Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/34302e3138332e302e302f31382d3234203d3e203136353039.roa
File:                     34302e3138332e302e302f31382d3234203d3e203136353039.roa (raw, json)
Hash identifier:          aLzUZXyRl68jj85ecs9posKdz6RkgDUbo+vageqpwsE=
Subject key identifier:   53:E2:70:49:F3:07:A5:59:CD:8C:6C:96:2C:B3:D1:04:5B:8C:EF:D0
Certificate issuer:       /CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e
Certificate serial:       56E573772021771363870D096D032817089A4A15
Authority key identifier: 27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/34302e3138332e302e302f31382d3234203d3e203136353039.roa
Signing time:             Thu 01 Aug 2024 15:48:59 +0000
ROA not before:           Thu 01 Aug 2024 15:43:59 +0000
ROA not after:            Thu 31 Jul 2025 15:48:59 +0000
asID:                     16509
IP address blocks:        40.183.0.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 03:34:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:e5:73:77:20:21:77:13:63:87:0d:09:6d:03:28:17:08:9a:4a:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e
        Validity
            Not Before: Aug  1 15:43:59 2024 GMT
            Not After : Jul 31 15:48:59 2025 GMT
        Subject: CN=53E27049F307A559CD8C6C962CB3D1045B8CEFD0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:ef:da:2b:66:96:47:77:43:3a:aa:2e:6f:4d:
                    60:b1:9a:b6:b5:81:b8:16:f0:ec:bd:22:38:5a:ea:
                    db:4a:26:bc:5f:b6:ae:1d:1f:dc:f3:08:71:af:2e:
                    ca:a7:b8:df:75:9f:68:73:a9:f1:08:0a:4a:a6:81:
                    16:03:9a:4d:9b:14:78:ef:1d:45:12:56:f6:8b:c5:
                    70:9c:cd:bd:81:13:67:38:95:a1:de:d8:c8:c8:92:
                    ed:5d:f4:57:19:3c:fe:b5:2a:9b:c1:6d:62:18:5e:
                    7a:61:42:9c:ff:64:54:f8:c6:63:b9:29:76:b4:2b:
                    bb:2e:8f:2c:70:e6:ff:e6:b8:db:3c:e3:0b:ed:8b:
                    a6:ed:f0:b7:6f:cb:e6:7c:1a:82:41:43:e0:22:aa:
                    a6:0d:58:f9:57:f2:00:a1:e8:43:4f:ad:c7:17:d5:
                    9e:50:40:2e:a1:22:64:0a:f2:73:7e:1b:27:96:7a:
                    77:88:8b:8f:fa:22:74:a9:ce:d3:7e:8c:08:72:11:
                    54:6d:d1:d2:67:90:b8:d9:72:54:7f:4f:d8:fe:ca:
                    54:b3:35:cf:e5:fa:62:1c:ae:99:76:0b:e1:a3:0e:
                    2f:2b:cd:bd:48:cb:1a:f8:6f:20:37:c0:fa:45:47:
                    e8:26:d0:b3:20:99:be:8d:2e:e8:75:51:fa:5a:67:
                    d8:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:E2:70:49:F3:07:A5:59:CD:8C:6C:96:2C:B3:D1:04:5B:8C:EF:D0
            X509v3 Authority Key Identifier:
                keyid:27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/34302e3138332e302e302f31382d3234203d3e203136353039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  40.183.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         65:f0:6d:da:a4:74:c0:2f:0d:0c:57:89:24:d7:21:2c:3b:d8:
         93:c4:49:fb:17:7f:f3:0f:cd:90:7b:c8:1a:83:b3:83:5f:fa:
         24:d7:6e:d6:7c:2b:16:6a:f4:06:7e:35:11:5b:de:72:e4:0d:
         ea:6d:0e:94:e5:f5:a2:ae:01:e6:1c:23:1a:e8:36:ff:1d:de:
         f6:66:ee:a0:df:0a:48:ec:cd:f2:47:be:b6:3c:35:3e:11:10:
         8b:5f:13:78:e0:fc:8c:d1:8a:90:dc:97:ee:3c:e8:83:ae:aa:
         44:4a:bd:70:58:e4:4a:bd:2b:72:d2:e8:35:72:12:83:d5:37:
         a8:e1:e1:94:0b:72:e2:00:9f:8f:fb:e8:be:0c:6b:f5:f7:4c:
         bd:4b:4f:22:43:78:e1:8a:ee:7d:de:15:09:82:22:e9:8a:f1:
         c9:ef:88:e0:70:4a:88:49:6a:b6:7d:ef:dd:b3:fe:31:2f:83:
         64:1c:1d:84:d4:e9:d7:48:7b:23:96:6f:eb:fa:d0:1b:c7:7c:
         55:31:b5:e8:dd:93:37:35:cb:aa:e0:e6:40:34:d0:ea:78:40:
         dc:64:56:87:50:e4:21:4c:85:02:66:f9:7d:79:3b:32:7c:0b:
         0e:ee:46:5f:c8:b2:bc:39:e1:48:01:e8:70:b0:7e:35:7f:69:
         3e:46:61:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:24:42 2025 by rpki-client