Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/8bdad245-ced7-37e8-9a17-2263fe0aa32f.roa
File:                     8bdad245-ced7-37e8-9a17-2263fe0aa32f.roa (raw, json)
Hash identifier:          ONBH1+sgUH5dOVt0GmviG4r0vszUjZvvZWVZVf2kkGo=
Subject key identifier:   BC:FD:C6:07:D0:A4:73:43:CE:69:31:79:46:95:B4:3F:C8:9E:75:AD
Certificate issuer:       /CN=23ddb57b-8888-40f4-bf17-518b6a50512d
Certificate serial:       010D0C9F43285845E193C07523E80570D22CDF30
Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/8bdad245-ced7-37e8-9a17-2263fe0aa32f.roa
Signing time:             Wed 15 May 2024 13:00:34 +0000
ROA not before:           Wed 15 May 2024 13:00:34 +0000
ROA not after:            Tue 13 Aug 2024 13:00:34 +0000
asID:                     26421
IP address blocks:        209.234.208.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:e1:93:c0:75:23:e8:05:70:d2:2c:df:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d
        Validity
            Not Before: May 15 13:00:34 2024 GMT
            Not After : Aug 13 13:00:34 2024 GMT
        Subject: CN=8ee65532-9481-43e1-8be2-5c023ed23fc7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:d0:a6:8c:41:09:84:06:b8:5d:da:07:b3:31:
                    9a:96:2f:9c:2d:a1:28:86:58:be:da:d7:54:dc:16:
                    f0:25:ad:7e:a8:30:e7:f8:e2:8d:3d:0d:3d:97:ab:
                    c7:6c:18:03:74:36:b7:9a:58:00:53:a1:c1:e7:5d:
                    d5:e9:6c:4d:83:be:51:ac:39:f8:bb:0c:3f:da:72:
                    32:5c:22:54:dc:12:c0:40:f8:3c:50:c1:69:ce:46:
                    13:9b:18:38:6f:92:4f:6e:ec:91:a3:f8:89:a7:61:
                    47:45:78:e3:28:1f:b2:1c:a5:09:98:76:8d:47:0f:
                    e2:66:17:ab:0a:6b:c3:ef:89:ba:4e:36:67:13:9d:
                    be:8f:9e:c9:00:0c:26:20:22:b6:0c:ce:79:96:e1:
                    27:d7:ab:33:5c:13:ac:7b:19:70:46:cb:fa:8a:9b:
                    bf:8d:ac:a0:cc:dd:2b:f8:3f:a8:0f:3b:f5:87:0d:
                    34:47:00:a6:c8:fc:21:95:59:c6:53:36:19:0a:24:
                    13:d6:8b:fc:46:74:30:dc:d8:d6:ab:9b:46:6a:07:
                    63:22:10:e6:d5:91:cb:d2:ab:c9:6d:ec:b0:ca:72:
                    49:08:dc:a3:1c:58:54:74:a5:4d:66:a5:35:98:79:
                    84:60:b7:97:18:9c:40:91:ff:70:5a:f9:96:0b:19:
                    f0:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:FD:C6:07:D0:A4:73:43:CE:69:31:79:46:95:B4:3F:C8:9E:75:AD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/8bdad245-ced7-37e8-9a17-2263fe0aa32f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl

            X509v3 Authority Key Identifier:
                keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.234.208.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b9:25:e7:31:5b:73:cb:23:b8:dd:d3:d8:84:20:61:9e:e0:c4:
         0c:b5:11:76:f6:8e:ac:f7:4a:ac:b9:27:1c:bb:96:68:06:71:
         e0:c3:94:31:bc:f3:5d:97:e4:1a:95:d0:60:5d:6e:2c:64:06:
         45:d9:8b:4e:a2:78:ff:f9:eb:cd:1c:86:1a:0a:3a:c3:72:6b:
         e1:c7:d4:3b:db:0b:fb:7e:65:d4:0f:a0:92:16:4c:4f:ec:6f:
         75:c2:e0:49:b4:99:c0:67:3b:c6:86:8d:51:aa:58:2b:e1:54:
         cc:a5:47:b7:3c:2f:5d:42:67:6a:38:a5:0d:f3:d2:7a:fb:1e:
         6a:30:55:6e:60:5b:7e:e6:b8:b1:e9:a5:59:84:b1:66:00:7b:
         a9:30:c8:36:43:49:ba:1e:69:19:24:b4:ad:35:f6:ea:1e:33:
         83:17:87:ad:5d:5d:0c:ca:c3:ad:97:44:6e:43:49:2e:9e:f5:
         18:fd:24:a2:10:1d:d0:03:c6:3c:8c:3d:8a:0e:db:49:3b:3f:
         20:b7:c9:3d:7b:20:d5:c7:20:1f:97:77:36:e2:28:0c:7a:dc:
         6c:d3:76:6f:95:14:8c:86:4e:ca:8a:cf:57:af:31:de:6b:95:
         98:9b:23:dc:ae:ad:d0:49:ca:f0:a1:e1:61:8e:ae:c3:ac:86:
         9f:3a:7c:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 15:24:11 2024 by rpki-client on console-ams.rpki-client.org