Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/08f394a8-6260-398e-94d1-75b9910bab37.roa
File:                     08f394a8-6260-398e-94d1-75b9910bab37.roa (raw, json)
Hash identifier:          EBmVP3eSCxtaQq426Uu6HAquIt60IBOTJbdXuZRlPic=
Subject key identifier:   11:B2:9F:5E:E2:C4:7F:7E:8F:0C:A0:48:87:5B:CE:C2:02:FA:EB:E5
Certificate issuer:       /CN=23ddb57b-8888-40f4-bf17-518b6a50512d
Certificate serial:       010D0C9F43285845C5A8EE94D13ECD20A8FC0F80
Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/08f394a8-6260-398e-94d1-75b9910bab37.roa
Signing time:             Sun 05 May 2024 13:00:34 +0000
ROA not before:           Sun 05 May 2024 13:00:34 +0000
ROA not after:            Sat 03 Aug 2024 13:00:34 +0000
asID:                     394161
IP address blocks:        8.244.131.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 09 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:c5:a8:ee:94:d1:3e:cd:20:a8:fc:0f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d
        Validity
            Not Before: May  5 13:00:34 2024 GMT
            Not After : Aug  3 13:00:34 2024 GMT
        Subject: CN=9be470c2-1219-4d9d-b7d1-1845912af834
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:76:26:06:1b:a6:8e:56:bf:52:5b:c5:2e:45:
                    e1:30:51:8e:30:dc:44:e4:9b:66:fc:31:e5:b3:d8:
                    e2:e4:38:87:12:f4:92:d2:de:2f:c7:f9:c9:8c:38:
                    00:36:0b:c3:11:f7:fe:1d:3a:90:b8:ec:a7:5a:d2:
                    92:d2:09:25:9d:96:be:32:72:fb:1e:04:9b:f0:8e:
                    02:c4:fb:4e:6b:87:46:b6:4a:f5:cf:f7:37:2e:28:
                    ca:7a:3e:2b:b2:14:82:31:60:96:d3:d3:c3:58:8a:
                    48:bf:2b:6d:b9:f5:bb:ef:3e:1f:56:30:33:63:47:
                    39:8a:d7:b7:37:3d:6c:4b:6b:a7:6b:c3:8e:97:64:
                    52:3d:b7:ea:7e:74:44:2f:88:9a:33:b1:d7:71:a8:
                    33:14:4e:86:18:35:9b:2e:9a:6e:f8:1e:7a:52:84:
                    77:62:7d:5f:9b:76:1f:68:26:83:e1:f2:b1:a9:4c:
                    d5:5e:fd:56:90:8b:e3:38:23:16:0f:62:33:9c:25:
                    38:9e:a0:df:ec:26:75:45:8a:26:bc:fc:33:39:72:
                    5d:70:82:81:91:a6:ab:e6:c1:4b:c0:30:d1:c4:52:
                    a9:da:9d:52:1a:59:2b:0d:5c:eb:57:6a:3c:dd:94:
                    f6:c2:b5:9a:31:95:88:37:dc:5c:31:7e:ad:94:4f:
                    ef:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:B2:9F:5E:E2:C4:7F:7E:8F:0C:A0:48:87:5B:CE:C2:02:FA:EB:E5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/08f394a8-6260-398e-94d1-75b9910bab37.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl

            X509v3 Authority Key Identifier:
                keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  8.244.131.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b6:18:f9:1d:3b:43:e3:49:bf:0e:69:9c:fa:1f:1c:aa:f2:6d:
         a5:b7:b0:6a:69:44:a0:de:89:e6:89:5f:bc:e3:ab:03:bf:c0:
         6e:1c:37:23:3a:35:98:82:69:69:42:e9:d6:4d:32:93:5d:6b:
         11:64:cd:6e:4c:aa:86:39:dd:f4:ee:a5:e2:6c:7b:a3:1d:c2:
         65:af:71:c9:87:2a:7d:39:5d:44:f7:8c:b3:bb:92:bb:b5:8c:
         76:b7:ef:39:9b:ed:7c:51:a7:43:48:d5:f2:9d:04:a3:a0:57:
         f0:f3:3f:6e:de:39:4d:14:c1:5a:f4:b9:de:40:5c:83:61:ec:
         2e:2d:ed:a8:7b:50:52:19:9a:fe:c5:96:3f:b6:3b:ac:da:04:
         f4:97:ec:c2:19:8e:09:8d:7c:44:0e:61:5e:13:9b:9e:7d:e3:
         63:dd:fa:af:d7:6e:0b:59:59:0a:7b:23:59:0f:4f:49:42:65:
         59:f8:cc:2d:2a:ef:10:bb:09:d8:c1:31:33:99:a1:9a:cf:50:
         23:61:cd:6e:25:ca:3f:6f:24:e1:d7:55:02:49:78:c0:0f:de:
         4a:f2:bb:84:7d:90:31:12:dd:ad:d7:a6:5c:c9:81:74:73:fc:
         11:62:58:de:23:94:f7:54:31:07:cb:63:2f:de:8a:ec:53:53:
         16:e7:17:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 15:06:10 2024 by rpki-client on console-ams.rpki-client.org