Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/AS22580.roa
File:                     AS22580.roa (raw, json)
Hash identifier:          yx5wStY5d9uxjmVERW98vftQ97Zj+9tDbaZW2LdSlRo=
Subject key identifier:   9D:45:ED:24:64:46:C1:DC:B9:56:97:9B:15:2F:5B:10:18:51:64:C6
Certificate issuer:       /CN=dfe09c2077886b104a9de53bf61bcb90616abe755c93385775
Certificate serial:       3C078CFE5DC5070F518A49C971435CBC50D1020A
Authority key identifier: CA:C1:1D:8E:79:F4:4C:E3:F2:E8:0B:14:69:DD:B1:93:55:8B:D2:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/06af24e7-1c13-4430-bd79-db05f6dc0643/dfe09c2077886b104a9de53bf61bcb90616abe755c93385775.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/AS22580.roa
Signing time:             Wed 17 Jan 2024 05:47:22 +0000
ROA not before:           Wed 17 Jan 2024 05:42:22 +0000
ROA not after:            Wed 15 Jan 2025 05:47:22 +0000
asID:                     22580
IP address blocks:        199.224.104.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/CAC11D8E79F44CE3F2E80B1469DDB193558BD2F9.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/CAC11D8E79F44CE3F2E80B1469DDB193558BD2F9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/06af24e7-1c13-4430-bd79-db05f6dc0643/dfe09c2077886b104a9de53bf61bcb90616abe755c93385775.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/06af24e7-1c13-4430-bd79-db05f6dc0643/06af24e7-1c13-4430-bd79-db05f6dc0643.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/06af24e7-1c13-4430-bd79-db05f6dc0643/06af24e7-1c13-4430-bd79-db05f6dc0643.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/06af24e7-1c13-4430-bd79-db05f6dc0643.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 11:55:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:07:8c:fe:5d:c5:07:0f:51:8a:49:c9:71:43:5c:bc:50:d1:02:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dfe09c2077886b104a9de53bf61bcb90616abe755c93385775
        Validity
            Not Before: Jan 17 05:42:22 2024 GMT
            Not After : Jan 15 05:47:22 2025 GMT
        Subject: CN=9D45ED246446C1DCB956979B152F5B10185164C6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:90:71:80:47:9c:b3:3e:50:62:ee:62:29:6f:
                    00:a3:46:26:b0:5b:78:15:6d:f6:de:a0:68:0c:a8:
                    63:80:50:ec:55:ab:e9:a1:2a:29:bc:6b:d3:5e:00:
                    bc:d3:29:5f:e8:65:8c:e8:89:80:bb:3a:8e:a8:26:
                    83:15:29:ff:0b:a9:c1:20:55:6a:6f:9f:a0:16:f3:
                    04:bb:f1:72:b8:78:6b:d9:97:de:df:07:e3:2d:5b:
                    26:85:0c:15:50:9f:e2:ed:7b:5e:c7:11:80:ec:99:
                    a4:c0:27:05:6b:52:5b:34:77:15:82:38:2a:50:7b:
                    98:64:3a:ec:d4:71:16:99:c5:e1:b5:0b:14:c3:50:
                    43:73:0c:4f:35:f6:b8:8f:fb:68:5f:fc:ac:bd:ad:
                    fb:22:88:88:f2:b4:82:56:18:98:7b:ed:dd:2a:d3:
                    56:30:d9:91:73:db:08:12:81:74:0a:45:5c:e0:de:
                    a5:41:f1:53:0a:e0:8b:f8:7a:81:ca:9e:6a:95:97:
                    9c:1f:9e:f5:8a:ed:89:1c:83:66:f6:7b:81:63:2e:
                    b7:ae:8f:f4:8d:24:99:a7:94:8b:0c:c9:1e:b9:86:
                    ff:54:2d:4e:b3:1d:ea:c9:a1:f2:c4:b5:75:26:9d:
                    6b:f2:9b:e6:9c:9d:2e:83:b6:3e:82:ca:f5:c3:9e:
                    e2:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:45:ED:24:64:46:C1:DC:B9:56:97:9B:15:2F:5B:10:18:51:64:C6
