Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/AS33119.roa
File:                     AS33119.roa (raw, json)
Hash identifier:          L5BFvxXZGKtk25izcUNiQ9tCenN9sRAI1YtF/l97qio=
Subject key identifier:   96:7E:D4:F8:6C:8C:C7:DF:DA:23:08:45:FA:B7:C6:71:07:D0:ED:28
Certificate issuer:       /CN=1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d
Certificate serial:       21FEAA3DA5160C50DD22435C515EBD8134B9FF69
Authority key identifier: 00:99:DE:AB:07:3E:FD:74:C2:50:C0:A3:82:B2:50:12:B5:08:2A:EE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/AS33119.roa
Signing time:             Mon 01 Jul 2024 16:13:02 +0000
ROA not before:           Mon 01 Jul 2024 16:08:02 +0000
ROA not after:            Mon 30 Jun 2025 16:13:02 +0000
asID:                     33119
IP address blocks:        45.54.31.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/0099DEAB073EFD74C250C0A382B25012B5082AEE.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/0099DEAB073EFD74C250C0A382B25012B5082AEE.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/30d422dc-98d1-4304-9f8a-097127e15d5e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/30d422dc-98d1-4304-9f8a-097127e15d5e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 09:36:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:fe:aa:3d:a5:16:0c:50:dd:22:43:5c:51:5e:bd:81:34:b9:ff:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d
        Validity
            Not Before: Jul  1 16:08:02 2024 GMT
            Not After : Jun 30 16:13:02 2025 GMT
        Subject: CN=967ED4F86C8CC7DFDA230845FAB7C67107D0ED28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:5c:1a:a3:5e:e1:cd:96:ec:f6:53:72:f4:38:
                    43:b0:d2:eb:bb:ef:c9:87:06:fc:0f:b7:19:6e:47:
                    c6:ad:ab:fe:01:ed:1f:8a:12:d5:1a:11:5d:46:4d:
                    cf:ab:be:ce:b6:d6:f3:ea:c8:1f:a3:0c:21:40:b2:
                    eb:ff:4a:59:94:5a:89:f7:9a:12:07:ca:bc:68:fe:
                    b0:0a:03:c1:ad:76:d1:89:9f:c9:f5:4e:7b:e5:4f:
                    c5:da:7a:a9:f4:58:46:0e:04:f8:34:a6:aa:cb:b9:
                    57:b1:25:94:9d:a4:5c:de:de:fb:01:3c:9d:7b:78:
                    d6:e9:d2:24:21:ca:3b:8e:c2:2d:5c:0a:05:a0:bf:
                    30:4f:7c:20:18:88:4a:07:ba:30:63:54:c2:14:a4:
                    c5:1e:1a:7d:b8:5a:c5:17:8c:76:fc:04:8d:7a:f1:
                    31:2c:fb:63:85:8b:67:e3:82:05:19:2b:00:bb:61:
                    07:8c:c7:45:8c:6e:e4:0b:19:0a:17:fb:5a:be:69:
                    68:98:5a:00:c2:3c:2b:df:d1:bd:da:fc:56:83:f2:
                    6e:15:47:4d:39:80:19:05:86:95:69:e8:01:94:59:
                    5e:9a:4a:69:18:1b:d8:89:7c:39:ec:74:78:89:cd:
                    fd:ed:c7:ff:db:70:f4:2e:3c:a3:b7:b2:99:4b:13:
                    9b:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:7E:D4:F8:6C:8C:C7:DF:DA:23:08:45:FA:B7:C6:71:07:D0:ED:28
            X509v3 Authority Key Identifier:
                keyid:00:99:DE:AB:07:3E:FD:74:C2:50:C0:A3:82:B2:50:12:B5:08:2A:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/0099DEAB073EFD74C250C0A382B25012B5082AEE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/AS33119.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.54.31.0/24

    Signature Algorithm: sha256WithRSAEncryption
         12:ff:0b:2d:c8:b8:7d:89:bd:07:ea:e1:16:46:f6:8f:a1:06:
         0f:6a:85:66:5b:0c:8b:63:7a:29:ae:2c:ee:7b:61:ee:92:c1:
         3b:a9:2c:bd:2b:e0:72:74:62:b4:ac:c7:28:bf:34:51:6d:75:
         b9:a0:df:e4:59:6c:70:0f:a8:b6:b6:ae:54:a3:2f:dc:eb:8e:
         3f:66:d8:a2:5b:af:19:f2:2e:fb:17:12:74:c7:0b:7a:b2:fb:
         89:85:a6:60:9f:f2:7a:b8:fb:a0:c3:d8:f6:f2:fd:4a:c8:96:
         04:55:4b:df:d9:8b:bc:e9:87:14:ff:4e:44:a5:ae:6c:87:f3:
         9d:4b:ad:ce:5e:93:90:52:5b:fb:2a:07:4c:50:8a:b9:98:a1:
         3e:57:32:4b:7a:7c:d3:64:72:b8:0a:75:06:e3:b5:da:f3:13:
         87:9c:ce:04:91:37:41:e0:ad:66:0b:3d:15:e7:cc:88:f7:35:
         66:58:7a:3f:1b:61:0e:e1:63:0e:b0:70:07:ef:93:7a:6f:9b:
         a1:2a:66:0f:10:c5:fc:c8:8e:46:7b:1c:a1:6f:23:72:7a:53:
         8e:f4:1e:ac:3e:f3:cc:1e:77:a1:61:f0:e4:e6:60:f8:a9:99:
         b0:39:ae:9e:4e:64:83:ee:73:a6:52:2e:f1:6f:2e:09:20:c1:
         87:9e:1b:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:16:04 2024 by rpki-client on console-fra.rpki-client.org