Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/34302e3138332e302e302f31382d3234203d3e203134363138.roa
File:                     34302e3138332e302e302f31382d3234203d3e203134363138.roa (raw, json)
Hash identifier:          RdAfEZqFk+rVMGwv4GgD4HRkdXS8YeWA31DdRvs9rzE=
Subject key identifier:   3D:1C:C8:5C:EC:21:58:B4:98:81:0D:25:6F:42:B3:64:C7:C7:29:CD
Certificate issuer:       /CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e
Certificate serial:       2C54D1A9760C19A2F9E89E06E7509D3CBCD55648
Authority key identifier: 27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/34302e3138332e302e302f31382d3234203d3e203134363138.roa
Signing time:             Thu 01 Aug 2024 15:48:59 +0000
ROA not before:           Thu 01 Aug 2024 15:43:59 +0000
ROA not after:            Thu 31 Jul 2025 15:48:59 +0000
asID:                     14618
IP address blocks:        40.183.0.0/18 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:54:d1:a9:76:0c:19:a2:f9:e8:9e:06:e7:50:9d:3c:bc:d5:56:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e
        Validity
            Not Before: Aug  1 15:43:59 2024 GMT
            Not After : Jul 31 15:48:59 2025 GMT
        Subject: CN=3D1CC85CEC2158B498810D256F42B364C7C729CD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:bf:8e:d7:6c:29:11:17:a7:b2:9c:5e:52:82:
                    59:61:ca:4f:c3:c3:b7:2e:55:d8:30:f7:9e:8f:b6:
                    42:17:39:bf:d5:46:f0:c2:67:69:e0:0d:aa:42:39:
                    31:04:73:21:8f:84:84:d8:57:e0:b4:36:bb:bf:fb:
                    15:8a:fc:28:a0:78:6f:61:06:23:f1:90:54:db:92:
                    58:33:ad:e3:be:f4:2f:af:0d:c2:62:61:c6:14:10:
                    44:b9:35:98:d9:ca:d2:c6:c1:8b:ff:f3:59:62:6f:
                    32:bb:f7:1e:cf:9e:18:63:d6:26:a2:eb:90:8c:75:
                    89:1e:99:d2:41:df:50:e4:7c:d3:18:2a:9f:9f:17:
                    43:91:85:1b:1a:80:01:19:4b:3f:c5:45:bc:da:db:
                    5b:92:b9:e7:0a:b4:17:5a:de:6e:7b:7d:29:64:31:
                    82:ea:d3:e3:35:d2:d5:8a:05:1a:21:fd:9e:a3:59:
                    8f:42:2a:4e:fc:77:d6:b8:d7:00:80:11:7b:54:91:
                    83:92:74:33:15:7e:b2:b4:ea:b8:75:d9:4e:4c:8b:
                    a8:d6:72:be:52:ae:e0:ee:2c:66:4f:25:0e:09:86:
                    ba:87:a7:83:46:ea:ba:58:d6:c2:d1:17:a4:92:d1:
                    02:9a:69:52:04:25:7a:2a:3c:34:1f:54:a9:73:df:
                    e5:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:1C:C8:5C:EC:21:58:B4:98:81:0D:25:6F:42:B3:64:C7:C7:29:CD
            X509v3 Authority Key Identifier:
                keyid:27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/34302e3138332e302e302f31382d3234203d3e203134363138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  40.183.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         00:8d:cf:bc:f7:59:45:a6:b6:3e:3a:d8:e7:ed:63:d5:12:33:
         b1:52:cc:16:dd:9b:01:99:4b:0e:52:3e:ba:bb:e0:3f:13:b5:
         90:49:fe:4f:a1:5b:f4:7f:83:24:71:3e:d7:66:ff:d2:37:4d:
         bb:fd:1f:b0:dd:df:73:c6:e2:d3:d6:49:08:3c:ae:a0:b0:9a:
         61:2d:26:d0:73:19:ba:c5:e8:b9:17:52:f0:31:7d:c9:4a:61:
         0d:18:af:58:a4:c5:86:a7:b6:f8:bf:cf:3e:1f:25:90:61:d4:
         cf:5f:0f:22:c9:d8:c3:10:e6:12:9e:c3:3b:0d:20:67:36:41:
         90:d8:dd:6a:50:5b:f5:2e:88:ac:29:a8:79:d0:a5:44:68:ce:
         8c:26:d0:0f:e5:23:00:9d:6d:b0:c0:36:6a:dd:7b:aa:89:c5:
         d6:85:26:fe:26:59:6e:bc:70:ba:12:a2:b0:94:dc:f8:68:c9:
         a5:bf:2b:e2:47:d9:65:e9:fa:28:af:0c:8d:66:6a:54:63:f0:
         c5:40:6a:a5:1b:82:fe:b0:05:59:b1:ce:86:c9:e6:65:3d:71:
         5d:42:32:23:20:4c:89:c7:7a:4d:c7:0b:fc:bb:a8:f8:f7:cc:
         0d:ab:d1:83:01:e9:1d:03:44:6c:5b:30:ab:9f:dd:95:c0:4c:
         c1:ab:db:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:34:39 2024 by rpki-client on console-fra.rpki-client.org