Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/3f9fb47b-1c71-3e76-b287-84cc4c93813b.roa
File:                     3f9fb47b-1c71-3e76-b287-84cc4c93813b.roa (raw, json)
Hash identifier:          uikvjQKnfx3icE7FisaI007PR6oBSIV7DXxfZPMdLT0=
Subject key identifier:   A9:C0:22:DE:2E:31:9F:A2:D6:78:A4:F1:B2:72:70:D1:81:AC:3E:29
Certificate issuer:       /CN=23ddb57b-8888-40f4-bf17-518b6a50512d
Certificate serial:       010D0C9F4328584598FDF74A597B96C3FEB37A00
Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/3f9fb47b-1c71-3e76-b287-84cc4c93813b.roa
Signing time:             Fri 19 Apr 2024 13:00:36 +0000
ROA not before:           Fri 19 Apr 2024 13:00:36 +0000
ROA not after:            Thu 18 Jul 2024 13:00:36 +0000
asID:                     20473
IP address blocks:        8.6.193.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 09 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:98:fd:f7:4a:59:7b:96:c3:fe:b3:7a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d
        Validity
            Not Before: Apr 19 13:00:36 2024 GMT
            Not After : Jul 18 13:00:36 2024 GMT
        Subject: CN=9e7aafb7-aff3-4c28-9d3f-d38339f4ca87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:8c:11:db:9c:f2:a4:43:67:8e:af:93:14:2c:
                    62:54:4a:ae:8d:f4:16:85:23:af:1b:f1:28:f0:72:
                    35:1f:7a:19:d3:92:13:26:62:4d:8c:59:89:b1:32:
                    91:4b:25:b8:d7:70:b6:83:48:2a:d9:c0:f1:ab:ab:
                    1f:34:f4:73:bc:f2:7a:9b:d1:e3:ce:4a:5d:4e:1c:
                    fe:28:e7:c1:e0:2a:0c:f9:6e:4a:29:f4:57:64:f2:
                    61:7d:d1:d2:f4:77:63:29:0c:f5:ac:70:2e:6c:84:
                    75:c7:a3:0a:ed:87:f3:03:6d:17:69:32:c4:03:96:
                    d7:9c:a1:4d:6c:92:de:ca:49:83:94:ff:c8:0d:79:
                    26:fc:f4:86:e9:d3:37:a2:57:96:86:76:51:54:c6:
                    c2:86:fc:aa:28:09:2a:de:31:3b:6a:46:07:f3:e5:
                    88:7b:84:0e:3e:0d:53:29:e9:90:f8:f4:ee:60:4d:
                    7d:87:7d:73:70:7f:75:1c:d0:6d:39:25:0b:17:0e:
                    16:e5:f5:a5:61:46:2e:5d:83:7b:d2:c3:aa:68:37:
                    59:eb:37:70:0a:35:52:be:e3:3b:3c:38:ad:fa:62:
                    c2:65:fa:82:af:a9:a3:da:9e:1f:d6:b0:cd:7b:85:
                    8b:8c:d6:a6:a3:4e:fc:72:08:11:6f:3c:ca:87:62:
                    86:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:C0:22:DE:2E:31:9F:A2:D6:78:A4:F1:B2:72:70:D1:81:AC:3E:29
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/3f9fb47b-1c71-3e76-b287-84cc4c93813b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl

            X509v3 Authority Key Identifier:
                keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  8.6.193.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ab:80:71:29:2b:2f:c6:26:43:42:48:9d:5e:d3:da:99:28:87:
         ca:3b:18:b9:91:7d:4a:e5:8e:59:eb:65:32:74:db:ba:1e:74:
         1b:25:81:62:33:c2:1b:c9:3c:6b:de:4a:85:a5:66:bb:f2:44:
         16:19:80:ed:3e:a0:c6:44:62:0f:79:c5:5f:eb:14:6b:29:cc:
         01:22:89:f8:3f:32:b0:1b:75:40:fb:88:ac:5e:d5:c7:63:aa:
         03:c5:8b:11:ca:03:2f:b3:59:29:a4:69:43:85:05:7b:4d:63:
         94:cd:cf:f5:5f:bc:b3:c4:60:ed:ce:ff:05:a3:58:45:25:75:
         e2:d2:7b:2c:02:8b:53:4f:ce:34:c4:38:d8:0a:e9:d8:bb:e7:
         f6:29:2b:9b:11:99:86:e9:f3:f5:7e:91:80:1f:11:fb:22:9e:
         3c:43:cc:96:00:75:7b:97:6a:bc:0f:6e:8a:cf:e5:e1:5a:22:
         58:05:da:e2:da:97:f2:4e:93:8c:85:10:de:31:b3:df:40:5d:
         ed:3f:80:4c:04:95:09:fd:38:9d:f7:cf:22:a1:7b:65:b3:22:
         b6:e6:15:e3:f8:e7:4e:a3:a2:49:6a:b0:e0:8b:05:17:c7:f1:
         a6:bf:6a:9e:cb:ab:c4:60:45:cb:37:84:83:e7:e1:41:e2:2d:
         0b:79:18:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 15:15:16 2024 by rpki-client on console-fra.rpki-client.org