Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/cc14a7fb-3e61-3f78-8173-45994f4059fe.roa
File:                     cc14a7fb-3e61-3f78-8173-45994f4059fe.roa (raw, json)
Hash identifier:          SNRikCagm556clJ+hTGmcwsafbakaLw4x0zbv1QP7oE=
Subject key identifier:   81:E8:2C:2F:DC:5D:EE:3C:59:8D:20:C9:75:DE:3A:20:D7:90:D3:38
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285848E0065B358EED3CB964156200
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/cc14a7fb-3e61-3f78-8173-45994f4059fe.roa
Signing time:             Fri 14 Feb 2025 02:00:39 +0000
ROA not before:           Fri 14 Feb 2025 02:00:39 +0000
ROA not after:            Thu 15 May 2025 01:00:39 +0000
asID:                     400725
IP address blocks:        23.26.134.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 19 Feb 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e0:06:5b:35:8e:ed:3c:b9:64:15:62:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Feb 14 02:00:39 2025 GMT
            Not After : May 15 01:00:39 2025 GMT
        Subject: CN=b2b858f3-299b-4be5-a017-b0acdb399d60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:be:7e:29:44:56:e5:bb:2f:6b:8b:fc:57:4b:
                    70:d1:82:01:8b:18:8d:57:7d:93:38:b1:f7:0b:52:
                    c1:94:34:69:87:12:f4:5e:06:63:d4:f4:e0:22:6b:
                    b7:3c:2f:c3:bf:4f:48:37:5e:d3:42:17:1d:d3:65:
                    63:cb:54:22:05:af:ca:96:d7:10:2d:21:e8:20:f8:
                    07:a3:ec:6c:cd:30:fc:54:db:22:df:d5:ff:43:e2:
                    78:65:81:72:df:90:1f:6c:c0:5e:e5:1e:c7:e4:c8:
                    70:d1:54:ec:b4:28:15:76:b5:00:3f:51:84:14:90:
                    56:e7:05:92:5d:99:28:db:43:17:9e:9f:f2:fd:c3:
                    16:5d:d2:89:9d:c1:ed:df:5b:5f:63:ae:ba:80:8b:
                    3e:0b:00:7b:9a:0f:71:4b:ca:20:9b:8f:d2:cf:55:
                    d6:48:02:ec:f6:b9:94:36:44:42:f5:b7:32:fc:14:
                    8a:ad:36:1d:df:ea:24:bc:36:4d:0d:59:36:14:5f:
                    8d:30:6c:13:2a:77:b5:66:5a:99:ad:03:0f:2f:87:
                    9f:63:3b:b8:47:4d:25:91:eb:4d:d6:3c:e6:35:f0:
                    3f:b3:39:80:7d:0f:4e:5d:3d:ab:e2:d2:3c:db:d9:
                    09:19:dc:22:c4:ad:bc:0a:e1:c4:5a:d7:52:18:1d:
                    ef:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:E8:2C:2F:DC:5D:EE:3C:59:8D:20:C9:75:DE:3A:20:D7:90:D3:38
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/cc14a7fb-3e61-3f78-8173-45994f4059fe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.26.134.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:da:e2:e1:f4:ff:38:6b:ad:41:15:84:31:43:55:56:2d:d7:
         d5:81:f9:38:7c:b1:d9:60:22:92:f0:8f:45:68:2c:61:d7:12:
         e8:3f:d7:3f:c7:1d:6a:b7:96:4d:0b:bb:7f:3d:14:87:00:1e:
         b9:1d:e7:e6:11:85:a4:b1:1a:14:ad:69:dd:f3:8a:d3:47:48:
         9d:93:77:5e:8f:b8:44:02:0f:d8:10:fb:7a:fd:04:c5:ae:0d:
         1d:a3:d2:22:06:ca:51:b3:01:f0:f7:e6:97:81:ce:ad:64:27:
         15:63:14:2e:28:e7:13:87:d7:de:af:be:f5:78:77:60:91:b4:
         a7:25:83:77:32:66:84:56:5a:eb:2f:8c:9f:df:b1:c7:eb:15:
         80:30:58:c9:45:ea:3b:0e:67:bb:8c:85:6e:5e:aa:ee:fe:ad:
         bb:c1:84:07:cc:4d:e1:f4:b8:e8:41:cb:96:28:d2:36:72:86:
         6c:70:d6:af:7b:3a:5a:ca:1e:c3:08:3d:6b:e7:22:ed:51:c4:
         67:79:a1:88:72:57:44:01:29:e0:87:fd:ef:f9:38:97:2e:fb:
         d0:61:fb:87:30:13:93:bc:4f:18:6b:b9:f7:85:e1:7a:a4:fe:
         07:56:70:c0:62:ec:44:d1:57:f6:cf:c1:8b:1b:8e:3f:09:95:
         07:2c:19:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 04:45:40 2025 by rpki-client