            X509v3 Authority Key Identifier:
                keyid:CA:C1:1D:8E:79:F4:4C:E3:F2:E8:0B:14:69:DD:B1:93:55:8B:D2:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/CAC11D8E79F44CE3F2E80B1469DDB193558BD2F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/06af24e7-1c13-4430-bd79-db05f6dc0643/dfe09c2077886b104a9de53bf61bcb90616abe755c93385775.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/AS22580.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.224.104.0/24

    Signature Algorithm: sha256WithRSAEncryption
         48:26:28:65:e0:26:88:64:a0:ba:44:81:f4:43:14:21:01:c7:
         1f:ea:bc:e3:66:58:34:28:61:c5:74:cf:6c:5c:27:b6:40:30:
         42:26:c1:df:21:05:81:3c:c7:be:ad:49:e6:75:34:74:f1:bb:
         62:e5:3a:03:e3:2b:7a:ce:06:a2:61:f9:f7:09:13:10:5e:5c:
         62:13:b5:b9:0b:92:d1:4b:6e:d4:e7:c9:de:47:0a:63:5d:fe:
         c8:cd:e5:7d:e1:79:dd:72:df:a6:ac:7a:a7:32:bd:61:e0:2a:
         1b:34:90:ed:2e:d4:a3:09:ac:51:b4:cf:82:dc:f8:bb:00:0f:
         df:58:ba:e2:2d:b7:79:35:0f:ff:6a:46:c7:a1:1a:4f:2d:17:
         3a:cc:ea:92:81:6f:ba:ee:bc:5a:cf:4f:7a:7f:d4:40:fb:97:
         02:b7:96:89:66:b1:d7:f0:45:03:bb:64:51:e3:81:3f:a5:db:
         50:39:c1:29:26:22:60:9f:6c:fe:bf:fc:37:d4:ef:a3:d6:67:
         62:7e:6f:18:fb:35:cb:60:d9:28:8e:91:48:cd:17:72:a9:a9:
         fb:b4:11:70:b2:bb:fb:12:62:4d:1a:a7:f9:f6:fd:85:bc:bd:
         e0:b0:66:4d:cb:b5:89:cc:ef:20:dd:e2:2e:ad:d4:07:03:c6:
         6e:4f:8e:d1
-----BEGIN CERTIFICATE-----
MIIFfjCCBGagAwIBAgIUPAeM/l3FBw9RiknJcUNcvFDRAgowDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZGZlMDljMjA3Nzg4NmIxMDRhOWRlNTNiZjYxYmNiOTA2
MTZhYmU3NTVjOTMzODU3NzUwHhcNMjQwMTE3MDU0MjIyWhcNMjUwMTE1MDU0NzIy
WjAzMTEwLwYDVQQDEyg5RDQ1RUQyNDY0NDZDMURDQjk1Njk3OUIxNTJGNUIxMDE4
NTE2NEM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuZBxgEecsz5Q
Yu5iKW8Ao0YmsFt4FW323qBoDKhjgFDsVavpoSopvGvTXgC80ylf6GWM6ImAuzqO
qCaDFSn/C6nBIFVqb5+gFvMEu/FyuHhr2Zfe3wfjLVsmhQwVUJ/i7XtexxGA7Jmk
wCcFa1JbNHcVgjgqUHuYZDrs1HEWmcXhtQsUw1BDcwxPNfa4j/toX/ysva37IoiI
8rSCVhiYe+3dKtNWMNmRc9sIEoF0CkVc4N6lQfFTCuCL+HqByp5qlZecH571iu2J
HINm9nuBYy63ro/0jSSZp5SLDMkeuYb/VC1Osx3qyaHyxLV1Jp1r8pvmnJ0ug7Y+
gsr1w57ihwIDAQABo4ICfjCCAnowHQYDVR0OBBYEFJ1F7SRkRsHcuVaXmxUvWxAY
UWTGMB8GA1UdIwQYMBaAFMrBHY559Ezj8ugLFGndsZNVi9L5MA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODcyODk1NzgwMTg3MzJhOTBhMmYwOTdmLzQv
Q0FDMTFEOEU3OUY0NENFM0YyRTgwQjE0NjlEREIxOTM1NThCRDJGOS5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0
OTMzYWU1LzA2YWYyNGU3LTFjMTMtNDQzMC1iZDc5LWRiMDVmNmRjMDY0My9kZmUw
OWMyMDc3ODg2YjEwNGE5ZGU1M2JmNjFiY2I5MDYxNmFiZTc1NWM5MzM4NTc3NS5j
ZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNyc3luYzovL3Jwa2ktcnBz
LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4NzI4OTU3ODAxODczMmE5MGEy
ZjA5N2YvNC9BUzIyNTgwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8G
CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx+BoMA0GCSqGSIb3DQEBCwUAA4IB
AQBIJihl4CaIZKC6RIH0QxQhAccf6rzjZlg0KGHFdM9sXCe2QDBCJsHfIQWBPMe+
rUnmdTR08bti5ToD4yt6zgaiYfn3CRMQXlxiE7W5C5LRS27U58neRwpjXf7IzeV9
4Xndct+mrHqnMr1h4CobNJDtLtSjCaxRtM+C3Pi7AA/fWLriLbd5NQ//akbHoRpP
LRc6zOqSgW+67rxaz096f9RA+5cCt5aJZrHX8EUDu2RR44E/pdtQOcEpJiJgn2z+
v/w31O+j1mdifm8Y+zXLYNkojpFIzRdyqan7tBFwsrv7EmJNGqf59v2FvL3gsGZN
y7WJzO8g3eIurdQHA8ZuT47R
-----END CERTIFICATE-----
Generated at Mon Nov 25 17:57:11 2024 by rpki-client on console-fra.rpki-client.org