Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/36342e3235332e39312e302f32342d3234203d3e20313531383732.roa
File:                     36342e3235332e39312e302f32342d3234203d3e20313531383732.roa (raw, json)
Hash identifier:          wZGZqPaCxmscLGTMJ2XLdUjqslm7/HkZFwwtxAN+XjA=
Subject key identifier:   A8:2B:DF:46:35:27:F4:68:A4:CB:8B:3A:6E:FF:CC:D6:39:DE:03:99
Certificate issuer:       /CN=0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0
Certificate serial:       09FCF1406CC388567D850D3D8993CAA1A2075C0E
Authority key identifier: D4:08:70:12:75:F2:3C:87:FE:42:CD:6C:42:B2:5D:DB:0E:54:82:92
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/36342e3235332e39312e302f32342d3234203d3e20313531383732.roa
Signing time:             Sat 01 Jun 2024 01:28:04 +0000
ROA not before:           Sat 01 Jun 2024 01:23:04 +0000
ROA not after:            Sat 31 May 2025 01:28:04 +0000
asID:                     151872
IP address blocks:        64.253.91.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/D408701275F23C87FE42CD6C42B25DDB0E548292.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/D408701275F23C87FE42CD6C42B25DDB0E548292.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 23:30:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:fc:f1:40:6c:c3:88:56:7d:85:0d:3d:89:93:ca:a1:a2:07:5c:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0
        Validity
            Not Before: Jun  1 01:23:04 2024 GMT
            Not After : May 31 01:28:04 2025 GMT
        Subject: CN=A82BDF463527F468A4CB8B3A6EFFCCD639DE0399
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:d9:f4:1d:58:82:bc:0b:7e:e8:e6:a1:17:6a:
                    07:b1:b4:bb:4d:f0:d3:81:b7:bb:b7:b6:03:98:ec:
                    67:9d:a2:2a:5d:83:bd:ad:94:87:4a:fd:91:4f:34:
                    51:d9:c7:1f:1f:4c:ee:2e:b2:c0:41:e3:1c:a7:45:
                    3b:9a:ed:43:50:54:54:3f:78:0c:b6:80:59:6e:9e:
                    8a:a4:9c:79:dc:50:85:6c:36:21:6c:00:a2:f7:cf:
                    36:b2:ba:83:04:28:c2:5b:98:a5:21:5b:bf:cf:fd:
                    44:44:5b:69:71:48:da:46:46:0c:c5:a6:1f:f0:d0:
                    77:f0:69:75:c4:52:6b:cd:16:54:21:02:d9:82:1d:
                    88:e1:4d:11:df:f9:ab:a7:42:3d:3f:51:3e:d9:41:
                    79:96:14:93:ce:ad:5f:84:07:39:9e:8e:7d:35:5d:
                    95:b6:33:9f:f8:bd:d1:77:02:3a:32:cd:b4:92:55:
                    d0:46:5f:49:57:cf:db:51:4d:d9:f6:bf:45:be:49:
                    a7:ae:c6:0a:9d:e8:d7:f6:11:9e:d7:49:b6:65:16:
                    a6:c2:51:3a:30:36:d5:2b:36:1a:98:c1:b7:40:8e:
                    ae:be:ab:dd:7e:da:ab:85:d1:a4:e7:02:67:9e:fa:
                    0c:47:ee:b3:e7:43:90:af:c1:54:96:5b:65:d1:92:
                    35:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:2B:DF:46:35:27:F4:68:A4:CB:8B:3A:6E:FF:CC:D6:39:DE:03:99
            X509v3 Authority Key Identifier:
                keyid:D4:08:70:12:75:F2:3C:87:FE:42:CD:6C:42:B2:5D:DB:0E:54:82:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/D408701275F23C87FE42CD6C42B25DDB0E548292.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/36342e3235332e39312e302f32342d3234203d3e20313531383732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.253.91.0/24

    Signature Algorithm: sha256WithRSAEncryption
         38:b1:0d:5d:49:64:3d:de:68:1c:89:42:dc:34:90:bd:65:14:
         fd:37:50:45:27:4e:f3:2d:47:00:2d:73:7d:8e:ae:0f:21:49:
         57:a8:f5:18:f2:18:97:f5:c6:f1:fd:88:64:c8:84:8d:1b:69:
         0c:a6:0f:8f:50:ee:fc:d1:85:9d:9a:03:38:29:90:cc:a5:f7:
         d4:62:c2:02:59:2b:38:0b:60:f7:45:ea:15:0d:ec:37:51:af:
         61:9c:bf:17:33:17:72:fa:d8:03:9f:e8:c6:ed:8f:84:e0:36:
         79:77:40:0b:40:75:92:21:37:54:f7:a9:e0:01:8d:30:f2:cf:
         4d:21:7c:75:ad:e6:13:f4:8d:7f:bc:52:3f:c8:70:72:d9:6f:
         7e:1b:ad:4a:07:e4:05:70:1a:7e:2d:fe:bf:63:d4:6d:fb:8d:
         a8:d9:7d:51:46:fd:80:55:c5:99:18:91:7c:11:a0:ad:8e:bd:
         04:12:0e:66:10:08:4a:3f:66:b2:27:8d:12:79:f3:9f:0e:e1:
         f3:3d:36:42:be:bf:2d:c8:ca:40:5b:d6:19:60:ae:2c:ba:91:
         8d:e4:05:dd:e1:9d:9d:b1:71:45:b2:6c:a1:68:61:8d:a6:e3:
         7f:45:fb:2a:22:aa:fd:3f:d0:70:81:da:28:5b:b8:b0:b4:a1:
         15:1c:6b:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 01:33:36 2024 by rpki-client on console-ams.rpki-client.org