Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/34302e3138332e38302e302f32302d3234203d3e20383334.roa
File:                     34302e3138332e38302e302f32302d3234203d3e20383334.roa (raw, json)
Hash identifier:          rTVeoLbZqraaHYbeSymW/pO9rIaLmDMoGtrJS8XGGGE=
Subject key identifier:   89:24:2D:F1:79:90:A1:DE:9D:E4:09:E1:E7:70:8F:E5:D1:97:A7:94
Certificate issuer:       /CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e
Certificate serial:       5688F0A61265754368B74204443F0B584FBF2770
Authority key identifier: 27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/34302e3138332e38302e302f32302d3234203d3e20383334.roa
Signing time:             Thu 04 Apr 2024 01:46:04 +0000
ROA not before:           Thu 04 Apr 2024 01:41:04 +0000
ROA not after:            Thu 03 Apr 2025 01:46:04 +0000
asID:                     834
IP address blocks:        40.183.80.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 13:12:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:88:f0:a6:12:65:75:43:68:b7:42:04:44:3f:0b:58:4f:bf:27:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e
        Validity
            Not Before: Apr  4 01:41:04 2024 GMT
            Not After : Apr  3 01:46:04 2025 GMT
        Subject: CN=89242DF17990A1DE9DE409E1E7708FE5D197A794
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:9a:20:3f:9e:a2:ad:7e:07:16:d6:9e:a8:06:
                    2b:a1:8b:ca:52:10:83:11:4a:96:3f:55:17:1b:33:
                    c5:99:98:d5:5a:1d:7e:a0:96:51:27:38:20:17:56:
                    5e:54:5a:5d:a9:14:ed:2a:0f:68:e0:7c:ed:d0:40:
                    a8:46:4f:78:3d:13:10:76:ec:6a:03:25:cb:95:42:
                    ff:b9:89:18:e5:20:5b:65:fb:5e:d0:10:ad:d4:7b:
                    3d:e4:c5:09:98:84:4d:49:d0:ad:08:e5:4e:1d:38:
                    32:c5:6e:c3:b5:f9:3b:e5:ac:58:0c:51:70:1e:9b:
                    07:c3:e7:d8:c3:87:7e:72:85:e5:e4:06:da:c6:20:
                    c5:cb:42:e5:00:e8:3f:15:0d:0e:02:46:77:2c:fa:
                    8c:8a:25:48:c0:02:87:7f:3b:a7:e9:ee:19:96:fb:
                    10:c3:69:56:8b:5e:25:0e:0e:de:2d:a5:ad:90:29:
                    a3:ab:af:a3:33:d8:27:36:c0:70:cc:bf:08:bf:f1:
                    61:7e:37:f5:09:3e:e0:68:f0:e6:1d:b7:b7:86:b7:
                    8a:20:95:49:15:40:c1:d2:1f:ec:10:5c:3d:5a:f0:
                    d0:58:e4:0b:97:8a:7a:18:74:5a:23:66:f8:2b:e9:
                    1e:a9:49:22:51:e5:62:32:87:d7:47:2f:dc:6a:9e:
                    6c:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:24:2D:F1:79:90:A1:DE:9D:E4:09:E1:E7:70:8F:E5:D1:97:A7:94
            X509v3 Authority Key Identifier:
                keyid:27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/34302e3138332e38302e302f32302d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  40.183.80.0/20

    Signature Algorithm: sha256WithRSAEncryption
