Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/34302e3138332e302e302f31382d3234203d3e203134363138.roa
File:                     34302e3138332e302e302f31382d3234203d3e203134363138.roa (raw, json)
Hash identifier:          j66tPkkDbas8SE9rHyXQbQU6D85AcHJDOgmlCLF2oHc=
Subject key identifier:   D7:BB:2A:11:EE:18:B0:0B:6D:31:6F:01:B8:2D:01:03:B4:33:F9:3A
Certificate issuer:       /CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e
Certificate serial:       25854159A2CF35C9438329372F27C11DC7F2F871
Authority key identifier: 27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/34302e3138332e302e302f31382d3234203d3e203134363138.roa
Signing time:             Thu 31 Aug 2023 15:09:31 +0000
ROA not before:           Thu 31 Aug 2023 15:04:31 +0000
ROA not after:            Thu 29 Aug 2024 15:09:31 +0000
asID:                     14618
IP address blocks:        40.183.0.0/18 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 02 May 2024 19:23:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:85:41:59:a2:cf:35:c9:43:83:29:37:2f:27:c1:1d:c7:f2:f8:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e
        Validity
            Not Before: Aug 31 15:04:31 2023 GMT
            Not After : Aug 29 15:09:31 2024 GMT
        Subject: CN=D7BB2A11EE18B00B6D316F01B82D0103B433F93A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:cc:9e:a2:73:31:5e:77:b5:9d:1a:a5:2c:e6:
                    7e:74:7b:21:69:f4:8d:cf:23:53:17:1d:46:99:c7:
                    ec:1c:43:12:ae:05:6e:ae:e8:6c:b3:0c:7b:33:55:
                    bc:a8:7b:e2:21:3b:a6:b2:ad:8e:c2:7c:1c:84:17:
                    01:86:57:34:dd:81:a0:52:3f:6e:de:ab:a4:9d:70:
                    c8:93:96:bb:57:fa:18:e4:7a:bc:de:a6:e3:73:06:
                    70:99:02:18:ef:b8:66:05:dc:5d:16:1f:e2:05:d1:
                    7c:76:da:64:d0:20:77:f4:43:40:37:88:2b:d9:a4:
                    44:56:48:4f:16:3b:b2:0b:15:ac:31:12:db:85:6f:
                    8e:ec:8c:28:09:ba:4a:d5:cf:7d:26:cb:7a:97:70:
                    1a:74:ce:89:5b:89:f4:5a:c3:49:87:12:4d:fe:6d:
                    03:0a:82:10:c5:8e:12:d0:db:cb:91:29:8f:23:6f:
                    94:03:d7:4a:c2:91:75:e9:60:62:d8:e9:64:fa:2e:
                    39:d5:41:16:c7:8e:fa:74:6e:31:75:a3:1a:53:13:
                    e0:03:8d:d2:66:f1:ef:af:ba:ef:a9:46:a4:65:ff:
                    f9:14:01:08:33:f6:69:78:fb:59:7a:bf:5f:5c:7d:
                    b6:af:8d:78:3c:a0:99:fa:01:39:73:3d:95:03:1b:
                    bd:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:BB:2A:11:EE:18:B0:0B:6D:31:6F:01:B8:2D:01:03:B4:33:F9:3A
            X509v3 Authority Key Identifier:
                keyid:27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/34302e3138332e302e302f31382d3234203d3e203134363138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  40.183.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         1a:f7:ce:02:e4:7a:2b:0b:6a:83:e6:21:c4:17:a2:f7:39:4a:
         c7:a0:34:38:6a:90:5e:1e:ed:47:ef:59:2a:ec:f8:80:54:bb:
         6f:26:ad:56:48:f3:20:bf:d0:fe:6a:e8:3f:7e:39:83:ed:be:
         45:6b:f4:5b:67:83:10:8d:6d:60:01:2d:4d:5b:1e:4d:a6:85:
         97:f2:4e:30:92:25:6e:74:9d:92:14:0d:5f:c0:f0:06:35:83:
         f7:ab:98:cf:a0:dc:05:34:3b:03:33:99:1d:76:98:09:ac:ed:
         de:7e:00:68:fa:7c:4b:ec:c4:99:9b:67:24:9d:00:43:03:dc:
         47:c1:02:51:72:e5:f8:9f:5a:a2:28:58:f8:42:0e:9c:00:d5:
         4b:15:ae:a9:20:0d:14:f7:1c:34:f8:b7:7f:fc:4d:0e:f0:49:
         4b:e0:51:48:bf:d1:29:77:8c:b4:15:6b:80:83:33:b7:93:16:
         85:e9:f7:d4:cd:db:87:f5:a6:66:90:4f:2e:bd:cd:83:0f:fe:
         8b:f6:c8:40:85:4f:7c:8d:92:d5:dc:b0:ef:23:41:52:09:61:
         42:7c:5f:10:9a:e2:94:00:00:e4:c2:e4:2e:50:ed:dc:d2:10:
         25:d2:ac:7a:8f:16:10:ab:d6:ae:1b:ce:e3:e9:5d:7d:c5:39:
         bc:f7:49:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 22:06:23 2024 by rpki-client on console-fra.rpki-client.org