Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/19bd4453-8648-3c14-b6e6-5713f982cb13.roa
File:                     19bd4453-8648-3c14-b6e6-5713f982cb13.roa (raw, json)
Hash identifier:          PM7qQmNeADC7itD2i1HcHw7o+13OAndJclSF+hjvnog=
Subject key identifier:   33:9F:4D:C7:50:58:52:F5:AD:AE:4C:B0:76:92:93:23:86:31:B4:58
Certificate issuer:       /CN=23ddb57b-8888-40f4-bf17-518b6a50512d
Certificate serial:       010D0C9F432858492CB2088A12ECB5A8D8FEAA80
Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/19bd4453-8648-3c14-b6e6-5713f982cb13.roa
Signing time:             Thu 13 Mar 2025 13:00:52 +0000
ROA not before:           Thu 13 Mar 2025 13:00:52 +0000
ROA not after:            Wed 11 Jun 2025 13:00:52 +0000
asID:                     31874
IP address blocks:        8.12.79.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:2c:b2:08:8a:12:ec:b5:a8:d8:fe:aa:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d
        Validity
            Not Before: Mar 13 13:00:52 2025 GMT
            Not After : Jun 11 13:00:52 2025 GMT
        Subject: CN=6fd14148-a428-4e78-8710-2c4e4ee6440b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:35:20:ad:68:ae:06:7e:64:a1:ac:7d:8d:ca:
                    55:c2:8b:74:db:50:3a:01:7b:e6:5e:3c:a1:4d:80:
                    0f:b8:fc:af:a4:2b:91:0c:ed:42:ec:fa:f2:0f:fd:
                    49:12:df:7e:b1:13:9b:91:af:ab:08:03:34:b7:80:
                    7c:c2:55:a9:e7:6d:0b:8c:39:24:48:c7:98:df:47:
                    af:61:1f:df:7d:8a:06:7d:2c:7e:99:bb:df:de:2d:
                    25:58:e1:54:74:fe:ec:50:eb:5f:1e:0d:7a:ea:d9:
                    77:0e:7f:8e:97:61:70:42:db:cb:be:50:aa:25:d9:
                    6e:67:45:e3:fa:10:53:e4:91:85:05:55:58:3a:b9:
                    02:34:30:5f:bd:5b:ca:71:6f:d9:41:1f:e5:10:8e:
                    ab:6f:53:cb:4e:3d:00:a0:8d:47:e3:0f:f6:ab:d0:
                    bc:63:6f:5c:08:7a:46:b5:2d:18:ca:1e:1b:95:d7:
                    8c:19:70:ae:e4:46:a2:9b:bf:3a:49:ec:87:df:b1:
                    a0:41:c9:d3:7e:43:6c:de:74:ee:6a:4e:da:07:81:
                    e3:f2:82:de:00:63:72:cc:0a:43:e2:51:e3:ca:6f:
                    ac:b6:72:15:d4:f8:23:19:cb:9d:00:e3:02:87:df:
                    53:7f:10:f0:15:0b:05:7c:b4:8c:4c:80:a9:36:c7:
                    3f:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:9F:4D:C7:50:58:52:F5:AD:AE:4C:B0:76:92:93:23:86:31:B4:58
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/19bd4453-8648-3c14-b6e6-5713f982cb13.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl

            X509v3 Authority Key Identifier:
                keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  8.12.79.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:a3:d2:dc:32:e9:fe:fa:90:bf:34:7b:97:10:bd:53:f1:ca:
         c3:81:14:8a:19:dd:8f:82:1b:d4:16:85:7c:91:d6:d2:d5:0d:
         a3:90:cd:ab:9f:b8:28:88:ce:99:63:81:99:76:46:a3:72:64:
         2a:c8:0b:8c:20:54:7a:5a:4c:d4:16:94:ca:cb:f7:7a:3f:44:
         33:48:eb:20:56:a9:81:52:3d:af:f6:96:ac:15:b6:e9:5d:eb:
         5b:ca:c5:da:ef:c7:9c:e2:49:4f:af:a3:ed:03:4b:66:e6:72:
         b9:1e:5f:1a:75:51:87:03:87:ca:0f:18:cf:3c:5d:b0:bb:bc:
         94:47:62:25:cf:27:ab:be:e8:33:02:04:40:34:fc:ee:d1:e1:
         77:44:4f:de:e2:ce:39:55:9b:1f:c4:a2:e1:75:1d:a3:1a:29:
         9c:15:42:d5:3a:c5:cd:af:8c:45:f6:b2:71:bc:de:e7:2a:4b:
         36:f1:65:ed:b5:fd:06:7a:6a:35:20:65:d7:80:52:54:2b:8f:
         f8:69:a5:f5:af:57:81:36:9f:d3:78:98:2e:bd:8b:19:af:92:
         2c:b6:b4:d4:b5:0d:41:d8:27:1c:96:0e:90:6e:0e:77:b4:ed:
         36:b0:01:fc:cb:d6:5a:80:e5:db:f7:eb:b4:4b:6b:de:b9:81:
         83:e7:0e:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 10:03:42 2025 by rpki-client