Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/34302e3138332e36342e302f32302d3234203d3e203534303034.roa
File:                     34302e3138332e36342e302f32302d3234203d3e203534303034.roa (raw, json)
Hash identifier:          tMbmNphKwhhrblOVKm66TNKoCg6xLD4dWPcW1z+87iI=
Subject key identifier:   0E:CA:30:7E:1B:FD:CB:3A:D5:BD:8F:88:F4:DD:61:01:05:1A:38:4C
Certificate issuer:       /CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e
Certificate serial:       52224E3FAD392F0B1D4C446359B7BA5117546F40
Authority key identifier: 27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/34302e3138332e36342e302f32302d3234203d3e203534303034.roa
Signing time:             Thu 04 Apr 2024 01:45:15 +0000
ROA not before:           Thu 04 Apr 2024 01:40:15 +0000
ROA not after:            Thu 03 Apr 2025 01:45:15 +0000
asID:                     54004
IP address blocks:        40.183.64.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:22:4e:3f:ad:39:2f:0b:1d:4c:44:63:59:b7:ba:51:17:54:6f:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e
        Validity
            Not Before: Apr  4 01:40:15 2024 GMT
            Not After : Apr  3 01:45:15 2025 GMT
        Subject: CN=0ECA307E1BFDCB3AD5BD8F88F4DD6101051A384C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:5a:c3:87:56:cd:67:76:07:e1:30:72:79:2b:
                    0f:ec:75:b6:4a:99:f2:bc:40:fb:92:f6:84:fa:4e:
                    7a:53:50:80:a9:e6:e1:f2:a0:9b:88:63:f7:8e:42:
                    c5:fa:56:ac:18:4f:4e:8a:14:f0:00:87:4b:e0:2b:
                    93:c8:48:88:11:78:c5:b2:59:89:58:cd:da:95:86:
                    ff:f7:fd:c5:23:45:43:e9:b1:71:53:cc:50:73:48:
                    5d:cb:23:db:eb:a8:c1:c1:2a:c8:98:60:73:5b:74:
                    cb:d0:2f:07:0d:9f:77:f1:de:35:16:33:9a:28:23:
                    0d:54:ea:e0:9c:eb:9b:dc:0e:e1:07:fd:48:0a:71:
                    53:82:7e:1b:40:c8:2a:52:a9:06:7f:f7:d4:86:47:
                    8f:a9:b6:75:9b:cb:c8:61:7c:9c:56:41:6b:cf:5b:
                    ce:ec:0b:9b:b1:c7:b6:38:ac:ac:c3:12:64:0d:de:
                    df:96:3b:3e:f4:e1:30:81:90:bf:c5:2d:9a:2e:ed:
                    bb:c2:9d:f7:e4:f3:b1:50:59:a5:45:3b:94:ab:23:
                    6d:4d:a0:22:c3:f9:9b:e4:03:28:0a:10:1a:58:43:
                    e3:e1:4e:7c:67:03:89:2f:e5:c4:ea:ce:43:cd:8c:
                    b6:13:78:b6:e7:96:15:c2:d2:fa:2f:03:13:30:be:
                    de:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:CA:30:7E:1B:FD:CB:3A:D5:BD:8F:88:F4:DD:61:01:05:1A:38:4C
            X509v3 Authority Key Identifier:
                keyid:27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/34302e3138332e36342e302f32302d3234203d3e203534303034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  40.183.64.0/20

    Signature Algorithm: sha256WithRSAEncryption
         75:e6:16:1b:7c:70:2f:43:ad:49:05:03:10:78:a1:f5:d6:94:
         5f:b7:46:9a:20:0c:fd:31:3a:38:00:d3:54:91:84:2e:59:89:
         43:55:5e:2b:3f:e2:b6:e2:a2:e9:41:cb:32:60:ae:40:56:44:
         ce:cc:26:ec:9e:cd:0e:d2:d9:99:37:26:2c:96:ba:41:4b:39:
         3f:fc:5e:b4:8f:71:44:df:93:ac:b4:1a:97:6c:07:67:aa:f4:
         69:a4:30:56:f8:8d:3c:ad:43:86:79:5a:9b:22:4a:e7:0e:8e:
         8b:21:a2:a9:d8:5e:9c:dd:7b:d2:62:1a:1c:c4:77:27:87:3f:
         e5:63:61:1c:c2:0c:c0:b6:29:9f:76:8e:b9:88:fd:0f:81:bb:
         16:c9:d4:6f:f2:f6:01:b5:23:63:7b:b1:fd:c5:dd:9d:dd:f1:
         83:91:c4:61:0a:b5:d1:5a:e1:36:95:5c:6a:c0:cb:18:89:f2:
         b2:a3:4c:04:b0:8b:37:3b:52:e5:96:84:35:13:54:ed:7e:00:
         1d:08:a2:60:97:65:a6:ed:99:c8:4d:0e:95:d5:80:f8:79:2d:
         4b:11:4c:c6:12:4a:eb:1a:02:cf:2a:4b:8f:70:22:46:7c:3a:
         9b:2a:86:33:04:11:9c:5e:2f:73:f8:5f:b2:d9:20:83:c6:17:
         db:95:46:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:34:39 2024 by rpki-client on console-fra.rpki-client.org