Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/3230352e3133342e3232392e302f32342d3234203d3e203137313339.roa
File:                     3230352e3133342e3232392e302f32342d3234203d3e203137313339.roa (raw, json)
Hash identifier:          vIffgBRGJdOCSKvWqA14GSGsKrjfhhswKuypMq/1uYU=
Subject key identifier:   6C:55:25:54:DE:07:D5:1F:02:A4:81:54:94:28:62:66:07:94:4C:26
Certificate issuer:       /CN=fb5ab1cb30ff430e23ac6e14a09173d9b9b4b3e328a76b388e
Certificate serial:       36335AB0550F5BF0DDFF0D60DDEE45810C3805A4
Authority key identifier: 0A:17:B4:0A:79:DF:FF:44:FA:FA:3D:40:F6:E4:D0:0D:83:51:4B:B3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490/fb5ab1cb30ff430e23ac6e14a09173d9b9b4b3e328a76b388e.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/3230352e3133342e3232392e302f32342d3234203d3e203137313339.roa
Signing time:             Thu 23 May 2024 10:59:12 +0000
ROA not before:           Thu 23 May 2024 10:54:12 +0000
ROA not after:            Thu 22 May 2025 10:59:12 +0000
asID:                     17139
IP address blocks:        205.134.229.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/0A17B40A79DFFF44FAFA3D40F6E4D00D83514BB3.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/0A17B40A79DFFF44FAFA3D40F6E4D00D83514BB3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490/fb5ab1cb30ff430e23ac6e14a09173d9b9b4b3e328a76b388e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490/293fb15b-5a85-4abe-bd24-232a114ae490.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490/293fb15b-5a85-4abe-bd24-232a114ae490.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 03 Jul 2024 22:31:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:33:5a:b0:55:0f:5b:f0:dd:ff:0d:60:dd:ee:45:81:0c:38:05:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb5ab1cb30ff430e23ac6e14a09173d9b9b4b3e328a76b388e
        Validity
            Not Before: May 23 10:54:12 2024 GMT
            Not After : May 22 10:59:12 2025 GMT
        Subject: CN=6C552554DE07D51F02A481549428626607944C26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:e4:9b:43:9c:ad:b9:e2:ac:65:a4:90:42:07:
                    d6:11:b3:93:d1:4d:56:f5:2e:d9:81:34:03:1b:27:
                    65:b9:07:92:46:05:e2:5f:a7:9f:1b:6b:d8:2c:c9:
                    8d:6b:b8:49:e4:e4:f6:74:ff:14:5e:f3:61:b4:91:
                    80:be:19:ac:07:14:f4:13:6d:63:60:8b:fe:12:28:
                    13:0b:a1:10:57:46:20:ef:50:69:9e:54:86:f3:52:
                    7b:1f:4f:a1:c2:15:bc:8a:cc:76:ed:51:6a:92:12:
                    b8:cf:6d:22:9e:ec:42:b1:eb:2d:82:20:12:e4:8d:
                    bd:d8:34:f2:d2:bd:c5:32:ae:72:9f:3f:2f:8a:be:
                    55:f3:f5:52:27:bf:b7:4e:78:a9:b1:4d:1c:a8:8f:
                    ef:83:9d:ec:ca:6f:04:8e:36:2f:95:b4:56:ea:27:
                    7a:86:e8:d3:09:ca:3a:00:39:76:ee:92:62:52:a5:
                    f7:6d:2b:e5:36:60:e7:a8:3e:39:35:0a:2e:45:0d:
                    52:44:16:5f:3d:2c:28:94:c6:d7:51:b9:b8:da:fb:
                    ee:f6:7a:a3:bc:9b:9b:ec:13:12:ff:9b:86:17:37:
                    33:67:0c:83:9e:3a:a8:67:97:a6:7c:f9:6e:6c:3b:
                    b0:20:2f:00:2b:fc:de:5b:2a:1e:77:46:ab:6e:c9:
                    7b:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:55:25:54:DE:07:D5:1F:02:A4:81:54:94:28:62:66:07:94:4C:26
            X509v3 Authority Key Identifier:
