Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/34302e3138332e39362e302f31392d3234203d3e203430363736.roa
File:                     34302e3138332e39362e302f31392d3234203d3e203430363736.roa (raw, json)
Hash identifier:          mYD7QGCEVZloTVO8muJhEbxd0yxp4wf4WIn/KqBoYPg=
Subject key identifier:   FB:7E:26:06:59:0A:46:58:45:06:EA:89:84:67:48:15:8E:67:5E:FC
Certificate issuer:       /CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e
Certificate serial:       264D4A07EBE912C6392229AE8D7C991C6FB1215E
Authority key identifier: 27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/34302e3138332e39362e302f31392d3234203d3e203430363736.roa
Signing time:             Sun 24 Nov 2024 10:22:33 +0000
ROA not before:           Sun 24 Nov 2024 10:17:33 +0000
ROA not after:            Sun 23 Nov 2025 10:22:33 +0000
asID:                     40676
IP address blocks:        40.183.96.0/19 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 07:05:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:4d:4a:07:eb:e9:12:c6:39:22:29:ae:8d:7c:99:1c:6f:b1:21:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e
        Validity
            Not Before: Nov 24 10:17:33 2024 GMT
            Not After : Nov 23 10:22:33 2025 GMT
        Subject: CN=FB7E2606590A46584506EA89846748158E675EFC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:b9:c7:d0:b3:ff:59:d0:32:41:74:c3:c0:b0:
                    e3:fa:62:81:64:38:f7:ad:ca:0e:19:f0:44:41:52:
                    ce:23:44:6f:0a:e0:69:89:d0:e0:fc:32:b3:7c:45:
                    d9:60:56:55:f0:db:0e:57:e9:6e:70:ff:e5:ad:26:
                    2e:7f:ce:75:32:31:57:e9:52:72:53:f2:14:85:13:
                    87:81:e6:72:ae:51:69:d9:22:ac:d5:4b:05:66:4c:
                    b4:48:37:8b:0e:75:28:96:4a:d9:6f:30:22:2e:ac:
                    69:0f:46:ce:58:ed:99:c1:f0:00:f1:34:f5:d8:52:
                    ee:bc:7e:6c:72:b7:db:23:99:71:d1:ee:b1:34:8c:
                    bb:71:35:bb:cd:d9:1c:07:7b:ae:be:31:04:1e:af:
                    57:a9:13:27:1f:ed:c0:3a:42:f7:af:86:0a:70:5b:
                    8a:28:5a:34:33:1d:f4:45:49:93:49:81:0a:e8:75:
                    87:d6:34:7f:ac:7d:66:6d:7a:2b:bb:42:ec:ea:64:
                    f9:68:44:b6:95:0a:df:4a:43:73:d3:30:fd:d2:e1:
                    d2:0d:84:60:93:77:57:e0:2f:1d:0c:3b:48:62:f5:
                    6a:78:e7:9d:7b:84:74:d3:d4:d5:f8:ee:ba:b1:09:
                    75:0f:c7:9d:f4:17:02:58:81:6e:50:c7:4b:76:5d:
                    ca:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:7E:26:06:59:0A:46:58:45:06:EA:89:84:67:48:15:8E:67:5E:FC
            X509v3 Authority Key Identifier:
                keyid:27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/34302e3138332e39362e302f31392d3234203d3e203430363736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  40.183.96.0/19

    Signature Algorithm: sha256WithRSAEncryption
         b3:c2:c8:61:a0:61:26:19:b8:f5:e9:5a:ee:e2:d0:f2:00:2c:
         22:e5:6a:17:f7:dc:e8:99:c8:01:17:3f:3d:48:c2:07:85:4c:
         b5:0c:87:f2:84:cc:bd:fc:26:9d:61:58:9f:50:fe:4a:3d:03:
         1a:08:4e:43:a4:7c:32:7d:b1:e6:9f:db:b1:df:07:e5:b5:f6:
         ef:60:0d:3c:21:19:49:9b:df:44:08:d0:11:24:16:81:8a:ed:
         fc:5f:f2:f7:40:f0:c2:b6:18:61:c3:b6:d2:a8:c5:75:87:c4:
         a5:64:2e:da:06:5a:c8:4b:4e:76:94:31:f6:bd:c5:f5:a7:03:
         de:c0:3b:54:ea:49:4b:27:7f:aa:71:fa:48:02:b3:e9:c5:2f:
         a6:4d:08:04:60:49:af:2a:f6:f5:53:7e:7c:a2:a4:ca:a7:bd:
         8f:f0:66:11:70:22:fa:b0:39:e0:19:a7:96:2a:f8:68:94:af:
         50:47:91:e9:4d:74:aa:88:a1:25:7d:52:e9:b9:c7:e7:fc:12:
         06:ac:a9:71:7e:18:59:ce:9f:88:ae:66:c5:15:ec:50:1d:c3:
         8f:a2:21:36:30:24:69:0a:f2:9c:8f:f7:63:7c:b3:c5:0f:7d:
         8d:ba:16:d9:9d:93:8a:81:09:97:99:e9:eb:f7:5e:b1:3b:f6:
         94:63:db:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 06:04:55 2024 by rpki-client on console-fra.rpki-client.org