Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/27231b57-86b9-3629-9a12-8aebae0deb53.roa
File:                     27231b57-86b9-3629-9a12-8aebae0deb53.roa (raw, json)
Hash identifier:          Hc8jeNw9AaFq/mjwZvMkKButFByKyK9MZ2K1P8nrqKM=
Subject key identifier:   95:5F:9A:AF:36:69:56:88:4E:0A:D6:36:14:39:38:06:D8:E1:9A:DC
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F432858498EC07DEC1F4A716C179D7B20
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/27231b57-86b9-3629-9a12-8aebae0deb53.roa
Signing time:             Thu 17 Apr 2025 16:06:27 +0000
ROA not before:           Thu 17 Apr 2025 16:06:27 +0000
ROA not after:            Wed 16 Jul 2025 16:06:27 +0000
asID:                     11798
IP address blocks:        23.26.4.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:8e:c0:7d:ec:1f:4a:71:6c:17:9d:7b:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Apr 17 16:06:27 2025 GMT
            Not After : Jul 16 16:06:27 2025 GMT
        Subject: CN=3abd4177-b1af-4c6a-ba1d-67e10262966a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:be:cf:65:3b:61:53:11:b6:38:f1:4c:1c:10:
                    78:d1:a5:d2:52:9f:dc:eb:64:cb:a5:19:70:2e:2c:
                    5c:15:f2:c7:51:33:07:e4:cb:94:14:e9:41:e4:f8:
                    af:53:93:a1:d2:eb:c3:ec:a4:64:42:54:22:ac:59:
                    35:91:ac:c6:42:2d:c7:e3:c4:73:9a:ab:41:5c:a1:
                    5b:cf:14:a1:4d:c6:d9:c5:68:16:3f:ab:cd:9d:1e:
                    ac:9a:61:53:29:54:77:d2:7b:a7:0b:5a:f7:96:18:
                    12:f0:d1:7f:1e:75:1d:41:01:2d:59:01:87:74:a1:
                    fc:91:a9:d7:37:aa:0d:55:a4:dc:3a:98:6c:68:e5:
                    7c:ac:75:bd:d7:b4:d3:d1:58:9b:9c:2b:79:5b:6f:
                    65:4f:d0:fb:20:c1:5c:b8:40:fa:a9:fc:3f:a1:50:
                    cf:1e:0e:8b:1d:bc:d1:cc:7a:59:b3:d8:cd:61:43:
                    10:de:48:86:3f:c5:b3:a5:27:7c:93:89:32:ab:bb:
                    da:a2:b5:f7:0e:9c:44:f8:f1:6d:0a:98:9f:0b:f5:
                    8b:df:27:83:cd:8c:d1:1f:98:8e:35:1d:fd:9c:3e:
                    53:b7:a5:6b:38:42:0b:93:ef:30:19:4a:ee:93:42:
                    37:25:90:c4:7c:4f:fd:56:2a:d9:88:ab:2b:2f:eb:
                    bc:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:5F:9A:AF:36:69:56:88:4E:0A:D6:36:14:39:38:06:D8:E1:9A:DC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/27231b57-86b9-3629-9a12-8aebae0deb53.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.26.4.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:03:7e:34:fb:8a:94:a3:b1:fb:98:f8:98:10:86:2c:ac:4d:
         39:11:e7:42:ee:c5:e2:96:f3:99:ce:c9:1e:2a:67:28:b2:e3:
         1e:2c:63:93:77:13:67:9b:45:4a:20:f8:48:07:3a:d7:9d:74:
         e5:24:af:05:6e:02:0c:13:38:72:9b:75:41:74:72:8e:8c:11:
         29:1c:82:fe:8a:cc:6e:fc:4d:6e:f9:51:a2:dd:52:fd:03:90:
         13:50:3c:e5:14:d4:c9:6e:e7:08:24:63:4a:8f:76:0b:b9:52:
         48:8e:09:67:4f:97:d1:02:4f:6c:ca:25:67:03:4f:72:50:94:
         b0:e1:5a:16:e0:04:11:b3:bf:df:ad:0a:fb:23:75:8f:f1:eb:
         25:44:59:15:30:73:95:f2:2a:c7:1b:6d:36:31:42:7f:40:51:
         5f:b3:ec:39:d9:1a:ef:79:f9:8b:4d:55:9a:10:a6:49:42:38:
         5a:5e:8d:fc:00:ec:96:1e:04:72:50:f7:f4:d1:0e:d5:6a:c9:
         4e:fc:03:0b:48:92:4f:60:0c:31:29:ad:8d:61:23:d0:0c:79:
         7a:81:88:a3:07:d0:2a:d9:23:af:cb:70:18:0f:69:97:7f:09:
         69:fa:3e:82:53:3d:9f:28:de:9d:6b:75:3a:b7:56:48:9d:3f:
         99:37:00:b4
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmOwH3sH0pxbBedeyAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTI1MDQxNzE2MDYyN1oXDTI1MDcxNjE2MDYyN1owLzEtMCsGA1UEAxMk
M2FiZDQxNzctYjFhZi00YzZhLWJhMWQtNjdlMTAyNjI5NjZhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhr7PZTthUxG2OPFMHBB40aXSUp/c62TLpRlw
LixcFfLHUTMH5MuUFOlB5PivU5Oh0uvD7KRkQlQirFk1kazGQi3H48RzmqtBXKFb
zxShTcbZxWgWP6vNnR6smmFTKVR30nunC1r3lhgS8NF/HnUdQQEtWQGHdKH8kanX
N6oNVaTcOphsaOV8rHW917TT0VibnCt5W29lT9D7IMFcuED6qfw/oVDPHg6LHbzR
zHpZs9jNYUMQ3kiGP8WzpSd8k4kyq7vaorX3DpxE+PFtCpifC/WL3yeDzYzRH5iO
NR39nD5Tt6VrOEILk+8wGUruk0I3JZDEfE/9VirZiKsrL+u8twIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJVfmq82aVaITgrWNhQ5OAbY4ZrcMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvMjcyMzFiNTctODZiOS0z
NjI5LTlhMTItOGFlYmFlMGRlYjUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFxoEMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGcDfjT7ipSjsfuY+JgQhiysTTkR50LuxeKW85nOyR4qZyiy4x4sY5N3
E2ebRUog+EgHOteddOUkrwVuAgwTOHKbdUF0co6MESkcgv6KzG78TW75UaLdUv0D
kBNQPOUU1Mlu5wgkY0qPdgu5UkiOCWdPl9ECT2zKJWcDT3JQlLDhWhbgBBGzv9+t
CvsjdY/x6yVEWRUwc5XyKscbbTYxQn9AUV+z7DnZGu95+YtNVZoQpklCOFpejfwA
7JYeBHJQ9/TRDtVqyU78AwtIkk9gDDEprY1hI9AMeXqBiKMH0CrZI6/LcBgPaZd/
CWn6PoJTPZ8o3p1rdTq3VkidP5k3ALQ=
-----END CERTIFICATE-----
Generated at Sun Apr 27 04:13:10 2025 by rpki-client