Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/04cfb055-440e-3b77-81a6-1047982e2b9a.roa
File:                     04cfb055-440e-3b77-81a6-1047982e2b9a.roa (raw, json)
Hash identifier:          VTUGN22gRf7NTS22x9nTcFiuP8di1J0xMSlQV3oCIls=
Subject key identifier:   69:3D:DD:F7:5D:22:C6:CD:F9:BC:31:E8:33:79:C5:E4:AB:F1:A6:07
Certificate issuer:       /CN=23ddb57b-8888-40f4-bf17-518b6a50512d
Certificate serial:       010D0C9F4328584598FE07EA625508EA52D1E580
Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/04cfb055-440e-3b77-81a6-1047982e2b9a.roa
Signing time:             Fri 19 Apr 2024 13:00:36 +0000
ROA not before:           Fri 19 Apr 2024 13:00:36 +0000
ROA not after:            Thu 18 Jul 2024 13:00:36 +0000
asID:                     20473
IP address blocks:        8.12.17.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 09 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:98:fe:07:ea:62:55:08:ea:52:d1:e5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d
        Validity
            Not Before: Apr 19 13:00:36 2024 GMT
            Not After : Jul 18 13:00:36 2024 GMT
        Subject: CN=ae675821-d459-446c-a8f8-9f0e50375acf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:11:13:c6:32:99:5f:53:86:fc:c6:41:4d:25:
                    3c:5b:7a:9d:99:72:f5:99:14:da:68:e3:36:d4:85:
                    a6:aa:df:53:2e:54:ba:c4:4c:8c:a1:7f:c2:77:5a:
                    42:df:c6:db:ac:81:dd:f2:0d:34:85:5e:c2:be:ba:
                    34:f1:48:14:47:36:5f:11:ac:62:a7:b1:81:ee:10:
                    18:2e:39:d6:79:1c:b9:58:55:46:20:82:7c:04:7d:
                    d3:91:89:7f:24:69:d9:af:65:9c:1f:70:55:73:60:
                    d0:2a:7b:a8:86:1e:f8:d8:c8:c8:1e:b1:60:78:b3:
                    f4:9a:74:5e:c1:60:c0:97:bf:66:17:a3:9e:b2:ad:
                    f8:47:5a:44:9e:5c:40:80:22:f9:06:d5:c3:60:ed:
                    50:a7:30:b0:92:26:ca:3c:14:fb:61:21:94:3c:7d:
                    b9:8c:f5:c4:76:c5:0a:01:90:9c:c2:fb:46:b0:85:
                    b4:b3:49:58:db:a6:d8:39:86:f0:3f:83:6b:19:f1:
                    ab:72:99:ec:41:86:37:c6:c1:5a:a9:81:7e:70:a4:
                    ed:d3:a6:c9:1f:31:48:09:09:64:55:4d:ba:5f:65:
                    c0:80:19:e6:31:dd:78:e0:b6:d0:d4:20:84:d6:58:
                    22:47:5e:e2:37:35:6c:6e:fa:39:4e:9d:a6:7e:b7:
                    21:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:3D:DD:F7:5D:22:C6:CD:F9:BC:31:E8:33:79:C5:E4:AB:F1:A6:07
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/04cfb055-440e-3b77-81a6-1047982e2b9a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl

            X509v3 Authority Key Identifier:
                keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  8.12.17.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8c:15:9e:ba:87:f9:6a:bf:7b:c3:a5:88:3b:d5:79:f4:e4:b9:
         52:e3:81:5c:58:7e:c0:ce:ea:15:ff:38:9e:b5:b2:42:ff:ab:
         52:d8:a9:b1:84:8b:d2:67:94:1d:4c:9a:28:73:95:e8:f2:5f:
         20:59:73:1f:be:c4:fd:b5:dd:9c:59:0e:48:fd:cf:13:ad:a8:
         f9:6d:2b:9d:68:ac:1c:53:e7:73:fd:93:15:05:f9:13:2c:1c:
         d1:64:a2:7e:da:c1:eb:7a:32:37:59:d7:9d:7e:73:04:0a:97:
         b2:20:e8:59:63:26:c7:a2:23:2f:f5:f2:0a:e3:37:9e:ba:79:
         a7:b9:a8:0b:28:48:7e:10:72:e2:2d:6f:13:af:6e:ba:f1:8b:
         76:fa:1a:47:1d:7c:e6:08:a0:20:eb:3f:ba:4c:7b:17:18:d5:
         02:38:50:47:e3:33:24:12:44:07:f0:64:78:dc:2b:cc:f4:9b:
         e1:c6:e6:23:65:ae:00:26:84:7f:97:b0:f6:8d:8e:65:b4:00:
         7c:93:2c:75:8c:e5:f6:6d:23:34:d5:7e:a9:09:4c:8d:0c:b9:
         0d:b6:18:5f:b5:b9:57:49:7e:19:ea:f9:eb:af:19:b1:60:3c:
         e8:74:a9:37:e0:d6:26:b3:19:2c:82:1e:06:6c:18:b4:b2:97:
         78:6e:fe:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 11:43:53 2024 by rpki-client on console-ams.rpki-client.org