Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ef3ec938-7b45-4c47-91d2-9f7d18411519/347e369a-0146-3b2f-b2c7-dcb14cc91ef5.roa
File:                     347e369a-0146-3b2f-b2c7-dcb14cc91ef5.roa (raw, json)
Hash identifier:          YIA/fWlCmFULNz0NJBwflN+dxzevSqNFgQsi03bPa9E=
Subject key identifier:   26:B3:A8:2A:66:0E:CA:89:56:0F:A9:7A:DA:55:AD:C2:7A:24:0A:2C
Certificate issuer:       /CN=ef3ec938-7b45-4c47-91d2-9f7d18411519
Certificate serial:       010D0C9F432858473FF08BD236AEA8CF319AA500
Authority key identifier: 91:A9:F2:C4:6E:E5:E6:BC:06:B5:D1:B8:62:AD:50:4D:F3:E8:A7:2C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ef3ec938-7b45-4c47-91d2-9f7d18411519.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ef3ec938-7b45-4c47-91d2-9f7d18411519/347e369a-0146-3b2f-b2c7-dcb14cc91ef5.roa
Signing time:             Wed 18 Sep 2024 01:00:30 +0000
ROA not before:           Wed 18 Sep 2024 01:00:30 +0000
ROA not after:            Tue 17 Dec 2024 02:00:30 +0000
asID:                     139267
IP address blocks:        23.166.226.0/24 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ef3ec938-7b45-4c47-91d2-9f7d18411519/ef3ec938-7b45-4c47-91d2-9f7d18411519.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ef3ec938-7b45-4c47-91d2-9f7d18411519/ef3ec938-7b45-4c47-91d2-9f7d18411519.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ef3ec938-7b45-4c47-91d2-9f7d18411519.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:3f:f0:8b:d2:36:ae:a8:cf:31:9a:a5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef3ec938-7b45-4c47-91d2-9f7d18411519
        Validity
            Not Before: Sep 18 01:00:30 2024 GMT
            Not After : Dec 17 02:00:30 2024 GMT
        Subject: CN=9a88b128-3b75-4e69-a71e-dcb8e6271069
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:14:93:cf:38:37:5f:28:63:21:f4:bf:1f:db:
                    bb:88:7f:41:35:9e:60:41:23:c2:02:57:06:8b:0c:
                    88:bd:ef:71:c9:08:05:4b:df:8b:07:35:cd:df:0f:
                    7c:28:e0:f2:7c:fe:b4:6f:8d:c5:14:f8:c9:72:54:
                    95:89:93:2c:63:fd:11:77:56:35:08:73:c4:f7:cb:
                    f2:cf:74:58:4e:3f:ae:d4:c4:41:1a:05:37:44:95:
                    f7:c1:d4:56:8e:4e:7d:e4:f5:d6:32:9c:0f:d0:b5:
                    45:22:6d:f1:de:ab:0e:88:57:b5:ef:5c:38:8b:81:
                    a3:8d:02:ff:72:0c:d0:ff:d1:0f:26:54:2a:6c:8d:
                    82:1b:fd:62:75:85:30:bc:10:7d:71:5e:a4:d0:9e:
                    dd:08:00:1f:f2:46:2b:86:e5:c0:4d:1d:fd:a6:05:
                    b4:0a:ed:87:e6:df:20:fe:83:a3:4e:a4:da:cd:f2:
                    c1:f6:8a:f3:68:91:e9:d9:77:cc:71:97:b3:b7:0f:
                    cf:78:28:88:9e:3c:b1:da:42:f2:47:5d:fb:f2:80:
                    ea:0c:b2:d7:ce:e1:81:18:82:73:a2:b8:0e:1d:03:
                    8f:70:ee:e5:b7:64:31:99:86:8e:05:96:9e:c4:7a:
                    a5:d3:a5:0a:2f:21:93:8f:3d:7b:4a:8c:95:b7:79:
                    1f:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:B3:A8:2A:66:0E:CA:89:56:0F:A9:7A:DA:55:AD:C2:7A:24:0A:2C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ef3ec938-7b45-4c47-91d2-9f7d18411519/347e369a-0146-3b2f-b2c7-dcb14cc91ef5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ef3ec938-7b45-4c47-91d2-9f7d18411519/ef3ec938-7b45-4c47-91d2-9f7d18411519.crl

