Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/f5a32969-87ed-3ce9-b684-1f5ccdcfe66d.roa
File:                     f5a32969-87ed-3ce9-b684-1f5ccdcfe66d.roa (raw, json)
Hash identifier:          Mb0WufxhcfUnUNty1QiNnrcsNqBzVcIsECwGrc8mS4Y=
Subject key identifier:   46:8F:08:56:D2:20:26:50:5A:FB:FB:2E:E8:43:3C:68:BE:9D:04:7B
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285847D999F6F9D020CDAF47F5A7C0
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/f5a32969-87ed-3ce9-b684-1f5ccdcfe66d.roa
Signing time:             Tue 12 Nov 2024 02:00:27 +0000
ROA not before:           Tue 12 Nov 2024 02:00:27 +0000
ROA not after:            Mon 10 Feb 2025 02:00:27 +0000
asID:                     46432
IP address blocks:        23.26.149.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:d9:99:f6:f9:d0:20:cd:af:47:f5:a7:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Nov 12 02:00:27 2024 GMT
            Not After : Feb 10 02:00:27 2025 GMT
        Subject: CN=9aebee58-b139-4bd4-b196-57663d1548d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:e6:f8:9a:c7:aa:ba:8c:65:53:49:ea:9a:a2:
                    ba:67:41:d4:a9:37:ae:8f:ff:86:d2:f7:cc:78:a1:
                    b9:05:a5:1c:1c:43:de:16:25:12:c1:0c:ef:2b:b1:
                    68:45:9f:b2:6f:5a:d9:dc:39:af:b7:fd:6e:0f:5a:
                    22:a7:9d:58:bc:1f:c0:c4:44:5c:7a:f8:0a:5e:92:
                    cd:c9:37:a1:6d:e9:12:26:81:4c:0d:6f:c9:f3:76:
                    76:ad:37:21:cc:07:da:d5:d2:4c:70:ff:f1:e2:07:
                    6d:58:7a:ac:1a:d8:3e:04:18:fa:d0:e1:80:fb:7e:
                    b3:9a:e1:b0:3c:96:8c:6a:7b:3a:b3:8c:ba:8e:63:
                    d1:40:2d:ba:ba:68:fa:f5:8d:39:f8:12:f0:30:59:
                    e3:40:2b:93:ce:d3:62:ba:a1:6b:f1:5e:e9:21:53:
                    72:0e:89:fc:b3:ea:1b:56:c5:6b:8d:7d:9e:e9:4a:
                    91:1d:c1:dc:0f:c5:d3:e4:97:0f:e7:ed:19:18:ee:
                    6e:5a:48:cc:e1:ea:36:5e:ec:e7:88:6c:66:52:1a:
                    06:9f:f8:b8:02:99:46:3b:42:17:eb:50:f4:29:ed:
                    8b:48:1a:ea:aa:6b:f5:ed:ef:0c:25:18:3b:0f:1e:
                    54:e8:92:53:53:61:a3:6f:ef:0d:64:b3:1a:e1:cb:
                    00:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:8F:08:56:D2:20:26:50:5A:FB:FB:2E:E8:43:3C:68:BE:9D:04:7B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/f5a32969-87ed-3ce9-b684-1f5ccdcfe66d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.26.149.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:b3:8f:31:87:8d:65:59:e8:06:d8:1a:ff:70:32:77:28:cf:
         86:9a:fa:89:82:59:be:c2:db:b6:36:79:a6:2c:a1:00:11:97:
         4c:0a:c2:79:ba:fc:9c:fe:08:2c:0c:4c:ae:46:f4:ec:07:0d:
         3e:8f:e9:45:cd:66:46:5b:88:b6:3f:52:83:25:57:e3:53:70:
         42:14:a7:55:4f:e2:aa:e4:55:23:ac:3a:a8:cb:84:0a:d8:4c:
         f5:19:70:78:c2:bb:55:78:02:8d:83:be:b0:c2:05:83:ef:d3:
         af:f9:92:61:b6:13:9f:de:c7:ce:75:69:fe:0f:71:d9:fd:ae:
         61:f5:8f:59:d2:54:9c:c1:52:aa:50:67:0a:a0:99:55:c7:93:
         73:70:bc:a9:a2:4f:cc:e0:44:b9:7c:81:55:73:8c:c4:55:21:
         28:b9:ea:3f:e5:74:f3:92:91:c8:bc:ef:4c:49:f6:4f:1d:1b:
         5d:da:79:cc:a6:4b:69:cb:53:2f:85:5a:b6:ba:c9:70:9a:51:
         90:ef:17:af:c9:37:3f:c1:66:e1:66:e4:1d:d2:48:39:2f:3c:
         df:c1:d4:b7:39:88:c4:dc:9c:28:57:70:8a:45:d4:79:c9:87:
         95:16:a4:53:d0:1e:3c:b9:59:dd:ea:43:dc:71:ac:df:20:95:
         9a:83:06:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 06:37:52 2024 by rpki-client on console-ams.rpki-client.org