Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/36342e3235332e39322e302f32342d3234203d3e203231383539.roa
File:                     36342e3235332e39322e302f32342d3234203d3e203231383539.roa (raw, json)
Hash identifier:          KM4HKb48TCnIYse6VJIgFyUPJ/3luXVawLnxkTZrGF8=
Subject key identifier:   89:D8:D6:E5:58:08:1D:00:CD:CB:6B:C9:C8:A9:F6:CE:94:38:AA:21
Certificate issuer:       /CN=0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0
Certificate serial:       1E0B7035280316611331B95D38948FE02328DE45
Authority key identifier: D4:08:70:12:75:F2:3C:87:FE:42:CD:6C:42:B2:5D:DB:0E:54:82:92
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/36342e3235332e39322e302f32342d3234203d3e203231383539.roa
Signing time:             Fri 18 Oct 2024 06:49:02 +0000
ROA not before:           Fri 18 Oct 2024 06:44:02 +0000
ROA not after:            Fri 17 Oct 2025 06:49:02 +0000
asID:                     21859
IP address blocks:        64.253.92.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/D408701275F23C87FE42CD6C42B25DDB0E548292.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/D408701275F23C87FE42CD6C42B25DDB0E548292.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 07:19:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:0b:70:35:28:03:16:61:13:31:b9:5d:38:94:8f:e0:23:28:de:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0
        Validity
            Not Before: Oct 18 06:44:02 2024 GMT
            Not After : Oct 17 06:49:02 2025 GMT
        Subject: CN=89D8D6E558081D00CDCB6BC9C8A9F6CE9438AA21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:a0:c2:7c:4c:ba:7a:1b:2a:e7:d0:65:d6:4e:
                    c4:5d:fc:87:e5:08:8a:f9:8f:01:5a:1e:1c:e9:a2:
                    23:b2:e5:c3:7c:7a:4b:ac:1b:13:75:aa:27:3e:6f:
                    66:d5:43:ef:ba:be:d2:c0:fe:5f:92:d2:83:3b:89:
                    84:89:1b:75:69:35:58:c6:6e:a7:38:cc:7f:d6:ac:
                    22:e9:6c:94:1d:a1:1e:92:ad:e0:2b:0e:4d:f7:27:
                    5c:4e:d2:21:a0:f3:71:07:98:ca:80:b2:25:f1:71:
                    8b:67:c5:47:d4:5d:e2:e5:62:69:88:cf:f7:a9:20:
                    72:37:e0:59:42:d7:0a:0c:0a:6c:e2:47:e2:1a:91:
                    29:80:49:05:67:46:c1:56:5d:8f:81:97:d4:4b:72:
                    f9:56:43:1c:13:4e:92:4c:0a:8d:58:72:3c:14:4d:
                    1f:6f:30:c3:80:a6:bc:0a:84:37:8b:c5:d7:80:97:
                    da:51:d7:1b:70:67:e0:ae:b1:7c:66:42:28:ac:8e:
                    01:e7:82:09:8b:41:3f:94:e9:71:75:3d:39:57:c5:
                    2a:93:f5:b4:62:ff:60:45:0e:43:11:f3:b3:09:33:
                    61:c1:81:11:e6:af:d0:6c:c0:74:42:ae:55:d9:63:
                    3b:c5:ab:c3:c8:92:e0:af:30:ac:f0:27:48:28:3c:
                    37:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:D8:D6:E5:58:08:1D:00:CD:CB:6B:C9:C8:A9:F6:CE:94:38:AA:21
            X509v3 Authority Key Identifier:
