Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/1/3134302e3233352e3132382e302f32322d3232203d3e203539363738.roa
File:                     3134302e3233352e3132382e302f32322d3232203d3e203539363738.roa (raw, json)
Hash identifier:          LXEjdT/kSx3Qv4/J75ke2ho1IAL9+g6cTbz74yDomIg=
Subject key identifier:   83:78:B9:F5:E4:F5:5E:1B:11:E3:94:39:E5:D6:6F:89:35:A3:3C:4F
Certificate issuer:       /CN=724139ef2b12b83009797b8d6c0b4306507bd7d638ce941805
Certificate serial:       4107FF410772873FA13DE6401106DE36ABD46D40
Authority key identifier: D0:E6:C7:6B:AD:EC:A5:CB:DA:92:C9:18:B9:7C:7F:45:99:EF:B6:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bc942f68-cb33-4a05-a727-3f93e610393e/724139ef2b12b83009797b8d6c0b4306507bd7d638ce941805.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/1/3134302e3233352e3132382e302f32322d3232203d3e203539363738.roa
Signing time:             Thu 03 Oct 2024 19:51:55 +0000
ROA not before:           Thu 03 Oct 2024 19:46:55 +0000
ROA not after:            Thu 02 Oct 2025 19:51:55 +0000
asID:                     59678
IP address blocks:        140.235.128.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/1/D0E6C76BADECA5CBDA92C918B97C7F4599EFB6CF.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/1/D0E6C76BADECA5CBDA92C918B97C7F4599EFB6CF.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bc942f68-cb33-4a05-a727-3f93e610393e/724139ef2b12b83009797b8d6c0b4306507bd7d638ce941805.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bc942f68-cb33-4a05-a727-3f93e610393e/bc942f68-cb33-4a05-a727-3f93e610393e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bc942f68-cb33-4a05-a727-3f93e610393e/bc942f68-cb33-4a05-a727-3f93e610393e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bc942f68-cb33-4a05-a727-3f93e610393e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 11:53:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:07:ff:41:07:72:87:3f:a1:3d:e6:40:11:06:de:36:ab:d4:6d:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=724139ef2b12b83009797b8d6c0b4306507bd7d638ce941805
        Validity
            Not Before: Oct  3 19:46:55 2024 GMT
            Not After : Oct  2 19:51:55 2025 GMT
        Subject: CN=8378B9F5E4F55E1B11E39439E5D66F8935A33C4F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:2c:ed:21:52:ac:c0:83:be:ab:dd:62:8c:72:
                    b0:21:da:7d:91:0d:3f:10:b3:2c:d2:f6:b9:0c:67:
                    dd:8b:3b:77:17:e0:0e:00:c0:d5:66:19:f9:72:a0:
                    9b:2e:69:42:60:d5:9c:31:69:3f:92:17:5c:d5:dd:
                    be:90:ce:3e:0a:37:3c:de:7d:8b:76:44:b0:23:3c:
                    a6:e6:a6:aa:fc:29:47:ad:7d:a5:17:77:6f:00:dc:
                    92:b6:55:3d:db:9e:da:fc:ab:27:6a:64:9c:d1:27:
                    cf:09:62:2c:16:bc:79:c7:64:5c:c6:3c:1b:c4:07:
                    70:f2:8f:11:65:8f:bd:d2:e8:a4:ff:62:8f:f9:10:
                    ce:26:e0:a2:13:b7:c0:f5:66:d6:80:2a:2b:a8:90:
                    6d:71:f7:dd:c1:b6:fb:51:19:03:ad:d8:af:79:aa:
                    b8:2f:fb:a7:01:9c:e6:d8:e3:88:e8:aa:48:d7:c7:
                    d1:d0:b6:0b:cc:4d:af:14:6c:5b:d3:d1:db:a3:e4:
                    c2:81:bb:b1:d3:82:8d:0c:3a:96:9c:4f:e9:b7:63:
                    03:89:57:ff:5d:81:9c:43:ce:75:ab:3d:b2:ae:b9:
                    77:de:ff:88:c8:5d:4a:20:e9:28:4c:67:12:cc:14:
                    8e:b4:06:8c:7d:8e:05:b1:a5:73:d7:e0:fc:27:96:
                    7e:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:78:B9:F5:E4:F5:5E:1B:11:E3:94:39:E5:D6:6F:89:35:A3:3C:4F
            X509v3 Authority Key Identifier:
                keyid:D0:E6:C7:6B:AD:EC:A5:CB:DA:92:C9:18:B9:7C:7F:45:99:EF:B6:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/1/D0E6C76BADECA5CBDA92C918B97C7F4599EFB6CF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bc942f68-cb33-4a05-a727-3f93e610393e/724139ef2b12b83009797b8d6c0b4306507bd7d638ce941805.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/1/3134302e3233352e3132382e302f32322d3232203d3e203539363738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.235.128.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ab:06:de:9e:78:e9:93:8f:f2:95:9a:4c:0e:65:92:b7:07:66:
         ef:dc:3b:7e:55:08:aa:f5:50:68:4d:c8:de:99:d7:cf:92:2c:
         fc:3d:00:f9:b7:83:04:43:cd:05:93:6c:1c:7a:1d:89:62:a0:
         7a:f4:bc:cb:33:e9:eb:52:e5:cc:4d:da:97:fe:d3:fd:d7:fe:
         10:87:0c:91:28:19:ec:70:b3:79:26:67:3c:0e:87:27:b1:9f:
         8a:c7:79:dc:13:e4:02:85:de:dc:21:72:39:3f:f9:18:67:0e:
         ef:f2:f0:1c:fa:5e:e9:8f:c2:c7:58:c1:6b:ea:fc:78:4f:4c:
         c7:d3:4b:1a:aa:d2:21:eb:15:5a:4b:c0:6f:7c:8a:2e:99:c0:
         bf:12:34:fa:34:7a:6d:02:d4:5a:3c:0f:72:31:de:6f:4b:9c:
         77:74:5f:97:0c:4c:40:47:40:ea:25:fb:b1:71:fd:65:68:7a:
         d9:6c:5c:65:e1:65:a1:d0:db:1e:0d:d2:35:0f:ba:50:ca:c3:
         8d:00:a3:d3:8f:e6:cc:4d:1e:9d:64:66:5b:99:ff:94:77:f8:
         84:78:e7:be:51:0e:32:64:e7:44:0b:b9:c0:f5:29:e7:45:91:
         ab:5c:52:2f:db:eb:4d:64:df:7d:65:2a:a7:3b:28:a8:c7:ec:
         04:70:39:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 09:18:14 2024 by rpki-client on console-fra.rpki-client.org