Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/ef6e963f-c6de-3f04-a5da-09a3f9ff8e50.roa
File:                     ef6e963f-c6de-3f04-a5da-09a3f9ff8e50.roa (raw, json)
Hash identifier:          HjSWjFaaM6BssoQ09vIU6mFEWzRpcYXti5+WkCXvavo=
Subject key identifier:   FE:A5:66:AD:67:E3:CE:A5:17:23:DC:B7:B1:33:9C:9D:59:2B:85:B0
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285847D40493B4729874C3FFBA1360
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/ef6e963f-c6de-3f04-a5da-09a3f9ff8e50.roa
Signing time:             Sun 10 Nov 2024 02:00:27 +0000
ROA not before:           Sun 10 Nov 2024 02:00:27 +0000
ROA not after:            Sat 08 Feb 2025 02:00:27 +0000
asID:                     206150
IP address blocks:        23.26.151.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:d4:04:93:b4:72:98:74:c3:ff:ba:13:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Nov 10 02:00:27 2024 GMT
            Not After : Feb  8 02:00:27 2025 GMT
        Subject: CN=24e1207b-388a-442f-afd6-1921d13ef683
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:a1:bc:ed:23:de:84:69:f9:9b:15:56:8f:9b:
                    fa:e9:90:61:89:a5:52:71:ce:87:59:99:dd:f3:7e:
                    3c:23:20:ea:3c:a4:0b:9d:17:22:cd:a1:4d:6f:49:
                    64:62:cb:23:23:4b:27:69:d8:30:6a:d6:51:0d:5a:
                    af:cb:eb:11:7a:90:df:da:26:05:3c:a3:67:91:18:
                    be:37:ed:95:44:ca:82:4a:93:30:f8:da:72:f0:75:
                    f7:1e:37:c3:be:a2:ed:bf:4b:75:21:9b:00:f5:be:
                    eb:28:42:c5:ce:fe:fc:77:02:fa:e7:12:80:57:3e:
                    21:cf:6d:0b:50:df:1a:3d:5d:ad:c6:75:96:43:1a:
                    a3:b4:18:39:82:3f:b5:c8:d2:cd:45:3f:ad:a6:00:
                    1e:cd:8f:92:5f:e2:11:0e:62:a7:ae:61:ad:c8:b7:
                    b1:c2:e9:8b:b3:2f:d2:63:ff:ae:29:47:4e:60:cb:
                    24:5e:83:e6:7a:49:8b:a9:61:99:55:1b:50:a6:74:
                    9d:58:19:7d:e7:0d:ca:34:57:aa:87:a7:08:85:f7:
                    86:eb:e6:c5:fd:7b:f1:b9:33:b3:35:4e:e1:9a:92:
                    3c:9b:bd:66:4f:d6:e4:bf:c5:93:72:66:43:78:54:
                    55:37:1c:94:6f:58:a3:b5:dc:29:43:12:10:8d:b1:
                    bd:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:A5:66:AD:67:E3:CE:A5:17:23:DC:B7:B1:33:9C:9D:59:2B:85:B0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/ef6e963f-c6de-3f04-a5da-09a3f9ff8e50.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.26.151.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:9e:b2:a8:64:17:ce:a6:21:ca:56:66:aa:6f:e9:48:e5:63:
         60:0e:bc:0e:19:8c:94:d7:82:4f:80:c5:b3:d9:fe:75:95:04:
         f2:b1:e4:2f:0f:ea:d4:a3:23:b7:e2:34:74:40:59:29:67:51:
         cf:31:ba:73:2b:cd:0a:8c:8a:1a:8f:37:78:67:e5:28:48:c6:
         4a:11:c4:87:78:ef:45:e1:65:fc:10:28:41:70:8f:a3:e3:5c:
         c1:8c:af:c3:30:d9:f2:21:78:83:7a:75:64:a2:c7:73:f9:cb:
         18:f4:2a:6b:b1:d6:fe:b7:7c:2d:e3:49:10:ce:d9:26:44:30:
         16:d5:91:0d:dc:65:b7:29:62:5e:ff:e1:ba:19:18:df:11:f7:
         04:14:09:72:ac:1b:af:25:a7:f2:d6:da:44:03:cd:d3:12:b2:
         2b:b1:7d:9c:57:4d:55:ba:29:7a:10:63:6d:6c:a9:c5:2e:41:
         d6:b0:bb:ff:4d:14:be:51:c5:6e:de:33:2b:a8:4d:de:ec:43:
         49:b0:94:18:a6:b6:87:ce:2a:12:72:a7:7a:5c:51:32:49:ae:
         6e:29:f0:b9:c8:83:e9:b2:12:c7:23:e4:3e:bf:12:6b:df:7a:
         39:7c:06:92:b5:e9:a5:b3:b4:06:62:af:9c:59:91:e9:1a:48:
         bb:5b:f6:5a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfUBJO0cph0w/+6E2AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTI0MTExMDAyMDAyN1oXDTI1MDIwODAyMDAyN1owLzEtMCsGA1UEAxMk
MjRlMTIwN2ItMzg4YS00NDJmLWFmZDYtMTkyMWQxM2VmNjgzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4qG87SPehGn5mxVWj5v66ZBhiaVScc6HWZnd
8348IyDqPKQLnRcizaFNb0lkYssjI0snadgwatZRDVqvy+sRepDf2iYFPKNnkRi+
N+2VRMqCSpMw+Npy8HX3HjfDvqLtv0t1IZsA9b7rKELFzv78dwL65xKAVz4hz20L
UN8aPV2txnWWQxqjtBg5gj+1yNLNRT+tpgAezY+SX+IRDmKnrmGtyLexwumLsy/S
Y/+uKUdOYMskXoPmekmLqWGZVRtQpnSdWBl95w3KNFeqh6cIhfeG6+bF/XvxuTOz
NU7hmpI8m71mT9bkv8WTcmZDeFRVNxyUb1ijtdwpQxIQjbG9zQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFP6lZq1n486lFyPct7EznJ1ZK4WwMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvZWY2ZTk2M2YtYzZkZS0z
ZjA0LWE1ZGEtMDlhM2Y5ZmY4ZTUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFxqXMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADKesqhkF86mIcpWZqpv6UjlY2AOvA4ZjJTXgk+AxbPZ/nWVBPKx5C8P
6tSjI7fiNHRAWSlnUc8xunMrzQqMihqPN3hn5ShIxkoRxId470XhZfwQKEFwj6Pj
XMGMr8Mw2fIheIN6dWSix3P5yxj0Kmux1v63fC3jSRDO2SZEMBbVkQ3cZbcpYl7/
4boZGN8R9wQUCXKsG68lp/LW2kQDzdMSsiuxfZxXTVW6KXoQY21sqcUuQdawu/9N
FL5RxW7eMyuoTd7sQ0mwlBimtofOKhJyp3pcUTJJrm4p8LnIg+myEscj5D6/Emvf
ejl8BpK16aWztAZir5xZkekaSLtb9lo=
-----END CERTIFICATE-----
Generated at Fri Nov 22 09:32:27 2024 by rpki-client on console-fra.rpki-client.org