Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/36342e3235332e39342e302f32342d3234203d3e20323136343134.roa
File:                     36342e3235332e39342e302f32342d3234203d3e20323136343134.roa (raw, json)
Hash identifier:          doS4dR2e3YRDTi1EBMy4x5WTYxZxezIQXYCN10BrpB8=
Subject key identifier:   57:48:0B:F3:B2:9D:53:3B:7F:26:B6:5C:B2:2D:6E:90:E8:4A:8A:71
Certificate issuer:       /CN=0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0
Certificate serial:       73F33FCF689C664761865036E987D77E78CB0750
Authority key identifier: D4:08:70:12:75:F2:3C:87:FE:42:CD:6C:42:B2:5D:DB:0E:54:82:92
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/36342e3235332e39342e302f32342d3234203d3e20323136343134.roa
Signing time:             Thu 25 Jan 2024 01:53:22 +0000
ROA not before:           Thu 25 Jan 2024 01:48:22 +0000
ROA not after:            Thu 23 Jan 2025 01:53:22 +0000
asID:                     216414
IP address blocks:        64.253.94.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/D408701275F23C87FE42CD6C42B25DDB0E548292.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/D408701275F23C87FE42CD6C42B25DDB0E548292.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 23:30:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:f3:3f:cf:68:9c:66:47:61:86:50:36:e9:87:d7:7e:78:cb:07:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0
        Validity
            Not Before: Jan 25 01:48:22 2024 GMT
            Not After : Jan 23 01:53:22 2025 GMT
        Subject: CN=57480BF3B29D533B7F26B65CB22D6E90E84A8A71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:b2:bf:a0:f3:ce:1e:c3:ba:1e:48:d8:97:1d:
                    12:0f:29:43:59:28:8b:59:dc:4d:25:5e:20:cf:ab:
                    0d:5d:66:50:0c:ba:15:9e:b9:93:22:6c:12:f4:49:
                    9f:31:77:48:89:90:0c:ea:1c:7a:7d:1d:9f:e8:48:
                    b7:98:df:55:87:eb:dc:d3:a4:f2:15:ab:3f:70:a5:
                    d5:85:ca:73:71:56:94:01:4e:ee:49:38:17:59:06:
                    db:1e:26:2b:d9:33:ee:e7:b7:c5:01:93:5a:10:d6:
                    a2:f1:43:25:5f:71:0f:d0:cb:84:13:be:cb:84:b1:
                    07:16:13:8d:e9:ad:94:26:d7:0d:43:c3:e6:a0:e9:
                    86:b9:8f:21:62:ea:86:c4:37:8c:85:ca:d1:79:1d:
                    3c:77:e3:fd:dd:9e:fb:59:b9:15:24:b4:ad:82:23:
                    51:9b:92:06:aa:87:31:41:f6:64:4f:5b:69:14:a3:
                    fc:8a:67:d0:30:ba:30:be:50:63:5a:1e:1f:4e:fd:
                    35:47:36:a0:77:70:0b:bd:c4:84:16:30:cf:ed:46:
                    0d:d9:5e:c9:7f:57:0a:c2:b4:cc:72:98:b6:57:f2:
                    2c:00:49:05:cc:09:53:5f:17:5c:7a:31:8f:20:b5:
                    04:5a:96:5e:f8:d6:67:b7:82:c6:a9:e1:00:bd:e0:
                    ab:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:48:0B:F3:B2:9D:53:3B:7F:26:B6:5C:B2:2D:6E:90:E8:4A:8A:71
            X509v3 Authority Key Identifier:
                keyid:D4:08:70:12:75:F2:3C:87:FE:42:CD:6C:42:B2:5D:DB:0E:54:82:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/D408701275F23C87FE42CD6C42B25DDB0E548292.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/36342e3235332e39342e302f32342d3234203d3e20323136343134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.253.94.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8d:29:0e:83:3a:f2:49:a1:37:77:66:f2:d2:c8:b7:3b:eb:f2:
         24:c6:12:32:5b:7d:0a:03:ae:1a:67:45:2b:7a:2b:d2:ac:5f:
         8e:0a:ea:c6:f4:b4:c8:74:38:a5:e9:96:bc:31:fc:09:37:10:
         da:5c:78:55:45:ee:24:d0:a7:26:77:d3:da:d0:56:c8:26:78:
         0e:aa:dd:b2:4c:45:ab:c5:91:37:ae:6f:80:59:e0:e6:9d:db:
         81:fa:6b:e4:62:05:a5:37:69:57:16:77:a9:11:fa:04:ca:76:
         1d:70:25:67:bd:c2:2b:ef:59:37:b3:63:0d:e2:86:88:fe:01:
         50:77:93:a5:13:ec:ba:ec:eb:1d:b4:ba:71:68:10:24:68:bc:
         c5:7e:4b:a1:8a:29:ba:b5:c6:93:17:e1:1e:85:6b:d3:66:60:
         e4:8d:4a:d0:b4:4c:86:8d:6c:d9:1c:5b:12:25:92:24:0a:5a:
         24:0b:f4:f5:c0:8e:47:09:9f:c0:f2:da:89:87:64:93:4d:10:
         52:7a:83:05:33:c0:70:5e:08:b9:ad:10:92:a9:e7:e0:56:01:
         32:c7:4a:88:9b:ff:f5:77:82:06:48:0b:df:ce:11:0c:09:9d:
         24:7a:7c:3e:e8:50:d1:08:72:72:b5:02:05:60:f0:55:aa:cf:
         65:6b:4f:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 01:33:36 2024 by rpki-client on console-ams.rpki-client.org