         6d:e8:b3:43:47:a8:6f:5e:de:6c:b0:46:82:64:cb:ae:9e:11:
         ed:4e:71:fb:ea:86:b2:f7:3c:32:ae:d4:b2:fd:a8:e4:1d:53:
         f5:70:d6:a7:fa:a3:4c:ac:1e:9d:33:31:22:95:39:d2:b6:a1:
         59:b1:55:97:bd:d6:bc:09:a2:03:0b:d3:c0:d1:47:8e:29:aa:
         f9:63:e0:00:9c:4e:0c:c1:18:f6:ac:24:7e:5d:6f:33:eb:a5:
         14:38:1a:bd:4d:23:5e:5b:13:f9:8c:1a:a1:9d:92:ff:28:09:
         1b:e1:ac:a4:a5:24:06:f8:43:64:7b:33:e2:3a:c7:ac:67:cb:
         8c:7a:1b:6a:50:9f:e9:9b:f0:4a:9f:9f:0e:c6:98:a8:fe:50:
         eb:c2:ed:de:6e:71:5c:f4:0b:2f:e1:fb:5e:1f:32:b3:6f:8d:
         18:ff:94:1c:aa:7c:37:4a:23:39:ec:0c:23:f6:de:c2:a1:c1:
         32:f2:34:77:03:42:bd:ce:9f:08:33:ef:4f:7d:20:72:4f:18:
         43:7f:14:91:19:f4:65:81:ab:54:bd:0a:87:42:74:eb:cf:e9:
         be:ed:72:45:78:81:db:3f:ab:8e:b6:7f:a1:45:ac:57:ac:d6:
         a1:a9:0f:9e:28:0d:e7:b8:74:22:3c:54:15:b6:4a:7b:cd:fa:
         08:a9:7c:2e
-----BEGIN CERTIFICATE-----
MIIFqzCCBJOgAwIBAgIUVojwphJldUNot0IERD8LWE+/J3AwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyODk4MTIwNGI5MzQxMzU0MGY3ZDViODZmMGY5ZTc0ZjFk
YWFkZTMxZGYwZGIwZjM4OGUwHhcNMjQwNDA0MDE0MTA0WhcNMjUwNDAzMDE0NjA0
WjAzMTEwLwYDVQQDEyg4OTI0MkRGMTc5OTBBMURFOURFNDA5RTFFNzcwOEZFNUQx
OTdBNzk0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1JogP56irX4H
FtaeqAYroYvKUhCDEUqWP1UXGzPFmZjVWh1+oJZRJzggF1ZeVFpdqRTtKg9o4Hzt
0ECoRk94PRMQduxqAyXLlUL/uYkY5SBbZfte0BCt1Hs95MUJmIRNSdCtCOVOHTgy
xW7Dtfk75axYDFFwHpsHw+fYw4d+coXl5AbaxiDFy0LlAOg/FQ0OAkZ3LPqMiiVI
wAKHfzun6e4ZlvsQw2lWi14lDg7eLaWtkCmjq6+jM9gnNsBwzL8Iv/Fhfjf1CT7g
aPDmHbe3hreKIJVJFUDB0h/sEFw9WvDQWOQLl4p6GHRaI2b4K+keqUkiUeViMofX
Ry/cap5sRwIDAQABo4ICqzCCAqcwHQYDVR0OBBYEFIkkLfF5kKHeneQJ4edwj+XR
l6eUMB8GA1UdIwQYMBaAFCeK6Mq422vdgtde3W2FDRkgDR+TMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODJkNWRlNDEwMTg0Zjc1M2RjNjQxMTlkLzUv
Mjc4QUU4Q0FCOERCNkJERDgyRDc1RURENkQ4NTBEMTkyMDBEMUY5My5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0
OTMzYWU1LzJhMTM1NGM3LWFiY2EtNDFiNi04YjIxLTRlMzVhOGQ5YzJiNC84OTgx
MjA0YjkzNDEzNTQwZjdkNWI4NmYwZjllNzRmMWRhYWRlMzFkZjBkYjBmMzg4ZS5j
ZXIwgZsGCCsGAQUFBwELBIGOMIGLMIGIBggrBgEFBQcwC4Z8cnN5bmM6Ly9ycGtp
LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRlODJkNWRlNDEwMTg0Zjc1
M2RjNjQxMTlkLzUvMzQzMDJlMzEzODMzMmUzODMwMmUzMDJmMzIzMDJkMzIzNDIw
M2QzZTIwMzgzMzM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsG
AQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEKLdQMA0GCSqGSIb3DQEBCwUAA4IBAQBt
6LNDR6hvXt5ssEaCZMuunhHtTnH76oay9zwyrtSy/ajkHVP1cNan+qNMrB6dMzEi
lTnStqFZsVWXvda8CaIDC9PA0UeOKar5Y+AAnE4MwRj2rCR+XW8z66UUOBq9TSNe
WxP5jBqhnZL/KAkb4aykpSQG+ENkezPiOsesZ8uMehtqUJ/pm/BKn58Oxpio/lDr
wu3ebnFc9Asv4fteHzKzb40Y/5Qcqnw3SiM57Awj9t7CocEy8jR3A0K9zp8IM+9P
fSByTxhDfxSRGfRlgatUvQqHQnTrz+m+7XJFeIHbP6uOtn+hRaxXrNahqQ+eKA3n
uHQiPFQVtkp7zfoIqXwu
-----END CERTIFICATE-----
Generated at Thu May 2 12:22:56 2024 by rpki-client on console-ams.rpki-client.org