Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/863dcff2-38a8-3c63-aaa0-3c613db0eb2a.roa
File:                     863dcff2-38a8-3c63-aaa0-3c613db0eb2a.roa (raw, json)
Hash identifier:          kIa16WTO0dq7TsXJG3lLjEMCiiWL2NCun45IhUgUHVY=
Subject key identifier:   C7:A0:F6:53:84:DA:F3:AB:75:8E:84:B5:62:C3:2F:54:13:D7:17:67
Certificate issuer:       /CN=23ddb57b-8888-40f4-bf17-518b6a50512d
Certificate serial:       010D0C9F4328584784566C210C50DF6EBC71F240
Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/863dcff2-38a8-3c63-aaa0-3c613db0eb2a.roa
Signing time:             Sat 12 Oct 2024 13:00:42 +0000
ROA not before:           Sat 12 Oct 2024 13:00:42 +0000
ROA not after:            Fri 10 Jan 2025 14:00:42 +0000
asID:                     394161
IP address blocks:        8.45.124.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:84:56:6c:21:0c:50:df:6e:bc:71:f2:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d
        Validity
            Not Before: Oct 12 13:00:42 2024 GMT
            Not After : Jan 10 14:00:42 2025 GMT
        Subject: CN=3f17913d-d523-4458-939b-8c62114deff3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:23:c7:58:49:e1:23:3b:ff:43:e5:4f:ad:3a:
                    4d:ea:ef:ff:1c:4f:6f:dd:8e:1a:49:3d:3a:0e:b6:
                    7e:da:89:57:da:5b:57:c2:ef:e5:3e:6b:2f:b4:11:
                    a5:30:63:0f:26:e7:8a:0d:1d:02:76:f7:c3:e7:96:
                    a0:e2:dd:b5:01:43:fc:b9:7d:43:ac:e9:4b:0a:ee:
                    d6:60:a6:ac:b7:eb:25:07:8c:85:09:a6:28:34:a9:
                    8f:dd:22:1c:7d:12:02:4e:15:d5:d6:78:51:46:a0:
                    6e:61:0a:92:1d:60:d9:a3:19:c9:f7:41:12:e1:ce:
                    13:b8:1f:78:fe:57:ba:72:a5:d3:90:95:3c:06:1d:
                    fe:74:6d:1c:90:19:f8:ed:7c:5a:f4:4d:15:2c:bf:
                    02:3c:f3:92:93:a3:df:b2:e2:4d:87:6c:ae:c3:57:
                    84:29:b8:81:76:fd:82:08:f1:54:a3:b8:de:fa:ce:
                    26:c5:53:67:4d:46:32:1b:76:2a:8e:27:a4:36:8a:
                    8d:7c:a7:fa:4b:4b:d3:ea:2b:50:48:7b:a7:8d:9b:
                    ea:0b:da:98:d5:fd:58:2f:90:af:cd:e4:cc:fc:2d:
                    f0:f1:4a:32:98:99:57:cc:5f:78:81:17:52:2c:b6:
                    31:a1:d2:ba:eb:6a:49:c9:5c:ad:aa:d1:5f:8f:76:
                    b9:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:A0:F6:53:84:DA:F3:AB:75:8E:84:B5:62:C3:2F:54:13:D7:17:67
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/863dcff2-38a8-3c63-aaa0-3c613db0eb2a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl

            X509v3 Authority Key Identifier:
                keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  8.45.124.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:41:64:77:78:d9:85:09:24:80:76:7e:60:44:3f:4a:fb:9e:
         8a:b1:49:cf:69:92:31:9b:33:ff:fb:75:d3:05:e6:e5:78:7f:
         74:a5:b1:d7:47:35:ef:c2:8d:15:03:34:1b:3a:66:91:07:b7:
         d9:e4:f2:50:d9:77:e0:bd:15:fb:78:52:e2:19:6e:fc:a6:6b:
         94:71:6c:c7:c7:3a:34:ef:6c:eb:8a:0c:cf:77:2a:ed:12:27:
         4a:8d:1e:ca:ed:ec:0d:12:6d:e6:32:52:16:ab:1c:da:0e:17:
         0c:d8:1b:09:24:5c:9f:b0:b2:a3:54:69:d2:fe:93:97:36:a7:
         c4:c0:a8:9d:57:1d:92:f2:a4:13:93:ef:16:99:2f:63:0f:4f:
         5f:37:c9:49:07:99:2b:24:11:d3:55:8d:2a:d0:bd:3f:b0:37:
         b8:0e:d3:9f:65:89:e1:cf:1e:df:21:00:50:6d:0a:3e:d5:72:
         a3:4f:a6:03:60:c9:6a:0f:42:6f:a0:b6:ab:42:b8:20:b8:cb:
         64:f8:40:71:21:d2:9e:03:65:8f:65:85:4e:94:9c:2e:16:50:
         b7:27:e5:03:43:cd:40:a3:91:9a:6b:bc:fd:6b:22:c9:c4:bc:
         d8:d1:f8:af:e8:71:31:fb:c7:47:cb:ae:18:18:66:6a:d7:95:
         51:61:76:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 01:35:01 2024 by rpki-client on console-ams.rpki-client.org