Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade88e39bfa0189058fde531d9b/0/3230342e31302e31382e302f32332d3234203d3e20323132343737.roa
File:                     3230342e31302e31382e302f32332d3234203d3e20323132343737.roa (raw, json)
Hash identifier:          /0+zMtDXDe/LHR6ZfmcpxOaoJo9+HIsw1aAzKthkV08=
Subject key identifier:   FB:79:CB:F3:1E:14:3A:C6:CE:25:9B:69:EA:71:56:1E:B5:FE:35:33
Certificate issuer:       /CN=c551ec8abc7ab1fd6a4b57d65f377e645c0ed04212769cf2e8
Certificate serial:       40639F01A5CF4AC634C62397AE82990ECBA860FD
Authority key identifier: 3A:50:8A:E4:C1:CB:8D:35:E5:67:A6:26:66:69:7F:B6:9A:BC:77:9C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d2ff74f3-d413-4ff6-822f-f26b277589fd/c551ec8abc7ab1fd6a4b57d65f377e645c0ed04212769cf2e8.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa0189058fde531d9b/0/3230342e31302e31382e302f32332d3234203d3e20323132343737.roa
Signing time:             Thu 08 Aug 2024 15:48:59 +0000
ROA not before:           Thu 08 Aug 2024 15:43:59 +0000
ROA not after:            Thu 07 Aug 2025 15:48:59 +0000
asID:                     212477
IP address blocks:        204.10.18.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa0189058fde531d9b/0/3A508AE4C1CB8D35E567A62666697FB69ABC779C.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa0189058fde531d9b/0/3A508AE4C1CB8D35E567A62666697FB69ABC779C.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d2ff74f3-d413-4ff6-822f-f26b277589fd/c551ec8abc7ab1fd6a4b57d65f377e645c0ed04212769cf2e8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d2ff74f3-d413-4ff6-822f-f26b277589fd/d2ff74f3-d413-4ff6-822f-f26b277589fd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d2ff74f3-d413-4ff6-822f-f26b277589fd/d2ff74f3-d413-4ff6-822f-f26b277589fd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d2ff74f3-d413-4ff6-822f-f26b277589fd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 21:25:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:63:9f:01:a5:cf:4a:c6:34:c6:23:97:ae:82:99:0e:cb:a8:60:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c551ec8abc7ab1fd6a4b57d65f377e645c0ed04212769cf2e8
        Validity
            Not Before: Aug  8 15:43:59 2024 GMT
            Not After : Aug  7 15:48:59 2025 GMT
        Subject: CN=FB79CBF31E143AC6CE259B69EA71561EB5FE3533
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:0d:bc:45:ed:0a:38:d5:b1:a0:d1:03:c1:4d:
                    b2:d4:f1:ab:76:34:7a:3f:85:12:3c:87:97:46:1e:
                    5c:ae:e0:d1:ff:9a:b8:7d:09:e0:31:a9:dd:45:be:
                    7d:00:fb:45:65:89:cb:47:75:34:21:4d:2d:78:c7:
                    e6:16:01:84:e2:3b:17:60:b0:eb:22:11:65:f7:e9:
                    6c:ca:b8:bf:8b:d6:4d:94:64:8d:e2:df:90:d9:4f:
                    00:fc:3d:f7:96:28:27:a6:09:76:f1:03:0d:61:fe:
                    dc:62:0f:79:8c:06:c7:dd:d7:5a:fe:e2:3b:50:1f:
                    71:c1:60:34:d0:f7:09:2e:10:fc:cc:6c:9f:08:3f:
                    ab:91:43:bb:c1:58:81:e5:64:1d:0a:a7:f0:70:e5:
                    04:5a:5e:b5:54:4a:24:d3:ed:6c:e3:b5:c6:ca:cc:
                    43:a6:40:e8:73:29:37:b5:c6:aa:11:5a:93:8e:45:
                    14:c6:95:68:5a:34:ab:58:6b:ec:7c:33:ab:76:68:
                    6a:1c:0d:45:f2:58:a3:31:c1:c3:b2:d0:9b:63:5f:
                    ae:8b:6f:70:3e:f0:cc:f9:ae:66:c5:28:07:50:d9:
                    d1:f8:5f:0a:dc:b6:89:c2:83:6e:e3:ec:26:99:ec:
                    c7:91:bc:74:0f:57:2d:dc:85:6b:3a:90:7c:10:8b:
                    a7:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:79:CB:F3:1E:14:3A:C6:CE:25:9B:69:EA:71:56:1E:B5:FE:35:33
            X509v3 Authority Key Identifier:
                keyid:3A:50:8A:E4:C1:CB:8D:35:E5:67:A6:26:66:69:7F:B6:9A:BC:77:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa0189058fde531d9b/0/3A508AE4C1CB8D35E567A62666697FB69ABC779C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d2ff74f3-d413-4ff6-822f-f26b277589fd/c551ec8abc7ab1fd6a4b57d65f377e645c0ed04212769cf2e8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa0189058fde531d9b/0/3230342e31302e31382e302f32332d3234203d3e20323132343737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.10.18.0/23

    Signature Algorithm: sha256WithRSAEncryption
         03:a9:3c:80:f0:01:b9:2e:9a:59:0b:53:db:28:f0:e1:41:6e:
         09:75:bd:84:bb:7a:9c:3c:07:a4:dc:f7:9f:98:7e:b7:c8:7f:
         c5:9a:ba:06:8f:de:6d:fd:c9:36:80:38:f7:cd:29:bf:c2:44:
         62:cf:86:84:78:04:c1:cb:48:12:d7:1f:7f:0e:14:71:ee:1d:
         0a:68:28:75:3b:a3:6b:30:45:ca:59:62:a4:30:a8:5f:ce:1f:
         9f:53:8c:b8:86:d6:18:15:d9:37:d4:0c:02:aa:ef:09:72:4d:
         17:b8:a7:3d:3d:c7:26:88:74:8f:0c:5e:f6:73:f8:28:e5:84:
         f6:c3:a4:cb:7c:f7:d5:23:7e:f4:d4:70:0e:89:1b:cc:3f:5e:
         ed:2d:d6:45:72:9d:94:e0:71:6f:5d:c3:86:53:f4:60:36:25:
         57:d2:be:16:a4:51:6f:49:e5:f7:23:2f:92:7f:97:e4:41:34:
         af:db:5e:07:da:b4:b9:e1:0f:d3:4f:10:e1:45:de:5e:e3:8a:
         2c:db:2c:0a:83:23:c1:64:46:6f:fc:b8:7f:05:f9:6f:20:d3:
         ce:d8:09:dd:9d:29:5f:a9:da:71:67:36:5c:06:66:27:6c:66:
         74:f2:c9:a0:34:74:6d:37:0d:22:a4:ef:09:ac:bd:6b:1f:7e:
         c2:92:36:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:03:21 2024 by rpki-client on console-fra.rpki-client.org