Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/f2ea3ac0-c7a7-3140-ac95-dfcb755e14a8.roa
File:                     f2ea3ac0-c7a7-3140-ac95-dfcb755e14a8.roa (raw, json)
Hash identifier:          TIkv94YrGZedP3QRG4wPsThuxca9cBQNjnRrcm8COj4=
Subject key identifier:   49:13:6A:B4:BD:63:60:D7:EF:D6:39:75:EE:70:00:80:B9:AE:19:4B
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584558C83EADCDF6EDEF9E88CA00
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/f2ea3ac0-c7a7-3140-ac95-dfcb755e14a8.roa
Signing time:             Wed 27 Mar 2024 13:00:35 +0000
ROA not before:           Wed 27 Mar 2024 13:00:35 +0000
ROA not after:            Tue 25 Jun 2024 13:00:35 +0000
asID:                     20068
IP address blocks:        23.26.55.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 05 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:58:c8:3e:ad:cd:f6:ed:ef:9e:88:ca:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Mar 27 13:00:35 2024 GMT
            Not After : Jun 25 13:00:35 2024 GMT
        Subject: CN=d0b0e633-e459-4a64-85ba-699f57853c8a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:f7:d7:e7:32:93:3a:69:04:8b:f1:e2:22:af:
                    f5:8f:c3:e8:3d:93:5c:af:e6:06:2c:12:82:7e:48:
                    a2:0b:04:4d:de:ad:90:56:86:0a:7a:12:f4:a0:ff:
                    b5:76:a8:e6:37:c3:34:e1:64:db:17:d8:47:cb:af:
                    d4:12:6b:3b:00:39:2d:9c:7c:f5:ce:d3:db:3b:10:
                    30:48:18:a1:bf:a4:d2:31:00:20:4f:ca:56:3e:4a:
                    30:e0:89:74:6a:c3:5a:47:2b:61:39:61:ba:d9:14:
                    77:f0:64:93:27:fc:ef:cb:e6:c3:cf:23:a1:34:9e:
                    7a:bd:d0:6f:d8:36:4f:b1:ed:32:77:d9:39:0b:a6:
                    08:72:da:b9:b8:97:d7:f3:f1:a9:0b:8f:37:e9:eb:
                    4d:f9:95:7a:35:76:49:c3:28:70:1a:76:57:ca:72:
                    ba:8d:e9:ca:8c:48:7d:38:0f:6e:7f:09:e4:31:f3:
                    0a:f2:f6:26:69:4e:82:6a:4b:16:08:c4:51:9e:4b:
                    bd:ad:7b:09:f1:41:e3:a6:67:98:a8:1b:6c:0a:ca:
                    b0:9d:bf:c9:8e:4e:23:4e:21:d4:4b:75:ee:50:44:
                    2a:09:8d:c1:2b:79:a6:69:91:f1:c9:c5:fe:26:a2:
                    08:14:e5:a4:f4:d0:46:fe:3b:0d:57:4a:8b:90:64:
                    32:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:13:6A:B4:BD:63:60:D7:EF:D6:39:75:EE:70:00:80:B9:AE:19:4B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/f2ea3ac0-c7a7-3140-ac95-dfcb755e14a8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.26.55.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:f4:a5:36:6e:60:d0:07:c1:3d:63:61:ea:59:8e:dc:c3:ed:
         76:cd:25:7a:33:73:46:25:b4:c4:d0:a8:d4:72:20:53:c0:9d:
         3b:b8:9b:38:01:0e:b1:c8:fc:be:6d:7d:d3:e1:20:d1:68:ae:
         7d:08:65:26:65:0c:76:64:0d:e4:a3:a6:99:08:a4:cc:38:d4:
         92:c2:d2:d6:a7:94:33:be:7d:80:b7:c3:62:c8:26:09:d7:90:
         83:37:fd:0b:b0:06:8d:e9:aa:ee:a1:cb:1a:47:98:84:5f:02:
         53:93:fc:9c:7d:68:1d:b4:a3:33:a6:6c:9f:de:d2:f3:d7:53:
         27:64:db:8a:08:03:e5:77:25:89:c3:7f:cc:e5:68:b3:38:02:
         f4:51:f3:10:db:13:ba:10:d0:70:74:b7:db:ab:48:b7:8f:34:
         a1:29:48:7b:98:e3:73:e1:a4:cf:78:dd:d3:33:6d:d7:5c:a6:
         73:81:e9:d8:c5:8b:24:cd:f8:6e:75:a5:60:a9:57:a9:bd:2e:
         8f:f3:0a:a0:8e:2a:3e:16:46:d8:ff:8d:a8:d5:ee:a4:29:a9:
         6b:05:92:10:62:6c:ee:71:b5:4d:24:01:78:4a:89:56:4e:69:
         92:55:71:97:51:0d:41:af:2b:09:ff:96:46:0f:1e:7f:73:14:
         a3:c1:38:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 21:45:49 2024 by rpki-client on console-fra.rpki-client.org