Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/8c3507e9-1d71-3f13-874f-8f331de4a8bb.roa
File:                     8c3507e9-1d71-3f13-874f-8f331de4a8bb.roa (raw, json)
Hash identifier:          1KpPP02gGsXyRswbzF7QXP0pdKI40ppgWsJYbNO4nXw=
Subject key identifier:   52:21:5B:41:AC:4E:DF:FF:9C:9D:89:48:A2:2E:CC:BA:9D:DB:99:4C
Certificate issuer:       /CN=23ddb57b-8888-40f4-bf17-518b6a50512d
Certificate serial:       010D0C9F432858473D25FDF249C73DE21BA2ED00
Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/8c3507e9-1d71-3f13-874f-8f331de4a8bb.roa
Signing time:             Tue 17 Sep 2024 01:00:31 +0000
ROA not before:           Tue 17 Sep 2024 01:00:31 +0000
ROA not after:            Mon 16 Dec 2024 02:00:31 +0000
asID:                     393795
IP address blocks:        8.41.104.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:3d:25:fd:f2:49:c7:3d:e2:1b:a2:ed:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d
        Validity
            Not Before: Sep 17 01:00:31 2024 GMT
            Not After : Dec 16 02:00:31 2024 GMT
        Subject: CN=f701ebf4-a002-4175-bba2-549d73bd5f6d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:a8:4a:46:45:72:0a:f3:f9:bc:28:57:6a:5a:
                    45:c1:f4:48:5e:11:53:c0:04:9e:be:60:41:ef:9f:
                    76:13:eb:11:d1:0f:b5:0a:4b:99:b5:05:3b:64:fb:
                    25:06:14:51:ea:2c:7e:95:bd:4a:5b:6f:fc:19:1c:
                    66:6f:e9:b3:71:47:8e:b9:3e:dc:30:1b:92:0f:84:
                    92:34:9c:1b:10:11:0e:68:08:d9:bf:93:03:3e:56:
                    96:1e:25:a4:73:be:29:be:8f:9d:02:36:02:9e:3f:
                    16:ad:ab:4e:1b:12:22:83:f9:25:43:cb:7f:eb:1b:
                    6a:ac:0f:e4:fa:97:2e:f7:7f:6d:70:5f:23:1e:b9:
                    8a:da:df:25:1c:5e:bc:f0:1a:a1:ac:ff:b4:01:3b:
                    81:96:9f:92:ac:2c:36:c5:02:e8:be:6c:97:e6:88:
                    f6:84:d3:48:64:01:bb:50:02:d7:72:64:e8:74:51:
                    71:ec:69:a4:1e:18:dd:02:1f:d4:a7:94:ec:ea:1c:
                    0f:c5:20:b6:f6:21:dd:ed:9a:92:db:c5:33:c8:a6:
                    07:43:a2:2e:cf:57:b7:41:45:1d:80:98:64:4b:17:
                    22:38:2b:57:9e:6c:c8:fc:38:ba:af:77:b6:49:2a:
                    1f:0f:4f:eb:e4:24:43:ee:4e:e5:3d:2e:4e:b1:31:
                    4d:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:21:5B:41:AC:4E:DF:FF:9C:9D:89:48:A2:2E:CC:BA:9D:DB:99:4C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/8c3507e9-1d71-3f13-874f-8f331de4a8bb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl

            X509v3 Authority Key Identifier:
                keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  8.41.104.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:3a:d9:29:8b:21:a0:ad:05:a1:21:ee:8d:3e:eb:a4:e4:b1:
         ff:fd:95:ff:e3:58:d1:39:9d:a8:a4:da:f8:40:89:a6:f3:53:
         5a:0d:fe:80:06:7e:05:d2:d7:3c:d7:eb:2d:0c:f6:2f:c6:b4:
         30:2f:b9:c4:5d:c1:67:e5:2c:f3:e6:49:e3:6a:b6:18:50:2d:
         78:f5:dc:46:f2:41:1a:fb:a8:63:52:66:ff:10:7f:2c:58:59:
         75:d9:57:bf:7d:45:0a:1e:5e:a3:98:6a:8e:0c:59:67:ad:eb:
         38:67:ba:a8:42:33:70:da:07:27:60:ed:92:82:fe:7b:4a:fd:
         df:f4:ea:f5:9d:dc:4a:91:bd:28:0c:0b:16:5f:23:4b:1a:2c:
         d0:4a:90:6f:50:89:e0:8e:fb:d2:61:a5:1d:01:c7:d6:55:4c:
         b2:f6:d4:cc:57:cb:63:fd:19:10:01:ca:31:e4:89:c7:37:dc:
         46:fe:d8:01:46:be:42:e7:4f:6f:9d:e5:48:5e:41:ca:16:79:
         98:e7:aa:3d:99:ac:2f:a5:2d:32:55:f7:33:4a:ef:d4:6e:39:
         a0:8c:28:44:34:4b:39:53:de:66:98:1b:4d:87:98:da:29:fa:
         62:98:df:de:f5:e0:aa:e4:94:df:7b:7d:69:d0:08:61:ae:0b:
         ad:e5:f9:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:10:52 2024 by rpki-client on console-fra.rpki-client.org