Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/18b450a8-6f5a-3115-a34a-629c62379832.roa
File:                     18b450a8-6f5a-3115-a34a-629c62379832.roa (raw, json)
Hash identifier:          ct/crL2o7SCx8gTMIHByHwCQbpW3I9Peq32Blu7WBxg=
Subject key identifier:   BD:9F:5F:88:2D:16:BD:B6:9D:DE:35:66:D5:94:AE:C4:B2:5F:08:96
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285849849EFE205D983B3311292400
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/18b450a8-6f5a-3115-a34a-629c62379832.roa
Signing time:             Mon 14 Apr 2025 01:00:43 +0000
ROA not before:           Mon 14 Apr 2025 01:00:43 +0000
ROA not after:            Sun 13 Jul 2025 01:00:43 +0000
asID:                     54600
IP address blocks:        23.26.28.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:84:9e:fe:20:5d:98:3b:33:11:29:24:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Apr 14 01:00:43 2025 GMT
            Not After : Jul 13 01:00:43 2025 GMT
        Subject: CN=dc8524ff-2cba-45df-b8f9-47b45579ab62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:ba:11:3d:57:41:97:73:1c:f4:32:9d:78:d9:
                    89:86:fe:1c:af:64:b1:c7:3e:7c:ab:a7:9b:63:92:
                    2b:ae:2e:c3:ad:1d:05:4e:cd:03:a5:0c:bd:1e:25:
                    11:5a:44:a3:c6:e9:d2:8c:fb:dd:84:84:8c:d2:66:
                    67:cc:f1:26:82:34:cd:77:ea:d1:68:29:9b:10:77:
                    d6:28:6d:10:7a:98:73:17:4b:47:10:f4:37:95:65:
                    aa:6e:48:12:1e:37:c1:14:88:82:98:46:81:3c:9f:
                    2d:5d:55:66:75:a6:68:1f:e3:8e:80:98:69:bd:61:
                    6e:7c:ed:bd:58:5c:86:a0:0c:d3:52:7f:9e:20:c4:
                    39:8b:21:0d:09:46:2b:b1:ec:26:bf:f1:5e:7d:00:
                    6d:29:38:21:17:aa:f7:b3:80:a7:8f:24:3f:a9:a8:
                    cc:48:45:29:50:c3:bb:ab:f8:7d:cd:b4:28:b1:61:
                    4c:a0:cb:8e:66:d1:76:16:7d:71:d0:8e:0f:aa:57:
                    b8:32:85:d9:05:74:a4:02:9a:7f:23:f2:08:3b:ff:
                    81:ba:54:5d:70:73:c6:c4:cd:07:80:1b:7c:47:34:
                    61:75:88:53:af:08:3c:51:e0:97:33:44:74:fb:c6:
                    52:5c:89:d7:92:8a:db:f8:fc:16:c0:d0:5d:a6:d9:
                    f6:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:9F:5F:88:2D:16:BD:B6:9D:DE:35:66:D5:94:AE:C4:B2:5F:08:96
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/18b450a8-6f5a-3115-a34a-629c62379832.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.26.28.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:c7:eb:95:28:8e:c7:a3:f7:41:d0:f6:bc:32:da:69:98:93:
         42:b0:5c:ca:21:93:5e:84:a8:c4:ea:04:fb:18:df:f8:b6:5a:
         5e:17:27:12:81:a6:5e:b5:60:c0:44:eb:38:db:8c:8b:4c:4e:
         6b:ea:f3:d6:d3:47:fb:5f:12:98:1f:bd:56:3b:a7:a0:b6:21:
         6c:7c:ad:22:72:23:30:ee:08:9e:6d:9f:b8:1b:3b:c2:e0:bf:
         8d:b4:3e:94:48:9f:10:f7:f4:e0:ef:db:8f:30:dc:4d:33:e4:
         a8:7f:1d:81:5a:9f:bb:98:13:70:fd:1f:9a:2a:a8:63:2e:4a:
         ab:83:80:d4:22:d8:0f:70:d8:18:36:e5:7f:90:bf:b5:65:dc:
         0b:e3:8c:bf:31:97:84:7d:bc:32:d8:ca:05:f1:7a:a7:9e:f0:
         41:6e:0c:a1:0e:06:e1:5a:7e:53:81:82:1e:5b:d6:59:d1:95:
         1b:cd:3d:60:1c:a3:1e:f8:9d:54:07:c1:d3:60:e1:3a:b2:80:
         0a:e7:f5:f6:e8:9c:8e:74:9e:57:b1:e3:21:93:e1:e4:1f:95:
         e6:27:e4:ee:6f:aa:1c:33:ee:57:12:13:f4:52:b4:62:c9:1f:
         de:2e:85:7b:47:b2:3a:62:f5:a7:af:74:5f:f2:17:69:cd:d4:
         d7:44:7b:2f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmEnv4gXZg7MxEpJAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTI1MDQxNDAxMDA0M1oXDTI1MDcxMzAxMDA0M1owLzEtMCsGA1UEAxMk
ZGM4NTI0ZmYtMmNiYS00NWRmLWI4ZjktNDdiNDU1NzlhYjYyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApLoRPVdBl3Mc9DKdeNmJhv4cr2Sxxz58q6eb
Y5Irri7DrR0FTs0DpQy9HiURWkSjxunSjPvdhISM0mZnzPEmgjTNd+rRaCmbEHfW
KG0QephzF0tHEPQ3lWWqbkgSHjfBFIiCmEaBPJ8tXVVmdaZoH+OOgJhpvWFufO29
WFyGoAzTUn+eIMQ5iyENCUYrsewmv/FefQBtKTghF6r3s4CnjyQ/qajMSEUpUMO7
q/h9zbQosWFMoMuOZtF2Fn1x0I4Pqle4MoXZBXSkApp/I/IIO/+BulRdcHPGxM0H
gBt8RzRhdYhTrwg8UeCXM0R0+8ZSXInXkorb+PwWwNBdptn2LwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFL2fX4gtFr22nd41ZtWUrsSyXwiWMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvMThiNDUwYTgtNmY1YS0z
MTE1LWEzNGEtNjI5YzYyMzc5ODMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFxocMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAF7H65Uojsej90HQ9rwy2mmYk0KwXMohk16EqMTqBPsY3/i2Wl4XJxKB
pl61YMBE6zjbjItMTmvq89bTR/tfEpgfvVY7p6C2IWx8rSJyIzDuCJ5tn7gbO8Lg
v420PpRInxD39ODv248w3E0z5Kh/HYFan7uYE3D9H5oqqGMuSquDgNQi2A9w2Bg2
5X+Qv7Vl3AvjjL8xl4R9vDLYygXxeqee8EFuDKEOBuFaflOBgh5b1lnRlRvNPWAc
ox74nVQHwdNg4TqygArn9fbonI50nlex4yGT4eQfleYn5O5vqhwz7lcSE/RStGLJ
H94uhXtHsjpi9aevdF/yF2nN1NdEey8=
-----END CERTIFICATE-----
Generated at Sat Apr 26 16:38:07 2025 by rpki-client