Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80f1a80a0181733c5c5f6b5b/0/36362e3131382e3234342e302f32342d3234203d3e203134333135.roa
File:                     36362e3131382e3234342e302f32342d3234203d3e203134333135.roa (raw, json)
Hash identifier:          KO1S9hPzUxRoHtxEBInKfbRIyuAu0SvabnF0I92QQoA=
Subject key identifier:   4D:50:46:BE:E5:07:A8:C2:95:C5:A3:1A:28:9A:25:CF:0E:0C:C2:9B
Certificate issuer:       /CN=0985ea50df54e795a4be14ad5188a8e52873787039bb6b27b2
Certificate serial:       68CEDC971580F1AE27E31388EB073E039111DB6A
Authority key identifier: 18:C0:92:4D:23:1D:A3:01:95:16:0B:25:EE:E6:32:7E:B4:03:06:F8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7225b415-8ae0-4523-b37f-74ed780676aa/0985ea50df54e795a4be14ad5188a8e52873787039bb6b27b2.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181733c5c5f6b5b/0/36362e3131382e3234342e302f32342d3234203d3e203134333135.roa
Signing time:             Sat 11 May 2024 05:28:57 +0000
ROA not before:           Sat 11 May 2024 05:23:57 +0000
ROA not after:            Sat 10 May 2025 05:28:57 +0000
asID:                     14315
IP address blocks:        66.118.244.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181733c5c5f6b5b/0/18C0924D231DA30195160B25EEE6327EB40306F8.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181733c5c5f6b5b/0/18C0924D231DA30195160B25EEE6327EB40306F8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7225b415-8ae0-4523-b37f-74ed780676aa/0985ea50df54e795a4be14ad5188a8e52873787039bb6b27b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7225b415-8ae0-4523-b37f-74ed780676aa/7225b415-8ae0-4523-b37f-74ed780676aa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7225b415-8ae0-4523-b37f-74ed780676aa/7225b415-8ae0-4523-b37f-74ed780676aa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7225b415-8ae0-4523-b37f-74ed780676aa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 18:07:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:ce:dc:97:15:80:f1:ae:27:e3:13:88:eb:07:3e:03:91:11:db:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0985ea50df54e795a4be14ad5188a8e52873787039bb6b27b2
        Validity
            Not Before: May 11 05:23:57 2024 GMT
            Not After : May 10 05:28:57 2025 GMT
        Subject: CN=4D5046BEE507A8C295C5A31A289A25CF0E0CC29B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:18:18:eb:bd:69:87:e7:c1:e3:f1:40:82:45:
                    f2:87:62:34:63:84:2c:4f:18:73:89:23:1e:5d:cf:
                    51:1a:6f:98:95:c3:b8:4d:8d:e8:50:97:a1:45:f3:
                    de:0f:24:65:a1:60:dd:7a:8a:e6:e8:10:2a:c8:cc:
                    68:ff:b9:f1:f2:d8:bc:68:36:50:3a:06:71:a3:b5:
                    2f:2b:cb:46:6e:ab:1f:af:70:28:fd:27:8b:ef:46:
                    1e:04:e9:80:a1:99:68:32:d4:b9:b6:29:f6:05:73:
                    6e:40:a0:c3:94:e4:b2:1e:ee:3a:fd:31:d6:6f:3f:
                    21:6c:de:b5:4b:36:7b:ec:4e:6e:ad:7b:b1:0e:38:
                    47:00:4e:57:12:cd:8c:9f:a3:25:8f:9a:87:d7:a4:
                    b5:c5:d7:88:fb:be:6d:05:07:25:26:08:7e:66:8f:
                    fc:92:01:65:66:4e:70:61:6d:ae:3f:d5:f8:a0:e6:
                    0b:3c:cb:11:29:0c:1f:59:f4:48:cb:55:60:ee:c5:
                    bd:72:1d:17:6c:60:1e:19:32:17:94:f8:63:a8:06:
                    0d:a2:a3:08:b9:b6:1a:73:7f:ba:a9:0f:e7:07:3a:
                    94:7a:3a:39:04:65:9c:c9:a5:fc:3b:90:92:27:bf:
                    47:b7:64:72:e0:a6:fa:2a:fc:aa:7e:ca:db:27:8d:
                    87:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:50:46:BE:E5:07:A8:C2:95:C5:A3:1A:28:9A:25:CF:0E:0C:C2:9B
            X509v3 Authority Key Identifier:
                keyid:18:C0:92:4D:23:1D:A3:01:95:16:0B:25:EE:E6:32:7E:B4:03:06:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181733c5c5f6b5b/0/18C0924D231DA30195160B25EEE6327EB40306F8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7225b415-8ae0-4523-b37f-74ed780676aa/0985ea50df54e795a4be14ad5188a8e52873787039bb6b27b2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181733c5c5f6b5b/0/36362e3131382e3234342e302f32342d3234203d3e203134333135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.118.244.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b5:ab:43:d1:2d:39:87:70:0f:93:45:41:28:80:96:11:a9:05:
         58:c5:e4:8c:6b:15:c1:03:59:3e:7e:64:ce:61:98:49:8b:06:
         15:0c:8e:68:0e:5e:78:7b:aa:a6:c7:a1:34:a5:aa:82:da:57:
         63:60:1e:b3:04:f3:43:93:18:c3:09:7c:2a:e8:61:7f:09:1b:
         b9:3a:8c:07:84:9d:f9:08:36:36:c2:b6:3a:e4:d1:54:db:43:
         8a:b3:18:8f:23:a3:8a:4b:29:6c:f1:78:fd:fb:b6:e8:f5:45:
         7e:c5:63:74:e7:0c:92:2b:be:70:5c:49:e3:4c:8f:21:45:85:
         c5:84:56:41:77:01:aa:73:69:7f:56:30:2e:6e:0a:f5:b3:3c:
         ab:87:34:1e:aa:d4:09:b5:5b:e5:0e:09:40:92:dc:eb:0c:09:
         0d:62:41:15:c2:fd:60:5b:03:a5:44:11:80:f2:67:bb:bf:ad:
         9e:fb:0a:b2:e1:d1:c9:c3:d9:8a:fc:d5:62:63:0a:bc:f1:25:
         83:33:c8:3d:11:43:97:75:20:80:99:c5:0a:7c:4b:5c:e3:f7:
         eb:08:1a:d4:23:65:14:03:c8:a5:aa:cd:98:26:8e:39:e4:9f:
         6d:cb:4e:f7:06:0b:7f:98:db:2e:d2:43:75:a2:9f:8b:38:fc:
         2b:ee:28:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 15:24:07 2024 by rpki-client on console-fra.rpki-client.org