Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/1/3134302e3233352e3133302e302f32342d3234203d3e203534323138.roa
File:                     3134302e3233352e3133302e302f32342d3234203d3e203534323138.roa (raw, json)
Hash identifier:          eXxuryPiSpV5dsDMZ3yKG5l94jC86Z3XAw5oTngCOXE=
Subject key identifier:   2E:EB:CF:8A:28:65:B6:DC:1F:90:BF:EE:BF:B7:37:D8:6D:C5:7B:57
Certificate issuer:       /CN=724139ef2b12b83009797b8d6c0b4306507bd7d638ce941805
Certificate serial:       04222899B6C275904A2D8C2DE29D75501E36DB39
Authority key identifier: D0:E6:C7:6B:AD:EC:A5:CB:DA:92:C9:18:B9:7C:7F:45:99:EF:B6:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bc942f68-cb33-4a05-a727-3f93e610393e/724139ef2b12b83009797b8d6c0b4306507bd7d638ce941805.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/1/3134302e3233352e3133302e302f32342d3234203d3e203534323138.roa
Signing time:             Sat 26 Oct 2024 00:17:53 +0000
ROA not before:           Sat 26 Oct 2024 00:12:53 +0000
ROA not after:            Sat 25 Oct 2025 00:17:53 +0000
asID:                     54218
IP address blocks:        140.235.130.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/1/D0E6C76BADECA5CBDA92C918B97C7F4599EFB6CF.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/1/D0E6C76BADECA5CBDA92C918B97C7F4599EFB6CF.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bc942f68-cb33-4a05-a727-3f93e610393e/724139ef2b12b83009797b8d6c0b4306507bd7d638ce941805.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bc942f68-cb33-4a05-a727-3f93e610393e/bc942f68-cb33-4a05-a727-3f93e610393e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bc942f68-cb33-4a05-a727-3f93e610393e/bc942f68-cb33-4a05-a727-3f93e610393e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bc942f68-cb33-4a05-a727-3f93e610393e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 21:55:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:22:28:99:b6:c2:75:90:4a:2d:8c:2d:e2:9d:75:50:1e:36:db:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=724139ef2b12b83009797b8d6c0b4306507bd7d638ce941805
        Validity
            Not Before: Oct 26 00:12:53 2024 GMT
            Not After : Oct 25 00:17:53 2025 GMT
        Subject: CN=2EEBCF8A2865B6DC1F90BFEEBFB737D86DC57B57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:31:a0:f9:21:fb:ad:3c:47:9a:a4:b4:43:8b:
                    66:ba:9b:a5:39:2e:ac:5b:8c:ab:e6:6e:e5:ba:96:
                    5f:9d:6d:e8:7f:a6:88:d3:1c:15:49:74:26:f7:bd:
                    22:c2:57:2d:53:dd:23:62:fd:b6:7f:05:a5:8a:5a:
                    ae:54:ef:de:38:fa:49:89:4c:43:c5:f5:e8:2f:33:
                    11:01:a6:20:b8:d0:22:a6:e1:0e:43:07:dc:b1:de:
                    69:67:7c:ca:c1:ab:d4:42:68:c3:a8:d2:07:e6:70:
                    bc:f3:15:86:5b:5a:60:31:a5:b9:8e:30:ff:0e:0e:
                    02:b8:f7:de:84:4c:0f:af:9e:7d:eb:71:68:9b:bc:
                    27:8b:5d:ad:a4:d5:3d:79:65:9b:2d:0b:8d:5d:a5:
                    5a:66:77:d3:03:92:ac:cb:17:f9:2d:ab:b6:2e:4c:
                    ce:98:c4:45:0e:fa:e5:e9:00:1d:a8:0c:a8:1c:72:
                    0f:b2:15:64:9d:61:0e:65:10:44:91:82:16:24:85:
                    8d:d9:f3:17:ec:89:4b:b2:54:cb:eb:14:59:84:14:
                    e1:c3:4c:8e:7f:a0:eb:ad:dc:16:cb:67:4e:96:9e:
                    d6:b8:fe:f8:8e:4b:34:5d:ea:4c:d2:5a:ef:e7:47:
                    6e:57:89:77:b6:82:73:20:c2:a3:f3:08:32:31:78:
