Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/1c04803d-8865-38e7-8997-003e1e4f74b8.roa
File:                     1c04803d-8865-38e7-8997-003e1e4f74b8.roa (raw, json)
Hash identifier:          hQFcld4AaDSpcmR93++ue/n1e24qgVbkTXOPkEDwIpA=
Subject key identifier:   6C:B7:6C:C6:2B:42:9C:36:10:3B:F1:15:1C:ED:A1:EC:5C:3C:48:38
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285849ABB494194DB0BCE0C3C7F980
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/1c04803d-8865-38e7-8997-003e1e4f74b8.roa
Signing time:             Mon 28 Apr 2025 01:00:48 +0000
ROA not before:           Mon 28 Apr 2025 01:00:48 +0000
ROA not after:            Sun 27 Jul 2025 01:00:48 +0000
asID:                     401152
IP address blocks:        23.26.211.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ab:b4:94:19:4d:b0:bc:e0:c3:c7:f9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Apr 28 01:00:48 2025 GMT
            Not After : Jul 27 01:00:48 2025 GMT
        Subject: CN=c26ca870-1271-4bd3-a399-4c268591fcc8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:78:4f:70:02:1b:98:ca:95:08:6c:f2:cc:f1:
                    0d:ae:22:af:c2:02:5e:07:9b:49:9f:6d:0f:c6:d3:
                    89:79:e6:3e:b4:af:8e:49:91:d8:52:0d:01:e3:ec:
                    a5:40:c5:ee:98:41:74:31:3b:b7:e1:f6:3a:d0:bb:
                    ab:6d:58:35:90:5f:ee:1b:3a:44:77:97:94:9c:10:
                    53:a9:24:f3:34:56:e6:65:87:c4:4e:15:d5:8d:3e:
                    43:22:15:70:52:4d:23:e3:19:18:0b:c4:f9:1b:68:
                    63:d2:84:84:d8:79:57:1e:4e:a2:e4:d3:26:e1:11:
                    2d:95:b8:9c:c6:a8:29:37:e7:a5:94:5b:5e:ae:5d:
                    76:b1:cb:75:84:52:f8:c7:f7:c8:17:63:58:c4:1d:
                    7a:25:b8:a6:4d:2a:0a:70:9c:45:54:f1:5e:aa:86:
                    25:a6:b9:bc:9e:64:74:05:88:43:d9:4f:85:46:26:
                    dc:c3:94:b6:76:09:58:01:44:6c:83:94:b7:40:06:
                    35:e3:fe:a8:77:d0:a3:a6:7a:fc:d0:c9:6e:14:ca:
                    c2:4d:7a:e1:ed:75:c5:cf:5f:31:5f:61:15:d7:fb:
                    0a:fa:f6:cc:64:16:4b:fa:e0:2d:d1:b0:ad:3f:19:
                    8d:ad:22:43:ed:b2:82:38:17:02:00:f9:f2:2e:f6:
                    38:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:B7:6C:C6:2B:42:9C:36:10:3B:F1:15:1C:ED:A1:EC:5C:3C:48:38
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/1c04803d-8865-38e7-8997-003e1e4f74b8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.26.211.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a9:92:08:e7:c4:da:55:90:79:19:f9:c5:ed:ae:da:b4:cf:77:
         6e:bb:ee:1a:60:8a:fe:c4:1e:37:2f:4e:f6:e3:4b:c8:fc:cd:
         7b:57:3d:bc:32:d6:74:30:18:5e:f8:cf:fc:f5:55:b8:d9:12:
         bb:1f:89:bf:67:96:b7:be:aa:72:ba:df:03:60:ed:b0:69:25:
         ac:82:a3:04:af:cb:a1:f9:fd:df:a6:9d:8a:0c:3d:06:30:6a:
         53:a6:0a:5f:a1:c0:68:96:74:25:49:50:55:64:94:b3:c2:47:
         47:87:d7:50:4d:4a:7f:51:47:78:b2:f6:26:69:31:bd:d9:58:
         61:43:27:4c:28:70:e4:d4:cd:ed:ac:be:5d:57:a7:f1:8b:33:
         16:b4:32:cf:fe:bc:95:14:7e:59:d3:d0:c6:ba:0f:46:84:e6:
         ab:3f:45:1e:e4:91:a7:0b:46:0b:67:3c:33:85:09:48:6e:65:
         44:98:d4:8c:b2:df:3e:43:8b:da:1c:52:d4:20:d5:3f:db:9e:
         80:99:ca:4a:16:5c:b3:c5:47:8e:8b:67:62:dd:35:22:4a:e1:
         ed:d5:34:cb:00:97:44:b8:52:13:6e:76:cc:31:9c:26:17:3b:
         c3:52:e2:2e:73:f6:fc:45:30:03:58:d7:5e:9f:38:39:34:bc:
         e4:cd:04:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 22:44:30 2025 by rpki-client