Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/3f7a0a21-0e26-36cb-a108-9201949399f0.roa
File:                     3f7a0a21-0e26-36cb-a108-9201949399f0.roa (raw, json)
Hash identifier:          fes6EHAiQ/TcFhjsbRXnZHVgRxpKRcDKzDb/9bfygJU=
Subject key identifier:   56:D0:56:7B:C7:5D:3A:AB:FE:4C:B4:9F:28:43:0E:0F:50:B8:DB:4E
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F432858498E6484626649566A6870C200
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/3f7a0a21-0e26-36cb-a108-9201949399f0.roa
Signing time:             Thu 17 Apr 2025 13:01:00 +0000
ROA not before:           Thu 17 Apr 2025 13:01:00 +0000
ROA not after:            Wed 16 Jul 2025 13:01:00 +0000
asID:                     211439
IP address blocks:        23.26.234.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:8e:64:84:62:66:49:56:6a:68:70:c2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Apr 17 13:01:00 2025 GMT
            Not After : Jul 16 13:01:00 2025 GMT
        Subject: CN=41d6424f-b740-4ae3-b01b-9c543e1c305c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:3c:54:1c:40:83:1b:33:39:a1:7a:f9:74:ba:
                    d4:1c:7a:27:fa:91:9a:91:99:00:32:05:c0:42:f2:
                    8e:0f:a5:ec:2e:ae:21:00:3c:f9:3d:48:6a:67:d9:
                    cd:53:4c:29:bc:4e:f9:40:ca:e4:28:e1:33:b2:8e:
                    99:7b:af:bb:f3:e7:da:34:db:78:98:05:b8:34:85:
                    10:d8:bb:d5:d9:e5:04:2a:9e:f1:a6:3b:2b:be:dc:
                    67:6c:df:bf:f4:bc:a9:ec:fd:fd:b6:43:4c:5f:1f:
                    f3:a9:ec:25:18:84:fa:06:01:0c:80:fb:c8:f2:b7:
                    0a:76:48:2d:0b:3b:0c:dc:9a:75:1b:53:9f:14:31:
                    8d:f9:1d:df:92:ab:7f:fe:43:f1:b4:7a:9a:31:68:
                    e2:fd:fb:da:1c:dc:54:b1:9e:e3:6d:1a:44:d4:de:
                    2c:42:1b:62:54:55:67:5d:35:ea:c9:7e:75:a2:5e:
                    7a:84:22:86:f4:d7:b2:ea:36:df:12:5c:0b:a0:49:
                    e0:aa:f1:bd:8a:ab:d0:ea:8e:1d:d7:15:b2:66:b6:
                    7f:96:2f:6e:30:ba:ee:c1:06:e8:0c:f4:a6:05:f6:
                    90:b3:0f:08:f5:f2:54:c2:4d:dc:6b:5e:2a:32:9a:
                    b8:66:1c:bb:b3:47:9f:c8:11:2c:99:85:d8:66:bf:
                    9f:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:D0:56:7B:C7:5D:3A:AB:FE:4C:B4:9F:28:43:0E:0F:50:B8:DB:4E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/3f7a0a21-0e26-36cb-a108-9201949399f0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.26.234.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:e5:a3:17:99:7e:8f:45:33:17:df:ce:04:89:85:2d:83:fa:
         40:62:fa:9e:83:3b:31:9c:d5:89:be:79:d6:a4:80:c4:25:57:
         7f:c7:8d:34:dd:e5:2a:eb:ca:e8:2d:2a:bb:fc:40:21:30:2e:
         16:6c:bb:47:4c:0d:ff:7c:e1:e3:d4:e9:14:c7:28:4b:94:36:
         41:52:a5:ab:76:73:79:ed:4e:91:81:1e:de:ca:6d:8c:46:db:
         36:4a:aa:d7:fd:75:f0:4b:b2:e4:3a:ab:99:98:73:7b:b5:0b:
         1e:17:50:03:3e:1a:bf:2a:fb:97:70:9b:6e:99:25:0f:6c:ab:
         e0:e9:23:fc:8b:cf:54:23:2c:c0:d0:a5:5f:a4:a1:56:92:0a:
         42:15:28:a6:dd:88:d5:8f:36:d9:c1:3b:d0:62:1e:6f:a6:d6:
         d2:67:1b:5f:5d:48:1b:20:22:16:4f:4b:a9:54:e4:da:03:d4:
         57:d4:67:60:20:8c:7f:14:aa:6b:11:1d:34:ab:00:e9:c8:e5:
         a7:a9:72:cb:69:d2:e2:4e:98:c1:b3:a3:49:20:7e:d7:01:4d:
         10:cb:ea:63:01:32:77:b5:ad:77:51:db:63:11:96:72:02:be:
         30:37:f7:3c:84:86:87:46:45:cf:12:da:d9:e9:c7:33:dc:25:
         29:e2:8e:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 22:22:05 2025 by rpki-client