Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/a0776cea-a3cc-32f7-81d1-b9383f1f2597.roa
File:                     a0776cea-a3cc-32f7-81d1-b9383f1f2597.roa (raw, json)
Hash identifier:          Vzi5o76yZiog1TP5pM0SVF5pmPs0PQO5+NjI+avsFo0=
Subject key identifier:   D4:20:1E:26:6B:98:B9:0C:9D:09:F5:EF:C9:0F:9A:20:AA:48:B1:D4
Certificate issuer:       /CN=23ddb57b-8888-40f4-bf17-518b6a50512d
Certificate serial:       010D0C9F43285844F035479CBBA774C13DD8DB80
Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/a0776cea-a3cc-32f7-81d1-b9383f1f2597.roa
Signing time:             Mon 19 Feb 2024 02:00:25 +0000
ROA not before:           Mon 19 Feb 2024 02:00:25 +0000
ROA not after:            Sun 19 May 2024 01:00:25 +0000
asID:                     3356
IP address blocks:        8.23.160.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 21 Apr 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:f0:35:47:9c:bb:a7:74:c1:3d:d8:db:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d
        Validity
            Not Before: Feb 19 02:00:25 2024 GMT
            Not After : May 19 01:00:25 2024 GMT
        Subject: CN=289c61c5-a55d-4ff3-a000-4471f2c4cef3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:f5:c5:98:41:db:9a:24:49:9c:68:ed:56:ed:
                    20:b0:42:a2:d7:47:75:44:3d:46:d6:10:ab:5f:ab:
                    c6:1b:d0:ce:b2:8a:44:9f:65:ad:4c:a5:fe:e8:66:
                    ac:73:cd:ea:a8:f2:67:cc:78:0d:38:bf:17:71:75:
                    72:1b:3f:6c:bb:a2:3d:7f:d4:62:29:f1:00:1b:55:
                    08:54:81:8c:b0:5b:74:3e:24:dd:2e:97:cb:2c:a3:
                    a5:48:37:4e:21:30:60:53:0d:27:69:b3:d3:ff:98:
                    e1:01:51:63:8c:69:61:a0:81:54:89:d3:22:91:c4:
                    13:e5:6f:8d:62:62:bc:15:7b:da:50:0b:b4:bd:2c:
                    37:4e:fb:87:69:3e:14:1d:98:bd:e4:f7:aa:31:a4:
                    79:7b:73:2c:4f:c8:6b:ce:21:f5:b8:d6:25:52:dd:
                    54:8f:49:5d:17:77:b5:99:1b:d7:dc:0f:1c:9a:96:
                    3d:14:be:b1:c7:1d:45:01:ce:9a:12:62:1e:85:93:
                    73:dd:57:99:79:98:7c:28:4f:16:b0:54:a1:db:c6:
                    c4:e7:00:de:7b:62:4b:7c:dc:2c:70:d4:02:04:9e:
                    52:82:c4:7e:27:a0:71:52:ec:af:1b:1a:a3:15:74:
                    2d:82:82:42:ef:3c:30:6f:93:e7:fc:82:b6:67:f2:
                    82:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:20:1E:26:6B:98:B9:0C:9D:09:F5:EF:C9:0F:9A:20:AA:48:B1:D4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/a0776cea-a3cc-32f7-81d1-b9383f1f2597.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl

            X509v3 Authority Key Identifier:
                keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  8.23.160.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:37:77:52:2c:b0:e2:ac:42:a2:e5:11:7c:98:9c:65:ed:ef:
         19:31:25:71:e9:e3:f2:b5:90:bd:18:66:c6:0e:62:72:ad:6a:
         16:fd:42:4a:c0:94:ed:7f:a6:3b:0f:03:d0:14:c2:60:fa:5c:
         ec:ba:5b:2d:8c:d7:25:bc:5b:8c:15:06:b8:83:8d:a1:55:68:
         e0:5a:d7:05:6e:99:1c:a2:ec:a3:54:88:27:f7:79:4d:58:c6:
         b1:e8:a2:3d:62:8c:c1:a9:d9:f1:2a:7c:4b:e5:7e:cb:51:15:
         59:04:5f:2f:92:82:6b:a4:26:2b:76:67:69:51:53:e7:c8:27:
         82:7e:e5:a3:14:19:81:02:1d:88:3f:54:da:64:27:88:5c:94:
         c3:3e:b5:20:a8:41:3d:a6:35:25:7a:de:50:85:56:d1:0a:7e:
         18:55:73:a3:e8:c1:cc:d4:fe:69:24:9e:35:38:3c:9b:2e:01:
         ab:af:27:ca:5b:fc:82:91:e1:4d:5f:d4:14:d4:ad:96:bf:66:
         2b:c4:7f:76:85:e1:e0:5a:ea:b9:cc:51:b5:52:69:67:05:68:
         63:ca:80:34:10:b0:18:7b:b3:60:79:45:18:e3:95:b2:97:27:
         a1:cb:d2:15:f6:56:4a:ca:3d:59:30:95:de:1f:9d:cf:b9:cf:
         74:15:e6:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 20 02:40:00 2024 by rpki-client on console-ams.rpki-client.org