Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade88e39bfa01892704d5f332eb/0/3136322e3231382e32342e302f32342d3234203d3e203139333138.roa
File:                     3136322e3231382e32342e302f32342d3234203d3e203139333138.roa (raw, json)
Hash identifier:          Rdra7xc9vHnBUz5V3WzRc3tRTrUSAhM308nUBwTSPPA=
Subject key identifier:   42:15:7F:06:06:28:6F:3E:96:79:C1:1C:71:80:91:CC:AE:0D:3C:61
Certificate issuer:       /CN=74f7a45a3a510de918f6ddf7cca1df53d32dd9eb0564ed5cfb
Certificate serial:       6D580E5B8340767A5F61C3F5C6D2A9DB19DD5C42
Authority key identifier: ED:23:65:19:8E:BA:74:92:78:14:95:16:E3:C7:6C:50:94:AE:99:3F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e16c2ee6-ee94-4ae3-a6f7-ccb776ef75a2/74f7a45a3a510de918f6ddf7cca1df53d32dd9eb0564ed5cfb.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01892704d5f332eb/0/3136322e3231382e32342e302f32342d3234203d3e203139333138.roa
Signing time:             Wed 05 Jul 2023 17:06:55 +0000
ROA not before:           Wed 05 Jul 2023 17:01:55 +0000
ROA not after:            Wed 03 Jul 2024 17:06:55 +0000
asID:                     19318
IP address blocks:        162.218.24.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01892704d5f332eb/0/ED2365198EBA749278149516E3C76C5094AE993F.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01892704d5f332eb/0/ED2365198EBA749278149516E3C76C5094AE993F.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e16c2ee6-ee94-4ae3-a6f7-ccb776ef75a2/74f7a45a3a510de918f6ddf7cca1df53d32dd9eb0564ed5cfb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e16c2ee6-ee94-4ae3-a6f7-ccb776ef75a2/e16c2ee6-ee94-4ae3-a6f7-ccb776ef75a2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e16c2ee6-ee94-4ae3-a6f7-ccb776ef75a2/e16c2ee6-ee94-4ae3-a6f7-ccb776ef75a2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e16c2ee6-ee94-4ae3-a6f7-ccb776ef75a2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Jun 2024 01:43:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:58:0e:5b:83:40:76:7a:5f:61:c3:f5:c6:d2:a9:db:19:dd:5c:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74f7a45a3a510de918f6ddf7cca1df53d32dd9eb0564ed5cfb
        Validity
            Not Before: Jul  5 17:01:55 2023 GMT
            Not After : Jul  3 17:06:55 2024 GMT
        Subject: CN=42157F0606286F3E9679C11C718091CCAE0D3C61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:c1:ea:d0:79:8d:6c:72:44:85:d5:fb:1e:a9:
                    8b:4c:db:03:89:05:0c:20:dc:30:cf:19:cb:1d:d2:
                    61:b3:2e:91:c2:a5:1a:42:97:de:af:d5:37:da:83:
                    59:2f:65:fe:8d:6f:48:d5:85:c1:7e:d8:b9:92:40:
                    cf:dd:8f:67:16:13:71:06:cc:94:1c:36:6e:8f:dc:
                    1f:2e:38:74:94:55:44:e0:17:ac:62:64:23:01:1e:
                    ca:47:7f:2c:04:c6:28:a5:7b:13:44:67:21:98:46:
                    a7:bf:2c:97:47:b6:99:06:90:02:44:1a:b9:17:8a:
                    32:6f:ad:e4:11:aa:4e:8b:e4:4e:2c:78:d7:ec:72:
                    ab:58:8d:6c:98:be:b8:1a:16:f5:69:1a:59:1f:4b:
                    fb:1d:77:21:59:f1:ba:9a:4e:ab:cd:94:3c:3c:1c:
                    00:4f:10:cd:1e:cf:78:4d:ce:36:86:86:7a:8b:c0:
                    cb:d5:1d:73:f8:57:de:6d:a1:0e:18:57:f0:25:94:
                    e1:c1:47:a5:81:3d:c1:27:8b:73:3a:ff:47:5d:b6:
                    ee:ee:a9:c2:a0:39:08:27:c2:54:34:2b:a2:89:8e:
