Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/1/3130342e3232362e31302e302f32342d3234203d3e203232303436.roa
File:                     3130342e3232362e31302e302f32342d3234203d3e203232303436.roa (raw, json)
Hash identifier:          9YhNBLx+9ZOSwBkEpF86gim6/fan7Dn3e4kEHeqcpQ4=
Subject key identifier:   9F:AD:49:E4:11:97:95:82:2A:E8:3E:BE:D3:20:72:E6:FD:E6:25:21
Certificate issuer:       /CN=1bf739f63c6943535cfe4ed2813f838ed560b7076f3a452eb8
Certificate serial:       2BD506E25B3624E93E55F733B94878A7D2A0414C
Authority key identifier: E2:0C:23:2F:52:49:CB:6D:81:8D:89:F7:B2:BD:9A:E3:A3:69:75:7C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/87fd9355-ffdc-4986-9329-4d1909e01a2f/1bf739f63c6943535cfe4ed2813f838ed560b7076f3a452eb8.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/1/3130342e3232362e31302e302f32342d3234203d3e203232303436.roa
Signing time:             Wed 17 Jan 2024 05:49:13 +0000
ROA not before:           Wed 17 Jan 2024 05:44:13 +0000
ROA not after:            Wed 15 Jan 2025 05:49:13 +0000
asID:                     22046
IP address blocks:        104.226.10.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/1/E20C232F5249CB6D818D89F7B2BD9AE3A369757C.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/1/E20C232F5249CB6D818D89F7B2BD9AE3A369757C.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/87fd9355-ffdc-4986-9329-4d1909e01a2f/1bf739f63c6943535cfe4ed2813f838ed560b7076f3a452eb8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/87fd9355-ffdc-4986-9329-4d1909e01a2f/87fd9355-ffdc-4986-9329-4d1909e01a2f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/87fd9355-ffdc-4986-9329-4d1909e01a2f/87fd9355-ffdc-4986-9329-4d1909e01a2f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/87fd9355-ffdc-4986-9329-4d1909e01a2f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:22:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:d5:06:e2:5b:36:24:e9:3e:55:f7:33:b9:48:78:a7:d2:a0:41:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1bf739f63c6943535cfe4ed2813f838ed560b7076f3a452eb8
        Validity
            Not Before: Jan 17 05:44:13 2024 GMT
            Not After : Jan 15 05:49:13 2025 GMT
        Subject: CN=9FAD49E4119795822AE83EBED32072E6FDE62521
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:e0:e5:3d:b8:0d:af:02:58:ac:3b:7f:8e:fa:
                    c1:c5:07:93:87:bb:c3:67:9f:11:1e:14:00:03:1f:
                    ca:82:00:73:2c:b8:84:b1:7f:84:19:70:78:6a:4a:
                    19:38:0a:37:da:ef:c9:6c:77:55:a7:89:d4:38:9e:
                    3b:6a:24:71:29:f2:5a:38:dc:25:22:76:d4:63:f1:
                    fe:67:35:69:a6:8c:b2:5c:73:62:be:67:3b:cf:41:
                    82:34:10:5b:41:5e:2a:b9:18:15:0d:c3:a4:cb:84:
                    7f:1b:a1:16:0a:15:fb:04:e0:21:e3:36:6e:66:9d:
                    2e:35:53:4d:e6:f2:ad:c3:c7:8d:a0:fc:04:8c:8f:
                    0e:96:97:da:24:c3:a2:64:ba:43:8b:c9:2b:f7:a3:
                    48:e6:e5:4f:6a:a8:ec:3c:47:e8:d8:e4:53:d6:cc:
                    74:7a:65:74:d9:55:6f:03:92:14:bc:ba:5c:77:f0:
                    5d:3b:55:56:c0:4c:88:e1:8a:b7:91:17:4e:66:c2:
                    a9:74:85:cf:20:e7:84:00:33:64:b8:0e:83:a4:fc:
                    21:b3:65:e6:e7:dd:7d:0a:83:87:da:d1:08:10:f2:
                    a6:9d:29:21:f3:2a:a8:5c:ba:6a:f4:f6:5d:73:72:
                    64:db:2b:43:fb:27:8c:fe:bb:d4:93:41:5f:c9:b6:
                    14:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:AD:49:E4:11:97:95:82:2A:E8:3E:BE:D3:20:72:E6:FD:E6:25:21
            X509v3 Authority Key Identifier:
                keyid:E2:0C:23:2F:52:49:CB:6D:81:8D:89:F7:B2:BD:9A:E3:A3:69:75:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/1/E20C232F5249CB6D818D89F7B2BD9AE3A369757C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/87fd9355-ffdc-4986-9329-4d1909e01a2f/1bf739f63c6943535cfe4ed2813f838ed560b7076f3a452eb8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/1/3130342e3232362e31302e302f32342d3234203d3e203232303436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.226.10.0/24

    Signature Algorithm: sha256WithRSAEncryption
         19:c4:94:15:1f:4f:51:8c:14:0d:e1:ec:7f:84:0f:89:9a:f5:
         52:2b:64:80:f1:c2:14:da:66:ee:9d:9f:86:32:16:b7:30:b7:
         fa:12:34:cb:1a:54:5b:72:81:fd:32:0c:99:d0:65:d5:bb:10:
         af:82:46:59:18:f0:ca:38:67:9c:b0:a7:2b:7f:35:82:60:55:
         a3:d1:27:9d:75:4f:fe:41:2c:75:e0:d1:30:ed:8b:ea:f0:72:
         53:70:6a:37:6c:bc:4a:5b:b5:72:97:2e:68:90:fa:a0:0b:cb:
         eb:7f:4b:4d:b6:dc:bc:38:8c:e4:89:1e:6d:dd:dd:e2:38:a5:
         1c:16:21:dd:ba:92:0b:32:80:77:a3:1f:51:8b:61:ad:5d:d2:
         ec:f1:48:c8:48:52:6c:a1:69:66:5e:e9:95:a2:0b:f7:8c:a3:
         2b:c3:e8:a1:e1:26:bb:c4:c2:59:1a:69:c9:41:f3:9c:d1:77:
         c2:ba:49:df:42:1e:7c:fb:dc:c4:f6:eb:cc:3f:09:b4:77:40:
         22:dd:b0:69:69:31:fb:9a:df:70:03:83:6a:99:0f:4b:70:67:
         d1:9a:b0:8c:7b:ad:e7:f8:3e:cd:e7:78:48:d4:23:35:94:32:
         57:0b:1e:29:0f:6a:07:7a:48:c8:75:c0:89:30:3e:8a:22:d4:
         5e:77:fd:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:41:09 2024 by rpki-client on console-ams.rpki-client.org