Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/AS18436.roa
File:                     AS18436.roa (raw, json)
Hash identifier:          189M3pZw/dYdpabmWt8ua2gxUGxs9vIZ5xlU01hx+ZQ=
Subject key identifier:   DD:6C:F1:F5:3B:CE:8D:7D:56:B4:C8:19:17:CC:E1:1B:8C:B1:01:45
Certificate issuer:       /CN=dfe09c2077886b104a9de53bf61bcb90616abe755c93385775
Certificate serial:       1AE0F2C4B5AE891DF8F4FE2E6416443E40016121
Authority key identifier: CA:C1:1D:8E:79:F4:4C:E3:F2:E8:0B:14:69:DD:B1:93:55:8B:D2:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/06af24e7-1c13-4430-bd79-db05f6dc0643/dfe09c2077886b104a9de53bf61bcb90616abe755c93385775.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/AS18436.roa
Signing time:             Wed 17 Jan 2024 05:47:09 +0000
ROA not before:           Wed 17 Jan 2024 05:42:09 +0000
ROA not after:            Wed 15 Jan 2025 05:47:09 +0000
asID:                     18436
IP address blocks:        216.222.246.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/CAC11D8E79F44CE3F2E80B1469DDB193558BD2F9.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/CAC11D8E79F44CE3F2E80B1469DDB193558BD2F9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/06af24e7-1c13-4430-bd79-db05f6dc0643/dfe09c2077886b104a9de53bf61bcb90616abe755c93385775.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/06af24e7-1c13-4430-bd79-db05f6dc0643/06af24e7-1c13-4430-bd79-db05f6dc0643.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/06af24e7-1c13-4430-bd79-db05f6dc0643/06af24e7-1c13-4430-bd79-db05f6dc0643.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/06af24e7-1c13-4430-bd79-db05f6dc0643.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 05:15:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:e0:f2:c4:b5:ae:89:1d:f8:f4:fe:2e:64:16:44:3e:40:01:61:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dfe09c2077886b104a9de53bf61bcb90616abe755c93385775
        Validity
            Not Before: Jan 17 05:42:09 2024 GMT
            Not After : Jan 15 05:47:09 2025 GMT
        Subject: CN=DD6CF1F53BCE8D7D56B4C81917CCE11B8CB10145
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:4d:10:b9:1b:f2:88:26:2b:40:42:b3:cb:52:
                    b1:fd:61:b4:0c:09:9e:5f:d5:6a:49:25:20:7b:38:
                    16:86:31:4d:89:19:08:c7:db:b8:48:61:8a:91:a9:
                    27:9a:dd:a0:c0:a2:f2:54:25:8c:4b:a7:5c:0b:44:
                    de:19:a7:02:c0:16:13:41:44:df:ae:40:86:ad:ae:
                    9c:e4:c0:91:7c:14:8f:f7:c4:8c:e0:d0:1c:75:7c:
                    f0:d2:7f:b2:41:76:f1:62:1c:0a:7c:e0:9f:3c:b3:
                    3b:d6:f8:8a:7f:2d:1d:f5:c6:56:9a:a1:9a:ea:f0:
                    59:b2:11:92:19:8b:4f:26:57:59:a6:22:85:7d:f9:
                    6d:c8:9f:fa:ce:56:6d:a7:9c:46:bc:3d:69:db:8b:
                    b8:60:d7:3a:a7:d7:fe:fa:54:61:d3:82:c0:18:67:
                    3c:4c:b3:00:74:3f:f1:ad:2c:9d:3c:ca:91:65:0e:
                    f1:6c:38:25:71:25:60:18:e1:ff:50:f9:14:a1:b0:
                    da:b9:31:59:50:e0:1f:62:5e:9e:b6:19:da:6f:63:
                    68:91:3d:d3:f6:c3:6d:fc:06:3f:a4:3b:df:02:23:
                    02:69:37:d6:d7:6c:5d:e1:e7:42:48:e7:e9:d9:9a:
                    d5:ff:88:4c:19:7b:51:00:b4:65:ed:59:e6:aa:82:
                    24:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:6C:F1:F5:3B:CE:8D:7D:56:B4:C8:19:17:CC:E1:1B:8C:B1:01:45
            X509v3 Authority Key Identifier:
                keyid:CA:C1:1D:8E:79:F4:4C:E3:F2:E8:0B:14:69:DD:B1:93:55:8B:D2:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/CAC11D8E79F44CE3F2E80B1469DDB193558BD2F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/06af24e7-1c13-4430-bd79-db05f6dc0643/dfe09c2077886b104a9de53bf61bcb90616abe755c93385775.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/AS18436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.222.246.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1d:74:c2:0d:48:41:28:72:4c:ab:fe:be:98:96:5d:e0:07:3e:
         eb:6b:4c:fd:25:89:ab:38:96:5c:20:f4:7f:95:f2:74:32:7d:
         8e:1e:5f:66:ea:02:ce:0d:1c:33:f1:8e:42:5d:3c:60:7a:51:
         1d:49:97:f6:f0:e5:7c:76:ef:f3:1e:ec:12:dc:d2:75:ed:29:
         5f:0e:8a:d3:b1:64:d6:8e:1f:39:79:06:d8:77:44:ad:64:ec:
         11:8b:5a:39:10:83:86:90:90:48:a5:b6:08:24:c6:02:7f:be:
         59:70:83:26:d4:9a:b1:d3:fb:82:50:25:b6:b9:82:b5:97:40:
         1b:26:61:0b:43:45:b3:a3:c9:46:b0:87:03:c6:d2:68:a9:da:
         ab:9b:d6:ba:33:c7:04:32:ed:4f:e4:ab:15:f9:b3:bd:9a:2b:
         4a:07:45:97:08:55:55:d0:a6:4b:f7:ca:b0:2c:cd:a4:d6:5b:
         1d:dc:6e:af:4e:7a:e4:d1:4f:09:8c:8d:a0:71:7c:6b:02:31:
         d8:29:0c:7e:21:54:69:42:3e:2a:9f:12:a2:7f:a6:27:3b:8b:
         4c:36:85:6d:b4:94:fc:cf:44:94:94:f2:ed:65:e6:7f:fb:e8:
         bc:60:0d:3e:b4:df:d4:27:c5:e4:ec:9a:46:3f:63:a8:b9:9f:
         fc:85:06:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 04:53:25 2024 by rpki-client on console-ams.rpki-client.org