Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/04cfb055-440e-3b77-81a6-1047982e2b9a.roa
File:                     04cfb055-440e-3b77-81a6-1047982e2b9a.roa (raw, json)
Hash identifier:          TUYniIP6iuYGc88D/6LRUufGUmD8mGx+9pxZDw+XWe0=
Subject key identifier:   F0:E9:38:90:19:F4:F1:45:F6:F0:1E:46:D8:3A:B5:DE:EF:A4:08:1D
Certificate issuer:       /CN=23ddb57b-8888-40f4-bf17-518b6a50512d
Certificate serial:       010D0C9F43285841E42AA0F6F43851BDB4BDC580
Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/04cfb055-440e-3b77-81a6-1047982e2b9a.roa
Signing time:             Mon 15 May 2023 16:08:10 +0000
ROA not before:           Mon 15 May 2023 16:08:10 +0000
ROA not after:            Tue 13 Jun 2023 13:35:11 +0000
asID:                     20473
IP address blocks:        8.12.17.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 17 May 2023 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:e4:2a:a0:f6:f4:38:51:bd:b4:bd:c5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d
        Validity
            Not Before: May 15 16:08:10 2023 GMT
            Not After : Jun 13 13:35:11 2023 GMT
        Subject: CN=218ef630-e21e-4500-9357-0c8ceb06909a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:fa:2b:84:92:1c:b5:30:4e:40:89:e7:e9:b7:
                    4e:5d:1e:ba:e9:24:8b:6b:1f:1c:78:ff:d9:4a:ce:
                    6a:32:cb:36:f1:39:8d:97:a0:54:93:91:5c:ab:4d:
                    44:ac:61:ba:a1:6d:52:ac:06:b7:21:d3:1a:07:61:
                    78:62:d5:97:50:1b:2f:0b:63:d5:4a:3a:91:03:e8:
                    14:79:93:61:89:41:31:59:6c:c3:bf:f3:2f:ed:1c:
                    d5:d5:89:4c:98:b4:8c:c8:b5:d8:3e:f2:92:88:ee:
                    fd:e9:67:04:05:22:f8:72:18:32:94:28:89:c2:1a:
                    c8:3a:22:b5:1b:6f:bd:0b:ba:11:42:b7:72:f6:be:
                    e4:9e:5e:aa:71:98:65:be:24:69:12:be:12:ef:f4:
                    cc:0c:ef:b8:bc:28:52:a0:b5:17:4d:df:15:56:88:
                    85:d4:9e:75:25:ee:fd:c1:c8:44:dc:4d:28:d7:f5:
                    ec:f4:92:cf:21:cd:de:4f:6b:ff:f5:e7:ba:8f:63:
                    9d:92:e9:0e:29:8a:70:14:54:6c:b2:e8:b2:c4:b4:
                    cc:b6:db:6e:4d:ec:02:b2:5f:35:43:0e:7d:0c:3b:
                    a7:39:2c:98:18:f8:d1:f7:d2:66:28:d1:09:24:b5:
                    85:f7:4b:15:4a:da:4b:e4:0a:f4:63:7e:20:31:b8:
                    4e:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                F0:E9:38:90:19:F4:F1:45:F6:F0:1E:46:D8:3A:B5:DE:EF:A4:08:1D
            Subject Information Access: 
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/04cfb055-440e-3b77-81a6-1047982e2b9a.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl

            X509v3 Authority Key Identifier: 
                keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  8.12.17.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:ee:82:2d:cb:5d:90:bc:62:1d:b6:25:81:26:b6:12:10:ab:
         7e:fe:a1:ac:b0:18:bc:7e:af:ef:2c:cc:a2:ec:6e:e5:23:ed:
         f1:e0:f2:83:ce:c2:4d:00:58:43:90:60:1e:a1:94:f5:96:d2:
         d7:4e:13:b6:f4:c2:c9:f4:06:39:cf:f9:21:40:1b:ef:51:6e:
         41:61:b5:87:4a:fc:a4:23:f7:42:35:79:d2:cc:3b:2b:a2:3a:
         42:77:08:a4:42:60:76:93:2e:55:f8:5a:41:4a:36:4e:ab:d0:
         3d:e7:f5:26:0a:29:cd:a1:07:2d:43:d1:ba:0b:59:ec:fa:4e:
         e9:33:eb:0b:f9:17:97:0d:5d:d6:17:82:a2:48:5e:bf:34:02:
         2e:24:2c:60:74:27:10:40:79:45:99:14:eb:b0:05:ed:68:bd:
         bc:44:1f:ea:1f:08:04:ac:7c:19:4c:59:41:5e:b3:fa:96:d8:
         a5:bf:d1:a7:65:7f:23:b2:87:f4:88:41:d7:86:f4:e8:59:b1:
         fb:31:d8:0a:1c:cc:62:9b:00:1a:44:77:e7:f0:0d:2b:b4:68:
         c0:fc:36:da:1b:25:a3:5e:6b:7e:a1:d4:b9:66:43:f7:fb:47:
         47:b4:d2:00:6a:ee:e0:57:62:f0:7c:96:fd:32:32:49:68:a9:
         1c:1a:7c:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 15 16:58:16 2023 by rpki-client on console-ams.rpki-client.org