Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/f83de4e4-6660-3561-a7d0-d254ec14e793.roa
File:                     f83de4e4-6660-3561-a7d0-d254ec14e793.roa (raw, json)
Hash identifier:          2KL6YIdwvshhpe7FbED8vEhAhRRiamvmzQ0AmPQUqR8=
Subject key identifier:   9E:40:A9:A1:94:5A:EE:B7:95:1E:D9:0B:BD:4E:D3:16:9C:D3:E6:D4
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285847A73BEAB29A3D965783166580
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/f83de4e4-6660-3561-a7d0-d254ec14e793.roa
Signing time:             Fri 25 Oct 2024 01:00:31 +0000
ROA not before:           Fri 25 Oct 2024 01:00:31 +0000
ROA not after:            Thu 23 Jan 2025 02:00:31 +0000
asID:                     37406
IP address blocks:        23.26.124.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:a7:3b:ea:b2:9a:3d:96:57:83:16:65:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Oct 25 01:00:31 2024 GMT
            Not After : Jan 23 02:00:31 2025 GMT
        Subject: CN=e5906ac6-f3b1-420d-8d73-0142b612e85a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:fe:3f:cc:4a:8f:b1:6a:55:ac:a9:04:15:4f:
                    5f:5e:4d:52:c6:2a:e6:93:a1:2f:02:cd:f3:32:74:
                    46:85:fa:ec:d8:30:5a:f0:a1:ee:e7:ee:1f:55:96:
                    b4:4e:51:4f:ab:5d:7d:a4:16:7f:9c:8a:a4:d9:6f:
                    f9:e7:16:98:ae:4e:d0:2a:92:b5:c9:15:a6:41:45:
                    f9:e4:78:92:e8:9a:c3:68:7e:75:c8:6e:0e:c2:94:
                    88:b5:ef:b8:b6:ec:55:af:79:a9:89:ed:c2:fb:b4:
                    6e:e6:d2:19:1e:12:06:d5:bc:66:3d:21:ed:33:b3:
                    82:2e:15:d1:02:5e:df:dd:19:ef:16:c1:8c:43:9b:
                    95:d1:f2:ad:32:be:3b:11:1b:c8:ec:0e:c5:d2:36:
                    ae:33:34:3a:ba:78:77:07:ad:3c:39:cf:1f:1a:99:
                    97:fc:a3:70:fa:be:f4:b1:0b:18:db:12:06:bd:b1:
                    2d:fa:80:a8:13:b9:f5:6c:e4:8d:73:cd:90:ce:91:
                    0f:5a:a7:1f:84:32:82:b7:78:3f:43:1e:f6:4f:fb:
                    38:d7:57:ef:92:53:a6:2f:23:1c:e2:30:9f:5d:f6:
                    28:a7:83:d9:1c:c8:63:55:47:8d:d5:61:68:e2:9c:
                    88:7c:f8:07:9a:13:f2:81:74:b1:58:56:3c:95:90:
                    66:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:40:A9:A1:94:5A:EE:B7:95:1E:D9:0B:BD:4E:D3:16:9C:D3:E6:D4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/f83de4e4-6660-3561-a7d0-d254ec14e793.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.26.124.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:64:8d:5c:c7:01:c8:60:cc:21:33:3c:ea:d1:22:40:d3:22:
         86:10:e8:68:c9:d6:5c:a3:38:0d:5f:f8:38:15:74:91:5e:53:
         bf:ed:23:4b:44:6a:7f:c8:62:2e:d2:e2:1f:f3:30:22:f7:0d:
         92:e2:43:df:22:2b:ff:99:d8:ba:08:ef:cb:ce:6f:c0:1f:3e:
         8b:57:32:9f:4a:26:dc:48:30:c1:c6:ce:00:43:d8:fe:35:e8:
         a7:bc:91:c3:e5:33:b9:95:af:ef:78:f4:f0:a8:b2:53:7b:12:
         6c:1f:2c:76:03:11:eb:8f:a9:0d:fe:a6:df:75:68:2d:16:63:
         4f:7e:fd:da:47:c3:21:77:e7:e6:aa:1a:70:a4:45:73:ed:30:
         ad:c2:59:93:d7:07:fd:92:f8:5f:86:b3:fa:2f:e4:0c:f5:0a:
         4b:26:49:1b:d7:7b:fc:99:8d:25:fb:a3:7c:0d:1e:f6:70:1e:
         7b:9f:07:2d:42:2f:51:6a:39:93:4f:fb:df:af:98:53:7f:da:
         24:56:32:13:b8:06:af:17:16:c5:bf:f9:3e:30:31:37:5f:7a:
         d7:f4:c9:5f:35:dc:30:1d:fd:52:83:78:92:3d:c5:a8:b6:9e:
         34:00:9b:05:35:5b:84:83:6a:36:41:4e:58:b6:22:5c:94:2a:
         6d:39:fe:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 06:37:52 2024 by rpki-client on console-ams.rpki-client.org