                    dd:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:EB:CF:8A:28:65:B6:DC:1F:90:BF:EE:BF:B7:37:D8:6D:C5:7B:57
            X509v3 Authority Key Identifier:
                keyid:D0:E6:C7:6B:AD:EC:A5:CB:DA:92:C9:18:B9:7C:7F:45:99:EF:B6:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/1/D0E6C76BADECA5CBDA92C918B97C7F4599EFB6CF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bc942f68-cb33-4a05-a727-3f93e610393e/724139ef2b12b83009797b8d6c0b4306507bd7d638ce941805.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/1/3134302e3233352e3133302e302f32342d3234203d3e203534323138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.235.130.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3e:ba:ee:a6:d6:2f:7f:78:ce:2a:af:80:1a:4d:bb:cd:62:eb:
         8c:dd:25:b1:2a:b4:2f:90:a7:ef:b3:c7:eb:88:5e:79:8a:33:
         0f:83:24:fe:d8:5e:57:e7:4e:22:ab:41:89:a0:88:03:bf:a8:
         dc:33:f0:11:33:53:a1:e2:2b:e2:0e:c0:1a:39:33:ea:57:de:
         c9:43:9b:cc:8c:c6:74:49:4a:81:fa:52:e9:ef:bb:6a:fc:ff:
         eb:70:3d:41:f7:62:76:56:2e:c6:90:b5:d6:51:5f:e0:2a:07:
         ad:76:3c:60:f0:cb:52:14:05:66:64:6c:43:51:aa:c3:f2:91:
         31:47:44:1f:3a:a0:11:26:c5:6c:71:9c:ad:2b:fe:a7:e6:0a:
         58:d9:67:a2:45:aa:a2:40:b2:94:6d:68:8b:0a:7e:87:fa:76:
         10:c9:7c:a4:2f:e5:5f:a1:24:83:51:6b:34:c6:e4:5e:36:3a:
         35:3e:14:3f:53:f0:87:dd:71:49:bb:db:5f:9c:99:a1:ae:56:
         fe:1a:a2:0d:c5:03:8d:24:15:2f:b3:3b:94:0d:bf:14:c4:91:
         fb:6d:0a:fd:ef:b5:bf:4d:6a:25:a7:29:a7:9b:f4:f2:4d:05:
         67:c3:0a:8f:40:87:b8:61:35:87:2a:57:99:8f:f8:4d:e2:69:
         60:66:ce:8b
-----BEGIN CERTIFICATE-----
MIIFtDCCBJygAwIBAgIUBCIombbCdZBKLYwt4p11UB422zkwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNzI0MTM5ZWYyYjEyYjgzMDA5Nzk3YjhkNmMwYjQzMDY1
MDdiZDdkNjM4Y2U5NDE4MDUwHhcNMjQxMDI2MDAxMjUzWhcNMjUxMDI1MDAxNzUz
WjAzMTEwLwYDVQQDEygyRUVCQ0Y4QTI4NjVCNkRDMUY5MEJGRUVCRkI3MzdEODZE
QzU3QjU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxDGg+SH7rTxH
mqS0Q4tmupulOS6sW4yr5m7lupZfnW3of6aI0xwVSXQm970iwlctU90jYv22fwWl
ilquVO/eOPpJiUxDxfXoLzMRAaYguNAipuEOQwfcsd5pZ3zKwavUQmjDqNIH5nC8
8xWGW1pgMaW5jjD/Dg4CuPfehEwPr55963Fom7wni12tpNU9eWWbLQuNXaVaZnfT
A5Ksyxf5Lau2LkzOmMRFDvrl6QAdqAyoHHIPshVknWEOZRBEkYIWJIWN2fMX7IlL
slTL6xRZhBThw0yOf6DrrdwWy2dOlp7WuP74jks0XepM0lrv50duV4l3toJzIMKj
8wgyMXjdfQIDAQABo4ICtDCCArAwHQYDVR0OBBYEFC7rz4ooZbbcH5C/7r+3N9ht
xXtXMB8GA1UdIwQYMBaAFNDmx2ut7KXL2pLJGLl8f0WZ77bPMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODhlMzliZmEwMTg5MGM5ZmVlYzEyNDllLzEv
RDBFNkM3NkJBREVDQTVDQkRBOTJDOTE4Qjk3QzdGNDU5OUVGQjZDRi5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0
OTMzYWU1L2JjOTQyZjY4LWNiMzMtNGEwNS1hNzI3LTNmOTNlNjEwMzkzZS83MjQx
MzllZjJiMTJiODMwMDk3OTdiOGQ2YzBiNDMwNjUwN2JkN2Q2MzhjZTk0MTgwNS5j
ZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZTg4ZTM5YmZhMDE4OTBj
OWZlZWMxMjQ5ZS8xLzMxMzQzMDJlMzIzMzM1MmUzMTMzMzAyZTMwMmYzMjM0MmQz
MjM0MjAzZDNlMjAzNTM0MzIzMTM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjOuCMA0GCSqGSIb3DQEB
CwUAA4IBAQA+uu6m1i9/eM4qr4AaTbvNYuuM3SWxKrQvkKfvs8friF55ijMPgyT+
2F5X504iq0GJoIgDv6jcM/ARM1Oh4iviDsAaOTPqV97JQ5vMjMZ0SUqB+lLp77tq
/P/rcD1B92J2Vi7GkLXWUV/gKgetdjxg8MtSFAVmZGxDUarD8pExR0QfOqARJsVs
cZytK/6n5gpY2WeiRaqiQLKUbWiLCn6H+nYQyXykL+VfoSSDUWs0xuReNjo1PhQ/
U/CH3XFJu9tfnJmhrlb+GqINxQONJBUvszuUDb8UxJH7bQr977W/TWolpymnm/Ty
TQVnwwqPQIe4YTWHKleZj/hN4mlgZs6L
-----END CERTIFICATE-----
Generated at Fri Nov 22 22:22:17 2024 by rpki-client on console-fra.rpki-client.org