                keyid:0A:17:B4:0A:79:DF:FF:44:FA:FA:3D:40:F6:E4:D0:0D:83:51:4B:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/0A17B40A79DFFF44FAFA3D40F6E4D00D83514BB3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490/fb5ab1cb30ff430e23ac6e14a09173d9b9b4b3e328a76b388e.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/3230352e3133342e3232392e302f32342d3234203d3e203137313339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.134.229.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1c:83:bc:0d:69:e0:57:a2:fa:c7:0c:99:e6:23:42:1d:b8:af:
         b7:04:6f:6c:39:1f:6c:0a:77:54:f2:c6:aa:f5:2c:61:ac:7d:
         40:22:2b:fd:4b:67:7b:47:f1:77:92:29:8e:cd:98:92:94:fa:
         7d:ff:14:2c:13:7c:2a:90:f0:91:e8:cb:af:14:d3:4c:7f:8d:
         72:bd:44:9d:dc:fb:d9:5a:de:15:0d:49:53:b0:6e:96:6c:c1:
         77:90:e2:95:ac:26:1c:27:f8:f5:b7:4a:6d:ed:a2:fe:51:16:
         53:8e:05:84:bc:f2:f8:11:e8:d6:34:3d:27:08:34:25:f2:24:
         07:c3:97:bf:75:9b:b1:f1:4f:aa:c2:01:7d:23:a0:39:96:f4:
         ab:07:ee:25:44:2d:73:5e:09:a3:81:d7:53:6f:ad:1f:3e:7e:
         bc:2a:d8:e6:07:fc:96:df:2f:9f:5f:ab:a8:b0:60:f0:32:af:
         8d:ab:d7:ef:27:0b:45:70:9e:ec:da:8b:1b:7a:87:56:3f:d9:
         2c:b9:5c:aa:8b:0d:cc:4e:83:d9:47:77:18:ef:54:ec:14:a6:
         c6:04:b0:ff:8e:54:a0:53:d3:94:1c:1d:86:60:15:7c:76:ff:
         06:1a:a1:ec:4e:05:fe:a3:06:d1:2e:d9:da:c3:e1:e8:26:97:
         a7:c3:65:6c
-----BEGIN CERTIFICATE-----
MIIFtDCCBJygAwIBAgIUNjNasFUPW/Dd/w1g3e5FgQw4BaQwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZmI1YWIxY2IzMGZmNDMwZTIzYWM2ZTE0YTA5MTczZDli
OWI0YjNlMzI4YTc2YjM4OGUwHhcNMjQwNTIzMTA1NDEyWhcNMjUwNTIyMTA1OTEy
WjAzMTEwLwYDVQQDEyg2QzU1MjU1NERFMDdENTFGMDJBNDgxNTQ5NDI4NjI2NjA3
OTQ0QzI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs+SbQ5ytueKs
ZaSQQgfWEbOT0U1W9S7ZgTQDGydluQeSRgXiX6efG2vYLMmNa7hJ5OT2dP8UXvNh
tJGAvhmsBxT0E21jYIv+EigTC6EQV0Yg71BpnlSG81J7H0+hwhW8isx27VFqkhK4
z20inuxCsestgiAS5I292DTy0r3FMq5ynz8vir5V8/VSJ7+3TnipsU0cqI/vg53s
ym8EjjYvlbRW6id6hujTCco6ADl27pJiUqX3bSvlNmDnqD45NQouRQ1SRBZfPSwo
lMbXUbm42vvu9nqjvJub7BMS/5uGFzczZwyDnjqoZ5emfPlubDuwIC8AK/zeWyoe
d0arbsl7kQIDAQABo4ICtDCCArAwHQYDVR0OBBYEFGxVJVTeB9UfAqSBVJQoYmYH
lEwmMB8GA1UdIwQYMBaAFAoXtAp53/9E+vo9QPbk0A2DUUuzMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmOGYwYjgwNmMwMThmYTUxMzZlMjkxODRhLzAv
MEExN0I0MEE3OURGRkY0NEZBRkEzRDQwRjZFNEQwMEQ4MzUxNEJCMy5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNmVhZDA3M2MtYjlmMC00NTIzLWIzOWUtYTNjN2Rh
Yjk3YzI1LzI5M2ZiMTViLTVhODUtNGFiZS1iZDI0LTIzMmExMTRhZTQ5MC9mYjVh
YjFjYjMwZmY0MzBlMjNhYzZlMTRhMDkxNzNkOWI5YjRiM2UzMjhhNzZiMzg4ZS5j
ZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjhmMGI4MDZjMDE4ZmE1
MTM2ZTI5MTg0YS8wLzMyMzAzNTJlMzEzMzM0MmUzMjMyMzkyZTMwMmYzMjM0MmQz
MjM0MjAzZDNlMjAzMTM3MzEzMzM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzYblMA0GCSqGSIb3DQEB
CwUAA4IBAQAcg7wNaeBXovrHDJnmI0IduK+3BG9sOR9sCndU8saq9SxhrH1AIiv9
S2d7R/F3kimOzZiSlPp9/xQsE3wqkPCR6MuvFNNMf41yvUSd3PvZWt4VDUlTsG6W
bMF3kOKVrCYcJ/j1t0pt7aL+URZTjgWEvPL4EejWND0nCDQl8iQHw5e/dZux8U+q
wgF9I6A5lvSrB+4lRC1zXgmjgddTb60fPn68KtjmB/yW3y+fX6uosGDwMq+Nq9fv
JwtFcJ7s2osbeodWP9ksuVyqiw3MToPZR3cY71TsFKbGBLD/jlSgU9OUHB2GYBV8
dv8GGqHsTgX+owbRLtnaw+HoJpenw2Vs
-----END CERTIFICATE-----
Generated at Tue Jul 2 19:59:40 2024 by rpki-client on console-ams.rpki-client.org