Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/34302e3138332e3139322e302f31392d3234203d3e20383334.roa
File:                     34302e3138332e3139322e302f31392d3234203d3e20383334.roa (raw, json)
Hash identifier:          3ozaf21Kab5xGmg2S0cDuqDsmSu6LLyz8oC6ExCjbgQ=
Subject key identifier:   C5:4B:04:33:09:B5:05:91:81:B5:30:49:40:23:99:9E:94:6F:B0:80
Certificate issuer:       /CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e
Certificate serial:       3C15FF1ADC592F7DEAD562873376AC39BDE35B37
Authority key identifier: 27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/34302e3138332e3139322e302f31392d3234203d3e20383334.roa
Signing time:             Wed 12 Jun 2024 15:22:12 +0000
ROA not before:           Wed 12 Jun 2024 15:17:12 +0000
ROA not after:            Wed 11 Jun 2025 15:22:12 +0000
asID:                     834
IP address blocks:        40.183.192.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 14 Mar 2025 16:33:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:15:ff:1a:dc:59:2f:7d:ea:d5:62:87:33:76:ac:39:bd:e3:5b:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e
        Validity
            Not Before: Jun 12 15:17:12 2024 GMT
            Not After : Jun 11 15:22:12 2025 GMT
        Subject: CN=C54B043309B5059181B530494023999E946FB080
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:ae:f4:9b:08:f7:35:15:e6:12:e1:bc:ca:ac:
                    c2:16:ce:99:4a:7b:87:7a:53:90:5b:ca:4d:a5:f8:
                    32:da:21:b0:ee:a5:10:fa:c5:3e:0c:34:f1:d6:24:
                    53:1d:e0:3e:6a:96:72:f2:0e:0e:d1:44:5f:e3:21:
                    6c:53:31:57:8a:47:b8:f3:57:78:97:04:56:2c:4a:
                    75:8b:f8:e5:2f:11:3e:6e:b1:0b:18:fe:7e:43:26:
                    d7:a4:56:56:54:79:3f:1e:d9:d8:bb:9c:cb:74:b5:
                    c1:ea:e1:6b:4f:ef:92:5c:b6:bd:31:21:78:34:9c:
                    8d:22:ff:99:da:84:bc:a9:df:5e:b6:b3:07:46:f9:
                    4a:1a:00:d5:bf:ad:d1:75:94:c4:bf:59:64:3d:a3:
                    f0:f1:47:7c:78:51:f7:e4:2c:df:6f:8f:06:5a:4d:
                    02:7d:9a:b5:2f:da:69:f8:84:b3:03:23:c4:b3:ab:
                    13:74:11:c6:b4:0b:f9:67:f6:54:d9:e0:4c:e8:fe:
                    19:74:a7:0e:7b:a9:70:58:59:31:d2:f1:e3:c8:c9:
                    ca:32:70:b6:cb:17:3e:a1:17:0a:69:7a:24:2e:1b:
                    ca:b0:bc:1c:40:82:a8:98:7f:c8:7e:d7:a0:a7:32:
                    52:7e:aa:3a:99:91:96:1f:05:d9:ee:b6:dd:58:2e:
                    e0:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:4B:04:33:09:B5:05:91:81:B5:30:49:40:23:99:9E:94:6F:B0:80
            X509v3 Authority Key Identifier:
                keyid:27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/34302e3138332e3139322e302f31392d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  40.183.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         83:1f:37:1a:83:81:df:ba:fd:55:3b:f5:b2:3c:81:b8:55:73:
         99:4e:d7:db:de:c4:81:48:d3:95:c5:61:60:ba:36:ff:9e:85:
         65:45:26:08:24:72:3f:72:70:40:a3:43:27:54:ec:df:8c:3f:
         42:33:70:c0:01:15:86:e2:f3:c4:3c:b4:df:60:e9:18:cf:3e:
         40:c1:ed:8c:80:be:49:6f:ad:5f:bd:b7:ce:c7:3b:6f:a4:61:
         f3:20:d8:de:09:5f:79:65:00:e3:b5:4d:9c:ad:0a:e9:dc:b2:
         ce:ee:30:08:51:17:6e:fc:c9:6f:c5:37:21:8f:50:d8:61:f9:
         f0:ce:b3:84:d8:76:74:45:e4:94:c1:f2:ad:85:8d:87:a3:86:
         55:5d:21:af:9f:37:13:49:68:7f:f5:e8:f9:bf:b7:42:e8:75:
         63:a4:42:e9:09:d3:02:a7:11:ea:45:c4:5e:4e:39:1e:ef:1f:
         20:d5:f6:ca:c0:9d:51:31:a4:f3:06:a1:99:4c:e0:82:b7:ff:
         c8:30:61:e5:d6:d7:0f:7a:d6:ef:12:db:e1:e8:9b:0d:8f:3b:
         52:6e:7b:39:84:89:69:87:8c:82:3d:22:56:c1:57:8f:d4:cc:
         40:5f:b9:ab:b0:2a:83:a0:77:17:87:dd:58:7c:0c:ad:b6:cc:
         7b:c6:60:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 23:17:13 2025 by rpki-client