                keyid:D4:08:70:12:75:F2:3C:87:FE:42:CD:6C:42:B2:5D:DB:0E:54:82:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/D408701275F23C87FE42CD6C42B25DDB0E548292.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/36342e3235332e39322e302f32342d3234203d3e203231383539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.253.92.0/24

    Signature Algorithm: sha256WithRSAEncryption
         51:f6:de:a4:8c:4b:a3:ca:4c:8b:0b:0f:f9:ea:ec:95:d0:23:
         b3:82:39:22:92:3b:8b:e2:c1:50:19:f0:a2:23:92:a5:c2:02:
         32:e1:12:e5:69:68:5c:60:c2:ae:6d:32:02:d0:c4:f5:a6:09:
         b3:d9:5b:26:b5:a7:2f:dd:e2:39:a9:c9:89:fc:21:1b:84:91:
         72:07:cb:da:3a:4b:15:d1:ca:d8:0c:98:6c:a2:00:2f:45:67:
         32:0b:e9:38:ea:3e:fd:8a:ff:c7:68:10:f2:ff:da:d2:7b:a0:
         5c:40:93:c3:2b:f7:98:2b:65:c3:19:6a:39:87:3c:79:20:5b:
         fa:75:96:bd:0a:95:cd:0d:75:5e:2b:3f:91:f4:bd:e1:e6:a7:
         21:03:d2:81:ea:6f:21:6c:5b:be:10:2f:fb:5c:ab:c3:4f:5e:
         60:e3:50:d4:db:cc:6a:0f:72:6e:55:c3:9d:04:75:13:35:d3:
         0d:c8:f1:84:da:3c:81:60:4f:28:be:9f:ff:d4:61:69:15:ba:
         de:50:cf:f7:d5:84:93:89:e1:d3:6e:90:ba:7b:24:a4:64:93:
         96:7c:10:08:a6:c7:05:c7:37:7d:df:c2:5f:ab:a1:f0:53:ba:
         59:9c:c0:90:0a:7b:ff:15:d0:20:c7:3b:76:25:f3:20:9a:c7:
         3a:90:03:e6
-----BEGIN CERTIFICATE-----
MIIFsDCCBJigAwIBAgIUHgtwNSgDFmETMbldOJSP4CMo3kUwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMDgzMDcyM2Y1ODNiM2UzZDRmMGE4YzU1NTY5OGQ4MDJk
ZTA2NWE1ZGE4OTMzOTk4ZTAwHhcNMjQxMDE4MDY0NDAyWhcNMjUxMDE3MDY0OTAy
WjAzMTEwLwYDVQQDEyg4OUQ4RDZFNTU4MDgxRDAwQ0RDQjZCQzlDOEE5RjZDRTk0
MzhBQTIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvaDCfEy6ehsq
59Bl1k7EXfyH5QiK+Y8BWh4c6aIjsuXDfHpLrBsTdaonPm9m1UPvur7SwP5fktKD
O4mEiRt1aTVYxm6nOMx/1qwi6WyUHaEekq3gKw5N9ydcTtIhoPNxB5jKgLIl8XGL
Z8VH1F3i5WJpiM/3qSByN+BZQtcKDAps4kfiGpEpgEkFZ0bBVl2PgZfUS3L5VkMc
E06STAqNWHI8FE0fbzDDgKa8CoQ3i8XXgJfaUdcbcGfgrrF8ZkIorI4B54IJi0E/
lOlxdT05V8Uqk/W0Yv9gRQ5DEfOzCTNhwYER5q/QbMB0Qq5V2WM7xavDyJLgrzCs
8CdIKDw3pwIDAQABo4ICsDCCAqwwHQYDVR0OBBYEFInY1uVYCB0Azctrycip9s6U
OKohMB8GA1UdIwQYMBaAFNQIcBJ18jyH/kLNbEKyXdsOVIKSMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODhlMzliZmEwMTg5MWMzOTQ1OWIyYmVhLzAv
RDQwODcwMTI3NUYyM0M4N0ZFNDJDRDZDNDJCMjVEREIwRTU0ODI5Mi5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi
MGI4NDE1LzYxNTRmOTZiLTZiOGYtNDhkNC05NGJkLWRkZDJjOWZmZjVhYi8wODMw
NzIzZjU4M2IzZTNkNGYwYThjNTU1Njk4ZDgwMmRlMDY1YTVkYTg5MzM5OThlMC5j
ZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZTg4ZTM5YmZhMDE4OTFj
Mzk0NTliMmJlYS8wLzM2MzQyZTMyMzUzMzJlMzkzMjJlMzAyZjMyMzQyZDMyMzQy
MDNkM2UyMDMyMzEzODM1Mzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABA/VwwDQYJKoZIhvcNAQELBQAD
ggEBAFH23qSMS6PKTIsLD/nq7JXQI7OCOSKSO4viwVAZ8KIjkqXCAjLhEuVpaFxg
wq5tMgLQxPWmCbPZWya1py/d4jmpyYn8IRuEkXIHy9o6SxXRytgMmGyiAC9FZzIL
6TjqPv2K/8doEPL/2tJ7oFxAk8Mr95grZcMZajmHPHkgW/p1lr0Klc0NdV4rP5H0
veHmpyED0oHqbyFsW74QL/tcq8NPXmDjUNTbzGoPcm5Vw50EdRM10w3I8YTaPIFg
Tyi+n//UYWkVut5Qz/fVhJOJ4dNukLp7JKRkk5Z8EAimxwXHN33fwl+rofBTulmc
wJAKe/8V0CDHO3Yl8yCaxzqQA+Y=
-----END CERTIFICATE-----
Generated at Thu Nov 21 05:36:47 2024 by rpki-client on console-ams.rpki-client.org