Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/a30d4435-3552-3820-9cdf-67a612b13af9.roa
File:                     a30d4435-3552-3820-9cdf-67a612b13af9.roa (raw, json)
Hash identifier:          SF29CHdSKLPuiZ2o4NYAdEFtNi08G1YHMGZWDy0bVIk=
Subject key identifier:   B4:2A:AC:A0:F0:0D:A5:0D:A2:C8:70:D9:63:72:01:AF:72:B1:C3:AB
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F432858498B99D98B98B48A7F0426A080
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/a30d4435-3552-3820-9cdf-67a612b13af9.roa
Signing time:             Wed 16 Apr 2025 13:01:01 +0000
ROA not before:           Wed 16 Apr 2025 13:01:01 +0000
ROA not after:            Tue 15 Jul 2025 13:01:01 +0000
asID:                     395839
IP address blocks:        23.26.233.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Apr 2025 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:8b:99:d9:8b:98:b4:8a:7f:04:26:a0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Apr 16 13:01:01 2025 GMT
            Not After : Jul 15 13:01:01 2025 GMT
        Subject: CN=131c8820-6802-4d4e-9ebd-81eb6929f505
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:3a:86:d4:e9:07:17:52:c2:da:f9:b5:ae:34:
                    ff:25:19:d6:4a:a4:91:0a:38:cd:72:bf:8b:78:d9:
                    dc:bc:97:37:b3:6a:06:21:41:04:42:64:7c:9c:44:
                    6a:64:3a:9c:93:b1:5f:5a:e7:b0:9d:80:d2:9a:9c:
                    b2:50:30:42:85:f2:35:8d:ac:19:46:65:23:fc:f4:
                    7c:42:14:d9:bf:3a:44:a5:7b:85:cf:23:fc:29:55:
                    38:77:87:3d:a8:6a:51:c7:8b:90:02:a8:db:ec:78:
                    44:34:f0:b1:83:fc:cf:f9:14:2f:84:e9:24:e8:fb:
                    d1:92:96:a0:5f:86:41:80:a6:67:f3:78:49:8a:84:
                    6c:f1:c7:3e:c5:7d:8b:d9:3f:4b:45:7b:2f:79:72:
                    de:c8:e9:b7:b5:95:c3:a9:3a:ad:d8:77:ef:c0:4d:
                    c4:9c:f0:a6:47:7d:76:93:61:15:87:14:37:cc:56:
                    4b:1b:23:8c:38:4c:1b:6e:fa:ff:d9:2e:76:86:3d:
                    c7:71:5f:75:66:29:85:0f:43:78:45:4c:75:56:cd:
                    b6:4e:5b:41:a7:b5:7c:64:fa:72:40:a3:4d:09:57:
                    d3:fe:0d:24:05:69:6b:8c:f1:06:6b:1a:10:d6:63:
                    99:d1:fa:39:99:75:93:2e:83:1d:43:08:d9:c6:d4:
                    3e:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:2A:AC:A0:F0:0D:A5:0D:A2:C8:70:D9:63:72:01:AF:72:B1:C3:AB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/a30d4435-3552-3820-9cdf-67a612b13af9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.26.233.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         99:d6:cf:e9:b5:1c:3e:39:f1:65:cf:91:43:3f:31:1c:81:bd:
         b8:05:03:6f:9e:6a:44:30:7a:ea:1a:03:62:1a:15:3b:7f:69:
         37:43:b5:ab:f6:c3:a6:77:9b:08:0e:83:f7:91:2e:1f:73:9c:
         ce:93:84:93:0f:c1:2b:fd:45:f1:72:e4:f0:87:58:df:63:20:
         29:bf:a0:42:34:8b:c3:f8:33:ff:c8:c9:25:f3:ab:dc:fb:ee:
         88:83:01:5a:ca:d2:23:68:50:ba:62:f7:9f:7d:11:44:ba:f8:
         2c:c2:be:9a:c3:f4:06:ec:f1:5d:f4:b4:74:d1:e7:f4:2a:d4:
         80:67:8d:8f:01:ca:be:ff:72:27:08:49:00:95:18:46:5c:7a:
         7c:a0:8c:bc:9a:ed:64:79:90:69:88:02:27:28:3a:59:69:8a:
         f2:39:d2:86:56:5a:ac:91:ca:88:4c:53:81:6c:a4:1b:b2:5e:
         8d:e6:62:0f:5e:84:f4:e2:f6:89:fa:3e:e8:be:a0:fc:4d:5a:
         8f:0c:7e:3a:17:47:14:71:9b:80:c6:2e:2d:2c:5a:28:a0:eb:
         26:8b:f9:da:20:06:10:a1:48:a6:bd:ee:46:45:94:76:da:54:
         76:b5:94:ba:ad:72:18:a1:be:27:f3:5a:1d:57:6c:6c:33:9e:
         df:66:e5:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 07:48:45 2025 by rpki-client