Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/2ac673a6-47f1-3da4-8c5d-eafcd0e76b79.roa
File:                     2ac673a6-47f1-3da4-8c5d-eafcd0e76b79.roa (raw, json)
Hash identifier:          laduK18+JPWCCZR0Vmu6txoqEbpGIeJ1KAIbBxQIVhE=
Subject key identifier:   6C:B4:63:28:EB:68:E1:D6:F6:44:C1:3D:00:07:C6:EB:14:86:A4:68
Certificate issuer:       /CN=23ddb57b-8888-40f4-bf17-518b6a50512d
Certificate serial:       010D0C9F43285844B9C4F8B03BBC82391155AE00
Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/2ac673a6-47f1-3da4-8c5d-eafcd0e76b79.roa
Signing time:             Tue 30 Jan 2024 14:00:30 +0000
ROA not before:           Tue 30 Jan 2024 14:00:30 +0000
ROA not after:            Mon 29 Apr 2024 13:00:30 +0000
asID:                     20473
IP address blocks:        8.12.18.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 30 Mar 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:b9:c4:f8:b0:3b:bc:82:39:11:55:ae:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d
        Validity
            Not Before: Jan 30 14:00:30 2024 GMT
            Not After : Apr 29 13:00:30 2024 GMT
        Subject: CN=eccf6e65-d887-44d5-9e60-5a8995d501f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:d2:dd:77:fb:d5:c6:83:c9:12:8e:13:90:19:
                    5b:6a:b8:28:44:67:0d:26:6e:ec:f4:d2:11:6b:26:
                    20:f7:7f:a5:49:ce:9d:f0:77:2d:44:ba:f3:59:a4:
                    40:6a:5a:26:00:5f:3a:ed:32:f0:f1:01:7c:34:06:
                    b2:e5:f2:e0:07:cb:fb:c2:09:42:cb:8b:10:cf:97:
                    97:f0:a1:6c:34:59:96:a0:9d:88:39:dc:30:2e:ab:
                    e4:95:f2:4d:75:6f:04:e9:94:7d:fd:89:5b:c5:0d:
                    fa:e2:c7:ca:68:22:23:5f:44:45:80:15:14:ae:df:
                    3e:fc:b5:4a:0f:d2:bc:2c:90:ca:78:60:05:09:ab:
                    bd:7f:0d:10:a2:dc:6a:4b:19:92:4d:21:4c:b4:06:
                    6c:7d:17:7c:f0:f2:e2:5b:14:0d:80:aa:a7:fc:2e:
                    4a:fe:87:9d:be:c7:b9:f8:f8:ff:94:98:17:08:9e:
                    67:1d:fc:75:72:26:72:fd:f4:e1:29:2d:b8:d0:fd:
                    b1:ee:5f:a6:9a:ac:d8:a0:c8:29:06:9b:a8:1f:1c:
                    b2:1c:73:09:5a:bc:0f:7f:a7:e3:31:99:40:6f:af:
                    8c:e5:9f:a5:59:74:3e:76:28:0d:f7:ed:67:50:8d:
                    7d:e3:54:95:5d:91:b3:9f:d5:41:40:5c:7f:25:c6:
                    0f:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:B4:63:28:EB:68:E1:D6:F6:44:C1:3D:00:07:C6:EB:14:86:A4:68
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/2ac673a6-47f1-3da4-8c5d-eafcd0e76b79.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl

            X509v3 Authority Key Identifier:
                keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  8.12.18.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:80:97:32:33:ce:39:0d:ea:03:27:59:7b:59:0e:b0:84:81:
         3f:0e:fb:30:40:71:19:56:94:5c:59:9d:a2:07:a5:38:47:01:
         fd:f1:f8:88:3e:ed:f0:10:00:c1:eb:5e:77:0b:37:f0:15:8d:
         3a:1a:b6:97:f5:4e:d3:c5:31:42:f7:be:62:ba:06:e7:bb:c9:
         91:f8:38:e6:21:01:07:c3:0c:78:c6:68:95:1c:74:08:6c:cd:
         0b:f9:ac:e0:45:46:2e:59:75:1c:14:8f:4b:f8:0d:dd:07:a8:
         f4:5b:81:ed:2f:b2:21:4e:cc:b6:f8:1b:6b:6b:61:5c:bb:80:
         9d:16:c3:2b:b0:ca:fe:bd:7a:b3:64:c3:9f:23:4c:5a:13:80:
         34:63:cd:71:7a:70:f5:ff:32:af:42:7c:aa:ed:62:82:33:2a:
         20:0a:f0:27:97:67:58:7a:59:0a:14:d5:ae:99:43:53:b8:31:
         0c:0e:7c:67:6b:a8:e7:9f:83:66:c6:2c:21:5e:47:ac:d6:08:
         c9:d0:ef:e1:fa:bd:08:2e:e3:03:de:4f:7f:07:81:12:fb:67:
         f1:90:5f:8b:4c:fb:0d:f5:c5:63:eb:fe:0b:27:48:3b:73:9d:
         62:41:13:44:c0:c4:72:0c:fe:63:35:65:7e:55:fd:95:0a:69:
         88:18:a9:8c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWES5xPiwO7yCORFVrgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjNkZGI1N2ItODg4OC00MGY0LWJmMTctNTE4YjZhNTA1
MTJkMB4XDTI0MDEzMDE0MDAzMFoXDTI0MDQyOTEzMDAzMFowLzEtMCsGA1UEAxMk
ZWNjZjZlNjUtZDg4Ny00NGQ1LTllNjAtNWE4OTk1ZDUwMWY1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqNLdd/vVxoPJEo4TkBlbargoRGcNJm7s9NIR
ayYg93+lSc6d8HctRLrzWaRAalomAF867TLw8QF8NAay5fLgB8v7wglCy4sQz5eX
8KFsNFmWoJ2IOdwwLqvklfJNdW8E6ZR9/YlbxQ364sfKaCIjX0RFgBUUrt8+/LVK
D9K8LJDKeGAFCau9fw0QotxqSxmSTSFMtAZsfRd88PLiWxQNgKqn/C5K/oedvse5
+Pj/lJgXCJ5nHfx1ciZy/fThKS240P2x7l+mmqzYoMgpBpuoHxyyHHMJWrwPf6fj
MZlAb6+M5Z+lWXQ+digN9+1nUI1941SVXZGzn9VBQFx/JcYPpQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGy0YyjraOHW9kTBPQAHxusUhqRoMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2Rk
YjU3Yi04ODg4LTQwZjQtYmYxNy01MThiNmE1MDUxMmQvMmFjNjczYTYtNDdmMS0z
ZGE0LThjNWQtZWFmY2QwZTc2Yjc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjNkZGI1N2ItODg4OC00MGY0LWJm
MTctNTE4YjZhNTA1MTJkLzIzZGRiNTdiLTg4ODgtNDBmNC1iZjE3LTUxOGI2YTUw
NTEyZC5jcmwwHwYDVR0jBBgwFoAUF4h9ZejMGBfy7Ei4kVOLObPyLXQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2RkYjU3Yi04ODg4LTQwZjQtYmYxNy01MThi
NmE1MDUxMmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQACAwSMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGWAlzIzzjkN6gMnWXtZDrCEgT8O+zBAcRlWlFxZnaIHpThHAf3x+Ig+
7fAQAMHrXncLN/AVjToatpf1TtPFMUL3vmK6Bue7yZH4OOYhAQfDDHjGaJUcdAhs
zQv5rOBFRi5ZdRwUj0v4Dd0HqPRbge0vsiFOzLb4G2trYVy7gJ0Wwyuwyv69erNk
w58jTFoTgDRjzXF6cPX/Mq9CfKrtYoIzKiAK8CeXZ1h6WQoU1a6ZQ1O4MQwOfGdr
qOefg2bGLCFeR6zWCMnQ7+H6vQgu4wPeT38HgRL7Z/GQX4tM+w31xWPr/gsnSDtz
nWJBE0TAxHIM/mM1ZX5V/ZUKaYgYqYw=
-----END CERTIFICATE-----
Generated at Thu Mar 28 01:54:15 2024 by rpki-client on console-fra.rpki-client.org