Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/f94ccadf-7418-3f69-be72-bdf267aac201.roa
File:                     f94ccadf-7418-3f69-be72-bdf267aac201.roa (raw, json)
Hash identifier:          QRfJQYQe9iD6HkFHDEpj/MiFdJaSOYBaAX8+D6IS69U=
Subject key identifier:   6F:EC:48:73:36:B4:0F:26:AB:1F:00:A8:EA:1F:F0:8A:0E:B5:61:87
Certificate issuer:       /CN=23ddb57b-8888-40f4-bf17-518b6a50512d
Certificate serial:       010D0C9F43285845C5A8F2BE936FF13749C91140
Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/f94ccadf-7418-3f69-be72-bdf267aac201.roa
Signing time:             Sun 05 May 2024 13:00:34 +0000
ROA not before:           Sun 05 May 2024 13:00:34 +0000
ROA not after:            Sat 03 Aug 2024 13:00:34 +0000
asID:                     13720
IP address blocks:        209.0.234.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:c5:a8:f2:be:93:6f:f1:37:49:c9:11:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d
        Validity
            Not Before: May  5 13:00:34 2024 GMT
            Not After : Aug  3 13:00:34 2024 GMT
        Subject: CN=d8e261b2-f084-430e-9c50-1452f011f288
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:c2:ee:ff:c5:ba:89:e9:d0:5f:10:09:90:0f:
                    4d:97:13:f3:9b:65:bd:3c:16:fc:1a:91:e5:26:09:
                    21:7e:82:89:6f:5b:de:7a:6f:bf:de:90:30:06:b9:
                    12:35:07:ca:b4:ad:cd:01:66:fa:67:72:17:74:d9:
                    bc:be:9c:f9:04:d4:c2:f9:4e:a2:34:ef:01:19:d6:
                    09:4d:f9:23:82:6b:ee:95:f1:da:6c:07:a8:86:f4:
                    fd:22:5f:02:9f:bb:09:11:fc:4b:2e:a6:30:71:bf:
                    c6:39:76:22:62:5c:3c:f5:d1:bb:1d:08:ce:88:a0:
                    28:10:8a:4a:42:f8:f3:58:dc:18:50:a5:c4:42:8d:
                    13:88:b1:6d:e8:f1:21:03:30:94:fd:2c:3b:e8:fb:
                    9d:fa:65:a6:87:af:3d:f2:f0:4b:f7:d8:13:4f:86:
                    e7:d8:88:fe:0b:a3:57:88:ed:1e:4b:80:a8:5b:a4:
                    d3:61:0e:28:7b:2f:e0:59:bb:47:92:32:1f:3f:c1:
                    26:31:83:8c:a8:96:e7:6f:e8:47:89:a2:1b:96:09:
                    88:c6:8a:11:d5:b4:2d:61:b2:59:27:e4:fe:5c:17:
                    d0:85:db:1f:0a:c9:02:0b:4a:67:fb:c2:74:8c:98:
                    df:f5:f1:9b:f9:57:ae:cc:7e:de:3e:ef:79:0d:cc:
                    93:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:EC:48:73:36:B4:0F:26:AB:1F:00:A8:EA:1F:F0:8A:0E:B5:61:87
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/f94ccadf-7418-3f69-be72-bdf267aac201.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl

            X509v3 Authority Key Identifier:
                keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.0.234.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ad:07:8c:84:89:a7:26:27:dd:93:0d:ff:93:87:76:90:77:f8:
         31:82:86:9c:0f:60:48:58:a4:67:77:4f:73:34:6b:65:c2:5a:
         43:57:83:06:c0:65:38:66:85:bb:ae:e3:f6:a9:7a:f9:3e:2a:
         06:92:b3:0f:8f:5c:ce:52:b3:32:66:6c:79:3b:16:13:5b:2f:
         57:95:86:37:c7:8a:21:82:a5:49:15:08:56:c7:90:58:2f:5b:
         b7:7c:3d:ea:09:99:ce:a2:4e:e7:16:33:c3:81:62:da:2f:6a:
         96:68:55:47:ea:fe:1d:4a:c2:93:b5:3d:71:43:88:19:ab:9d:
         e8:ed:02:51:d8:f6:1a:a4:1d:74:d0:c7:2a:36:d5:cd:b2:c9:
         cc:3e:df:68:6d:04:f9:b6:a3:7a:71:3a:97:79:9a:e5:f9:c4:
         8d:76:95:a2:6c:a2:79:03:a4:43:d3:ec:e8:3a:68:8e:4a:68:
         8b:27:ca:14:2f:7d:52:59:37:2a:3d:90:21:ca:89:e2:65:c7:
         5f:bb:d7:ec:23:0c:4b:0d:07:e4:aa:dc:ee:fe:d4:22:7e:46:
         e7:6a:cf:bf:17:db:01:f0:21:e0:ad:43:7c:50:57:fc:65:b0:
         71:04:49:2f:d0:e3:26:58:03:1d:39:b9:4a:86:63:84:ee:ae:
         a7:0f:f5:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 12:37:38 2024 by rpki-client on console-ams.rpki-client.org