Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/ce355c3a-8477-319d-9065-c83c356a0364.roa
File:                     ce355c3a-8477-319d-9065-c83c356a0364.roa (raw, json)
Hash identifier:          0Mz7voN9y7qHEXBZI8TqrH1TUK5x7exixg0SbOUTXAA=
Subject key identifier:   F6:E1:DC:3E:0B:CF:7B:19:78:12:3A:B9:FC:FC:97:89:01:A9:85:2B
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285847F75E2B02113EFA4AE7435E80
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/ce355c3a-8477-319d-9065-c83c356a0364.roa
Signing time:             Fri 22 Nov 2024 17:54:21 +0000
ROA not before:           Fri 22 Nov 2024 17:54:21 +0000
ROA not after:            Thu 20 Feb 2025 17:54:21 +0000
asID:                     401152
IP address blocks:        23.26.39.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 07 Feb 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:f7:5e:2b:02:11:3e:fa:4a:e7:43:5e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Nov 22 17:54:21 2024 GMT
            Not After : Feb 20 17:54:21 2025 GMT
        Subject: CN=5a5cfa52-f235-42cb-bad4-a69fcf0d4eba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:c0:2f:fb:e4:01:7b:14:9b:a8:85:53:8d:07:
                    19:be:50:cf:bf:07:0d:52:1d:09:4f:65:c2:9f:7c:
                    24:ba:4f:ee:11:ff:27:f6:a4:28:fa:8c:08:c5:9a:
                    4a:8a:97:e0:07:9a:32:83:3e:eb:f4:3b:96:e2:ba:
                    22:6c:33:6a:25:11:d8:be:f7:85:cb:7d:2d:17:8d:
                    dd:be:28:61:22:27:59:6e:3e:63:27:16:e3:e7:67:
                    9a:ce:ea:1d:34:fe:30:b7:a6:93:00:55:b3:01:b9:
                    d0:74:56:3a:d4:6b:56:2b:27:bc:9f:34:0e:ed:e4:
                    5b:ce:18:4d:67:18:a1:01:97:71:2e:a0:b8:76:b2:
                    ab:3f:7a:a2:56:3e:33:f1:52:34:46:f0:2c:fe:84:
                    27:0b:cc:96:8f:9b:83:80:37:86:f5:9f:1c:1f:be:
                    e5:ff:d7:7e:a5:de:22:84:39:90:8b:11:97:e2:16:
                    7c:08:77:15:72:1f:be:a2:79:c3:aa:61:01:a9:53:
                    41:ec:0d:47:9d:5d:d6:df:f4:62:14:58:df:b4:53:
                    da:e3:ad:35:64:e4:c4:6e:52:a3:51:f2:b7:40:5e:
                    8f:89:69:1f:70:b8:c2:77:e7:6d:62:7c:7a:cc:b7:
                    3d:d6:73:96:df:3f:b7:26:ff:fc:9f:cc:13:ac:ec:
                    bc:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:E1:DC:3E:0B:CF:7B:19:78:12:3A:B9:FC:FC:97:89:01:A9:85:2B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/ce355c3a-8477-319d-9065-c83c356a0364.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.26.39.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:49:73:66:aa:30:e4:7f:11:8c:f1:46:d9:3d:44:3e:ad:81:
         c7:2f:c3:5d:9f:3f:db:35:13:1e:17:5d:04:4d:28:4a:9f:fa:
         2b:48:88:d3:22:7a:90:06:5d:78:b4:01:2e:94:d9:4b:7b:d6:
         0e:98:29:32:e9:e5:de:91:e2:8d:56:0c:d0:0e:4a:84:83:58:
         f0:c6:c7:49:18:66:2f:e1:e5:09:6f:1a:bd:d0:d4:da:93:df:
         2d:15:6a:41:7e:cd:0d:ab:86:f5:f1:2f:fa:e0:69:a7:68:0b:
         c7:7c:74:62:56:da:4f:eb:03:c7:80:a5:18:35:1f:89:26:d6:
         39:24:96:0b:6a:33:e0:ad:27:79:df:9c:31:16:64:d6:58:0c:
         82:24:6b:fa:27:ec:52:58:e3:e1:3e:a8:2c:a9:8a:34:14:35:
         27:fe:ef:7f:b6:d9:ec:96:b9:03:ce:ed:53:d5:33:9a:54:83:
         d1:6b:d2:d5:b4:0f:12:fa:e7:7a:70:9b:46:10:be:23:f4:66:
         34:e1:a6:a6:68:f9:4a:36:0d:25:5f:09:86:f6:29:46:86:41:
         77:0d:8c:13:a4:9b:87:35:53:33:e1:b7:2a:17:e4:20:ca:48:
         5a:5b:f7:49:6e:a5:65:6e:7d:8f:9a:20:81:4a:2c:b0:51:36:
         e6:b0:a0:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:50:29 2025 by rpki-client