Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/34302e3138332e39362e302f31392d3234203d3e20313734.roa
File:                     34302e3138332e39362e302f31392d3234203d3e20313734.roa (raw, json)
Hash identifier:          0h3p5Q6ON4Ux7zSyKpga6NCn7FIRfPOm5lTBKWrxALk=
Subject key identifier:   62:76:52:1D:7E:A9:A7:55:77:35:80:A8:CB:D3:AD:81:93:0C:03:02
Certificate issuer:       /CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e
Certificate serial:       2453973F1AF51106E179C15FD071B25979FABF3F
Authority key identifier: 27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/34302e3138332e39362e302f31392d3234203d3e20313734.roa
Signing time:             Fri 15 Sep 2023 14:41:56 +0000
ROA not before:           Fri 15 Sep 2023 14:36:56 +0000
ROA not after:            Fri 13 Sep 2024 14:41:56 +0000
asID:                     174
IP address blocks:        40.183.96.0/19 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 29 Apr 2024 04:40:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:53:97:3f:1a:f5:11:06:e1:79:c1:5f:d0:71:b2:59:79:fa:bf:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e
        Validity
            Not Before: Sep 15 14:36:56 2023 GMT
            Not After : Sep 13 14:41:56 2024 GMT
        Subject: CN=6276521D7EA9A755773580A8CBD3AD81930C0302
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:1d:a2:18:2f:f5:fd:1a:f5:a7:b3:89:99:6c:
                    ca:9e:17:cd:2d:11:7b:3e:44:df:52:15:58:ce:59:
                    10:3b:96:48:df:4e:73:ff:5f:1f:06:8e:18:87:32:
                    68:36:d4:22:c7:f0:81:db:df:f1:f5:2a:17:21:da:
                    c6:c7:6c:f8:59:1a:23:a9:05:6b:ac:11:07:d5:32:
                    34:37:7d:ac:fb:fe:82:96:e8:9d:ca:4e:0a:82:68:
                    83:00:d5:1e:a7:c4:06:dc:61:e3:16:21:1a:bc:ff:
                    61:40:82:da:39:63:96:a2:f9:7e:be:34:90:d0:5f:
                    1a:3a:bb:41:21:af:81:5d:00:9a:3b:ae:bd:20:2e:
                    a0:b0:97:e4:14:3e:bd:09:a8:a8:25:3e:29:ce:7b:
                    d2:9a:2d:29:36:bc:8f:bc:a9:26:a4:f3:8c:1c:8b:
                    68:e4:8d:99:55:42:cc:a2:ce:d4:bb:0b:18:71:f9:
                    df:88:c6:2d:b8:b8:40:c0:d1:e9:ef:d8:b4:27:6d:
                    1b:34:ac:db:2a:9c:85:a3:d6:0f:c8:e2:21:fc:44:
                    2f:dd:42:a2:be:53:0b:4e:46:63:c4:6c:26:96:17:
                    c3:28:80:c0:8c:ed:f7:fa:4e:2a:ff:19:50:66:10:
                    88:e7:f5:6f:a1:f3:6d:dd:8d:df:81:38:eb:d2:e7:
                    53:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:76:52:1D:7E:A9:A7:55:77:35:80:A8:CB:D3:AD:81:93:0C:03:02
            X509v3 Authority Key Identifier:
                keyid:27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/34302e3138332e39362e302f31392d3234203d3e20313734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  40.183.96.0/19

    Signature Algorithm: sha256WithRSAEncryption
