Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/1/3130342e3232362e31382e302f32342d3234203d3e20333935373439.roa
File:                     3130342e3232362e31382e302f32342d3234203d3e20333935373439.roa (raw, json)
Hash identifier:          Jj4NSsTA6KV1DS8Usb8YCMAGpYfxLX3beXk4T+/hjhQ=
Subject key identifier:   D3:7C:62:58:96:4B:2E:17:D1:D8:F5:7D:C0:DB:66:FB:5C:42:6E:B3
Certificate issuer:       /CN=1bf739f63c6943535cfe4ed2813f838ed560b7076f3a452eb8
Certificate serial:       2E43018E4857F28DF2F6FB487A0724E08D3E5AA0
Authority key identifier: E2:0C:23:2F:52:49:CB:6D:81:8D:89:F7:B2:BD:9A:E3:A3:69:75:7C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/87fd9355-ffdc-4986-9329-4d1909e01a2f/1bf739f63c6943535cfe4ed2813f838ed560b7076f3a452eb8.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/1/3130342e3232362e31382e302f32342d3234203d3e20333935373439.roa
Signing time:             Wed 17 Jan 2024 05:49:30 +0000
ROA not before:           Wed 17 Jan 2024 05:44:30 +0000
ROA not after:            Wed 15 Jan 2025 05:49:30 +0000
asID:                     395749
IP address blocks:        104.226.18.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/1/E20C232F5249CB6D818D89F7B2BD9AE3A369757C.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/1/E20C232F5249CB6D818D89F7B2BD9AE3A369757C.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/87fd9355-ffdc-4986-9329-4d1909e01a2f/1bf739f63c6943535cfe4ed2813f838ed560b7076f3a452eb8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/87fd9355-ffdc-4986-9329-4d1909e01a2f/87fd9355-ffdc-4986-9329-4d1909e01a2f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/87fd9355-ffdc-4986-9329-4d1909e01a2f/87fd9355-ffdc-4986-9329-4d1909e01a2f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/87fd9355-ffdc-4986-9329-4d1909e01a2f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:22:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:43:01:8e:48:57:f2:8d:f2:f6:fb:48:7a:07:24:e0:8d:3e:5a:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1bf739f63c6943535cfe4ed2813f838ed560b7076f3a452eb8
        Validity
            Not Before: Jan 17 05:44:30 2024 GMT
            Not After : Jan 15 05:49:30 2025 GMT
        Subject: CN=D37C6258964B2E17D1D8F57DC0DB66FB5C426EB3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:96:df:4b:79:d4:dd:12:86:5a:6a:8b:1b:e4:
                    d0:53:68:f3:2a:36:51:ac:74:48:bb:bd:37:55:fd:
                    10:cd:e6:67:67:bb:9a:d2:06:e5:bc:3a:1e:f9:67:
                    b6:5a:2c:7a:2e:d9:8d:a4:9f:fd:7f:1a:1e:3b:55:
                    6d:20:42:85:bc:d7:0d:48:99:50:2c:a3:08:41:01:
                    d2:34:8b:70:41:77:de:89:c5:8e:28:ea:3a:36:65:
                    ae:43:12:ef:7b:b8:6a:69:a9:eb:89:5a:48:ed:cc:
                    59:49:2b:5c:c9:ea:f8:02:7b:68:4e:5b:f0:a0:85:
                    a6:31:69:fe:83:d8:9e:c1:c5:06:0e:0c:66:78:89:
                    e1:9b:15:3d:00:e1:9b:d4:20:46:03:d0:6e:85:4b:
                    a8:b9:59:39:e5:9f:e6:51:ad:5e:55:a2:2f:b1:69:
                    51:27:a5:2c:7b:36:2d:68:a0:0f:f4:dc:a5:7f:a1:
                    79:5b:ca:5f:22:d2:a5:d6:f3:75:2d:f8:e9:ec:87:
                    60:32:0f:7f:68:f8:5e:52:b5:6b:f0:56:a8:6a:ce:
                    49:1c:1c:c2:53:02:8a:a6:70:62:11:31:5a:66:41:
                    55:98:fa:2c:dd:04:31:c9:26:89:77:4e:3e:4c:0f:
                    4b:44:a4:a3:88:2d:00:36:bf:5e:61:3f:1b:06:c6:
                    be:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:7C:62:58:96:4B:2E:17:D1:D8:F5:7D:C0:DB:66:FB:5C:42:6E:B3
            X509v3 Authority Key Identifier:
                keyid:E2:0C:23:2F:52:49:CB:6D:81:8D:89:F7:B2:BD:9A:E3:A3:69:75:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/1/E20C232F5249CB6D818D89F7B2BD9AE3A369757C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/87fd9355-ffdc-4986-9329-4d1909e01a2f/1bf739f63c6943535cfe4ed2813f838ed560b7076f3a452eb8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/1/3130342e3232362e31382e302f32342d3234203d3e20333935373439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.226.18.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d3:19:19:8c:7e:da:8c:cc:c0:03:76:9f:cd:3a:6e:bd:56:a2:
         a8:1f:c4:92:1c:60:4f:96:2e:b3:20:a3:bd:0a:c9:af:b8:c1:
         c6:a8:a6:80:69:36:17:78:d1:70:0d:86:e1:f5:29:88:86:99:
         be:82:a1:cb:84:f1:72:fe:a7:3f:0c:15:99:8b:5b:d0:a1:f4:
         2d:e5:16:62:b8:9c:e9:2e:25:e0:de:97:af:e0:03:ac:19:51:
         a3:f9:ce:ea:69:a2:51:51:89:da:0d:15:f3:a5:09:98:57:ae:
         eb:81:d3:2c:fb:4a:21:0f:da:1e:63:14:07:f7:1d:d4:f5:21:
         35:9d:f0:8b:05:23:56:06:ef:fa:7a:ea:b6:8b:a6:85:00:b0:
         9c:00:57:b8:62:6d:ce:e2:f5:65:54:85:b3:4d:33:26:ea:20:
         02:0c:c9:da:4a:1e:96:4d:e6:d4:cf:19:b3:80:17:ab:5d:52:
         3b:86:ab:65:1f:7f:5b:d9:7c:46:62:bd:8b:0a:38:44:32:2d:
         7c:09:e6:fd:2a:53:39:c6:5e:e6:17:06:9d:2d:98:90:bd:60:
         f8:74:0c:3b:00:82:bc:3d:0e:2f:91:d0:8e:2a:f5:bb:ae:5e:
         c8:df:38:6f:96:3a:f3:a0:4a:5c:d6:b4:96:05:5c:86:eb:d6:
         f2:ed:18:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:41:09 2024 by rpki-client on console-ams.rpki-client.org