Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/AS394668.roa
File:                     AS394668.roa (raw, json)
Hash identifier:          z19/Lmy2rex/8nNNDU11OzVfow30iIHDCHaVQ8Db408=
Subject key identifier:   D9:77:D7:09:B7:D7:4B:81:36:B8:F7:F7:27:22:31:BF:B5:37:8A:FB
Certificate issuer:       /CN=dfe09c2077886b104a9de53bf61bcb90616abe755c93385775
Certificate serial:       75A4E196F1EBF5C1191310D51E3F3A4DB5F02B33
Authority key identifier: CA:C1:1D:8E:79:F4:4C:E3:F2:E8:0B:14:69:DD:B1:93:55:8B:D2:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/06af24e7-1c13-4430-bd79-db05f6dc0643/dfe09c2077886b104a9de53bf61bcb90616abe755c93385775.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/AS394668.roa
Signing time:             Wed 17 Jan 2024 05:50:37 +0000
ROA not before:           Wed 17 Jan 2024 05:45:37 +0000
ROA not after:            Wed 15 Jan 2025 05:50:37 +0000
asID:                     394668
IP address blocks:        184.19.238.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/CAC11D8E79F44CE3F2E80B1469DDB193558BD2F9.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/CAC11D8E79F44CE3F2E80B1469DDB193558BD2F9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/06af24e7-1c13-4430-bd79-db05f6dc0643/dfe09c2077886b104a9de53bf61bcb90616abe755c93385775.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/06af24e7-1c13-4430-bd79-db05f6dc0643/06af24e7-1c13-4430-bd79-db05f6dc0643.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/06af24e7-1c13-4430-bd79-db05f6dc0643/06af24e7-1c13-4430-bd79-db05f6dc0643.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/06af24e7-1c13-4430-bd79-db05f6dc0643.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:a4:e1:96:f1:eb:f5:c1:19:13:10:d5:1e:3f:3a:4d:b5:f0:2b:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dfe09c2077886b104a9de53bf61bcb90616abe755c93385775
        Validity
            Not Before: Jan 17 05:45:37 2024 GMT
            Not After : Jan 15 05:50:37 2025 GMT
        Subject: CN=D977D709B7D74B8136B8F7F7272231BFB5378AFB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:f9:c7:18:34:19:7e:d1:3b:84:d2:68:e8:59:
                    00:4c:80:50:37:6f:90:55:d4:a6:87:b5:d3:14:f0:
                    36:f2:96:1a:1a:b4:3f:e6:a9:b8:ce:78:62:2e:1a:
                    a8:f0:2c:32:ad:c3:5b:df:ed:4f:5b:5c:90:70:e4:
                    fd:f0:e0:0e:bc:fd:e0:a9:6e:7d:82:ae:f7:10:52:
                    b5:41:89:40:09:9e:13:97:78:72:a0:a5:c4:4d:93:
                    38:ee:76:79:49:1a:fb:b7:c1:fa:c8:fa:a9:18:1c:
                    cc:3a:f9:63:ee:10:c7:3f:a0:2a:d6:d4:08:5b:c7:
                    2a:83:88:87:8e:32:a5:5e:76:69:29:c9:a7:62:d4:
                    c8:0d:ff:30:88:0e:fc:6c:c8:c8:95:d1:5f:f5:4c:
                    46:d0:c7:b3:a8:58:fc:c5:4f:66:91:15:37:50:c9:
                    34:d4:c5:44:f5:32:36:52:f9:e1:23:fe:e4:dc:bd:
                    0f:d2:43:55:4b:e3:27:d8:7c:a7:b7:71:56:28:30:
                    42:84:f1:ea:7e:45:e6:07:ae:4f:35:6c:4f:4d:34:
                    0f:b0:c2:1f:e3:01:79:92:35:06:d3:8f:a1:06:b9:
                    d2:5a:10:d7:8f:32:f2:9b:2f:2e:76:2d:e4:8a:31:
                    b0:f3:ff:1a:c6:a0:20:7a:7d:a0:af:6a:81:d0:b2:
                    f0:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:77:D7:09:B7:D7:4B:81:36:B8:F7:F7:27:22:31:BF:B5:37:8A:FB
            X509v3 Authority Key Identifier:
                keyid:CA:C1:1D:8E:79:F4:4C:E3:F2:E8:0B:14:69:DD:B1:93:55:8B:D2:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/CAC11D8E79F44CE3F2E80B1469DDB193558BD2F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/06af24e7-1c13-4430-bd79-db05f6dc0643/dfe09c2077886b104a9de53bf61bcb90616abe755c93385775.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/AS394668.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.19.238.0/24

    Signature Algorithm: sha256WithRSAEncryption
         01:26:ac:28:eb:53:6f:96:bb:4d:15:4b:e7:1e:99:b0:29:9b:
         58:10:37:b4:ae:62:87:18:ca:32:8e:3c:97:e5:1a:3b:da:10:
         04:70:94:26:f7:d3:a1:5a:08:03:e9:e7:84:f1:aa:15:77:8c:
         6a:0c:2f:e4:60:f4:8f:83:fa:d1:c2:46:e3:70:50:f9:75:65:
         cb:d7:1d:4c:79:2a:2e:53:5a:e5:80:44:27:db:34:e1:05:60:
         15:e9:ef:04:12:58:8c:d5:53:8a:4e:94:1e:a1:81:83:c6:65:
         ba:57:14:75:c9:e4:a7:a2:2f:61:fb:06:8e:3b:f4:ec:2e:6e:
         79:01:50:73:1f:69:15:de:65:35:7f:73:6a:15:d8:f5:1e:d6:
         7c:4d:05:60:90:87:4e:0d:2c:cc:03:1b:1e:8a:5f:25:f6:19:
         e5:f3:39:79:19:9b:19:f6:a1:8e:b3:e5:36:dd:35:7b:d8:2b:
         dd:9e:bc:b9:34:f1:e3:63:ec:56:f0:1c:23:05:f9:a1:46:a5:
         13:e9:1f:8c:c4:da:b6:66:6e:cd:97:92:e2:f0:ef:f2:c4:52:
         43:5e:f6:18:83:9b:b1:7f:ec:e5:67:1e:3b:a9:8f:3d:c2:bc:
         9a:96:5f:b2:80:7d:64:90:b3:5c:f5:9d:57:04:19:7d:77:ad:
         c5:32:8d:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 05:50:08 2024 by rpki-client on console-fra.rpki-client.org