Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80f1a80a0181733c5c5f6b5b/0/36362e3131382e3234372e302f32342d3234203d3e2033323830.roa
File:                     36362e3131382e3234372e302f32342d3234203d3e2033323830.roa (raw, json)
Hash identifier:          KFOOlUPVOVibuhDHN0zsASsta8aQSDRrJqoeMxG3HmU=
Subject key identifier:   2D:E7:4F:22:3A:0F:2C:3B:72:3A:27:FC:1B:E5:BA:6A:92:D8:30:3F
Certificate issuer:       /CN=0985ea50df54e795a4be14ad5188a8e52873787039bb6b27b2
Certificate serial:       7EDB1125BC058870ADEAD75C4ACFA93B33582107
Authority key identifier: 18:C0:92:4D:23:1D:A3:01:95:16:0B:25:EE:E6:32:7E:B4:03:06:F8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7225b415-8ae0-4523-b37f-74ed780676aa/0985ea50df54e795a4be14ad5188a8e52873787039bb6b27b2.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181733c5c5f6b5b/0/36362e3131382e3234372e302f32342d3234203d3e2033323830.roa
Signing time:             Fri 08 Dec 2023 17:47:02 +0000
ROA not before:           Fri 08 Dec 2023 17:42:02 +0000
ROA not after:            Fri 06 Dec 2024 17:47:02 +0000
asID:                     3280
IP address blocks:        66.118.247.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181733c5c5f6b5b/0/18C0924D231DA30195160B25EEE6327EB40306F8.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181733c5c5f6b5b/0/18C0924D231DA30195160B25EEE6327EB40306F8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7225b415-8ae0-4523-b37f-74ed780676aa/0985ea50df54e795a4be14ad5188a8e52873787039bb6b27b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7225b415-8ae0-4523-b37f-74ed780676aa/7225b415-8ae0-4523-b37f-74ed780676aa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7225b415-8ae0-4523-b37f-74ed780676aa/7225b415-8ae0-4523-b37f-74ed780676aa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7225b415-8ae0-4523-b37f-74ed780676aa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 May 2024 05:59:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:db:11:25:bc:05:88:70:ad:ea:d7:5c:4a:cf:a9:3b:33:58:21:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0985ea50df54e795a4be14ad5188a8e52873787039bb6b27b2
        Validity
            Not Before: Dec  8 17:42:02 2023 GMT
            Not After : Dec  6 17:47:02 2024 GMT
        Subject: CN=2DE74F223A0F2C3B723A27FC1BE5BA6A92D8303F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:42:b9:d7:f5:6e:87:87:68:7c:c8:bd:7b:04:
                    9d:f9:86:72:c0:3c:85:1d:59:e6:1a:e0:1b:ed:ad:
                    e6:23:8b:c7:9c:96:ed:03:67:d5:a5:70:1d:d8:35:
                    56:67:ac:a7:b9:5e:77:d1:d5:58:3a:fd:c5:ae:be:
                    d9:48:8f:cf:73:f7:92:b2:18:6c:36:bd:06:b7:69:
                    1a:79:74:fa:ab:98:7c:fa:cb:e2:fb:cb:b6:05:a5:
                    3a:cb:ab:af:fe:30:8e:85:b1:d5:be:19:bb:e4:a2:
                    cd:2f:90:aa:73:2b:19:8f:73:8e:9c:f2:76:21:26:
                    1e:6c:d4:4c:df:3d:b0:5c:b0:26:c6:88:c7:63:a5:
                    1f:b1:f3:07:9f:23:0d:a3:f6:8a:27:bf:ff:a0:f8:
                    2d:de:66:5c:ca:f0:07:04:37:70:0f:d7:7b:d1:84:
                    e4:20:f3:3e:7e:ec:91:21:f6:e3:53:b2:19:8f:46:
                    2c:c9:00:a9:34:ee:2b:04:73:b7:04:ad:73:34:2b:
                    bb:8b:ea:2f:9b:95:c3:73:c7:40:c3:21:fe:14:44:
                    60:27:8c:d8:82:9e:c5:bd:5e:3e:82:13:ad:06:21:
                    da:76:ae:df:39:ee:5c:a2:80:01:a9:31:59:14:17:
                    1d:49:ec:65:23:1d:f6:4e:a7:30:d4:90:6c:d6:9a:
                    66:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:E7:4F:22:3A:0F:2C:3B:72:3A:27:FC:1B:E5:BA:6A:92:D8:30:3F
            X509v3 Authority Key Identifier:
                keyid:18:C0:92:4D:23:1D:A3:01:95:16:0B:25:EE:E6:32:7E:B4:03:06:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181733c5c5f6b5b/0/18C0924D231DA30195160B25EEE6327EB40306F8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7225b415-8ae0-4523-b37f-74ed780676aa/0985ea50df54e795a4be14ad5188a8e52873787039bb6b27b2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181733c5c5f6b5b/0/36362e3131382e3234372e302f32342d3234203d3e2033323830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.118.247.0/24

    Signature Algorithm: sha256WithRSAEncryption
         44:ad:49:7b:1b:b9:2b:c2:b5:5b:58:63:45:e3:36:0c:d2:66:
         12:81:9d:0e:3d:40:91:d8:ec:4f:ad:5c:7b:6e:23:23:7c:f4:
         91:a3:7c:1e:82:5f:0a:eb:3c:14:c6:3b:22:cc:c5:37:ee:dd:
         b8:3f:b4:d2:c5:55:0f:16:2c:90:cd:ef:af:48:e7:c5:42:3d:
         dd:76:83:8b:aa:7a:ed:f9:4a:35:37:76:26:d0:2d:a4:e0:3f:
         ca:c0:6b:25:86:9c:16:00:a9:11:51:3b:d1:ad:e6:13:6e:6f:
         53:db:1f:e0:a9:eb:50:cb:95:b3:34:b1:6e:5f:36:7d:61:c1:
         a6:d5:7f:6b:63:f8:9b:fb:9a:54:0e:a1:38:23:c5:d1:ba:47:
         78:85:e0:d7:df:4c:29:3a:63:d6:33:ac:e4:30:91:b2:47:7a:
         98:f2:5e:b9:9e:21:c1:de:ea:96:50:5d:97:bc:f3:85:94:91:
         d5:b9:d9:c5:4c:66:2e:72:23:bf:74:eb:b6:c5:b4:07:c1:85:
         26:a0:b8:58:e1:b6:60:d7:1b:d1:22:11:d9:9e:a3:ea:39:2f:
         94:c5:54:5a:b5:5b:8d:a7:90:0a:f1:7c:f1:75:db:b9:c3:c0:
         02:b7:73:e4:c7:5d:fb:9d:7b:ab:0a:8d:f4:cf:36:d6:04:7c:
         03:d3:4f:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 06:14:14 2024 by rpki-client on console-ams.rpki-client.org