Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/c5fe1156-79ca-31a7-953b-b709f797e963.roa
File:                     c5fe1156-79ca-31a7-953b-b709f797e963.roa (raw, json)
Hash identifier:          X7bRuM1ZxitqutsOHkOGZ0mqCkUKUY3zt0xyyEJk7rg=
Subject key identifier:   46:13:F0:8A:CF:BA:29:3D:2B:71:80:E3:C1:B7:FD:F5:E7:D5:69:1E
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F432858499294994B27F1078244678500
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/c5fe1156-79ca-31a7-953b-b709f797e963.roa
Signing time:             Sat 19 Apr 2025 01:00:48 +0000
ROA not before:           Sat 19 Apr 2025 01:00:48 +0000
ROA not after:            Fri 18 Jul 2025 01:00:48 +0000
asID:                     401152
IP address blocks:        23.26.65.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:92:94:99:4b:27:f1:07:82:44:67:85:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Apr 19 01:00:48 2025 GMT
            Not After : Jul 18 01:00:48 2025 GMT
        Subject: CN=3ce6e0a2-de6d-4a2f-a0f0-1a7ac055d7b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:9c:ca:1b:0a:f6:80:a7:01:8c:44:9a:15:88:
                    08:37:20:c4:8d:c9:c1:3d:55:ae:90:59:ea:15:bc:
                    f7:ac:b7:7f:dd:13:92:28:d1:8a:92:a1:32:d7:e0:
                    45:e2:95:c5:9e:39:39:bb:34:7a:5a:85:26:36:9e:
                    ac:74:0e:38:13:86:dc:ac:f9:e6:a6:a8:33:05:f1:
                    ce:19:c2:55:12:3d:37:93:2f:91:d1:41:2c:2c:92:
                    a3:e8:15:19:69:f7:ec:53:9b:43:f1:86:2e:8b:3c:
                    d0:1b:d4:23:0c:d1:75:06:46:bb:e4:3e:36:63:d8:
                    79:54:70:19:d3:c8:6d:04:5e:31:a7:09:27:ff:02:
                    61:e1:8f:bd:d2:6d:af:c5:33:a2:0d:e7:3c:10:cd:
                    d2:4a:21:b6:5a:ae:2d:3c:5f:79:55:38:77:96:20:
                    b4:cd:a5:23:34:30:2a:cc:36:0a:f0:87:81:93:63:
                    b1:07:bf:cd:5c:70:ad:9c:f3:7e:2b:39:67:e6:c6:
                    d8:35:7e:87:2f:19:1d:35:0e:5a:5a:30:6f:23:69:
                    c9:92:11:98:5c:9a:9f:05:d9:f7:ae:18:33:b8:78:
                    d6:8e:e3:8a:30:2e:50:97:af:00:1e:93:95:4f:41:
                    40:49:b9:8a:5a:c5:0e:2e:7a:d9:d0:c2:57:20:e0:
                    a3:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:13:F0:8A:CF:BA:29:3D:2B:71:80:E3:C1:B7:FD:F5:E7:D5:69:1E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/c5fe1156-79ca-31a7-953b-b709f797e963.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.26.65.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:af:6c:8d:31:4a:72:cd:ca:1c:75:02:ac:0f:27:3c:e0:c5:
         73:f8:55:7b:20:f0:2d:44:bb:62:a5:44:56:8e:9e:ae:36:5f:
         3c:2c:51:ba:83:57:05:22:d4:6c:17:be:d6:53:53:48:0b:a9:
         c2:01:9d:04:6a:db:1c:9d:40:ec:d0:e0:6d:e2:34:78:04:6f:
         a1:ae:9e:07:f9:a8:67:bc:f4:47:10:37:f9:ba:7f:c9:29:44:
         7d:67:84:75:63:ab:c3:1f:83:e2:74:6a:e2:71:f0:a1:5f:70:
         34:08:ea:8e:86:71:a4:f0:b8:c2:fd:17:ee:55:5b:61:0d:46:
         c9:99:7d:18:5d:c1:5c:fc:0f:02:78:60:15:be:3c:d8:ec:14:
         96:e0:3a:ad:67:38:2f:93:b6:f8:b8:ff:69:ac:3a:26:03:8e:
         11:8b:3b:db:b0:7f:97:6f:89:1a:25:68:ef:15:2b:71:cc:6b:
         29:01:e8:c5:d0:f8:fa:cf:c7:65:83:2e:53:d5:17:b6:ac:ba:
         66:79:e6:74:9d:99:61:c4:04:80:f3:f5:a1:06:05:15:76:7b:
         65:71:2d:c6:48:38:59:81:ff:54:b4:1e:38:9b:23:a2:c0:a0:
         bb:23:92:8a:ba:f9:8e:09:9f:14:6c:f5:d1:3a:18:07:e0:f6:
         bc:af:39:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 04:15:37 2025 by rpki-client