Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/4fabdc6c-1435-360c-aff9-b0e29634a8ee.roa
File:                     4fabdc6c-1435-360c-aff9-b0e29634a8ee.roa (raw, json)
Hash identifier:          XyHY8VLju6X82w/wxLLwENgmJLatBC2MPPkFfzPISWw=
Subject key identifier:   1C:CE:8B:45:6E:E2:42:09:F6:8B:8D:9F:4E:F7:BC:CD:4A:61:56:E6
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285849B6245060E217C0E395736BA0
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/4fabdc6c-1435-360c-aff9-b0e29634a8ee.roa
Signing time:             Thu 01 May 2025 18:44:07 +0000
ROA not before:           Thu 01 May 2025 18:44:07 +0000
ROA not after:            Wed 30 Jul 2025 18:44:07 +0000
asID:                     401152
IP address blocks:        23.26.82.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:b6:24:50:60:e2:17:c0:e3:95:73:6b:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: May  1 18:44:07 2025 GMT
            Not After : Jul 30 18:44:07 2025 GMT
        Subject: CN=4ee34892-e215-4191-b819-0a7228b57041
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:49:e1:a7:8a:74:4a:7d:8c:f0:94:cb:8d:20:
                    fb:80:10:03:81:3d:ef:4c:18:b9:26:b2:7a:e1:7a:
                    01:7f:dc:4d:e7:47:ad:6d:81:77:31:1f:9f:d8:a5:
                    8e:df:11:8a:df:de:c1:3d:b3:f7:be:32:52:98:50:
                    57:23:56:5d:c1:96:93:27:01:49:53:e1:4c:06:8d:
                    82:e5:d9:16:dd:36:d7:68:ff:90:2b:29:36:aa:89:
                    15:09:c7:70:10:66:6a:31:e9:3f:6b:91:2b:6f:6b:
                    5f:49:85:ae:78:54:c6:7f:06:8f:dd:72:f6:64:27:
                    61:36:df:3a:32:e1:1f:4f:a0:8e:6d:88:67:a1:4f:
                    91:96:9b:0b:ca:8b:43:d7:60:fe:c4:44:0c:dc:68:
                    d5:1d:79:c5:40:89:f0:6c:5b:aa:f7:8a:3e:5e:dc:
                    dc:97:87:7f:b9:29:50:9d:a0:9a:92:d5:65:fa:cf:
                    7c:c9:a9:68:30:2a:3f:97:f8:da:b1:c0:10:53:7c:
                    4a:97:5a:a6:33:b4:5a:72:da:be:9e:5a:50:3c:6b:
                    17:fe:fe:6c:56:59:11:42:0b:43:81:0a:74:6a:81:
                    cf:11:a2:79:5f:9b:94:b2:2e:2b:74:cb:83:ef:60:
                    0f:21:b9:dc:13:da:bb:53:40:0f:ce:f9:57:3e:4f:
                    56:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:CE:8B:45:6E:E2:42:09:F6:8B:8D:9F:4E:F7:BC:CD:4A:61:56:E6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/4fabdc6c-1435-360c-aff9-b0e29634a8ee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.26.82.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:37:f0:60:c3:69:07:ab:f3:1f:a3:d6:a1:7e:65:e6:70:40:
         28:5a:ce:da:9e:d3:3b:a9:3c:fb:f7:c8:70:85:91:f2:09:ac:
         5a:53:4c:5f:60:28:9d:45:f8:3c:60:ac:ee:f0:0b:2c:16:c0:
         cb:58:31:27:49:c6:93:94:a0:31:56:d1:ac:84:ab:57:24:1f:
         70:81:cc:f2:ad:fe:5d:1f:ec:b5:a2:b0:94:a9:e8:60:cc:1e:
         0b:57:80:0e:96:2b:a9:f7:54:c6:72:7d:5d:23:57:82:2b:95:
         00:56:fc:01:9b:38:d6:40:80:fd:fb:34:20:ea:e6:19:e2:5b:
         e6:5a:b5:eb:af:a1:e6:ee:6e:9c:dd:da:d5:81:07:f7:a1:63:
         6b:f4:1b:77:aa:b1:64:a0:e9:55:f1:ac:12:99:f6:26:14:79:
         9c:63:99:ff:72:34:de:0a:32:fc:7a:b3:bb:80:e0:64:91:72:
         38:b3:7f:cf:5f:32:52:2c:5b:1c:ae:f9:47:47:ec:d6:e5:4e:
         35:07:1d:ba:80:28:2b:a0:a7:d7:25:f9:3b:89:3e:05:4c:00:
         cf:45:5c:5a:25:cb:47:98:cd:88:45:b7:aa:26:de:b7:ba:f3:
         a3:05:dc:1c:eb:41:28:4c:90:34:9e:23:45:66:3c:07:5b:25:
         61:6c:06:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 18:22:56 2025 by rpki-client