Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/e1906e76-307d-33e3-93f9-a119ad7b5e1c.roa
File:                     e1906e76-307d-33e3-93f9-a119ad7b5e1c.roa (raw, json)
Hash identifier:          WcCGsEttX+RgVZ4x1DDH9xKb5fnPvYi0BOM6DgUEzRs=
Subject key identifier:   16:F9:B6:22:C1:51:00:E6:C3:E5:51:29:5B:D7:1F:2A:F1:8B:65:80
Certificate issuer:       /CN=23ddb57b-8888-40f4-bf17-518b6a50512d
Certificate serial:       010D0C9F432858475910BDF5788AC450C35C3700
Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/e1906e76-307d-33e3-93f9-a119ad7b5e1c.roa
Signing time:             Fri 27 Sep 2024 01:00:31 +0000
ROA not before:           Fri 27 Sep 2024 01:00:31 +0000
ROA not after:            Thu 26 Dec 2024 02:00:31 +0000
asID:                     20473
IP address blocks:        8.9.36.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:59:10:bd:f5:78:8a:c4:50:c3:5c:37:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d
        Validity
            Not Before: Sep 27 01:00:31 2024 GMT
            Not After : Dec 26 02:00:31 2024 GMT
        Subject: CN=0c6de97d-18e2-4e0e-b5e9-9b224d3a3c38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:8d:72:7b:e2:e2:21:a4:46:0f:7c:7d:f4:8e:
                    c7:44:3b:36:37:f7:00:c0:3e:94:74:23:1b:80:5d:
                    4b:28:60:89:5e:55:45:69:b6:79:ba:22:80:30:7f:
                    1d:48:5a:b5:69:e0:da:21:1e:ec:ce:12:6d:5b:8a:
                    a8:ec:fb:05:c9:ac:b4:14:a7:44:51:51:36:36:54:
                    a6:25:c4:1a:af:b1:52:d6:45:12:fd:f1:8d:23:d8:
                    f4:8f:78:f3:64:db:92:f2:4e:44:48:87:cd:a2:39:
                    d9:b8:53:25:3f:8f:60:b7:12:97:5b:4f:16:02:78:
                    1a:eb:fe:2e:0f:ea:c1:fc:34:8b:fa:95:45:24:59:
                    2f:04:bc:fe:61:38:d6:56:f8:6d:1b:00:20:08:58:
                    d5:1b:be:e9:f8:f9:5b:ee:d0:96:a0:88:d7:8c:7f:
                    f4:3f:9e:a1:9f:1e:20:78:c3:27:16:c9:c7:24:c6:
                    46:05:cd:de:97:3b:b0:89:09:a2:b4:e5:26:45:88:
                    b7:f4:e0:37:40:93:ab:2d:dd:7d:f2:c4:37:81:5b:
                    0e:e9:be:4f:6e:02:8c:0b:03:75:00:a5:27:9c:ac:
                    82:cb:57:04:ab:0a:c3:70:a7:8e:9f:72:dc:e1:43:
                    be:ca:ee:27:34:68:9c:ed:7d:f9:99:0b:57:ce:4a:
                    f9:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:F9:B6:22:C1:51:00:E6:C3:E5:51:29:5B:D7:1F:2A:F1:8B:65:80
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/e1906e76-307d-33e3-93f9-a119ad7b5e1c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl

            X509v3 Authority Key Identifier:
                keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  8.9.36.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8c:c0:3f:21:37:0a:74:77:eb:05:77:4d:19:4d:4f:56:1b:42:
         b7:91:3f:ea:52:29:91:af:9d:bb:ae:a4:08:91:8d:60:79:db:
         54:22:09:81:c2:e5:ab:95:9d:fe:a7:93:a9:e1:40:85:72:24:
         71:c5:ca:62:87:fc:5c:e8:1f:f0:37:59:37:d7:ce:6c:d3:65:
         0d:b3:3d:c6:6e:77:77:1a:5e:78:a6:96:2e:e4:4c:0c:be:68:
         4f:d2:f6:e8:79:fe:1e:b9:95:c5:fb:a7:00:b4:02:74:ee:15:
         1e:2e:3b:88:09:bb:a5:64:86:c7:52:3f:e1:a1:5e:a4:f2:c4:
         22:8d:99:80:dd:3f:0b:af:79:ad:2d:18:60:4a:fd:f9:d9:08:
         74:61:79:50:75:a4:bc:b4:90:cd:3f:a6:0f:cb:ec:1c:79:78:
         2a:ca:13:a8:2c:8a:62:bf:ef:49:e4:64:8a:6f:ea:da:1c:56:
         9c:93:a9:0c:43:54:17:1f:60:5f:f3:48:ca:8c:d5:09:7b:2b:
         af:28:99:72:e0:f5:11:a4:3e:5e:4f:3f:f7:26:06:99:8a:39:
         9c:de:e8:f2:69:39:b0:de:c7:63:89:62:52:90:f0:95:9c:3e:
         58:a0:f1:bf:57:e9:3f:80:52:6c:58:a2:b9:20:01:25:bc:85:
         bc:66:1d:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:10:52 2024 by rpki-client on console-fra.rpki-client.org