Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/ebeefc28-7cc6-3d83-9be8-0452469a9368.roa
File:                     ebeefc28-7cc6-3d83-9be8-0452469a9368.roa (raw, json)
Hash identifier:          PAVdJHbhYItlDtYH9ozT2JOyEVCxUYAePLYvftC+92g=
Subject key identifier:   3C:DD:7B:D6:44:26:6A:33:9B:96:7C:93:F1:FF:93:8F:40:FE:F5:05
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F432858453E42A15EAF5A436273011B20
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/ebeefc28-7cc6-3d83-9be8-0452469a9368.roa
Signing time:             Mon 18 Mar 2024 01:00:25 +0000
ROA not before:           Mon 18 Mar 2024 01:00:25 +0000
ROA not after:            Sun 16 Jun 2024 01:00:25 +0000
asID:                     199707
IP address blocks:        23.26.232.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 05 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:3e:42:a1:5e:af:5a:43:62:73:01:1b:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Mar 18 01:00:25 2024 GMT
            Not After : Jun 16 01:00:25 2024 GMT
        Subject: CN=512479e8-8abe-4a34-b245-e95af1ff9959
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:94:4d:9e:19:98:2c:fb:5e:0e:22:da:18:d5:
                    c9:ae:73:e5:d6:40:8f:f3:e9:27:92:68:86:79:dd:
                    3a:bc:73:4f:64:ae:92:e3:06:ad:8c:c4:06:fa:63:
                    57:e8:4e:ff:4d:5f:57:5a:31:f8:f9:0a:db:b5:27:
                    cf:14:32:50:ca:86:40:de:f6:83:5e:26:bb:3c:93:
                    9a:e2:01:5d:e2:6c:3e:5d:18:72:94:56:a9:fd:48:
                    3c:9e:df:1d:e0:2c:ef:3f:64:f5:ae:90:ba:2b:f7:
                    59:08:cc:d2:19:ad:10:d4:18:7f:a4:9b:5c:b5:d1:
                    dc:62:3c:7d:13:f4:e7:e3:9a:b6:93:bc:47:f9:27:
                    de:44:db:79:2b:38:3b:15:d8:32:33:9a:fc:68:b6:
                    2f:6e:54:68:b2:a5:79:e1:c6:a1:1f:7e:dd:95:1a:
                    01:58:5e:10:94:30:3a:cc:02:db:ec:b9:f7:8e:40:
                    a7:57:7c:f7:57:2a:9f:2a:f8:d3:3a:61:3c:01:81:
                    6c:a8:4e:6f:5d:59:d4:65:8b:3a:91:ac:28:a6:3c:
                    56:d5:29:e5:dd:04:3c:88:65:b8:2b:2c:da:0a:85:
                    9d:b9:3b:8c:01:63:44:9d:ff:ec:54:51:27:c0:9e:
                    87:cd:95:88:75:98:5f:bf:ae:c1:9f:7a:2b:b6:c7:
                    d5:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:DD:7B:D6:44:26:6A:33:9B:96:7C:93:F1:FF:93:8F:40:FE:F5:05
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/ebeefc28-7cc6-3d83-9be8-0452469a9368.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.26.232.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9f:15:a2:bb:47:05:77:da:6b:06:0f:c3:de:9b:67:ab:9b:06:
         08:ba:5b:32:e8:b9:c0:25:29:23:55:b2:cd:90:3b:bf:50:ec:
         29:b0:30:96:66:bb:5e:77:e7:29:ed:f3:cc:33:c1:c1:14:7b:
         08:57:c2:15:ea:fd:de:c8:59:98:48:fd:34:bd:a0:14:0b:1b:
         9e:d9:db:40:0f:c1:c0:32:60:e7:3e:f3:1f:0c:89:b8:8e:0b:
         d0:7a:fe:59:0c:3a:97:64:02:f5:79:ed:2b:e0:6a:15:0f:64:
         6c:cb:c5:f2:7e:0c:9d:a8:3b:76:38:66:5f:7f:48:91:7d:de:
         59:09:42:15:3d:f9:a6:71:e5:ce:c8:a6:08:de:5e:a4:49:52:
         56:73:30:f2:7f:75:11:ac:44:d5:33:ec:4f:4e:31:7a:51:21:
         1b:5f:f1:b4:27:92:71:ba:92:34:7d:e8:ce:f1:66:0e:92:c4:
         41:9b:bc:bb:76:08:f9:86:16:b8:0e:e3:8f:36:6b:14:a0:21:
         3d:54:33:3f:c0:ea:52:24:e5:25:d2:cb:b4:77:da:d9:7f:1c:
         93:5a:5b:f7:ba:2f:a2:69:fb:b7:1e:0b:1f:f5:5a:69:25:1e:
         1c:c2:0b:9c:5e:0e:52:6e:25:a2:81:e6:cb:c0:a9:ba:ad:ad:
         a7:85:a5:0e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEU+QqFer1pDYnMBGyAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTI0MDMxODAxMDAyNVoXDTI0MDYxNjAxMDAyNVowLzEtMCsGA1UEAxMk
NTEyNDc5ZTgtOGFiZS00YTM0LWIyNDUtZTk1YWYxZmY5OTU5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiZRNnhmYLPteDiLaGNXJrnPl1kCP8+knkmiG
ed06vHNPZK6S4watjMQG+mNX6E7/TV9XWjH4+QrbtSfPFDJQyoZA3vaDXia7PJOa
4gFd4mw+XRhylFap/Ug8nt8d4CzvP2T1rpC6K/dZCMzSGa0Q1Bh/pJtctdHcYjx9
E/Tn45q2k7xH+SfeRNt5Kzg7FdgyM5r8aLYvblRosqV54cahH37dlRoBWF4QlDA6
zALb7Ln3jkCnV3z3VyqfKvjTOmE8AYFsqE5vXVnUZYs6kawopjxW1Snl3QQ8iGW4
KyzaCoWduTuMAWNEnf/sVFEnwJ6HzZWIdZhfv67Bn3ortsfVMQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDzde9ZEJmozm5Z8k/H/k49A/vUFMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvZWJlZWZjMjgtN2NjNi0z
ZDgzLTliZTgtMDQ1MjQ2OWE5MzY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFxroMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJ8VortHBXfaawYPw96bZ6ubBgi6WzLoucAlKSNVss2QO79Q7CmwMJZm
u1535ynt88wzwcEUewhXwhXq/d7IWZhI/TS9oBQLG57Z20APwcAyYOc+8x8MibiO
C9B6/lkMOpdkAvV57SvgahUPZGzLxfJ+DJ2oO3Y4Zl9/SJF93lkJQhU9+aZx5c7I
pgjeXqRJUlZzMPJ/dRGsRNUz7E9OMXpRIRtf8bQnknG6kjR96M7xZg6SxEGbvLt2
CPmGFrgO4482axSgIT1UMz/A6lIk5SXSy7R32tl/HJNaW/e6L6Jp+7ceCx/1Wmkl
HhzCC5xeDlJuJaKB5svAqbqtraeFpQ4=
-----END CERTIFICATE-----
Generated at Fri May 3 17:56:31 2024 by rpki-client on console-fra.rpki-client.org