Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8ce9defe018e32d777fb1b63/0/3130342e3235342e3139322e302f32342d3234203d3e2038313030.roa
File:                     3130342e3235342e3139322e302f32342d3234203d3e2038313030.roa (raw, json)
Hash identifier:          fgtJgA7lu/93nOadn4pyzYVxAzVpHxeCBJC7NV/Z7rA=
Subject key identifier:   35:5F:B5:C1:E5:60:A9:D7:02:A5:EF:80:10:59:67:D0:00:C7:4E:DB
Certificate issuer:       /CN=f832b107355da27671d2b5322edd41212fc6b822b0b01da1fd
Certificate serial:       7536E829B21C007D77CA5BB6F364B83FD99C664E
Authority key identifier: BC:DE:2B:00:12:18:FC:CC:04:46:74:45:02:EC:6F:A5:C9:85:F4:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/52a24bfe-7695-456c-8b3d-349b37b047d3/f832b107355da27671d2b5322edd41212fc6b822b0b01da1fd.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8ce9defe018e32d777fb1b63/0/3130342e3235342e3139322e302f32342d3234203d3e2038313030.roa
Signing time:             Tue 16 Apr 2024 18:23:21 +0000
ROA not before:           Tue 16 Apr 2024 18:18:21 +0000
ROA not after:            Tue 15 Apr 2025 18:23:21 +0000
asID:                     8100
IP address blocks:        104.254.192.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade8ce9defe018e32d777fb1b63/0/BCDE2B001218FCCC0446744502EC6FA5C985F46B.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade8ce9defe018e32d777fb1b63/0/BCDE2B001218FCCC0446744502EC6FA5C985F46B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/52a24bfe-7695-456c-8b3d-349b37b047d3/f832b107355da27671d2b5322edd41212fc6b822b0b01da1fd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/52a24bfe-7695-456c-8b3d-349b37b047d3/52a24bfe-7695-456c-8b3d-349b37b047d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/52a24bfe-7695-456c-8b3d-349b37b047d3/52a24bfe-7695-456c-8b3d-349b37b047d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/52a24bfe-7695-456c-8b3d-349b37b047d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 13:15:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:36:e8:29:b2:1c:00:7d:77:ca:5b:b6:f3:64:b8:3f:d9:9c:66:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f832b107355da27671d2b5322edd41212fc6b822b0b01da1fd
        Validity
            Not Before: Apr 16 18:18:21 2024 GMT
            Not After : Apr 15 18:23:21 2025 GMT
        Subject: CN=355FB5C1E560A9D702A5EF80105967D000C74EDB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:e2:3f:a3:9b:b3:37:65:9a:15:e7:95:95:a3:
                    93:7a:90:02:e0:12:15:c2:96:74:58:e0:b9:aa:88:
                    af:c7:ce:73:54:98:47:e0:be:42:55:c1:a5:60:b4:
                    83:2f:57:50:16:c4:76:62:42:75:65:f3:12:82:cb:
                    64:f3:73:45:ff:69:d2:f3:74:23:85:bd:62:65:ea:
                    38:53:da:a7:e5:e2:42:2f:08:a5:78:bc:07:bd:c3:
                    fb:a1:16:93:0a:45:e8:da:31:4a:a8:dc:ac:9a:63:
                    dd:7b:74:2d:dc:f2:c8:a6:d7:19:2a:13:94:57:a4:
                    bb:b8:35:cb:40:e3:69:a8:8a:7f:44:5f:e5:bf:02:
                    83:45:04:79:e6:fd:50:19:13:0b:a6:2a:25:28:b9:
                    16:b7:c5:e8:52:4d:0b:d8:cf:30:86:22:49:f3:a5:
                    e7:c1:17:65:fd:36:a1:8d:f7:7d:a9:f4:53:62:e1:
                    15:0a:da:a0:04:df:d0:e3:e5:85:6b:23:bf:03:10:
                    52:05:c8:44:ed:2b:fb:38:1e:38:8b:b7:95:76:f8:
                    87:e2:a7:2c:6b:3a:68:9b:c1:7a:a9:f4:bd:3c:42:
                    9e:31:84:f3:31:9d:7b:56:b1:bc:68:81:83:47:e3:
                    69:ba:53:c0:c1:db:cb:46:78:d7:0c:96:6d:d9:e0:
                    d9:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:5F:B5:C1:E5:60:A9:D7:02:A5:EF:80:10:59:67:D0:00:C7:4E:DB
            X509v3 Authority Key Identifier:
                keyid:BC:DE:2B:00:12:18:FC:CC:04:46:74:45:02:EC:6F:A5:C9:85:F4:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8ce9defe018e32d777fb1b63/0/BCDE2B001218FCCC0446744502EC6FA5C985F46B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/52a24bfe-7695-456c-8b3d-349b37b047d3/f832b107355da27671d2b5322edd41212fc6b822b0b01da1fd.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8ce9defe018e32d777fb1b63/0/3130342e3235342e3139322e302f32342d3234203d3e2038313030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.254.192.0/24

    Signature Algorithm: sha256WithRSAEncryption
         13:92:40:ea:29:48:51:09:ed:72:a6:6f:fe:d1:b5:80:85:6e:
         ee:de:47:f6:32:5c:58:31:58:60:bb:8f:78:ae:1b:64:b1:b2:
         da:13:a8:c9:f5:2e:e3:54:80:e3:63:16:47:76:14:b7:c5:38:
         e5:d8:34:3a:3e:79:60:9e:49:90:91:01:96:bf:1f:d6:db:e9:
         e1:c2:fb:da:85:30:a7:37:95:ec:cb:75:81:88:ac:f7:17:3f:
         36:2f:95:9b:e3:1c:a6:8c:66:98:90:24:3d:bb:3b:cf:34:69:
         68:a0:25:21:96:50:4f:8a:b4:39:dd:bd:3f:2d:a3:8d:94:dc:
         23:7c:92:32:b0:c3:34:cd:f1:e1:46:02:c8:63:9a:af:78:ca:
         0f:4c:d5:15:1b:a3:42:ac:37:be:7a:2a:1f:96:00:79:7e:68:
         18:85:17:67:47:85:89:19:e1:c6:ce:61:d0:89:78:b0:54:20:
         71:30:26:6e:eb:e5:84:36:cc:dc:3c:97:ca:0d:32:b7:db:06:
         fb:f9:26:36:ab:cb:75:70:f6:a0:4a:b3:a5:d5:a5:45:6f:88:
         d7:9b:08:d6:ee:2a:36:b2:10:f1:74:5e:c1:d9:c5:ba:af:a5:
         b3:f9:8c:73:45:64:7b:b5:db:cd:c8:a1:ba:37:f6:ba:e7:6f:
         96:15:94:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 12:22:56 2024 by rpki-client on console-ams.rpki-client.org