Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/b6025966-d361-3992-b4eb-f3d327417fbe.roa
File:                     b6025966-d361-3992-b4eb-f3d327417fbe.roa (raw, json)
Hash identifier:          cYV70ijNtWiecbXksKHUaXirB+4cYOmJsMY3QLy5jgg=
Subject key identifier:   ED:E8:FE:47:DB:A1:E3:B5:EB:01:14:E8:F6:06:B4:64:CD:DD:1F:07
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285849B149EDC321F40F741FAC4DC0
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/b6025966-d361-3992-b4eb-f3d327417fbe.roa
Signing time:             Wed 30 Apr 2025 01:00:47 +0000
ROA not before:           Wed 30 Apr 2025 01:00:47 +0000
ROA not after:            Tue 29 Jul 2025 01:00:47 +0000
asID:                     19437
IP address blocks:        23.26.69.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 May 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:b1:49:ed:c3:21:f4:0f:74:1f:ac:4d:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Apr 30 01:00:47 2025 GMT
            Not After : Jul 29 01:00:47 2025 GMT
        Subject: CN=f3e377d7-e7fe-431c-ba2d-2d2740d7ad64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:a4:bc:fc:99:2c:e4:41:05:4d:a6:47:b0:40:
                    e4:53:47:c3:1f:cd:f1:f6:b6:d2:61:86:66:07:66:
                    0c:9f:25:cd:5e:1b:41:44:b9:07:53:ee:a1:2c:88:
                    60:38:68:36:d6:a5:85:52:6d:5b:ad:e9:9b:65:23:
                    05:0a:8e:48:b9:7b:e5:2c:42:9f:81:c3:86:c7:5c:
                    56:d4:f5:c6:c7:42:f1:88:2c:a4:d9:69:1f:8f:e3:
                    dd:b5:b0:75:2f:31:8a:88:b6:a6:bb:16:36:36:cc:
                    2d:43:45:20:a1:64:ed:e1:d8:40:50:c4:e4:03:e0:
                    99:1a:d1:36:43:bc:45:9a:a6:fb:33:dd:90:ee:62:
                    36:f5:b1:7a:00:f7:13:35:84:d9:ee:39:f1:e2:5c:
                    18:47:cf:a9:19:4f:df:38:90:c3:35:b0:7b:9a:d1:
                    4e:f9:cd:3c:23:d9:7f:f9:fb:1a:b7:81:ef:86:05:
                    1f:cf:f1:1d:f6:7c:68:1a:cd:45:59:9f:ec:5e:e0:
                    52:23:11:bc:72:f2:d0:73:20:4d:4f:eb:31:18:09:
                    f3:0b:a1:2a:1a:19:c5:cc:7c:27:0d:88:24:3c:d6:
                    82:8f:7f:87:cf:40:bc:68:db:df:f4:f1:32:6b:67:
                    50:c3:8a:ef:bd:45:56:92:84:46:04:70:b7:3c:a7:
                    76:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:E8:FE:47:DB:A1:E3:B5:EB:01:14:E8:F6:06:B4:64:CD:DD:1F:07
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/b6025966-d361-3992-b4eb-f3d327417fbe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.26.69.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a2:07:de:e2:7a:bd:7f:c5:35:5d:50:a8:7d:d5:5f:c3:66:8a:
         85:cd:db:eb:ad:07:d4:bd:8a:9e:73:40:8c:bf:27:69:9a:16:
         93:c3:61:de:e8:d7:84:dd:64:76:fa:55:87:0c:5f:33:72:ba:
         28:6b:2a:f9:91:8c:28:12:0a:6e:b8:78:e9:9b:78:fa:17:cf:
         e3:35:bf:d9:09:65:4a:d2:96:f0:de:70:cf:e8:c9:83:e6:53:
         d4:cf:5c:1e:70:a6:84:9d:e9:9a:49:ce:f2:b0:fc:89:6f:e7:
         39:c7:31:90:b4:94:8e:64:e5:b4:47:5e:9a:57:f0:c2:18:e7:
         56:34:61:89:88:eb:54:33:11:c1:d1:14:f1:14:8a:8f:6b:6c:
         23:75:b8:62:ff:7a:7c:68:47:54:a0:16:6d:25:df:19:fa:09:
         de:2e:ef:ef:e9:29:6c:18:fb:5f:ce:6b:77:70:21:60:fa:98:
         10:90:8e:11:2d:e4:ae:84:52:5e:89:9b:8b:3b:29:3a:41:09:
         2f:0d:0b:de:ac:a3:99:62:4e:e9:1f:53:aa:8a:88:38:86:4c:
         66:15:5c:f6:2f:e1:7c:3a:25:06:45:12:dc:9a:5f:c9:f0:fa:
         ac:3a:4d:61:2a:2d:a5:86:19:b8:89:94:7d:ed:23:ad:13:fb:
         f1:4d:c8:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 18:22:31 2025 by rpki-client