Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/f98a57a0-802e-36a8-b25e-343fce701e28.roa
File:                     f98a57a0-802e-36a8-b25e-343fce701e28.roa (raw, json)
Hash identifier:          k9CGSm1HUbMUyEv/0d3VGmjv2Fa5FZAuh/r+Rs+pKgw=
Subject key identifier:   15:B8:D8:6C:15:45:D7:AF:46:A8:82:44:9C:9D:AC:57:44:4C:AA:26
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F432858471A406D71A98F7A4426E99A00
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/f98a57a0-802e-36a8-b25e-343fce701e28.roa
Signing time:             Wed 04 Sep 2024 13:00:41 +0000
ROA not before:           Wed 04 Sep 2024 13:00:41 +0000
ROA not after:            Tue 03 Dec 2024 14:00:41 +0000
asID:                     60781
IP address blocks:        23.26.92.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:1a:40:6d:71:a9:8f:7a:44:26:e9:9a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Sep  4 13:00:41 2024 GMT
            Not After : Dec  3 14:00:41 2024 GMT
        Subject: CN=5bb2bd47-ec3e-43ee-a02e-78bb5a82071e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:3a:97:58:e7:1c:2b:f9:e9:91:2c:bc:0b:4f:
                    f5:a4:4d:81:b9:c1:43:c5:fc:31:32:e9:bd:10:a0:
                    29:6a:a6:6f:1a:7c:8a:d9:a1:ec:3c:97:8e:1e:57:
                    2e:ea:73:5c:b3:70:42:6a:09:d6:d1:44:3b:6f:66:
                    97:82:09:6f:0b:6d:68:2f:44:df:4b:d0:8b:5e:49:
                    14:f7:d9:aa:c2:84:e8:08:0e:e1:0a:94:1f:e9:dd:
                    8f:1c:ed:7a:a3:79:0c:a1:3c:2b:34:5f:ef:2a:89:
                    ec:75:74:14:77:ac:d3:5d:df:cf:ec:03:78:c8:08:
                    81:e7:45:67:db:fb:64:13:37:6e:9c:0c:44:c1:36:
                    43:ae:fa:f6:87:ce:72:ff:51:ed:51:ae:4d:ea:f3:
                    c2:84:43:2d:e4:03:6d:5c:db:31:75:d9:6c:55:ad:
                    48:9d:48:50:01:9d:71:38:53:9c:62:e4:96:f8:81:
                    70:7c:2b:a9:02:06:d1:ad:f4:3e:a7:0b:c4:3b:f0:
                    b1:c1:2c:9f:ea:34:f5:5a:f7:d2:c1:9a:e3:6e:25:
                    62:60:4e:b8:e6:4b:8d:29:c9:6d:3d:e1:a7:2f:be:
                    79:f0:7d:5b:9b:55:88:9a:64:42:eb:f6:61:b4:bb:
                    ce:5a:3f:bf:d3:36:f0:ea:80:bc:61:16:a4:87:34:
                    1e:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:B8:D8:6C:15:45:D7:AF:46:A8:82:44:9C:9D:AC:57:44:4C:AA:26
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/f98a57a0-802e-36a8-b25e-343fce701e28.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.26.92.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:a2:31:37:6c:d3:73:30:37:f8:cd:6c:f6:cc:cc:b0:14:c7:
         d0:d7:f9:3f:f4:ce:07:94:a5:c2:bb:19:60:0e:36:51:a3:81:
         6c:50:16:df:f6:e0:fd:7a:ba:91:6e:66:8d:77:e5:24:2c:2e:
         14:24:c0:d2:8f:7e:d8:fc:d1:39:d6:c8:06:2e:ca:e0:10:7a:
         91:b5:fb:29:da:e0:07:60:10:c4:c8:cc:9d:c2:3b:3a:a5:83:
         02:59:c9:e9:e4:4f:ec:81:ea:81:e7:07:18:b6:2d:35:b2:ef:
         16:94:17:55:66:8b:46:5d:92:d3:3f:a5:a5:1e:44:be:a9:3e:
         db:66:73:85:59:22:76:51:14:da:ce:96:22:6f:7a:8f:38:9b:
         e8:91:41:b8:6d:70:bf:c6:ef:5a:95:46:78:cd:81:a3:3e:32:
         19:14:db:10:ef:a0:aa:d8:da:fc:ce:d6:b3:b6:1c:0b:bd:a6:
         f7:a8:87:91:32:51:66:80:6d:28:6c:05:1b:0b:70:03:42:de:
         d3:c2:05:3a:9e:eb:4a:07:0f:6a:c3:31:3d:a4:78:19:7e:0a:
         6e:73:ff:9d:a3:c0:dd:0b:ef:ea:55:b0:51:7a:e6:49:a0:ef:
         a6:27:10:71:56:15:ca:0b:60:4e:91:e9:a0:85:9a:81:f4:ab:
         60:58:54:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:18:26 2024 by rpki-client on console-fra.rpki-client.org