Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/079484de-40f4-3902-9adb-71557fdb2882.roa
File:                     079484de-40f4-3902-9adb-71557fdb2882.roa (raw, json)
Hash identifier:          W/qVldGvNhreV2DMDcGMigGoQ6hh/l5BUp07XU4Hbrs=
Subject key identifier:   FA:2E:46:38:4F:0A:9F:A2:47:D3:37:41:B0:8C:8E:8A:04:E8:79:C9
Certificate issuer:       /CN=23ddb57b-8888-40f4-bf17-518b6a50512d
Certificate serial:       010D0C9F432858457D9695CE6F9E4A5670066400
Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/079484de-40f4-3902-9adb-71557fdb2882.roa
Signing time:             Tue 09 Apr 2024 17:25:32 +0000
ROA not before:           Tue 09 Apr 2024 17:25:32 +0000
ROA not after:            Mon 08 Jul 2024 17:25:32 +0000
asID:                     2734
IP address blocks:        8.19.249.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 09 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:7d:96:95:ce:6f:9e:4a:56:70:06:64:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d
        Validity
            Not Before: Apr  9 17:25:32 2024 GMT
            Not After : Jul  8 17:25:32 2024 GMT
        Subject: CN=6fcab790-d480-41c0-87f5-671969d45fd0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:3c:99:5d:cb:54:ca:5a:4a:dd:85:0c:2c:3e:
                    77:be:7d:1e:c6:c8:fc:3b:28:1a:38:6c:18:ce:23:
                    cf:58:37:7d:82:07:82:e5:5f:49:09:b2:c5:c1:57:
                    54:83:1b:e5:93:f8:dc:16:b0:80:8b:82:d1:f7:aa:
                    8f:31:97:08:2b:fe:35:dd:b3:46:df:d6:4e:0b:fc:
                    8e:82:1c:1f:de:b4:65:eb:51:b0:39:2a:d2:07:ce:
                    bb:47:fa:f6:fd:4b:ce:1d:db:87:b8:9e:6b:ed:83:
                    fa:24:ef:b1:ce:5b:32:95:01:8f:68:5e:52:a6:ed:
                    12:f4:6e:68:1e:aa:72:7c:2a:10:23:91:74:75:4b:
                    f8:93:3d:7c:97:fb:cd:1a:8f:c6:8d:0d:c6:bd:ff:
                    6a:c9:cb:4c:f6:a3:92:cc:f7:b7:96:4d:60:b2:17:
                    65:78:57:77:76:80:8f:cc:c5:5f:23:28:22:5e:7d:
                    2f:ef:3e:9c:5e:81:d6:fd:5a:08:78:95:09:0d:90:
                    fb:73:ac:93:cb:9f:5a:37:8b:88:8d:ac:40:d1:03:
                    c3:9f:54:c2:5f:c8:01:e2:01:17:27:33:22:03:d7:
                    0e:15:f2:7f:aa:20:f9:89:8b:72:f8:ae:b8:bb:90:
                    ed:a3:36:40:80:5d:70:e8:66:c3:01:cf:02:f9:d6:
                    50:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:2E:46:38:4F:0A:9F:A2:47:D3:37:41:B0:8C:8E:8A:04:E8:79:C9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/079484de-40f4-3902-9adb-71557fdb2882.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl

            X509v3 Authority Key Identifier:
                keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  8.19.249.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:7d:58:33:b3:e1:b6:23:be:b3:e2:db:69:32:47:08:00:70:
         e2:45:1f:e3:80:23:24:70:57:82:e3:91:d9:95:05:eb:76:38:
         4a:dd:b6:58:5d:a9:9b:6e:d8:c1:2c:4a:c4:e8:77:36:24:8f:
         fd:34:9e:89:95:1c:e5:3b:86:cd:e4:9b:ff:b8:78:be:b5:57:
         05:12:ce:f1:42:05:4e:a9:07:b0:49:6a:80:09:a1:bd:c0:e0:
         e1:fc:2a:46:0b:6b:72:36:c6:12:69:c2:56:0f:e6:79:e8:ed:
         9a:0b:7a:36:01:2c:cc:87:b5:c5:ec:51:65:d9:26:8b:7b:40:
         4d:06:4e:1a:0e:87:63:26:55:ae:16:bc:a2:01:3d:5b:b2:52:
         1d:d5:8b:51:3d:35:a3:00:86:66:c7:f9:f4:16:64:5d:9a:2d:
         5c:45:58:dd:87:27:1c:3e:c9:10:06:ac:11:2b:aa:4a:9b:fe:
         5c:cc:da:21:ed:b1:e0:10:7f:ad:ef:76:eb:ac:ba:8c:b7:99:
         f0:a2:11:b6:f8:78:0f:53:46:15:94:70:30:47:f9:de:a9:32:
         03:10:e2:f6:9d:71:b3:24:1e:bb:0f:96:be:1d:f4:e6:b3:00:
         7d:e5:aa:d8:cc:11:25:ee:94:0d:3a:c4:ea:68:7a:fd:f0:59:
         5e:3d:c0:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 15:06:10 2024 by rpki-client on console-ams.rpki-client.org