Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/d391f29c-b17e-3adf-a402-f2909f0cf37f.roa
File:                     d391f29c-b17e-3adf-a402-f2909f0cf37f.roa (raw, json)
Hash identifier:          8f1JTknM9WOADzIvKqmT9K4Pa/4Y7dEJv8M5EIzZj6o=
Subject key identifier:   17:05:4F:20:B2:43:4A:3C:38:1A:56:4C:70:F8:7D:CB:28:43:10:09
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584726D08AE19DE6681A7DD92E00
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/d391f29c-b17e-3adf-a402-f2909f0cf37f.roa
Signing time:             Mon 09 Sep 2024 01:00:31 +0000
ROA not before:           Mon 09 Sep 2024 01:00:31 +0000
ROA not after:            Sun 08 Dec 2024 02:00:31 +0000
asID:                     23470
IP address blocks:        23.26.108.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:26:d0:8a:e1:9d:e6:68:1a:7d:d9:2e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Sep  9 01:00:31 2024 GMT
            Not After : Dec  8 02:00:31 2024 GMT
        Subject: CN=79e8575a-938d-4e87-b362-03f79ce6783d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:03:dc:d8:c2:bc:28:20:2a:0c:e1:c8:45:86:
                    47:8d:22:e6:c6:69:f7:12:70:d7:97:0d:7c:a2:c1:
                    9a:06:81:3a:d5:32:10:3c:58:26:ba:5c:8c:67:99:
                    4c:c8:16:c8:68:3b:1f:5c:30:c3:01:55:21:d5:07:
                    24:0a:ad:bb:df:ad:3a:4d:6f:7f:bf:09:12:6f:73:
                    3d:1f:e7:52:ee:c3:93:b9:cd:ce:13:1b:df:ec:2c:
                    9e:96:cd:19:ea:21:10:41:f4:be:5a:18:66:da:24:
                    f9:c0:ff:58:87:1e:a1:5d:a9:28:67:46:fb:3c:eb:
                    a3:47:fc:ea:b1:f9:86:db:9e:1b:6b:85:60:b5:40:
                    a1:ec:7d:94:c3:54:c8:94:28:16:a7:78:65:95:04:
                    fa:d6:e4:d0:65:da:43:3d:e0:7b:35:c2:37:aa:db:
                    f7:4e:13:2b:5f:53:da:2d:03:e0:46:52:27:1c:51:
                    82:1a:6d:fa:2f:01:86:45:84:c3:d6:4b:08:92:40:
                    8f:88:75:42:09:44:e4:53:e3:a6:02:d7:aa:43:c6:
                    98:5b:58:5b:06:6c:52:65:95:6f:4f:c5:fb:09:e2:
                    91:cb:b1:c9:3d:6a:c0:82:b6:3a:f1:ea:cd:5a:6d:
                    6a:df:01:6c:ff:56:54:18:c9:9e:b4:55:45:c6:98:
                    4c:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:05:4F:20:B2:43:4A:3C:38:1A:56:4C:70:F8:7D:CB:28:43:10:09
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/d391f29c-b17e-3adf-a402-f2909f0cf37f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.26.108.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:63:f3:23:3a:ce:d7:81:3c:64:0b:26:b1:95:72:ad:db:96:
         d5:64:22:6e:7d:21:db:66:a6:8f:dc:fc:36:46:a9:7f:6f:0b:
         18:fc:bc:a2:07:97:82:e9:0e:2f:4e:61:e9:b0:ef:92:14:db:
         46:ea:ac:56:63:f0:b9:1f:67:39:2d:ba:a8:fc:b9:72:a3:85:
         45:cc:43:88:01:b7:9c:a9:5f:7c:ef:40:8c:cd:ca:b3:72:ee:
         d6:8a:9e:38:e1:db:31:2f:11:cb:b1:56:67:79:75:0b:cf:2b:
         fc:bd:d3:13:bc:4f:b2:22:a3:be:34:7d:a7:be:82:3b:25:c1:
         77:70:c8:7b:cc:20:53:55:08:9e:29:b7:9d:92:8b:c1:d1:cd:
         d1:c0:d3:c6:4e:3c:da:a5:da:94:01:ef:4e:ff:75:1f:ed:20:
         13:86:30:65:53:a8:77:8c:a1:58:1b:35:1c:4b:83:dd:be:d7:
         a7:73:38:0a:1c:1c:e7:4c:0a:99:b1:2e:0a:7b:88:8c:04:25:
         76:ef:a9:08:05:6d:b1:cb:6b:df:05:dc:2d:7e:8e:7c:77:f1:
         be:7a:ec:b3:9f:e2:af:21:12:ca:fc:7e:4e:df:1d:11:e5:d8:
         49:e9:42:bd:b3:6c:76:9c:fe:25:df:ae:43:30:41:32:15:3e:
         cd:f6:ab:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 18:54:23 2024 by rpki-client on console-ams.rpki-client.org