Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/36342e3235332e39302e302f32342d3234203d3e2037303436.roa
File:                     36342e3235332e39302e302f32342d3234203d3e2037303436.roa (raw, json)
Hash identifier:          M90hsGCFrxSBeOn8JmdzoxnXoY+DQpbmgsHB/N9uCw4=
Subject key identifier:   80:FB:40:77:3D:A9:1B:8B:E3:12:45:8B:63:DB:4F:21:8F:2E:3E:BE
Certificate issuer:       /CN=0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0
Certificate serial:       0D15C9BB46CA56EA526BA945706536E50FFEDFA3
Authority key identifier: D4:08:70:12:75:F2:3C:87:FE:42:CD:6C:42:B2:5D:DB:0E:54:82:92
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/36342e3235332e39302e302f32342d3234203d3e2037303436.roa
Signing time:             Tue 05 Nov 2024 07:32:30 +0000
ROA not before:           Tue 05 Nov 2024 07:27:30 +0000
ROA not after:            Tue 04 Nov 2025 07:32:30 +0000
asID:                     7046
IP address blocks:        64.253.90.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/D408701275F23C87FE42CD6C42B25DDB0E548292.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/D408701275F23C87FE42CD6C42B25DDB0E548292.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 23:30:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:15:c9:bb:46:ca:56:ea:52:6b:a9:45:70:65:36:e5:0f:fe:df:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0
        Validity
            Not Before: Nov  5 07:27:30 2024 GMT
            Not After : Nov  4 07:32:30 2025 GMT
        Subject: CN=80FB40773DA91B8BE312458B63DB4F218F2E3EBE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:b4:00:35:a4:7e:2d:cf:bb:88:29:6a:2f:0b:
                    df:4b:05:c2:7e:31:7e:40:83:44:c1:c1:3f:c5:cc:
                    24:d8:91:1d:93:e9:5b:74:90:9e:88:0b:a0:7d:d9:
                    35:e9:e3:27:e7:af:eb:bc:cf:d4:9b:b8:e7:35:1e:
                    03:08:38:ce:66:9e:0a:bb:e5:4a:d5:ee:a2:bb:3d:
                    4d:af:fb:6d:ce:ff:31:ef:0a:4b:2b:08:da:19:20:
                    a8:08:0d:f1:55:6d:3b:74:5c:a2:46:d8:f1:fa:9d:
                    2c:8d:82:13:00:15:3d:64:c1:e2:9e:93:5e:d4:31:
                    cb:0d:34:37:97:1d:11:e6:68:39:ab:c5:fa:9e:c6:
                    55:ff:6a:dd:0d:4e:ea:3e:14:56:3d:b9:8d:73:35:
                    bc:fc:cf:11:38:ec:70:b4:e4:6e:ce:7b:9c:cc:86:
                    6a:34:9c:39:9d:0e:0a:b0:29:b0:5e:5c:6f:c5:2b:
                    91:62:01:b7:07:67:55:76:5d:c2:3f:30:8d:c4:19:
                    9f:f0:34:63:ea:34:d8:e7:fc:8b:d1:e8:87:c4:c5:
                    98:d4:26:af:92:3e:72:f1:bd:cf:11:c5:01:00:09:
                    12:60:b5:af:a0:f1:e4:dd:b2:f1:04:2d:ed:2a:5b:
                    bc:d1:2e:14:2a:68:24:8d:28:fe:50:24:58:5a:54:
                    65:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:FB:40:77:3D:A9:1B:8B:E3:12:45:8B:63:DB:4F:21:8F:2E:3E:BE
            X509v3 Authority Key Identifier:
                keyid:D4:08:70:12:75:F2:3C:87:FE:42:CD:6C:42:B2:5D:DB:0E:54:82:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/D408701275F23C87FE42CD6C42B25DDB0E548292.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/36342e3235332e39302e302f32342d3234203d3e2037303436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.253.90.0/24

    Signature Algorithm: sha256WithRSAEncryption
         12:d1:ed:d1:ae:e9:d9:00:63:6f:b3:67:20:6d:0d:0b:33:cd:
         13:73:4a:13:e3:2f:41:5b:63:d6:8f:8f:f9:ab:86:5a:1b:ca:
         34:f3:f4:54:e6:39:c5:9a:db:35:f0:5b:c0:0c:f5:21:72:84:
         42:12:da:5a:28:43:94:17:62:74:c1:cc:ba:72:73:0c:17:f2:
         ab:af:8d:b7:9c:cf:33:a1:c7:a2:0f:52:e1:a3:ac:98:9f:c9:
         30:a6:4f:2d:fd:2a:30:ae:df:f4:3f:1c:12:be:48:9d:dd:54:
         07:2b:30:8d:dd:bf:8c:4b:27:01:0a:5c:1d:3d:ad:cc:53:d7:
         19:55:86:e1:08:5f:4a:5c:bb:e1:d8:72:05:24:19:79:7f:c7:
         fc:35:e0:07:59:7c:b7:b2:db:71:5e:fd:fe:92:6f:40:28:5c:
         08:ee:f6:c6:77:bc:b1:e3:b5:5f:59:d6:3c:a5:8d:f5:de:c8:
         45:1e:0c:1b:f3:71:38:52:4a:49:f2:3b:1c:19:44:95:94:67:
         3f:f4:b8:21:00:25:86:27:37:aa:59:23:dc:f3:e2:d9:f3:b1:
         a0:6b:01:3b:b6:c2:27:6c:f6:e5:1c:93:4f:73:fb:94:25:2e:
         be:73:1c:ed:a4:01:64:4d:02:d5:11:b3:60:20:d2:a7:78:48:
         1d:c5:39:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 00:23:27 2024 by rpki-client on console-fra.rpki-client.org