            X509v3 Authority Key Identifier:
                keyid:91:A9:F2:C4:6E:E5:E6:BC:06:B5:D1:B8:62:AD:50:4D:F3:E8:A7:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ef3ec938-7b45-4c47-91d2-9f7d18411519.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.166.226.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:75:0c:5b:4b:57:63:b8:ba:39:b3:b6:e6:23:17:3f:06:f4:
         9c:15:c9:15:72:b9:cf:31:ca:af:23:22:4a:82:38:33:45:6e:
         5b:7a:86:77:03:9f:8b:33:9f:94:f1:00:44:81:3b:7f:c9:8e:
         d7:53:bf:2b:46:e5:1e:b0:12:d0:5d:37:16:1c:3e:c3:cd:47:
         6c:60:5f:74:b9:fe:b4:be:0f:5a:e1:dd:4d:61:72:13:31:0b:
         a4:3e:78:38:bf:c1:61:7e:97:55:48:2d:55:11:be:ab:4a:ef:
         04:0d:dd:21:c7:22:54:0a:5e:ee:07:c2:5a:63:5a:9e:b5:c5:
         b5:23:5b:95:bc:d8:33:d0:22:88:f1:c8:0d:7a:f5:ad:25:8a:
         eb:8c:ec:64:98:e4:19:fb:3b:6d:2b:0c:6f:79:1d:a3:d7:da:
         61:eb:4b:b3:50:f6:10:47:44:46:ec:28:36:bf:02:f4:17:01:
         55:11:23:0f:db:e0:b2:f2:f7:ca:a8:4c:07:e3:71:6a:84:b7:
         12:b2:88:47:33:c3:c6:da:29:07:87:fc:56:40:58:54:17:cc:
         85:ec:f2:63:67:6f:2f:3b:22:a1:5f:ab:d9:3e:92:09:4f:08:
         00:3b:28:38:6b:5b:31:41:f3:62:a1:37:47:0d:5e:cb:04:cd:
         e3:48:41:ca
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEc/8IvSNq6ozzGapQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZWYzZWM5MzgtN2I0NS00YzQ3LTkxZDItOWY3ZDE4NDEx
NTE5MB4XDTI0MDkxODAxMDAzMFoXDTI0MTIxNzAyMDAzMFowLzEtMCsGA1UEAxMk
OWE4OGIxMjgtM2I3NS00ZTY5LWE3MWUtZGNiOGU2MjcxMDY5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmhSTzzg3XyhjIfS/H9u7iH9BNZ5gQSPCAlcG
iwyIve9xyQgFS9+LBzXN3w98KODyfP60b43FFPjJclSViZMsY/0Rd1Y1CHPE98vy
z3RYTj+u1MRBGgU3RJX3wdRWjk595PXWMpwP0LVFIm3x3qsOiFe171w4i4GjjQL/
cgzQ/9EPJlQqbI2CG/1idYUwvBB9cV6k0J7dCAAf8kYrhuXATR39pgW0Cu2H5t8g
/oOjTqTazfLB9orzaJHp2XfMcZeztw/PeCiInjyx2kLyR1378oDqDLLXzuGBGIJz
orgOHQOPcO7lt2QxmYaOBZaexHql06UKLyGTjz17SoyVt3kfIQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCazqCpmDsqJVg+petpVrcJ6JAosMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9lZjNl
YzkzOC03YjQ1LTRjNDctOTFkMi05ZjdkMTg0MTE1MTkvMzQ3ZTM2OWEtMDE0Ni0z
YjJmLWIyYzctZGNiMTRjYzkxZWY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZWYzZWM5MzgtN2I0NS00YzQ3LTkx
ZDItOWY3ZDE4NDExNTE5L2VmM2VjOTM4LTdiNDUtNGM0Ny05MWQyLTlmN2QxODQx
MTUxOS5jcmwwHwYDVR0jBBgwFoAUkanyxG7l5rwGtdG4Yq1QTfPopywwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9lZjNlYzkzOC03YjQ1LTRjNDctOTFkMi05Zjdk
MTg0MTE1MTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF6biMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAR1DFtLV2O4ujmztuYjFz8G9JwVyRVyuc8xyq8jIkqCODNFblt6hncD
n4szn5TxAESBO3/JjtdTvytG5R6wEtBdNxYcPsPNR2xgX3S5/rS+D1rh3U1hchMx
C6Q+eDi/wWF+l1VILVURvqtK7wQN3SHHIlQKXu4HwlpjWp61xbUjW5W82DPQIojx
yA169a0liuuM7GSY5Bn7O20rDG95HaPX2mHrS7NQ9hBHREbsKDa/AvQXAVURIw/b
4LLy98qoTAfjcWqEtxKyiEczw8baKQeH/FZAWFQXzIXs8mNnby87IqFfq9k+kglP
CAA7KDhrWzFB82KhN0cNXssEzeNIQco=
-----END CERTIFICATE-----
Generated at Sat Nov 23 16:05:05 2024 by rpki-client on console-fra.rpki-client.org