Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/e8bca8b3-32b9-3e3e-a25e-fbbb68121091.roa
File:                     e8bca8b3-32b9-3e3e-a25e-fbbb68121091.roa (raw, json)
Hash identifier:          vSw5tus+vhXlAnOAPUsWsuTyBXknzAUm2P93qeAA4vU=
Subject key identifier:   6B:F5:25:5C:DC:5C:C4:90:FA:36:48:6E:DE:3F:E0:BC:1A:D2:F5:0C
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285849350EA4506D6F2097C267E280
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/e8bca8b3-32b9-3e3e-a25e-fbbb68121091.roa
Signing time:             Sun 16 Mar 2025 13:00:52 +0000
ROA not before:           Sun 16 Mar 2025 13:00:52 +0000
ROA not after:            Sat 14 Jun 2025 13:00:52 +0000
asID:                     7018
IP address blocks:        23.26.251.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:35:0e:a4:50:6d:6f:20:97:c2:67:e2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Mar 16 13:00:52 2025 GMT
            Not After : Jun 14 13:00:52 2025 GMT
        Subject: CN=59e66891-5e6b-4f71-b56c-a1c2091d58aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:c3:b6:f1:f6:69:7d:d3:d5:7c:ea:3e:55:fc:
                    6d:aa:ff:f7:39:9d:fb:65:8a:52:44:e9:65:16:53:
                    a8:7c:1a:fa:97:74:e3:65:cf:61:56:17:61:fa:c6:
                    95:96:d9:7f:4e:8d:ae:c6:e9:53:da:c7:e6:c9:06:
                    03:f1:09:0c:00:ef:f6:a8:02:67:45:4d:c0:96:1e:
                    8a:01:01:ac:a5:77:a1:dc:f8:cf:87:a2:9c:c9:43:
                    c3:15:88:85:ba:7b:1a:ea:36:9a:82:e4:fc:b3:2d:
                    49:63:10:14:b3:a3:81:0c:1a:ef:90:92:89:28:c2:
                    20:5f:e2:1a:4c:45:97:84:af:5f:28:6c:83:e3:c2:
                    a8:d6:51:ac:fe:be:11:94:54:47:6b:98:8c:18:82:
                    ff:a9:dc:5a:00:21:9f:c9:cc:e1:0d:c5:7e:3a:d3:
                    44:65:5b:b2:77:8f:c8:e1:e1:e5:cd:15:13:8f:a8:
                    71:3b:dc:79:6a:7c:08:33:f6:6b:78:81:c1:c7:72:
                    ae:90:b5:10:db:ad:d0:47:e9:9d:d1:db:b6:1a:17:
                    b7:09:87:90:c7:6d:93:a3:29:ae:43:29:ca:62:95:
                    ce:15:fd:44:ac:d9:43:ac:8e:7b:ae:75:89:10:49:
                    fd:3d:1a:12:57:e8:33:25:1d:43:a5:ad:d9:90:6e:
                    44:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:F5:25:5C:DC:5C:C4:90:FA:36:48:6E:DE:3F:E0:BC:1A:D2:F5:0C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/e8bca8b3-32b9-3e3e-a25e-fbbb68121091.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.26.251.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:ce:6f:ba:24:93:45:fa:f8:2d:4d:d8:b7:49:bb:8b:da:59:
         99:23:2d:c5:f6:64:f5:e4:10:50:ee:d2:0c:75:34:ab:2d:ef:
         ae:b9:6e:b0:00:1c:c4:67:55:5d:eb:bf:39:05:67:67:4b:f0:
         42:99:70:f2:d9:2e:06:c8:f3:e0:bf:ca:88:23:4c:5c:4e:38:
         b1:b6:b9:6d:7e:09:1b:93:68:ee:f9:d2:37:d6:b6:58:4f:0f:
         72:e0:9f:c0:82:93:06:2a:26:bf:c5:90:53:5a:3d:a4:a1:af:
         cb:db:80:76:8a:06:f9:e2:26:7f:5f:3d:9f:4e:88:f2:4c:26:
         e4:56:76:3d:88:de:50:1f:c1:70:b0:ff:d1:a6:2e:b1:4a:8e:
         ba:98:e1:77:66:48:b4:d6:b3:09:ba:24:bb:b5:dd:bb:c2:a0:
         35:1b:0a:a6:af:ab:1b:89:ad:46:b6:89:c1:95:f8:5b:01:90:
         11:6f:df:7d:b7:2c:5b:c9:55:55:f3:2b:0f:1d:97:05:9a:5c:
         d3:b6:5e:c0:9f:36:1a:58:89:a9:ac:18:8e:02:27:8b:a3:13:
         3f:65:35:14:30:a8:51:52:b9:a7:14:d5:e3:e9:8a:0c:de:54:
         42:2a:39:87:be:38:db:7d:ff:75:51:13:83:af:5e:bc:c4:71:
         0d:ec:17:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 21:02:30 2025 by rpki-client