Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/36342e3235332e39352e302f32342d3234203d3e20313430393032.roa
File:                     36342e3235332e39352e302f32342d3234203d3e20313430393032.roa (raw, json)
Hash identifier:          QySd2kjxuHCWmqVCTuAenzQcLsT3ygJKNZ1dsMisF18=
Subject key identifier:   91:16:D8:24:8F:EB:E6:BA:8C:49:2A:FD:C3:D6:AD:5A:E7:43:59:37
Certificate issuer:       /CN=0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0
Certificate serial:       75528BBFD914CED08C173FE019E44D26AF4C207B
Authority key identifier: D4:08:70:12:75:F2:3C:87:FE:42:CD:6C:42:B2:5D:DB:0E:54:82:92
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/36342e3235332e39352e302f32342d3234203d3e20313430393032.roa
Signing time:             Fri 25 Oct 2024 15:49:02 +0000
ROA not before:           Fri 25 Oct 2024 15:44:02 +0000
ROA not after:            Fri 24 Oct 2025 15:49:02 +0000
asID:                     140902
IP address blocks:        64.253.95.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/D408701275F23C87FE42CD6C42B25DDB0E548292.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/D408701275F23C87FE42CD6C42B25DDB0E548292.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 23:30:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:52:8b:bf:d9:14:ce:d0:8c:17:3f:e0:19:e4:4d:26:af:4c:20:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0
        Validity
            Not Before: Oct 25 15:44:02 2024 GMT
            Not After : Oct 24 15:49:02 2025 GMT
        Subject: CN=9116D8248FEBE6BA8C492AFDC3D6AD5AE7435937
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:c5:ba:21:a2:c6:e5:11:3f:dd:f4:56:a5:9a:
                    97:22:67:86:5d:c5:fe:7d:76:aa:be:9c:a4:62:a8:
                    fa:e3:e1:0f:57:a6:97:6a:56:9b:50:3f:d9:a1:26:
                    bc:98:76:a4:76:42:08:95:74:d5:47:65:d7:d4:0a:
                    52:e1:d5:22:ed:f2:0d:f3:5a:fa:b4:b3:ff:02:91:
                    5e:bb:a9:d9:72:26:2d:db:2c:da:4c:a7:d5:de:83:
                    c1:11:03:00:9f:cb:ff:ca:69:71:1a:8a:73:8c:6a:
                    51:75:17:b2:42:f7:ef:5d:b2:40:3f:e5:4c:1f:5d:
                    b6:c7:9c:79:5f:88:3d:da:eb:fc:89:1d:a7:0d:ee:
                    1e:20:f9:a0:50:e1:d4:c6:c6:a7:8c:b3:46:ad:dd:
                    c7:1e:90:80:d1:d6:5c:90:a8:38:cc:3a:b4:2b:04:
                    4c:9a:5a:93:3b:e9:98:ee:44:9c:00:ec:0a:7a:ce:
                    24:e3:34:68:d4:ec:bc:a0:79:cf:a0:c3:23:9c:14:
                    d2:a8:97:ca:12:9c:72:86:94:13:c4:88:ee:96:fa:
                    1a:6f:d5:ad:5e:44:59:2b:ab:c1:5e:5f:fb:f6:e9:
                    e7:e4:8d:53:05:4b:49:69:69:31:ed:fe:93:ae:cf:
                    10:ec:58:2d:e1:16:8f:df:b2:db:84:4f:76:0d:9e:
                    3b:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:16:D8:24:8F:EB:E6:BA:8C:49:2A:FD:C3:D6:AD:5A:E7:43:59:37
            X509v3 Authority Key Identifier:
                keyid:D4:08:70:12:75:F2:3C:87:FE:42:CD:6C:42:B2:5D:DB:0E:54:82:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/D408701275F23C87FE42CD6C42B25DDB0E548292.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/36342e3235332e39352e302f32342d3234203d3e20313430393032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.253.95.0/24

    Signature Algorithm: sha256WithRSAEncryption
         57:ee:9f:9b:19:d9:43:4f:ae:05:c4:f3:e7:dc:1b:7e:83:89:
         8c:46:a4:da:dc:a5:9d:53:92:24:1e:66:64:05:8a:50:c6:ec:
         98:94:9f:59:e7:8e:18:99:83:4b:4c:97:81:ed:6a:7d:55:8d:
         75:2e:bb:6c:66:27:93:3c:d7:6b:37:a0:49:fe:cc:c5:c6:19:
         79:30:18:38:4d:7d:aa:33:60:a8:39:5f:30:66:38:a1:69:4d:
         ad:82:8d:5e:1a:e3:97:2e:85:62:7e:df:f0:dd:af:83:d9:3c:
         29:e1:19:a4:2c:8a:3a:96:5a:47:d7:f2:76:c3:81:57:48:3b:
         26:d7:23:4e:29:9a:55:cd:66:9c:b9:24:cc:68:54:a1:37:e5:
         be:1c:9b:f1:8e:e3:07:d2:fd:0e:f8:02:07:1e:1b:15:19:28:
         09:31:ed:56:a8:01:79:56:1d:9f:aa:9c:8b:79:5e:a0:27:49:
         20:8d:0c:10:c2:54:06:61:34:be:ee:59:2c:96:cb:e7:7c:d7:
         32:5c:b5:84:71:32:61:b5:38:80:ab:f4:f2:a7:ca:b0:22:09:
         6f:74:73:14:c4:29:09:f5:33:29:6d:07:6b:b0:86:0c:b8:a3:
         3a:fa:5a:ae:a6:99:14:42:a1:4b:30:f2:6b:b7:4e:60:4e:e4:
         86:18:fe:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 00:23:27 2024 by rpki-client on console-fra.rpki-client.org