Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/f24f1b3f-d5e4-3086-89b8-c54a0ecb1c82.roa
File:                     f24f1b3f-d5e4-3086-89b8-c54a0ecb1c82.roa (raw, json)
Hash identifier:          Ssp5Rwl9ekMXcDjAkd26+/XART9XUXQ5apYpWyinaRM=
Subject key identifier:   62:E1:BD:24:54:41:98:B3:96:72:3D:CB:F8:06:E8:91:93:DD:05:32
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F432858492E13B4B108B02D93EC85F080
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/f24f1b3f-d5e4-3086-89b8-c54a0ecb1c82.roa
Signing time:             Fri 14 Mar 2025 01:00:39 +0000
ROA not before:           Fri 14 Mar 2025 01:00:39 +0000
ROA not after:            Thu 12 Jun 2025 01:00:39 +0000
asID:                     211373
IP address blocks:        23.26.97.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 20 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:2e:13:b4:b1:08:b0:2d:93:ec:85:f0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Mar 14 01:00:39 2025 GMT
            Not After : Jun 12 01:00:39 2025 GMT
        Subject: CN=05f13554-2482-4195-b673-8f1fe8d6a438
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:ba:42:56:42:d4:8b:4c:45:7b:d9:cf:9c:0f:
                    dd:ee:06:b4:61:a0:35:01:2f:76:c8:d5:ed:6d:d7:
                    06:f3:d1:49:c2:9d:e4:b9:1e:ba:74:cb:86:a9:57:
                    da:d8:a4:24:65:ca:8f:aa:cb:f1:bb:5f:93:15:d6:
                    ff:2c:1d:ed:82:25:0f:8b:f5:dd:06:c0:8d:82:1a:
                    88:86:45:8d:09:8a:23:a8:e1:4c:de:d7:4e:70:6e:
                    ab:73:3c:e1:da:65:07:31:22:61:2c:25:ab:8b:5d:
                    d2:ed:5e:3f:21:7a:13:0a:49:e5:7b:36:9e:8c:20:
                    a9:97:34:cd:33:f0:a7:87:48:29:65:5d:e9:48:85:
                    01:02:72:bc:1f:af:c4:d9:3b:08:03:b7:5b:da:a9:
                    8d:c5:57:00:a1:56:6e:19:d9:30:a4:17:76:1f:12:
                    55:09:bc:61:42:57:de:72:ac:53:51:49:d5:c0:ed:
                    22:d5:c1:3e:38:27:ac:10:bb:38:14:45:e5:96:fb:
                    50:9d:46:ae:a0:ff:c8:ff:a3:1c:27:9b:7d:06:2f:
                    4c:ef:4e:cd:9e:12:eb:31:4b:27:95:26:8d:74:66:
                    4c:0c:cb:f2:13:c5:ed:dc:e4:af:5f:7c:2e:97:91:
                    10:00:95:8e:52:6d:dc:73:f7:cd:e4:a2:6a:a4:53:
                    77:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:E1:BD:24:54:41:98:B3:96:72:3D:CB:F8:06:E8:91:93:DD:05:32
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/f24f1b3f-d5e4-3086-89b8-c54a0ecb1c82.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.26.97.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:c9:62:32:ea:83:86:c6:43:0a:7c:e5:cc:e7:17:66:70:40:
         23:75:d4:0e:43:68:eb:68:4c:c1:3c:83:ec:dd:81:ca:3e:40:
         f8:86:50:1b:54:44:4a:b8:ad:13:e1:40:7a:5b:c4:1a:94:7b:
         a6:52:9e:50:f1:42:b1:92:16:ff:77:15:70:94:0d:f9:c8:60:
         14:91:68:18:ed:33:39:55:6e:41:2a:b4:f2:fb:8a:16:08:76:
         1a:00:c5:f8:a6:13:a2:01:38:1e:a2:62:bd:1e:07:2a:bb:85:
         a8:f4:50:bc:31:ac:5a:a8:a6:e1:5a:9e:19:fd:55:1b:84:24:
         1d:55:f3:4f:39:f8:85:af:36:e7:8c:db:43:1d:66:2f:e0:26:
         53:c8:fa:f2:c6:c0:0d:f9:6e:b4:e5:53:31:2d:d9:72:cd:4d:
         75:e5:93:53:04:e7:ee:72:61:09:4a:80:23:ab:f3:80:e0:2d:
         16:35:c4:fb:ca:ae:ad:2b:85:b4:ef:61:12:51:77:25:a1:db:
         60:d6:36:e0:69:a8:78:30:36:da:b9:e6:9c:98:6c:d1:2e:5a:
         bd:30:d6:f3:c1:6b:b0:f0:10:4c:49:9e:86:d6:75:ed:26:4b:
         a5:ca:58:5e:dd:db:6c:fa:2e:e4:5f:3e:0e:8c:d0:6c:1a:de:
         79:1c:a5:16
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkuE7SxCLAtk+yF8IAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTI1MDMxNDAxMDAzOVoXDTI1MDYxMjAxMDAzOVowLzEtMCsGA1UEAxMk
MDVmMTM1NTQtMjQ4Mi00MTk1LWI2NzMtOGYxZmU4ZDZhNDM4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjLpCVkLUi0xFe9nPnA/d7ga0YaA1AS92yNXt
bdcG89FJwp3kuR66dMuGqVfa2KQkZcqPqsvxu1+TFdb/LB3tgiUPi/XdBsCNghqI
hkWNCYojqOFM3tdOcG6rczzh2mUHMSJhLCWri13S7V4/IXoTCknlezaejCCplzTN
M/Cnh0gpZV3pSIUBAnK8H6/E2TsIA7db2qmNxVcAoVZuGdkwpBd2HxJVCbxhQlfe
cqxTUUnVwO0i1cE+OCesELs4FEXllvtQnUauoP/I/6McJ5t9Bi9M707NnhLrMUsn
lSaNdGZMDMvyE8Xt3OSvX3wul5EQAJWOUm3cc/fN5KJqpFN3vQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGLhvSRUQZizlnI9y/gG6JGT3QUyMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvZjI0ZjFiM2YtZDVlNC0z
MDg2LTg5YjgtYzU0YTBlY2IxYzgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFxphMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEXJYjLqg4bGQwp85cznF2ZwQCN11A5DaOtoTME8g+zdgco+QPiGUBtU
REq4rRPhQHpbxBqUe6ZSnlDxQrGSFv93FXCUDfnIYBSRaBjtMzlVbkEqtPL7ihYI
dhoAxfimE6IBOB6iYr0eByq7haj0ULwxrFqopuFanhn9VRuEJB1V8085+IWvNueM
20MdZi/gJlPI+vLGwA35brTlUzEt2XLNTXXlk1ME5+5yYQlKgCOr84DgLRY1xPvK
rq0rhbTvYRJRdyWh22DWNuBpqHgwNtq55pyYbNEuWr0w1vPBa7DwEExJnobWde0m
S6XKWF7d22z6LuRfPg6M0Gwa3nkcpRY=
-----END CERTIFICATE-----
Generated at Fri Apr 18 05:07:05 2025 by rpki-client