Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/34302e3138332e3232342e302f31392d3234203d3e203133323133.roa
File:                     34302e3138332e3232342e302f31392d3234203d3e203133323133.roa (raw, json)
Hash identifier:          cH8sHDN3tvUhRQzV1O40ZUC40WmoostNFJI5kRC5HNY=
Subject key identifier:   71:D2:D1:3C:3D:BF:3B:10:7D:D4:10:FC:07:4C:CD:C5:1D:D3:20:8E
Certificate issuer:       /CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e
Certificate serial:       41C3E3E2845A079304E7292E036E9F6A52744951
Authority key identifier: 27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/34302e3138332e3232342e302f31392d3234203d3e203133323133.roa
Signing time:             Thu 13 Jun 2024 07:33:22 +0000
ROA not before:           Thu 13 Jun 2024 07:28:22 +0000
ROA not after:            Thu 12 Jun 2025 07:33:22 +0000
asID:                     13213
IP address blocks:        40.183.224.0/19 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:c3:e3:e2:84:5a:07:93:04:e7:29:2e:03:6e:9f:6a:52:74:49:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e
        Validity
            Not Before: Jun 13 07:28:22 2024 GMT
            Not After : Jun 12 07:33:22 2025 GMT
        Subject: CN=71D2D13C3DBF3B107DD410FC074CCDC51DD3208E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:7c:92:41:01:bc:fb:b1:69:68:59:25:b4:b2:
                    fc:24:49:e9:6a:d2:53:76:7c:c0:6a:05:7f:5f:08:
                    94:df:8d:7e:2a:18:a8:5f:0c:7d:3e:dc:c9:69:1d:
                    b7:2c:32:3f:07:66:6c:4b:88:5c:71:04:6f:e7:a9:
                    6e:43:f0:63:24:d5:62:d3:6f:db:ba:01:34:69:75:
                    2f:1e:80:bc:8f:fc:2a:0f:63:44:e4:bc:16:10:6c:
                    57:9f:2c:97:7d:33:59:ba:f2:1c:77:64:7d:bb:8a:
                    98:50:ec:fc:ee:43:90:9e:91:aa:a0:b2:d7:70:98:
                    7b:f2:16:b6:d3:ed:91:68:83:2b:d9:3f:0a:31:87:
                    c9:a8:ac:57:2c:1d:83:f2:e2:f9:05:12:13:df:dd:
                    26:39:6f:68:15:c9:7b:92:52:7d:03:3f:da:61:73:
                    77:fb:d7:bd:b6:6b:24:0b:48:70:d4:9d:20:26:77:
                    72:e3:a5:fe:ce:e0:be:85:bd:a1:8e:ff:1c:c7:5b:
                    b2:12:58:7f:fc:9f:e3:8f:fd:f0:71:df:b4:d1:bc:
                    01:30:67:42:ad:82:a2:fc:5b:10:f1:af:ed:81:78:
                    66:b5:98:48:8f:41:15:07:83:5a:11:bb:b9:96:9d:
                    38:b1:bb:0a:4c:73:3a:f8:f2:bd:0d:ec:fd:98:ea:
                    70:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:D2:D1:3C:3D:BF:3B:10:7D:D4:10:FC:07:4C:CD:C5:1D:D3:20:8E
            X509v3 Authority Key Identifier:
                keyid:27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/34302e3138332e3232342e302f31392d3234203d3e203133323133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  40.183.224.0/19

    Signature Algorithm: sha256WithRSAEncryption
