Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/dc730107-467c-3f67-a0af-d11f8c435742.roa
File:                     dc730107-467c-3f67-a0af-d11f8c435742.roa (raw, json)
Hash identifier:          Mb+SR3aWWCJn2pNMvx42Xn4UAxbu00LWrrdL92ihpSk=
Subject key identifier:   ED:80:75:D0:9A:B4:D3:0A:3A:D5:11:75:E1:CB:CB:58:D1:9A:AD:36
Certificate issuer:       /CN=23ddb57b-8888-40f4-bf17-518b6a50512d
Certificate serial:       010D0C9F4328584598FDF297F979D0F7DE9BBE00
Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/dc730107-467c-3f67-a0af-d11f8c435742.roa
Signing time:             Fri 19 Apr 2024 13:00:36 +0000
ROA not before:           Fri 19 Apr 2024 13:00:36 +0000
ROA not after:            Thu 18 Jul 2024 13:00:36 +0000
asID:                     20473
IP address blocks:        8.6.8.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 27 Apr 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:98:fd:f2:97:f9:79:d0:f7:de:9b:be:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d
        Validity
            Not Before: Apr 19 13:00:36 2024 GMT
            Not After : Jul 18 13:00:36 2024 GMT
        Subject: CN=231ec65b-8e70-468f-bef3-2f31a4ba6444
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:44:4e:7d:9b:63:4e:81:c1:ba:8c:55:81:1f:
                    ec:fb:04:0b:7d:ac:44:a0:e3:7d:50:57:4e:71:4c:
                    3b:ab:63:a0:43:94:d8:5e:af:63:91:35:72:cc:c2:
                    29:c8:53:54:76:f2:a7:75:ea:ce:80:39:ff:24:32:
                    b9:eb:e2:74:9e:b4:48:bb:e4:dc:dd:eb:15:70:c8:
                    e8:ee:55:56:eb:ed:bf:b2:22:d5:42:ce:ed:5c:3f:
                    c5:ad:98:1f:69:e5:87:96:1a:64:b2:72:5b:54:66:
                    39:0d:16:75:46:2a:10:7c:3f:03:ed:b8:09:26:e4:
                    a9:9d:0d:37:22:bc:0a:12:ac:ec:81:c4:cc:c8:96:
                    ec:e6:7f:43:63:14:e5:73:2e:86:47:1b:60:fa:eb:
                    a8:03:22:45:51:8c:5d:4e:c7:1e:3b:b3:15:f7:e0:
                    c5:73:9e:07:ad:bd:b5:73:b4:37:1a:f1:ee:67:5e:
                    55:03:7a:2b:0d:8a:c9:77:49:5e:d0:3c:15:8e:2f:
                    af:23:24:6f:96:6e:dc:54:94:23:ff:55:03:ef:8f:
                    d4:c5:6d:23:64:17:e8:45:56:1a:76:9d:8c:fd:d6:
                    35:c7:f2:02:d5:c1:6e:78:fa:44:05:ad:89:6e:ac:
                    d7:52:d7:10:c4:67:a1:83:b5:70:69:a1:df:19:e3:
                    fd:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:80:75:D0:9A:B4:D3:0A:3A:D5:11:75:E1:CB:CB:58:D1:9A:AD:36
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/dc730107-467c-3f67-a0af-d11f8c435742.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl

            X509v3 Authority Key Identifier:
                keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  8.6.8.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:c9:9b:28:26:7c:d2:0a:29:c5:16:f0:a5:98:cf:9e:61:ce:
         ee:0b:f6:a8:4f:a3:36:1f:36:7a:49:a8:20:0a:27:a7:fc:59:
         02:df:a3:08:8f:1c:a8:29:e3:6b:0a:32:81:59:29:36:a6:75:
         47:62:42:24:07:08:1e:f3:fb:5f:11:6e:7a:fd:59:62:9a:31:
         50:9c:07:df:18:31:0c:ca:a1:35:37:d6:30:b1:b1:53:af:43:
         36:8e:84:ea:f2:90:9d:2d:e1:cc:41:be:8d:0d:e5:19:f1:05:
         ec:43:82:90:36:73:d0:9e:c4:cf:a1:53:de:a6:38:05:dd:1d:
         86:cf:6b:5f:be:46:e0:08:48:a0:12:9a:34:11:12:6d:44:26:
         34:53:b8:fa:cc:33:31:fe:de:0f:96:df:8a:45:2b:3b:7d:bf:
         2e:fd:4c:cb:71:96:d6:e2:8c:69:50:4c:c8:2f:f4:a7:97:b7:
         37:a1:ba:a2:5c:dc:db:8e:e0:62:b8:9b:08:bb:f5:89:ee:7e:
         90:6b:19:af:b3:8f:57:5e:9b:f8:9c:74:42:37:70:e9:ca:1f:
         27:19:ea:92:29:0f:67:d7:39:da:58:8e:8f:e1:a5:4f:7a:fd:
         f1:fe:31:a4:84:93:d5:1e:35:6b:50:41:48:6d:f7:a9:ee:12:
         4d:85:9a:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 26 00:40:37 2024 by rpki-client on console-fra.rpki-client.org