Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/5d3abe4d-41f6-3352-83e0-81e0a2ca3653.roa
File:                     5d3abe4d-41f6-3352-83e0-81e0a2ca3653.roa (raw, json)
Hash identifier:          bkhgDTyYdR3c18L+kSGbRufbDu9U1iMI8EZOdKNhCY8=
Subject key identifier:   DA:7A:5B:3E:DF:7F:C3:0D:67:5A:EE:6A:17:DA:11:7D:BE:E4:37:4C
Certificate issuer:       /CN=23ddb57b-8888-40f4-bf17-518b6a50512d
Certificate serial:       010D0C9F4328584500F56178A684DFDF98619E80
Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/5d3abe4d-41f6-3352-83e0-81e0a2ca3653.roa
Signing time:             Sun 25 Feb 2024 02:00:26 +0000
ROA not before:           Sun 25 Feb 2024 02:00:26 +0000
ROA not after:            Sat 25 May 2024 01:00:26 +0000
asID:                     989
IP address blocks:        8.36.224.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:00:f5:61:78:a6:84:df:df:98:61:9e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d
        Validity
            Not Before: Feb 25 02:00:26 2024 GMT
            Not After : May 25 01:00:26 2024 GMT
        Subject: CN=0ea1a0e5-61e3-447a-850e-3c59dbd60c7d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:95:ce:86:61:ad:71:e6:31:5d:df:e7:00:7d:
                    cc:2c:0c:92:9a:72:b0:a9:0f:48:1f:1c:c4:1f:16:
                    4e:37:1d:80:1a:26:98:76:a0:07:94:7c:96:71:b2:
                    1d:df:f8:c5:46:7a:c9:47:dc:28:15:09:df:c2:4b:
                    a0:80:cf:09:e2:35:2c:77:6e:c3:ea:3d:a6:61:22:
                    55:bb:bd:70:1d:7f:1e:3e:3d:cc:4b:5b:ad:b8:c5:
                    75:24:38:d6:3e:0d:8b:2e:82:66:4d:23:ea:71:e9:
                    89:8d:3d:3f:54:20:90:c6:58:df:de:0e:7e:72:10:
                    a4:20:0a:7e:eb:7b:f0:0b:48:52:39:e2:81:e5:81:
                    12:61:57:e4:65:34:d7:36:fc:fd:60:4a:7e:5f:25:
                    b7:ca:ee:87:49:0b:ac:e5:98:66:9f:d3:2e:32:ba:
                    fe:fe:da:2c:d9:2e:80:46:00:fd:d1:bc:ad:19:d7:
                    bd:4c:10:e9:42:a2:ea:b3:de:0e:84:f0:66:4d:d3:
                    27:d7:ae:3d:2d:04:03:34:51:ed:73:33:d1:5a:0a:
                    22:44:5d:15:62:08:45:08:67:e4:2e:99:bb:fc:a4:
                    cf:2c:e5:25:86:a4:6e:71:85:67:04:cb:92:c2:dc:
                    87:b7:e3:d0:8f:d0:54:74:55:b3:28:fe:4a:ac:05:
                    99:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:7A:5B:3E:DF:7F:C3:0D:67:5A:EE:6A:17:DA:11:7D:BE:E4:37:4C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/5d3abe4d-41f6-3352-83e0-81e0a2ca3653.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl

            X509v3 Authority Key Identifier:
                keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  8.36.224.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:a3:13:ec:fd:1d:40:17:1f:fc:33:eb:5d:e7:fd:80:ca:a5:
         16:7b:68:d8:2e:bb:a5:cd:d8:94:a2:5a:a2:9b:86:66:2c:4a:
         79:d6:95:a2:03:6c:30:f6:f1:81:1e:85:e0:ce:dd:4e:cb:ce:
         70:38:15:42:c2:87:26:5c:7a:81:ae:4d:49:9b:bd:1e:c7:0b:
         9b:db:ba:52:10:c5:dd:1c:00:3b:30:f9:97:f4:e3:99:26:ce:
         ff:54:77:d2:7f:11:3a:84:34:aa:6d:5c:14:62:c8:f0:b8:18:
         5e:bc:2b:34:20:cf:0a:85:66:d9:02:18:37:f9:66:ef:fb:51:
         e9:2c:d0:87:f8:13:ad:bd:d3:b0:d2:ee:fc:a0:9f:e1:a8:d1:
         83:99:19:41:5d:9f:0e:2f:ea:c2:8e:42:12:bd:0c:ae:6c:d3:
         fc:37:b6:e9:b6:9d:04:76:45:bf:56:25:a9:c8:82:1c:5c:8e:
         17:b9:42:5d:3f:cb:3d:c4:04:dc:fc:11:b6:b6:d8:39:f5:c3:
         77:11:5f:cf:62:73:38:8d:57:94:c4:5e:36:51:8b:f2:f3:3c:
         29:06:83:d0:28:40:4e:ae:22:eb:28:b6:12:09:e7:bc:ea:72:
         7a:71:49:7a:18:f4:4d:5b:d3:5e:6a:a6:0b:a0:63:35:ac:2e:
         a7:f3:80:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 11:52:16 2024 by rpki-client on console-fra.rpki-client.org