         90:df:9e:c3:46:6c:6a:57:d7:56:a3:21:f7:a4:60:95:0f:c6:
         e8:85:2a:26:e3:2e:a7:95:f2:a6:ac:95:ca:63:c6:bf:23:02:
         2c:cf:8a:0c:e0:5d:c9:34:1f:f7:2b:d8:2d:69:db:42:82:55:
         6f:0f:a2:ce:fe:74:bd:a5:24:31:dd:a9:a9:6f:95:d9:9d:a7:
         7f:f8:c3:1e:c2:2e:9b:e2:50:23:5e:39:99:9e:ce:cd:ea:53:
         48:b4:ff:52:3c:1a:09:c4:67:e7:60:fc:e8:ce:84:bb:3e:fb:
         e2:55:1c:8a:98:cb:98:21:a3:45:5a:08:f6:8a:7c:e7:ed:c7:
         4c:68:b9:d6:4d:8c:49:55:92:5e:a4:3b:17:4e:78:96:ba:2e:
         54:e0:9b:c4:55:10:9d:2a:13:2c:44:7f:02:b6:0a:02:a8:5d:
         35:28:6a:92:d8:73:76:bb:7b:d7:fe:b5:00:65:a2:32:45:1c:
         08:47:d5:8b:51:41:ca:61:2b:21:5b:d3:a8:f0:ca:8b:98:6d:
         e6:1c:cd:54:07:df:c8:2d:66:f1:bb:75:92:2d:20:f1:15:6e:
         31:fe:6c:4d:5d:b0:c3:21:b5:f4:61:d7:fa:ce:3a:5e:62:32:
         6d:2c:ef:40:46:a2:bf:3c:bb:f7:eb:29:37:33:35:ae:e7:96:
         e3:b2:f5:bd
-----BEGIN CERTIFICATE-----
MIIFqzCCBJOgAwIBAgIUJFOXPxr1EQbhecFf0HGyWXn6vz8wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyODk4MTIwNGI5MzQxMzU0MGY3ZDViODZmMGY5ZTc0ZjFk
YWFkZTMxZGYwZGIwZjM4OGUwHhcNMjMwOTE1MTQzNjU2WhcNMjQwOTEzMTQ0MTU2
WjAzMTEwLwYDVQQDEyg2Mjc2NTIxRDdFQTlBNzU1NzczNTgwQThDQkQzQUQ4MTkz
MEMwMzAyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzx2iGC/1/Rr1
p7OJmWzKnhfNLRF7PkTfUhVYzlkQO5ZI305z/18fBo4YhzJoNtQix/CB29/x9SoX
IdrGx2z4WRojqQVrrBEH1TI0N32s+/6Cluidyk4KgmiDANUep8QG3GHjFiEavP9h
QILaOWOWovl+vjSQ0F8aOrtBIa+BXQCaO669IC6gsJfkFD69CaioJT4pznvSmi0p
NryPvKkmpPOMHIto5I2ZVULMos7UuwsYcfnfiMYtuLhAwNHp79i0J20bNKzbKpyF
o9YPyOIh/EQv3UKivlMLTkZjxGwmlhfDKIDAjO33+k4q/xlQZhCI5/VvofNt3Y3f
gTjr0udTfQIDAQABo4ICqzCCAqcwHQYDVR0OBBYEFGJ2Uh1+qadVdzWAqMvTrYGT
DAMCMB8GA1UdIwQYMBaAFCeK6Mq422vdgtde3W2FDRkgDR+TMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODJkNWRlNDEwMTg0Zjc1M2RjNjQxMTlkLzUv
Mjc4QUU4Q0FCOERCNkJERDgyRDc1RURENkQ4NTBEMTkyMDBEMUY5My5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0
OTMzYWU1LzJhMTM1NGM3LWFiY2EtNDFiNi04YjIxLTRlMzVhOGQ5YzJiNC84OTgx
MjA0YjkzNDEzNTQwZjdkNWI4NmYwZjllNzRmMWRhYWRlMzFkZjBkYjBmMzg4ZS5j
ZXIwgZsGCCsGAQUFBwELBIGOMIGLMIGIBggrBgEFBQcwC4Z8cnN5bmM6Ly9ycGtp
LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRlODJkNWRlNDEwMTg0Zjc1
M2RjNjQxMTlkLzUvMzQzMDJlMzEzODMzMmUzOTM2MmUzMDJmMzEzOTJkMzIzNDIw
M2QzZTIwMzEzNzM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsG
AQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFKLdgMA0GCSqGSIb3DQEBCwUAA4IBAQCQ
357DRmxqV9dWoyH3pGCVD8bohSom4y6nlfKmrJXKY8a/IwIsz4oM4F3JNB/3K9gt
adtCglVvD6LO/nS9pSQx3ampb5XZnad/+MMewi6b4lAjXjmZns7N6lNItP9SPBoJ
xGfnYPzozoS7PvviVRyKmMuYIaNFWgj2inzn7cdMaLnWTYxJVZJepDsXTniWui5U
4JvEVRCdKhMsRH8CtgoCqF01KGqS2HN2u3vX/rUAZaIyRRwIR9WLUUHKYSshW9Oo
8MqLmG3mHM1UB9/ILWbxu3WSLSDxFW4x/mxNXbDDIbX0Ydf6zjpeYjJtLO9ARqK/
PLv36yk3MzWu55bjsvW9
-----END CERTIFICATE-----
Generated at Sun Apr 28 03:09:41 2024 by rpki-client on console-ams.rpki-client.org