Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8b1588e6018b1876004b01f1/0/36362e3230352e3234362e302f32342d3234203d3e203233343730.roa
File:                     36362e3230352e3234362e302f32342d3234203d3e203233343730.roa (raw, json)
Hash identifier:          rE6d1TTskuXkOK4h6XoGLEfxMmj8RKtOBFUlv4Hqxe4=
Subject key identifier:   54:F3:12:16:E4:C2:E0:7E:9C:3B:2B:34:76:79:14:3B:F1:A9:2C:AF
Certificate issuer:       /CN=0ac5f821d6e6b1eb7fb04b13656a4398262c58fc0f0d66af93
Certificate serial:       5824A5A8FF046234F0C1C229D50953C47F20350A
Authority key identifier: 8A:80:1F:31:4B:EE:A8:0A:D5:97:7C:43:1F:1B:1C:77:37:66:EF:34
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9bf63dd0-7fcf-4028-967a-e4759c9edf1e/0ac5f821d6e6b1eb7fb04b13656a4398262c58fc0f0d66af93.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8b1588e6018b1876004b01f1/0/36362e3230352e3234362e302f32342d3234203d3e203233343730.roa
Signing time:             Tue 06 Feb 2024 07:54:31 +0000
ROA not before:           Tue 06 Feb 2024 07:49:31 +0000
ROA not after:            Tue 04 Feb 2025 07:54:31 +0000
asID:                     23470
IP address blocks:        66.205.246.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8b1588e6018b1876004b01f1/0/8A801F314BEEA80AD5977C431F1B1C773766EF34.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8b1588e6018b1876004b01f1/0/8A801F314BEEA80AD5977C431F1B1C773766EF34.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9bf63dd0-7fcf-4028-967a-e4759c9edf1e/0ac5f821d6e6b1eb7fb04b13656a4398262c58fc0f0d66af93.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9bf63dd0-7fcf-4028-967a-e4759c9edf1e/9bf63dd0-7fcf-4028-967a-e4759c9edf1e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9bf63dd0-7fcf-4028-967a-e4759c9edf1e/9bf63dd0-7fcf-4028-967a-e4759c9edf1e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9bf63dd0-7fcf-4028-967a-e4759c9edf1e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 02:30:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:24:a5:a8:ff:04:62:34:f0:c1:c2:29:d5:09:53:c4:7f:20:35:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ac5f821d6e6b1eb7fb04b13656a4398262c58fc0f0d66af93
        Validity
            Not Before: Feb  6 07:49:31 2024 GMT
            Not After : Feb  4 07:54:31 2025 GMT
        Subject: CN=54F31216E4C2E07E9C3B2B347679143BF1A92CAF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:7c:25:95:0b:6e:e5:7c:35:6d:67:51:88:c6:
                    d4:6b:c2:ca:a9:a0:df:ad:b9:98:d7:2d:a7:d9:a0:
                    72:42:35:02:99:bd:5c:36:20:0f:2e:9c:04:61:84:
                    b7:4f:1c:17:f1:85:30:d6:9d:1d:76:57:85:ae:89:
                    39:85:63:23:dc:09:5d:45:b2:d6:5d:fa:23:c0:29:
                    eb:d1:d6:d8:c8:75:e1:a2:26:c6:f1:60:1b:07:f0:
                    5e:1c:16:af:73:e8:b9:67:7d:9f:a3:73:83:a4:b5:
                    c7:0d:11:ee:10:f7:db:6f:cd:dc:0d:cc:6b:7d:24:
                    7c:b8:9d:a9:f7:ac:ef:c6:fd:38:4d:60:4f:94:2b:
                    ff:c4:8d:87:c8:9c:c6:f7:ab:6d:35:70:56:04:0e:
                    f1:91:fb:27:63:76:e6:08:29:ed:5d:72:a4:0f:1b:
                    7a:94:8e:d1:16:62:c7:2c:93:23:9a:f2:79:cc:a0:
                    0b:09:4d:05:7f:92:d8:9d:c7:7d:fa:2c:59:4e:8f:
                    8d:06:3b:21:ea:e3:04:cf:75:2f:c7:1b:12:1f:af:
                    3a:17:3c:6b:61:19:0f:7a:83:d1:3c:dd:11:5b:3f:
                    63:e8:35:87:87:ee:42:02:cd:f7:46:4b:04:b0:df:
                    9a:0d:57:d5:7d:d0:db:e3:67:9c:21:0e:8b:a5:48:
                    fa:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:F3:12:16:E4:C2:E0:7E:9C:3B:2B:34:76:79:14:3B:F1:A9:2C:AF
            X509v3 Authority Key Identifier:
                keyid:8A:80:1F:31:4B:EE:A8:0A:D5:97:7C:43:1F:1B:1C:77:37:66:EF:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8b1588e6018b1876004b01f1/0/8A801F314BEEA80AD5977C431F1B1C773766EF34.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9bf63dd0-7fcf-4028-967a-e4759c9edf1e/0ac5f821d6e6b1eb7fb04b13656a4398262c58fc0f0d66af93.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8b1588e6018b1876004b01f1/0/36362e3230352e3234362e302f32342d3234203d3e203233343730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.205.246.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7a:81:09:61:f3:e9:db:65:62:50:ce:48:69:3a:d7:75:93:10:
         24:f4:f4:37:f2:cf:1e:2b:5a:fe:52:42:c2:ba:8c:e7:63:44:
         55:ad:83:7c:44:6f:fb:d8:04:87:aa:58:70:53:ab:9a:6e:57:
         03:35:3a:a2:b6:5a:2b:22:c6:55:a0:78:b7:cc:69:2e:8c:3d:
         00:f1:82:f4:a0:08:16:75:39:f6:ca:87:93:74:3f:86:56:ac:
         c2:7a:46:9f:83:b3:82:52:f1:14:5f:14:51:cb:bf:6b:a8:92:
         66:77:a3:17:65:85:63:b6:12:b1:aa:a9:7a:43:75:aa:d1:30:
         fb:f1:5a:0a:e3:56:a5:90:7b:89:7b:6b:f2:a0:d4:bb:b4:a7:
         4e:91:82:64:25:ab:4e:cb:33:e8:83:d1:ee:d8:0c:71:9a:e0:
         66:6c:77:12:80:82:29:8e:28:62:d6:75:d8:f2:01:7a:dc:ae:
         77:4f:59:da:9f:a0:9c:30:11:49:00:64:64:10:d1:f4:6c:af:
         af:cf:a2:36:69:ec:b8:23:19:ee:f3:d3:19:1e:ed:ef:3e:f6:
         34:e9:e9:d4:7e:eb:f2:58:e7:6b:9f:e4:a8:1f:42:0d:88:3a:
         90:81:53:01:72:bd:03:63:a1:8e:45:87:90:d9:f8:e4:dc:48:
         cc:a5:3f:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 01:05:21 2024 by rpki-client on console-fra.rpki-client.org