Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/34302e3138332e3136302e302f31392d3234203d3e2039303039.roa
File:                     34302e3138332e3136302e302f31392d3234203d3e2039303039.roa (raw, json)
Hash identifier:          ya83GA3O9O9UzwXhs0/7GRO+X38grU4poVMA/UcD7ts=
Subject key identifier:   91:98:F4:46:DD:73:AB:E7:0B:38:C4:97:5F:48:F4:B4:2A:A0:2B:57
Certificate issuer:       /CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e
Certificate serial:       2F1035D6B7921CB3087B43734CBB549DB1F2AB2D
Authority key identifier: 27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/34302e3138332e3136302e302f31392d3234203d3e2039303039.roa
Signing time:             Fri 10 May 2024 09:06:31 +0000
ROA not before:           Fri 10 May 2024 09:01:31 +0000
ROA not after:            Fri 09 May 2025 09:06:31 +0000
asID:                     9009
IP address blocks:        40.183.160.0/19 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 07 Jun 2024 10:36:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:10:35:d6:b7:92:1c:b3:08:7b:43:73:4c:bb:54:9d:b1:f2:ab:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e
        Validity
            Not Before: May 10 09:01:31 2024 GMT
            Not After : May  9 09:06:31 2025 GMT
        Subject: CN=9198F446DD73ABE70B38C4975F48F4B42AA02B57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:c0:f3:a1:40:cc:59:4c:4e:09:16:23:f5:f0:
                    98:6f:49:73:51:f6:d7:50:1d:54:85:dd:26:de:2f:
                    66:14:c8:fe:18:43:8e:f9:9e:58:8d:75:6f:bf:6f:
                    30:07:f8:40:a9:5a:f0:82:d7:21:db:8c:d3:5a:98:
                    d9:79:92:36:a5:f6:d4:b6:63:39:69:7d:3b:7b:0e:
                    ae:8f:99:02:92:0d:d1:21:0c:db:08:f0:89:43:d1:
                    08:d2:2f:47:82:44:95:b3:a4:5d:6d:ca:7e:c5:00:
                    71:ed:71:2f:44:91:11:32:8a:4f:e1:a2:e5:14:57:
                    be:76:e7:7d:c4:61:79:d4:93:45:c6:c1:2d:59:be:
                    6b:44:53:4c:8e:a1:d8:0a:0d:9a:c8:93:46:58:7c:
                    c4:fe:d6:61:2b:1d:82:54:68:1f:da:45:c9:53:ac:
                    73:35:bc:de:a7:fd:d2:ec:39:ee:fa:27:d2:e2:2e:
                    0f:92:ea:38:d2:d3:33:2c:a8:da:af:b9:b2:7f:27:
                    9d:8a:45:46:9f:49:c7:7b:8c:04:11:fc:01:26:4f:
                    31:45:02:5b:81:a2:6a:4d:3a:30:e2:d0:6c:42:8b:
                    2d:53:41:e2:d5:fe:9f:12:9a:0d:3f:68:d7:bb:17:
                    9c:04:f4:50:ed:6d:4e:87:e7:64:54:44:89:03:34:
                    c9:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:98:F4:46:DD:73:AB:E7:0B:38:C4:97:5F:48:F4:B4:2A:A0:2B:57
            X509v3 Authority Key Identifier:
                keyid:27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/34302e3138332e3136302e302f31392d3234203d3e2039303039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  40.183.160.0/19

    Signature Algorithm: sha256WithRSAEncryption
         8f:7e:09:bf:d5:c0:b6:dc:80:0b:5f:3b:70:5e:2f:60:2f:d5:
         ce:2a:fb:74:96:35:67:9d:f6:db:eb:41:09:ef:51:23:4f:1d:
         34:96:0c:70:d3:b8:7a:b8:eb:cd:eb:0a:06:93:e3:3c:56:4b:
         e7:5f:55:a0:f3:91:fb:4b:d2:d5:6b:a3:24:dd:ba:75:38:49:
         6f:b9:34:2c:9c:b7:7a:50:c6:58:5a:8a:52:ba:03:55:81:53:
         33:7a:2a:28:c3:be:a5:2a:2f:a3:9c:f9:79:01:df:e3:51:36:
         a1:5e:2a:71:c5:49:f8:05:fd:d8:8a:ae:49:70:20:6b:9b:8a:
         3a:92:b9:49:f7:f6:c4:30:c5:f3:65:41:4c:2a:8d:07:8a:6a:
         34:2b:66:1c:28:4b:f5:5d:c3:99:b0:a5:7f:92:06:c9:cc:23:
         e0:1e:a4:cb:ff:05:85:f8:d7:a8:95:7d:7c:7d:41:9d:7c:12:
         99:b5:b2:75:3f:4b:79:e7:1a:0f:e7:e3:3a:d8:c8:1d:3b:f2:
         53:c8:99:54:f5:d3:6d:25:fb:82:3b:ad:a0:d9:44:82:4c:37:
         17:66:21:9e:df:43:78:bb:7d:37:d1:54:a5:15:9e:cc:db:2d:
         82:9e:5b:a1:d5:58:22:36:4f:f7:90:cb:c4:27:ec:f3:1f:ab:
         eb:aa:e4:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 14:56:27 2024 by rpki-client on console-fra.rpki-client.org