Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/6ba68ace-a9cc-344a-98a1-d9552fab4136.roa
File:                     6ba68ace-a9cc-344a-98a1-d9552fab4136.roa (raw, json)
Hash identifier:          a5mUkMSMsfIBJK9H9CsjfGoVqs6tV8cDAtiHZOcXLBc=
Subject key identifier:   E3:2B:38:C0:BC:C0:0D:3F:F5:A8:30:0E:EF:1F:2B:8A:55:A6:B3:F9
Certificate issuer:       /CN=23ddb57b-8888-40f4-bf17-518b6a50512d
Certificate serial:       010D0C9F43285847A041445A0F5EA8FF3AAAD970
Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/6ba68ace-a9cc-344a-98a1-d9552fab4136.roa
Signing time:             Tue 22 Oct 2024 13:00:40 +0000
ROA not before:           Tue 22 Oct 2024 13:00:40 +0000
ROA not after:            Mon 20 Jan 2025 14:00:40 +0000
asID:                     989
IP address blocks:        8.30.144.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:a0:41:44:5a:0f:5e:a8:ff:3a:aa:d9:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d
        Validity
            Not Before: Oct 22 13:00:40 2024 GMT
            Not After : Jan 20 14:00:40 2025 GMT
        Subject: CN=9b17e3f7-c0b6-45cf-95ad-bad89f7d04de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:41:e7:ed:e4:f5:c5:85:41:f9:98:11:ce:59:
                    ea:e4:35:c5:1a:5e:c2:d2:88:b1:aa:d2:05:a5:98:
                    78:34:38:6b:60:db:ec:ae:7a:87:de:e7:52:0a:b6:
                    ca:bc:9a:f3:01:ba:45:fe:6f:a6:fc:4d:6c:2c:f7:
                    6b:6a:7e:82:e2:e0:0e:3c:30:b5:de:5b:f9:3c:da:
                    0a:6b:be:65:d9:e1:3a:5e:8b:e4:67:e5:f5:b6:3c:
                    98:50:5c:11:0f:99:14:db:22:be:4c:30:f1:23:a4:
                    f3:fe:ef:d3:cf:11:ee:c2:46:48:07:8a:f2:5b:a1:
                    6a:25:e7:16:af:ed:b9:1d:a8:44:02:ac:bb:98:08:
                    4f:7c:05:3a:40:ee:36:df:3a:5f:67:b7:0b:a4:bb:
                    18:45:3a:25:ba:2f:92:8c:cd:fa:d5:83:36:93:a1:
                    bb:9f:21:01:2d:af:8e:7b:44:80:9b:84:68:65:44:
                    e7:5d:88:93:64:a2:33:18:58:1a:77:df:ad:00:ee:
                    28:ef:c5:51:6b:11:b9:ea:df:10:1c:01:fd:d7:44:
                    6f:c1:4a:60:3e:fe:dc:5b:c2:0e:02:b1:a4:cf:b2:
                    bf:02:19:2a:7f:02:9d:57:f5:88:4b:c1:91:53:58:
                    fa:74:17:13:49:15:eb:19:ed:81:57:a7:21:87:9c:
                    43:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:2B:38:C0:BC:C0:0D:3F:F5:A8:30:0E:EF:1F:2B:8A:55:A6:B3:F9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/6ba68ace-a9cc-344a-98a1-d9552fab4136.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl

            X509v3 Authority Key Identifier:
                keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  8.30.144.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:f6:94:b6:26:a7:d2:bb:2e:1f:11:50:c8:84:7a:f5:cc:e9:
         41:d6:34:a4:0f:c2:c0:f8:07:d0:f7:54:ee:0b:64:b3:dc:34:
         91:d3:d0:c4:7f:da:a6:4b:d3:2f:63:7b:69:ef:4b:db:f2:2a:
         af:a7:6e:05:8e:0d:50:1d:53:13:19:fe:29:4b:bf:d5:99:46:
         90:c7:77:16:d9:7e:42:39:74:d3:31:f9:23:53:59:9e:36:1e:
         8a:96:ef:3c:59:4a:23:e9:43:5f:1c:90:6d:5a:33:bb:6c:50:
         9a:a0:78:68:74:24:24:eb:8c:81:8d:5d:18:17:d8:96:4d:1a:
         8b:d8:99:99:40:37:55:5e:54:49:75:02:be:8b:7e:9b:d8:58:
         b7:f9:f4:7b:ad:14:d2:98:41:ed:ff:1c:dc:7d:36:e1:60:0a:
         6d:6e:41:17:83:04:02:8f:19:80:9d:ec:f6:b6:4e:73:f4:ff:
         23:93:72:53:b2:fe:ba:3d:14:2b:fd:5b:a7:f1:27:0b:c3:a1:
         73:c7:e2:61:3e:66:da:3e:e4:98:06:79:be:63:4c:77:96:ea:
         71:61:1f:ff:5f:ad:93:24:c9:dc:c4:74:ee:ab:18:c9:52:0c:
         28:70:c3:29:78:b6:91:f4:b3:66:06:a4:39:4e:b9:22:77:d3:
         a6:a7:62:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:10:52 2024 by rpki-client on console-fra.rpki-client.org