Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/d008fa7b-f827-3496-9cb6-dc95b5f38ad8.roa
File:                     d008fa7b-f827-3496-9cb6-dc95b5f38ad8.roa (raw, json)
Hash identifier:          8HtALYlZBFmlnen7N+vYIO9F6cgKBLh940oyyT1KSFc=
Subject key identifier:   76:5D:7B:85:57:92:31:52:E6:7C:10:AE:A7:D8:EA:0A:FE:6E:DA:97
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285849B6106D451D659691E5AA1220
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/d008fa7b-f827-3496-9cb6-dc95b5f38ad8.roa
Signing time:             Thu 01 May 2025 18:04:03 +0000
ROA not before:           Thu 01 May 2025 18:04:03 +0000
ROA not after:            Wed 30 Jul 2025 18:04:03 +0000
asID:                     401152
IP address blocks:        23.26.160.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:b6:10:6d:45:1d:65:96:91:e5:aa:12:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: May  1 18:04:03 2025 GMT
            Not After : Jul 30 18:04:03 2025 GMT
        Subject: CN=84259732-2b96-407f-82b9-1cab06d913ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:87:02:e4:4d:a7:d2:9b:2a:fe:af:31:40:f1:
                    77:83:d4:17:9a:fb:96:c8:78:6c:7e:df:8c:26:0b:
                    ed:ac:61:4c:85:f6:cf:e1:dd:9d:59:5d:c0:8f:09:
                    87:18:7e:ad:ef:0c:a7:80:17:c4:0b:29:52:12:b6:
                    d2:f8:0e:89:d6:62:93:0a:c2:f6:34:ca:19:60:48:
                    58:eb:f1:52:f3:74:12:7d:1c:c5:31:60:56:aa:b0:
                    d3:95:1e:c1:f9:30:9c:12:de:7e:39:f9:03:04:cb:
                    95:ce:df:4a:f1:55:c2:92:e3:dd:7d:38:b5:7a:3a:
                    67:54:3e:78:6a:19:ee:db:66:24:d8:e6:80:84:ee:
                    8e:6e:97:bd:61:81:5c:6b:50:b7:30:b8:50:7c:8f:
                    8d:ca:d9:77:5a:0f:01:9a:b1:7a:2f:8f:60:60:b1:
                    14:54:8d:34:31:db:cb:b6:99:b0:01:cd:09:44:7e:
                    79:d7:16:7b:07:bb:e7:3d:b3:b1:23:f6:7c:0a:03:
                    49:da:0e:33:ae:d6:b2:a3:e7:cc:d6:07:64:fc:9d:
                    3b:1e:79:c2:fe:f5:73:b6:a8:87:9c:9a:ee:cb:83:
                    58:5d:45:25:cc:2a:64:a3:1b:af:d0:c8:83:25:f5:
                    0f:5e:e0:48:d4:51:22:4a:20:71:4e:41:a4:ba:f7:
                    df:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:5D:7B:85:57:92:31:52:E6:7C:10:AE:A7:D8:EA:0A:FE:6E:DA:97
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/d008fa7b-f827-3496-9cb6-dc95b5f38ad8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.26.160.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         89:72:b6:91:9d:ba:af:9e:e4:d0:82:ff:80:fa:aa:87:e5:c5:
         3c:1c:af:b3:8c:9a:f7:d6:5d:55:59:44:82:e3:5f:d0:76:59:
         7a:e0:60:7f:61:45:16:c9:5d:5d:a8:a4:95:81:51:17:62:71:
         30:10:55:7f:e1:a4:ff:eb:e4:8d:70:ec:22:c8:0e:2a:ac:1b:
         88:b5:fd:f4:bc:54:4b:dc:9d:9e:5c:23:f3:f0:05:c8:8c:ce:
         1d:f2:2a:26:0f:c7:e4:17:6e:0a:c7:e0:2f:6b:75:2b:5b:c8:
         62:2c:58:46:f2:fb:99:a5:06:e3:00:fe:00:6e:1b:d3:58:dd:
         2b:95:c5:28:60:ce:d8:8c:b5:c0:46:b5:87:07:ba:59:a8:bf:
         ba:cb:19:ca:78:80:7c:e1:97:dd:22:cc:90:33:60:ca:a6:66:
         f1:83:e5:1c:e0:4b:01:fb:70:fe:54:61:48:2b:aa:4e:ba:bf:
         ec:75:bd:51:9f:39:f5:da:78:cb:fa:5c:88:29:a5:7b:14:58:
         8f:8f:55:94:45:89:42:a5:b3:61:15:43:90:7d:ec:fb:a1:10:
         2e:63:08:a4:b3:5d:9b:7c:0c:68:50:e1:ea:19:ee:fc:fb:d7:
         21:c0:31:e2:66:9f:ab:72:6a:f2:d6:45:ea:8f:32:2c:4e:7d:
         3c:a5:fd:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 18:48:37 2025 by rpki-client