Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/ea996d1a-62b2-3e00-af4d-8ff6c92cf991.roa
File:                     ea996d1a-62b2-3e00-af4d-8ff6c92cf991.roa (raw, json)
Hash identifier:          GJq6pVYCemOaX5+YUThpL7pQUi6fxguPu4TNm9mjkTA=
Subject key identifier:   24:F6:BB:83:08:51:CE:5D:E4:0B:7D:50:DE:98:1C:50:E9:07:B5:B2
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584563F3114372107D64C7360E80
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/ea996d1a-62b2-3e00-af4d-8ff6c92cf991.roa
Signing time:             Sun 31 Mar 2024 13:00:36 +0000
ROA not before:           Sun 31 Mar 2024 13:00:36 +0000
ROA not after:            Sat 29 Jun 2024 13:00:36 +0000
asID:                     19437
IP address blocks:        23.26.118.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 05 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:63:f3:11:43:72:10:7d:64:c7:36:0e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Mar 31 13:00:36 2024 GMT
            Not After : Jun 29 13:00:36 2024 GMT
        Subject: CN=f994f2c8-4133-4068-a621-ee42e88fc62f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:24:f8:3d:76:cb:58:a4:5b:98:33:d8:72:15:
                    1a:0e:a2:f2:64:c5:83:20:dd:15:79:4c:2c:ad:18:
                    51:14:5b:13:b2:d7:4b:e5:18:4a:cc:5d:ec:84:93:
                    f0:c7:26:c8:45:21:3d:5e:4c:7b:d8:75:96:81:64:
                    74:a4:bc:da:4c:a8:ad:c7:83:4c:06:db:01:9f:00:
                    ed:5b:af:4a:23:f1:b6:f2:07:79:bc:4e:cd:d1:95:
                    7b:fe:6a:1d:a4:ec:f1:1d:b1:1f:fa:0a:6c:33:58:
                    08:b8:2d:18:a9:f2:bc:8a:e5:a7:fa:1f:05:7b:f4:
                    de:cb:3a:07:fe:cb:2e:1e:18:bc:13:ad:85:f9:1c:
                    38:9d:1b:61:76:e5:06:bb:5f:78:7a:41:33:b2:70:
                    84:94:91:b2:5e:74:17:2c:4e:ce:0e:fa:08:58:23:
                    46:07:f1:f7:fe:11:26:2e:db:f1:33:aa:d4:d8:99:
                    8a:8a:d2:f1:2c:62:b5:e9:fa:dd:85:79:0c:d1:d4:
                    f1:af:45:1d:a7:ed:a2:1f:08:82:c0:10:31:87:a1:
                    dc:79:9f:01:08:a0:08:c8:7f:4c:26:62:f1:53:03:
                    db:25:4c:46:f4:fc:b1:47:c5:d3:63:de:5d:db:50:
                    6f:77:0d:b2:34:be:86:a0:cc:5a:79:8b:de:71:96:
                    26:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:F6:BB:83:08:51:CE:5D:E4:0B:7D:50:DE:98:1C:50:E9:07:B5:B2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/ea996d1a-62b2-3e00-af4d-8ff6c92cf991.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.26.118.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:aa:fb:c8:da:78:aa:30:f5:b6:cf:7b:26:85:89:a8:c9:b0:
         74:c9:5d:cd:12:f9:6b:0d:93:02:6c:9c:ad:66:e1:3f:b5:b9:
         03:65:fd:9c:1f:65:5c:b2:52:7f:8c:46:0e:f3:75:d3:23:59:
         de:84:56:16:35:05:0a:dd:5b:27:b6:22:82:ba:51:90:f1:33:
         3c:7b:df:be:f7:d3:7b:95:0b:0e:ac:88:41:88:32:5d:5a:80:
         5a:bf:f0:35:54:d6:29:56:5a:42:aa:3b:25:93:60:60:71:f3:
         ae:c5:da:94:11:60:cb:07:43:ce:42:2a:95:07:60:e8:23:5c:
         f2:a6:4e:9f:6b:6b:20:fd:fe:79:2c:f4:dc:5e:49:1b:44:51:
         06:61:40:4a:9e:39:64:78:4c:17:12:1c:9f:0c:ea:6c:52:e8:
         39:ab:80:38:71:e3:d8:fc:c3:3c:3b:f2:13:3a:7c:ee:04:e4:
         60:78:af:9d:10:f0:cc:7d:07:fc:44:d9:2f:be:1d:66:0d:16:
         dc:9f:ca:f2:30:0f:61:de:f5:67:eb:26:22:40:57:57:82:c1:
         b4:9f:06:d1:46:8c:e0:7d:2b:09:65:6b:ab:b0:82:ce:c4:0b:
         2b:b7:c2:dd:d7:87:cc:96:98:84:13:d0:23:3b:eb:12:c0:0a:
         36:aa:ef:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 17:59:14 2024 by rpki-client on console-ams.rpki-client.org