Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/36342e3235332e39322e302f32342d3234203d3e203231383539.roa
File:                     36342e3235332e39322e302f32342d3234203d3e203231383539.roa (raw, json)
Hash identifier:          0UF2WXp1USzKepvUT0O+BI97q0Sc8blxoeYHHwjSAIE=
Subject key identifier:   C4:B3:E5:3B:53:B7:14:3E:A1:A5:C9:F4:F1:4B:A4:0C:93:54:35:F4
Certificate issuer:       /CN=0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0
Certificate serial:       38302F464F2D58A356E0C20209A2F8094373BE55
Authority key identifier: D4:08:70:12:75:F2:3C:87:FE:42:CD:6C:42:B2:5D:DB:0E:54:82:92
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/36342e3235332e39322e302f32342d3234203d3e203231383539.roa
Signing time:             Fri 17 Nov 2023 06:18:53 +0000
ROA not before:           Fri 17 Nov 2023 06:13:53 +0000
ROA not after:            Fri 15 Nov 2024 06:18:53 +0000
asID:                     21859
IP address blocks:        64.253.92.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/D408701275F23C87FE42CD6C42B25DDB0E548292.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/D408701275F23C87FE42CD6C42B25DDB0E548292.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 10:42:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:30:2f:46:4f:2d:58:a3:56:e0:c2:02:09:a2:f8:09:43:73:be:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0
        Validity
            Not Before: Nov 17 06:13:53 2023 GMT
            Not After : Nov 15 06:18:53 2024 GMT
        Subject: CN=C4B3E53B53B7143EA1A5C9F4F14BA40C935435F4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:e2:4c:96:ad:bd:01:13:6c:da:22:5c:38:f0:
                    f4:b0:65:99:83:2c:68:ef:e5:f9:a6:47:e7:a3:6e:
                    60:8d:aa:ee:77:4d:de:b5:9e:34:7f:74:cb:0e:9d:
                    74:17:3e:db:11:f6:b3:84:dc:ed:ec:52:ca:45:1f:
                    2b:b2:c4:63:17:6c:11:c0:03:47:85:10:73:09:6e:
                    d1:75:cf:d6:e2:aa:ba:6c:fc:39:e3:3b:d7:36:99:
                    eb:34:28:4b:0a:38:94:89:2c:17:6b:ae:f5:a8:1d:
                    c0:8e:53:ef:26:a9:6c:73:96:6d:67:4d:9a:02:8f:
                    24:39:e1:71:4d:35:2a:8c:d7:b4:c7:13:63:e6:b3:
                    43:1f:75:94:59:61:65:0f:2d:84:48:01:dc:bf:6d:
                    d2:f0:9b:fe:4e:ed:f1:d3:c7:7e:19:b7:cf:3d:7c:
                    de:4f:2b:c5:4f:15:4e:a5:7e:1f:ee:14:9a:f7:29:
                    89:3d:23:d0:8c:45:cd:e0:75:02:c6:6f:a5:f7:50:
                    da:63:39:83:64:ea:80:d3:46:2b:93:a4:1e:20:35:
                    cc:a8:68:8c:93:81:45:d8:e1:ce:35:e5:92:66:e1:
                    a5:a8:01:aa:e1:d4:f1:6e:0d:a3:98:d7:68:14:b1:
                    78:ae:9b:4f:bf:5e:02:2c:30:88:0a:99:45:a3:a3:
                    92:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:B3:E5:3B:53:B7:14:3E:A1:A5:C9:F4:F1:4B:A4:0C:93:54:35:F4
            X509v3 Authority Key Identifier:
                keyid:D4:08:70:12:75:F2:3C:87:FE:42:CD:6C:42:B2:5D:DB:0E:54:82:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/D408701275F23C87FE42CD6C42B25DDB0E548292.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/36342e3235332e39322e302f32342d3234203d3e203231383539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.253.92.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9a:c5:08:81:a8:36:12:95:2a:85:f0:0e:43:6b:11:fc:12:da:
         a9:2b:24:b0:97:ae:81:8e:08:df:fe:fe:1c:b3:ce:97:a7:8e:
         0c:2a:83:e4:66:d4:56:5c:26:fc:4a:0d:78:cc:e4:bb:6f:00:
         51:10:2c:30:1a:36:50:38:22:14:b4:c7:9a:11:0f:78:c2:06:
         ba:3e:cd:ea:bc:74:5e:24:b1:89:97:cd:c9:34:f4:94:d3:0e:
         76:4a:e8:f6:9c:21:ca:93:0b:c3:6e:f9:20:b1:23:8a:f0:ad:
         8b:00:19:0c:e7:c2:86:06:52:ea:3d:2b:ad:69:ec:2f:30:e6:
         3a:fa:68:82:7c:2c:75:ff:61:dd:89:66:4a:2d:e3:76:ef:d5:
         f0:9e:38:24:5e:38:b8:fa:b7:a3:de:d0:21:3f:a3:9a:53:2f:
         2d:4f:47:81:0d:1f:42:2a:0d:e3:22:f7:3f:d3:20:78:24:a9:
         aa:05:0a:57:59:12:36:94:c0:5a:ba:b0:0b:ab:58:bc:61:58:
         0d:b2:08:57:49:57:d9:df:2d:c4:65:97:17:66:fb:10:bc:fa:
         e5:7e:88:16:d1:25:af:e0:fa:87:ff:56:42:c9:79:73:ef:b5:
         15:19:7b:7b:be:ad:0e:88:a2:03:cd:88:ba:ae:15:34:a5:3f:
         d6:99:88:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 11:33:07 2024 by rpki-client on console-fra.rpki-client.org