Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/c391315f-8486-3e7f-ad29-8597e225318f.roa
File:                     c391315f-8486-3e7f-ad29-8597e225318f.roa (raw, json)
Hash identifier:          ML5N2sF3GG1pEMNLuSGiQbwTH7sk9NNRsrm4XBLqpDY=
Subject key identifier:   E4:8E:E4:78:CD:75:03:84:16:6E:79:E0:12:52:69:21:3D:36:67:98
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285847CE6F4F334B88BC48A72BA8C0
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/c391315f-8486-3e7f-ad29-8597e225318f.roa
Signing time:             Fri 08 Nov 2024 02:00:27 +0000
ROA not before:           Fri 08 Nov 2024 02:00:27 +0000
ROA not after:            Thu 06 Feb 2025 02:00:27 +0000
asID:                     21743
IP address blocks:        23.26.84.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ce:6f:4f:33:4b:88:bc:48:a7:2b:a8:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Nov  8 02:00:27 2024 GMT
            Not After : Feb  6 02:00:27 2025 GMT
        Subject: CN=6b055afe-492d-4f14-85f8-708d2a654b36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:b8:71:d5:92:78:be:43:24:52:46:6b:e2:72:
                    17:85:54:df:96:80:6f:03:11:fb:5b:7b:73:d5:7a:
                    a7:8c:5d:4e:bd:5c:a0:9c:e9:20:81:a8:4c:1e:06:
                    7b:a3:27:d8:75:0c:87:a1:2f:20:62:63:de:4c:13:
                    01:42:a4:22:ce:57:32:b3:60:a4:0e:71:8b:0d:71:
                    af:32:bd:d1:25:b8:f4:df:62:f9:5f:72:95:cf:91:
                    6b:f0:92:f3:7d:82:ed:b5:5c:32:c4:c8:bc:50:59:
                    fa:70:20:51:d4:cf:2e:cb:57:06:ce:90:8a:9c:fe:
                    33:ba:cc:03:2f:50:72:2e:c5:dc:fc:a7:73:97:37:
                    1c:6f:22:c4:55:6e:e0:6c:4c:d2:76:9d:e3:ae:14:
                    fd:ec:29:b6:6b:46:ac:34:c7:3f:99:c2:dc:9e:85:
                    2d:25:df:ee:cf:ee:9e:a1:14:65:24:f5:98:ff:22:
                    5c:0e:c3:8b:fe:77:e8:2a:f5:28:1b:91:6f:82:8f:
                    8c:b4:5c:53:11:ec:e6:45:8d:9a:91:84:48:7f:e5:
                    bd:bd:a4:b7:32:9d:ce:93:b6:3d:5c:9c:0e:4e:c8:
                    52:35:4c:f4:c1:28:61:f4:30:39:a8:ef:5c:b3:1b:
                    66:26:f4:7f:98:dc:26:83:b8:af:42:58:fc:aa:cf:
                    bc:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:8E:E4:78:CD:75:03:84:16:6E:79:E0:12:52:69:21:3D:36:67:98
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/c391315f-8486-3e7f-ad29-8597e225318f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.26.84.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a7:0f:51:95:5e:9a:70:ea:26:7a:f4:a8:0b:ce:e1:21:23:f5:
         24:19:77:e1:f4:6f:43:69:38:44:92:e9:c0:d3:d6:ee:23:af:
         d9:1f:47:79:a8:78:a9:2a:18:60:48:d7:cf:46:bb:3f:e3:37:
         9c:bf:b2:73:30:78:9e:c7:0a:a3:fb:83:7f:3e:bc:a1:0b:d8:
         1d:1e:60:ad:1a:e4:2e:7e:d6:33:69:f7:74:9e:1d:3c:a5:a5:
         70:6b:76:3e:be:36:0c:4b:ba:67:56:40:94:ca:67:36:3f:b0:
         32:db:d1:89:25:18:8a:02:f3:6a:bb:31:5a:ab:86:c6:25:62:
         d8:76:33:9f:99:79:23:6f:e5:ff:4f:73:43:0d:3a:ca:ae:19:
         02:86:e2:b0:05:8a:70:53:25:d2:40:38:58:14:f5:7e:22:6b:
         ed:b1:3a:38:61:93:4b:9c:51:0e:a0:29:0b:77:61:1e:a6:0d:
         0f:4d:c3:75:ca:b9:f0:67:fc:dc:2e:c4:96:d3:db:58:4d:78:
         8e:43:a9:68:31:b5:be:ae:b4:31:fc:d0:3c:cb:64:22:4e:03:
         e2:3d:48:27:27:09:7e:61:3d:99:6f:11:75:e6:be:d4:71:4c:
         13:fa:33:10:ce:0e:50:b8:92:09:00:ff:0e:90:bf:38:28:05:
         22:f6:4d:d8
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfOb08zS4i8SKcrqMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTI0MTEwODAyMDAyN1oXDTI1MDIwNjAyMDAyN1owLzEtMCsGA1UEAxMk
NmIwNTVhZmUtNDkyZC00ZjE0LTg1ZjgtNzA4ZDJhNjU0YjM2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvbhx1ZJ4vkMkUkZr4nIXhVTfloBvAxH7W3tz
1XqnjF1OvVygnOkggahMHgZ7oyfYdQyHoS8gYmPeTBMBQqQizlcys2CkDnGLDXGv
Mr3RJbj032L5X3KVz5Fr8JLzfYLttVwyxMi8UFn6cCBR1M8uy1cGzpCKnP4zuswD
L1ByLsXc/KdzlzccbyLEVW7gbEzSdp3jrhT97Cm2a0asNMc/mcLcnoUtJd/uz+6e
oRRlJPWY/yJcDsOL/nfoKvUoG5Fvgo+MtFxTEezmRY2akYRIf+W9vaS3Mp3Ok7Y9
XJwOTshSNUz0wShh9DA5qO9csxtmJvR/mNwmg7ivQlj8qs+8GwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOSO5HjNdQOEFm554BJSaSE9NmeYMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvYzM5MTMxNWYtODQ4Ni0z
ZTdmLWFkMjktODU5N2UyMjUzMThmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBFxpUMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKcPUZVemnDqJnr0qAvO4SEj9SQZd+H0b0NpOESS6cDT1u4jr9kfR3mo
eKkqGGBI189Guz/jN5y/snMweJ7HCqP7g38+vKEL2B0eYK0a5C5+1jNp93SeHTyl
pXBrdj6+NgxLumdWQJTKZzY/sDLb0YklGIoC82q7MVqrhsYlYth2M5+ZeSNv5f9P
c0MNOsquGQKG4rAFinBTJdJAOFgU9X4ia+2xOjhhk0ucUQ6gKQt3YR6mDQ9Nw3XK
ufBn/NwuxJbT21hNeI5DqWgxtb6utDH80DzLZCJOA+I9SCcnCX5hPZlvEXXmvtRx
TBP6MxDODlC4kgkA/w6QvzgoBSL2Tdg=
-----END CERTIFICATE-----
Generated at Fri Nov 22 09:32:23 2024 by rpki-client on console-fra.rpki-client.org