Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/32bad782-d59d-36d3-943d-cf1d16fc0bd3.roa
File:                     32bad782-d59d-36d3-943d-cf1d16fc0bd3.roa (raw, json)
Hash identifier:          v0g+TMQOLAhlDc/1ZtoFFugLXyBTAMQqwp3N5vtIAlc=
Subject key identifier:   D6:B2:96:AF:19:8F:23:78:EF:40:07:1D:A1:8B:60:38:69:37:07:3E
Certificate issuer:       /CN=23ddb57b-8888-40f4-bf17-518b6a50512d
Certificate serial:       010D0C9F43285841E42A9DD7E6E53B703F683980
Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/32bad782-d59d-36d3-943d-cf1d16fc0bd3.roa
Signing time:             Mon 15 May 2023 16:08:10 +0000
ROA not before:           Mon 15 May 2023 16:08:10 +0000
ROA not after:            Tue 13 Jun 2023 13:14:43 +0000
asID:                     20473
IP address blocks:        8.9.30.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 17 May 2023 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:e4:2a:9d:d7:e6:e5:3b:70:3f:68:39:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d
        Validity
            Not Before: May 15 16:08:10 2023 GMT
            Not After : Jun 13 13:14:43 2023 GMT
        Subject: CN=0643a7c3-df79-4c36-a2d8-4de6e0720968
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:5a:b4:34:c8:0e:d4:54:de:3f:62:96:76:e9:
                    cd:ff:ba:78:24:db:0e:aa:84:d5:c8:87:91:48:63:
                    e7:92:90:3b:9d:24:67:56:d1:89:22:1e:4c:1c:da:
                    ff:48:70:fe:2e:1e:00:2d:fa:b0:9a:06:c3:27:9c:
                    91:70:14:b4:5b:69:13:29:7f:28:02:a2:9a:24:bc:
                    db:3d:04:0b:87:ef:fc:a4:8f:1b:45:5f:25:89:67:
                    fa:5e:94:8c:cb:50:6e:c2:0d:13:c7:6f:d9:ed:51:
                    15:a5:63:92:34:d6:dd:43:59:53:9c:86:17:72:49:
                    c4:b5:99:ab:45:b7:2a:2c:9d:74:87:61:f4:be:93:
                    2d:7e:db:b1:e8:f6:e3:b5:a2:b7:29:eb:82:b0:3e:
                    0b:41:07:a4:01:d8:3f:5e:12:69:88:b3:89:37:9f:
                    fd:eb:ef:7f:8c:8a:5c:22:2f:c2:57:13:ce:62:62:
                    6d:07:07:c2:bc:88:9b:b4:4a:b7:03:bd:58:56:44:
                    71:9b:4f:10:f5:e7:0b:fd:d1:01:fb:16:ce:3e:56:
                    66:fb:0e:60:b0:72:86:0a:db:00:55:c1:28:78:4c:
                    56:14:4a:f4:19:b2:84:60:3e:60:75:b1:8e:2d:ea:
                    60:93:e6:c1:a9:61:d1:66:90:ec:2a:4e:3c:2f:d5:
                    c0:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                D6:B2:96:AF:19:8F:23:78:EF:40:07:1D:A1:8B:60:38:69:37:07:3E
            Subject Information Access: 
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/32bad782-d59d-36d3-943d-cf1d16fc0bd3.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl

            X509v3 Authority Key Identifier: 
                keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  8.9.30.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:18:ee:09:0b:3e:4e:9a:96:70:0d:89:7b:4d:1c:53:e4:03:
         c5:46:dd:73:53:83:3d:03:90:47:6c:67:bc:c1:fb:75:54:6a:
         28:83:30:5c:fb:79:cf:bc:40:0b:9b:92:a4:44:62:ee:66:cd:
         b3:d1:78:10:6b:36:a2:63:3e:b2:23:a7:98:7f:16:ed:76:f1:
         85:42:77:c1:33:16:e8:23:25:0c:43:ad:4c:85:bd:92:15:d2:
         13:ae:75:0c:51:63:d9:d4:bb:e2:9d:b7:ed:2f:3d:fa:aa:db:
         14:d7:93:6c:13:ad:f4:62:94:f4:4e:91:56:4b:09:ba:1a:12:
         c7:56:87:46:a1:a4:fe:bf:60:a2:63:42:b7:f9:2e:c7:bb:70:
         ba:2a:1c:15:2e:12:68:29:c5:92:9e:ae:26:aa:dd:59:19:67:
         16:24:89:6b:7c:a9:c7:82:89:a9:9d:91:89:4e:80:fd:d2:de:
         4d:50:ed:2b:8f:a0:8d:b9:c3:85:96:53:29:fd:5b:a5:ee:ec:
         b2:ef:3b:21:69:c9:b5:86:9f:d9:fc:02:6b:18:3a:f2:c4:fc:
         e5:2c:74:25:f7:a3:51:5b:11:56:59:2a:53:70:da:40:16:46:
         25:66:07:7c:a4:f9:80:b5:4f:28:83:53:d3:0a:c0:12:aa:28:
         cd:b8:bf:f9
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEHkKp3X5uU7cD9oOYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjNkZGI1N2ItODg4OC00MGY0LWJmMTctNTE4YjZhNTA1
MTJkMB4XDTIzMDUxNTE2MDgxMFoXDTIzMDYxMzEzMTQ0M1owLzEtMCsGA1UEAxMk
MDY0M2E3YzMtZGY3OS00YzM2LWEyZDgtNGRlNmUwNzIwOTY4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj1q0NMgO1FTeP2KWdunN/7p4JNsOqoTVyIeR
SGPnkpA7nSRnVtGJIh5MHNr/SHD+Lh4ALfqwmgbDJ5yRcBS0W2kTKX8oAqKaJLzb
PQQLh+/8pI8bRV8liWf6XpSMy1Buwg0Tx2/Z7VEVpWOSNNbdQ1lTnIYXcknEtZmr
RbcqLJ10h2H0vpMtftux6PbjtaK3KeuCsD4LQQekAdg/XhJpiLOJN5/96+9/jIpc
Ii/CVxPOYmJtBwfCvIibtEq3A71YVkRxm08Q9ecL/dEB+xbOPlZm+w5gsHKGCtsA
VcEoeExWFEr0GbKEYD5gdbGOLepgk+bBqWHRZpDsKk48L9XAzwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNaylq8ZjyN470AHHaGLYDhpNwc+MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2Rk
YjU3Yi04ODg4LTQwZjQtYmYxNy01MThiNmE1MDUxMmQvMzJiYWQ3ODItZDU5ZC0z
NmQzLTk0M2QtY2YxZDE2ZmMwYmQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjNkZGI1N2ItODg4OC00MGY0LWJm
MTctNTE4YjZhNTA1MTJkLzIzZGRiNTdiLTg4ODgtNDBmNC1iZjE3LTUxOGI2YTUw
NTEyZC5jcmwwHwYDVR0jBBgwFoAUF4h9ZejMGBfy7Ei4kVOLObPyLXQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2RkYjU3Yi04ODg4LTQwZjQtYmYxNy01MThi
NmE1MDUxMmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBCAkeMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEcY7gkLPk6alnANiXtNHFPkA8VG3XNTgz0DkEdsZ7zB+3VUaiiDMFz7
ec+8QAubkqREYu5mzbPReBBrNqJjPrIjp5h/Fu128YVCd8EzFugjJQxDrUyFvZIV
0hOudQxRY9nUu+Kdt+0vPfqq2xTXk2wTrfRilPROkVZLCboaEsdWh0ahpP6/YKJj
Qrf5Lse7cLoqHBUuEmgpxZKeriaq3VkZZxYkiWt8qceCiamdkYlOgP3S3k1Q7SuP
oI25w4WWUyn9W6Xu7LLvOyFpybWGn9n8AmsYOvLE/OUsdCX3o1FbEVZZKlNw2kAW
RiVmB3yk+YC1TyiDU9MKwBKqKM24v/k=
-----END CERTIFICATE-----
Generated at Mon May 15 16:58:16 2023 by rpki-client on console-ams.rpki-client.org