Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/34302e3138332e3139322e302f31392d3234203d3e20383334.roa
File:                     34302e3138332e3139322e302f31392d3234203d3e20383334.roa (raw, json)
Hash identifier:          pyQd0ig/63K6oS+bqd+HAI8O+5a/vImD5mdUVdWN/8k=
Subject key identifier:   10:98:05:BB:48:D5:41:1D:1B:42:4B:78:A0:05:32:CC:CE:AC:11:CF
Certificate issuer:       /CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e
Certificate serial:       0AE8C59DABE8540D3B72FC42AC23CF97FE1BA5DB
Authority key identifier: 27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/34302e3138332e3139322e302f31392d3234203d3e20383334.roa
Signing time:             Mon 06 May 2024 12:37:13 +0000
ROA not before:           Mon 06 May 2024 12:32:13 +0000
ROA not after:            Mon 05 May 2025 12:37:13 +0000
asID:                     834
IP address blocks:        40.183.192.0/19 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 03 Jun 2024 17:11:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:e8:c5:9d:ab:e8:54:0d:3b:72:fc:42:ac:23:cf:97:fe:1b:a5:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e
        Validity
            Not Before: May  6 12:32:13 2024 GMT
            Not After : May  5 12:37:13 2025 GMT
        Subject: CN=109805BB48D5411D1B424B78A00532CCCEAC11CF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:60:c6:01:de:79:22:ae:d1:13:95:92:d9:ae:
                    ba:66:21:92:d0:4a:24:49:f8:3f:97:0c:ec:49:74:
                    1c:dc:a8:3d:58:08:4a:b6:ff:b8:53:68:6a:46:10:
                    9b:08:a3:fb:42:63:38:a3:42:03:ee:8c:92:12:84:
                    b5:ba:94:f9:58:fa:53:0a:1d:ce:46:b0:40:0b:ed:
                    30:40:18:1c:f4:4b:ac:26:d2:56:15:d8:57:3b:78:
                    cc:a0:b5:f6:bc:16:29:b1:0a:81:58:67:38:32:30:
                    9c:a8:f9:f5:6e:a3:36:e2:0f:20:80:12:20:0d:00:
                    c5:3a:0c:4e:36:e4:02:e0:29:32:1f:56:44:a1:65:
                    b5:76:7f:4d:a0:7a:6c:0c:86:70:78:8f:d2:46:f4:
                    e5:7d:d6:ed:42:37:a9:30:78:43:33:2b:36:1a:62:
                    3c:2a:66:af:b3:1e:b3:db:a6:04:33:f9:41:6b:5b:
                    97:9a:29:18:99:57:6b:b1:dd:5c:ee:df:ff:fc:0a:
                    fa:f8:d2:a5:83:e1:32:76:19:16:3c:c3:17:ae:e8:
                    c6:6f:59:4b:75:26:7e:b5:17:ce:ad:c0:f3:0d:de:
                    5d:09:56:e4:d9:b6:6e:8f:b6:8c:28:e9:ec:12:ce:
                    ec:72:07:66:c7:fd:6d:24:5a:dc:fb:aa:48:2c:96:
                    10:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:98:05:BB:48:D5:41:1D:1B:42:4B:78:A0:05:32:CC:CE:AC:11:CF
            X509v3 Authority Key Identifier:
                keyid:27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/34302e3138332e3139322e302f31392d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  40.183.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         0a:ee:46:6d:eb:2a:27:d5:1c:6f:2f:c5:07:8c:61:4b:c3:68:
         dd:e0:53:0a:9f:ed:40:ac:de:0c:f2:86:9b:25:19:83:d1:25:
         22:df:e9:77:6e:5f:41:52:a5:b6:84:aa:ba:35:58:71:2c:5d:
         e3:86:61:7f:62:57:36:8f:1e:94:0d:31:fe:cb:48:f7:df:a5:
         a1:9d:37:d3:9b:0d:5f:6a:35:43:f7:6c:1a:6d:e2:8f:0e:80:
         b7:86:18:be:b7:72:75:ec:df:9b:2c:ff:71:fe:9d:2c:e3:95:
         a7:11:39:41:bc:ae:91:33:f3:0e:ae:45:9d:0b:5f:1a:9a:ec:
         cc:c7:e1:7e:03:95:f4:25:2a:69:c2:0d:b7:36:36:01:a0:99:
         cf:4d:fa:2d:a2:a4:f8:a3:4a:67:69:23:f6:6d:c1:7b:40:cc:
         f6:9a:4b:25:65:5c:de:73:3e:46:15:33:6c:74:04:17:a0:b0:
         ee:5b:f7:78:4d:90:29:77:c7:ec:8e:71:cd:2c:e4:6c:8a:53:
         f3:07:4f:3b:1f:e4:58:6d:44:b9:84:af:5b:1f:41:49:65:5d:
         67:4d:98:01:c5:57:37:58:14:5c:56:34:3f:5f:08:3d:ab:b6:
         f9:1e:6d:74:65:b0:89:a8:76:2d:e8:ac:c1:a3:98:5f:b8:86:
         81:ec:4b:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 16:36:40 2024 by rpki-client on console-fra.rpki-client.org