae:0c:96:56:
         09:7e:75:82:85:45:d7:16:c1:a7:0a:38:83:0c:4c:07:15:ac:
         be:f4:c3:2a:6f:0f:ca:f2:5a:f1:d1:84:c2:2a:f2:7d:73:6a:
         f8:0b:91:09:2d:77:a6:32:38:69:4a:7a:f1:b2:97:dd:09:63:
         1d:06:fe:a5:49:0c:78:70:fe:0f:d5:c2:fc:b6:6e:32:ff:d1:
         03:67:03:3d:13:82:d7:60:e8:3c:dd:9c:61:87:d7:2f:ea:81:
         7a:d1:30:34:74:58:ea:b1:8d:f0:0e:7a:4d:d3:74:bd:2c:8c:
         29:94:40:5d:1a:4c:a7:ec:6a:6e:30:8d:f1:cb:0d:63:be:a0:
         61:35:f5:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 19:15:45 2024 by rpki-client on console-fra.rpki-client.org