Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/90b8bcbf-20fb-37ee-9f06-b915cd5a8271.roa
File:                     90b8bcbf-20fb-37ee-9f06-b915cd5a8271.roa (raw, json)
Hash identifier:          q+zV6/ZqDYunqnc0rmhIUhowxKqmC7aQg25zOvF09vA=
Subject key identifier:   19:A9:1B:AC:BE:1D:AE:5F:06:91:D9:53:77:83:8A:1F:37:BF:E2:F5
Certificate issuer:       /CN=23ddb57b-8888-40f4-bf17-518b6a50512d
Certificate serial:       010D0C9F432858475910BD7F4CBBC0B37C1F2C00
Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/90b8bcbf-20fb-37ee-9f06-b915cd5a8271.roa
Signing time:             Fri 27 Sep 2024 01:00:31 +0000
ROA not before:           Fri 27 Sep 2024 01:00:31 +0000
ROA not after:            Thu 26 Dec 2024 02:00:31 +0000
asID:                     20473
IP address blocks:        8.9.3.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:59:10:bd:7f:4c:bb:c0:b3:7c:1f:2c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d
        Validity
            Not Before: Sep 27 01:00:31 2024 GMT
            Not After : Dec 26 02:00:31 2024 GMT
        Subject: CN=bddf4d17-8642-44d6-bae4-6ea4e0881d5d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:fe:1a:6c:87:59:5d:62:c5:44:08:b0:de:93:
                    0f:6c:02:a8:40:9f:22:b7:92:a9:74:c5:17:54:32:
                    e4:cd:54:77:ce:4e:ee:cb:35:22:a6:37:ee:3f:07:
                    f5:12:1d:14:a5:ea:80:11:32:20:a5:db:b8:a7:ed:
                    28:4d:32:cd:88:5d:12:30:a4:c7:87:ba:cc:93:16:
                    df:58:1d:be:1f:2c:d2:aa:f5:3e:83:86:b4:25:7e:
                    c8:bb:70:04:12:08:8b:cc:d8:f0:18:9d:25:de:c0:
                    6a:f4:fa:86:e7:aa:8c:8c:d8:62:3c:96:46:84:54:
                    4c:16:45:76:79:a2:00:9e:27:75:7e:c4:59:95:76:
                    6d:57:a5:39:78:29:e0:6c:66:d9:21:69:36:27:ae:
                    ee:0d:f9:88:fe:ec:89:4f:2a:1a:de:28:b7:95:ff:
                    e8:bc:89:5c:23:9e:29:49:f0:69:ed:00:96:13:b8:
                    20:76:fc:fb:0a:c7:a9:46:bb:23:45:d9:98:b8:69:
                    9e:7c:5b:79:f6:8a:08:c0:a2:7b:6f:aa:2e:9a:e8:
                    25:74:bb:90:74:85:0b:48:ee:22:3d:70:e2:f3:e0:
                    aa:a2:f6:a5:45:23:58:43:30:cd:f6:d3:01:a0:4c:
                    17:74:0b:60:31:ee:a2:89:61:dc:71:0e:2d:31:1a:
                    ac:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:A9:1B:AC:BE:1D:AE:5F:06:91:D9:53:77:83:8A:1F:37:BF:E2:F5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/90b8bcbf-20fb-37ee-9f06-b915cd5a8271.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl

            X509v3 Authority Key Identifier:
                keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  8.9.3.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:aa:d4:3a:b5:f3:63:ab:38:e4:65:b3:d6:8d:09:0c:67:7e:
         b9:fb:8f:f0:d7:5c:c0:cf:2d:72:35:cf:67:c9:34:3e:b5:f2:
         c4:b7:4c:51:d9:92:d9:f6:a8:25:98:f6:53:ab:3d:16:24:18:
         c6:2a:9c:0e:40:be:d5:14:42:25:9b:a4:71:8c:c3:5a:7a:b2:
         20:30:78:70:f3:d3:f1:dd:fb:70:22:12:8a:02:1a:54:a4:f1:
         2d:37:81:57:93:07:26:e0:1e:67:60:d6:21:1a:58:74:14:09:
         00:f1:ad:5e:51:ad:20:88:2f:4e:6e:b9:20:44:91:96:df:e8:
         ae:d9:38:d2:5b:af:fa:10:71:40:0d:53:58:0a:81:6e:eb:ab:
         79:84:83:e5:ee:00:b4:9b:22:2f:6c:30:57:53:0a:57:b8:89:
         a1:b3:5e:e9:5c:b5:b8:c4:f2:bc:c7:6a:f3:11:1d:18:ff:fb:
         76:d6:b3:e5:d0:7a:8d:3e:e3:be:dd:47:c3:0d:bc:f5:11:7f:
         aa:6b:95:80:96:29:cb:c1:60:82:e9:df:a8:e9:37:b8:b9:40:
         39:66:2f:d9:65:ca:b6:d6:ef:5e:45:cb:ea:28:2b:bf:ff:24:
         ec:0e:f1:72:49:8f:27:9e:8d:c8:80:a4:8e:56:71:b4:4e:82:
         3b:d7:3b:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 15:31:50 2024 by rpki-client on console-ams.rpki-client.org