         37:de:0e:0f:86:07:24:be:13:1c:f0:aa:8a:a4:52:4c:d4:67:
         63:28:e3:53:cb:45:56:a8:00:10:f0:e9:a2:93:e0:ce:e9:41:
         21:f1:9a:a5:c7:01:a8:1a:35:c8:1d:10:20:be:b0:d0:5d:f1:
         a2:a2:83:7b:2a:b0:d3:fc:47:81:e6:e2:d5:ea:73:b5:5f:df:
         84:e3:35:51:12:54:e5:3e:af:6c:e4:b7:6a:97:d0:e5:36:f5:
         85:ca:3a:22:e9:07:0d:fc:f4:82:82:ec:10:14:6f:da:c2:42:
         9c:52:7f:5c:30:d9:4c:e9:74:3d:9d:c5:82:45:f5:ef:d6:ad:
         0a:78:e3:73:fb:ed:42:5c:d0:2d:7d:c4:75:a2:c1:8a:06:2e:
         3a:c8:e5:85:3d:8a:d8:e1:6a:b8:9d:5e:fd:20:26:b7:a8:11:
         26:f0:62:f2:6d:bb:03:97:d5:c8:62:c4:90:e7:22:1f:76:db:
         3d:13:02:d7:85:5a:d1:73:46:f5:0f:97:6c:ec:48:00:c8:53:
         8f:34:8e:e9:7d:d9:da:b6:9d:c1:71:d4:89:56:e3:26:4f:ab:
         5a:db:55:12:3d:17:b6:e3:a4:d1:d4:a0:08:b7:1b:a9:1f:28:
         5c:9d:41:5c:6c:91:9a:ca:55:7c:71:10:2f:f7:c3:71:ff:0b:
         47:25:1a:94
-----BEGIN CERTIFICATE-----
MIIFsjCCBJqgAwIBAgIUQcPj4oRaB5ME5ykuA26falJ0SVEwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyODk4MTIwNGI5MzQxMzU0MGY3ZDViODZmMGY5ZTc0ZjFk
YWFkZTMxZGYwZGIwZjM4OGUwHhcNMjQwNjEzMDcyODIyWhcNMjUwNjEyMDczMzIy
WjAzMTEwLwYDVQQDEyg3MUQyRDEzQzNEQkYzQjEwN0RENDEwRkMwNzRDQ0RDNTFE
RDMyMDhFMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo3ySQQG8+7Fp
aFkltLL8JEnpatJTdnzAagV/XwiU341+KhioXwx9PtzJaR23LDI/B2ZsS4hccQRv
56luQ/BjJNVi02/bugE0aXUvHoC8j/wqD2NE5LwWEGxXnyyXfTNZuvIcd2R9u4qY
UOz87kOQnpGqoLLXcJh78ha20+2RaIMr2T8KMYfJqKxXLB2D8uL5BRIT390mOW9o
Fcl7klJ9Az/aYXN3+9e9tmskC0hw1J0gJndy46X+zuC+hb2hjv8cx1uyElh//J/j
j/3wcd+00bwBMGdCrYKi/FsQ8a/tgXhmtZhIj0EVB4NaEbu5lp04sbsKTHM6+PK9
Dez9mOpwVwIDAQABo4ICsjCCAq4wHQYDVR0OBBYEFHHS0Tw9vzsQfdQQ/AdMzcUd
0yCOMB8GA1UdIwQYMBaAFCeK6Mq422vdgtde3W2FDRkgDR+TMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODJkNWRlNDEwMTg0Zjc1M2RjNjQxMTlkLzUv
Mjc4QUU4Q0FCOERCNkJERDgyRDc1RURENkQ4NTBEMTkyMDBEMUY5My5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0
OTMzYWU1LzJhMTM1NGM3LWFiY2EtNDFiNi04YjIxLTRlMzVhOGQ5YzJiNC84OTgx
MjA0YjkzNDEzNTQwZjdkNWI4NmYwZjllNzRmMWRhYWRlMzFkZjBkYjBmMzg4ZS5j
ZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZTgyZDVkZTQxMDE4NGY3
NTNkYzY0MTE5ZC81LzM0MzAyZTMxMzgzMzJlMzIzMjM0MmUzMDJmMzEzOTJkMzIz
NDIwM2QzZTIwMzEzMzMyMzEzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO
AjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBSi34DANBgkqhkiG9w0BAQsF
AAOCAQEAN94OD4YHJL4THPCqiqRSTNRnYyjjU8tFVqgAEPDpopPgzulBIfGapccB
qBo1yB0QIL6w0F3xoqKDeyqw0/xHgebi1epztV/fhOM1URJU5T6vbOS3apfQ5Tb1
hco6IukHDfz0goLsEBRv2sJCnFJ/XDDZTOl0PZ3FgkX179atCnjjc/vtQlzQLX3E
daLBigYuOsjlhT2K2OFquJ1e/SAmt6gRJvBi8m27A5fVyGLEkOciH3bbPRMC14Va
0XNG9Q+XbOxIAMhTjzSO6X3Z2radwXHUiVbjJk+rWttVEj0XtuOk0dSgCLcbqR8o
XJ1BXGyRmspVfHEQL/fDcf8LRyUalA==
-----END CERTIFICATE-----
Generated at Thu Nov 21 23:34:58 2024 by rpki-client on console-ams.rpki-client.org