Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/3056f2ca-c7cc-3bf4-9aab-f4c28e0089f4.roa
File:                     3056f2ca-c7cc-3bf4-9aab-f4c28e0089f4.roa (raw, json)
Hash identifier:          ZSccGykx3JEk2SuUuBY+smEG6PpcJ6cMIfheLrcE5Pc=
Subject key identifier:   75:00:8D:C2:09:6C:1B:DB:FC:7D:D2:84:6E:CB:D0:C2:57:6A:69:94
Certificate issuer:       /CN=23ddb57b-8888-40f4-bf17-518b6a50512d
Certificate serial:       010D0C9F432858484D7585874C52330B47984CB0
Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/3056f2ca-c7cc-3bf4-9aab-f4c28e0089f4.roa
Signing time:             Mon 23 Dec 2024 14:00:51 +0000
ROA not before:           Mon 23 Dec 2024 14:00:51 +0000
ROA not after:            Sun 23 Mar 2025 13:00:51 +0000
asID:                     3356
IP address blocks:        8.12.79.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:4d:75:85:87:4c:52:33:0b:47:98:4c:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d
        Validity
            Not Before: Dec 23 14:00:51 2024 GMT
            Not After : Mar 23 13:00:51 2025 GMT
        Subject: CN=d27eb399-541d-4c13-bfa7-cd47ed8d47be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:1f:df:c3:5f:87:8d:1c:19:ee:11:cb:49:56:
                    bf:6a:2e:0e:d4:1b:5e:02:de:c7:c9:81:a7:62:8f:
                    41:89:f8:63:a1:14:4a:85:3e:01:9c:42:52:e2:3d:
                    d5:1a:f4:c5:5c:43:64:6b:52:26:21:e9:20:48:f8:
                    ab:cf:b2:d9:56:12:e0:90:82:c7:36:ba:fd:29:44:
                    fb:e0:55:c7:45:65:72:a5:05:f5:6b:c5:a0:d4:64:
                    8d:7a:4f:47:2a:a5:bc:3c:3f:60:d5:ae:e3:db:32:
                    43:60:f5:b1:96:a0:61:99:88:89:89:af:ac:c8:5c:
                    ad:7d:c4:20:57:7e:7d:1c:61:25:21:e1:51:62:7e:
                    73:b6:1b:f1:87:60:e2:75:b7:ac:2c:a2:b4:b8:dd:
                    a3:94:ac:ce:cf:e3:cf:64:2b:04:7f:5a:82:8a:f9:
                    d3:08:92:e7:74:ab:c7:b6:06:9c:6f:c1:1d:40:ee:
                    fb:15:3c:de:2a:c4:92:9c:3e:8f:04:8e:53:47:c0:
                    30:f9:cb:a4:d1:fc:54:d6:b2:d4:40:be:9e:40:93:
                    58:6b:5c:c9:6c:ec:ec:fc:0e:57:2d:bd:f4:00:0e:
                    ee:d0:45:0f:b4:d3:1e:ee:a2:64:88:40:eb:48:d9:
                    f5:10:30:9e:8f:8d:2a:b0:33:e5:14:bf:c6:bb:71:
                    10:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:00:8D:C2:09:6C:1B:DB:FC:7D:D2:84:6E:CB:D0:C2:57:6A:69:94
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/3056f2ca-c7cc-3bf4-9aab-f4c28e0089f4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl

            X509v3 Authority Key Identifier:
                keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  8.12.79.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:6b:a0:54:22:b8:fa:46:c5:97:e6:52:c0:fe:7b:0b:69:85:
         ad:f2:7f:0c:e3:c5:3a:ff:83:ec:9c:65:d4:69:d0:59:35:83:
         7a:ba:57:cc:88:f7:b0:a1:cd:76:2f:84:bd:bb:dd:45:62:26:
         fd:c9:d0:b5:3e:6e:72:f3:8b:5e:6a:4a:d0:c8:38:a8:87:c6:
         67:c4:3f:2a:fc:92:f9:99:31:37:51:b4:f8:3e:7f:f1:5e:32:
         98:03:b3:45:78:26:1b:06:cc:99:4f:81:a3:49:04:38:70:f5:
         34:a6:e5:50:ed:10:4a:af:60:ee:31:4c:09:b6:e6:39:09:8c:
         2a:14:d0:8f:ae:aa:ae:c6:a0:19:3e:83:64:43:a2:5e:43:e8:
         f5:75:12:95:d7:2f:90:be:5e:bc:ac:97:95:b4:4e:9a:34:20:
         f6:d1:b5:b9:10:ad:8e:81:39:52:79:02:71:af:0a:d6:c8:6e:
         a5:58:1b:f3:97:90:67:02:e5:6e:a0:ea:68:2e:8e:ef:5f:3c:
         8c:d2:5d:00:bc:c9:71:86:c8:8f:85:b0:8d:be:64:33:e0:c6:
         8c:64:a5:71:b2:4f:34:95:0c:fe:75:98:8f:e0:de:79:d0:9c:
         a6:34:a8:98:f3:90:f0:27:85:81:28:9b:f6:43:f8:fc:8e:d7:
         b2:40:0f:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:36:08 2025 by rpki-client