                    c1:cf:e2:30:29:45:99:af:cf:04:6b:d0:8d:d7:13:
                    7f:c6:7a:b6:85:12:5c:8e:03:6a:1b:87:7e:1e:19:
                    dc:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:15:7F:06:06:28:6F:3E:96:79:C1:1C:71:80:91:CC:AE:0D:3C:61
            X509v3 Authority Key Identifier:
                keyid:ED:23:65:19:8E:BA:74:92:78:14:95:16:E3:C7:6C:50:94:AE:99:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01892704d5f332eb/0/ED2365198EBA749278149516E3C76C5094AE993F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e16c2ee6-ee94-4ae3-a6f7-ccb776ef75a2/74f7a45a3a510de918f6ddf7cca1df53d32dd9eb0564ed5cfb.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01892704d5f332eb/0/3136322e3231382e32342e302f32342d3234203d3e203139333138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.218.24.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4d:4e:9f:70:c7:49:3a:8a:a7:64:5d:97:ee:d6:16:03:db:5a:
         53:d3:74:57:e1:0f:91:72:65:3f:a9:bc:b1:85:43:89:d3:bd:
         1c:05:45:01:13:18:11:da:78:74:b2:14:44:d3:9b:d4:cc:47:
         76:7d:7b:52:9b:8c:87:70:d2:15:00:81:e0:c3:4a:80:73:77:
         4b:6c:4b:1f:9a:87:8d:7c:d2:b6:46:64:b9:44:67:1b:33:24:
         a6:98:1a:84:81:28:40:9e:a3:87:2e:de:e8:9b:66:44:6e:e5:
         45:59:0f:4c:bd:04:2d:a6:eb:36:ab:37:78:1b:eb:30:05:98:
         0b:17:95:52:57:83:9b:f9:e3:77:8d:7a:c2:f1:72:d6:06:51:
         9c:32:e1:7b:fb:24:13:68:0b:7b:eb:6f:1f:e8:86:af:89:6c:
         d8:4b:d7:6f:31:f3:97:e3:e5:ea:e4:ba:47:c0:79:84:8f:b7:
         a6:22:f2:a7:ce:63:77:68:b1:58:6f:61:ea:16:c0:ad:2b:7a:
         c4:10:6b:1d:11:6d:7e:12:a3:f8:19:df:04:d5:6d:35:d6:ed:
         65:a1:df:23:8c:cd:3a:58:4b:ed:af:ca:8a:8c:bf:c3:32:50:
         bf:87:a7:82:31:8f:67:ed:e6:f3:30:25:02:1e:05:cc:d9:0d:
         26:1d:9f:c3
-----BEGIN CERTIFICATE-----
MIIFsjCCBJqgAwIBAgIUbVgOW4NAdnpfYcP1xtKp2xndXEIwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNzRmN2E0NWEzYTUxMGRlOTE4ZjZkZGY3Y2NhMWRmNTNk
MzJkZDllYjA1NjRlZDVjZmIwHhcNMjMwNzA1MTcwMTU1WhcNMjQwNzAzMTcwNjU1
WjAzMTEwLwYDVQQDEyg0MjE1N0YwNjA2Mjg2RjNFOTY3OUMxMUM3MTgwOTFDQ0FF
MEQzQzYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxMHq0HmNbHJE
hdX7HqmLTNsDiQUMINwwzxnLHdJhsy6RwqUaQpfer9U32oNZL2X+jW9I1YXBfti5
kkDP3Y9nFhNxBsyUHDZuj9wfLjh0lFVE4BesYmQjAR7KR38sBMYopXsTRGchmEan
vyyXR7aZBpACRBq5F4oyb63kEapOi+ROLHjX7HKrWI1smL64Ghb1aRpZH0v7HXch
WfG6mk6rzZQ8PBwATxDNHs94Tc42hoZ6i8DL1R1z+FfebaEOGFfwJZThwUelgT3B
J4tzOv9HXbbu7qnCoDkIJ8JUNCuiiY7Bz+IwKUWZr88Ea9CN1xN/xnq2hRJcjgNq
G4d+HhncOQIDAQABo4ICsjCCAq4wHQYDVR0OBBYEFEIVfwYGKG8+lnnBHHGAkcyu
DTxhMB8GA1UdIwQYMBaAFO0jZRmOunSSeBSVFuPHbFCUrpk/MA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODhlMzliZmEwMTg5MjcwNGQ1ZjMzMmViLzAv
RUQyMzY1MTk4RUJBNzQ5Mjc4MTQ5NTE2RTNDNzZDNTA5NEFFOTkzRi5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3
ZTk3MWFjL2UxNmMyZWU2LWVlOTQtNGFlMy1hNmY3LWNjYjc3NmVmNzVhMi83NGY3
YTQ1YTNhNTEwZGU5MThmNmRkZjdjY2ExZGY1M2QzMmRkOWViMDU2NGVkNWNmYi5j
ZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZTg4ZTM5YmZhMDE4OTI3
MDRkNWYzMzJlYi8wLzMxMzYzMjJlMzIzMTM4MmUzMjM0MmUzMDJmMzIzNDJkMzIz
NDIwM2QzZTIwMzEzOTMzMzEzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO
AjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAKLaGDANBgkqhkiG9w0BAQsF
AAOCAQEATU6fcMdJOoqnZF2X7tYWA9taU9N0V+EPkXJlP6m8sYVDidO9HAVFARMY
Edp4dLIURNOb1MxHdn17UpuMh3DSFQCB4MNKgHN3S2xLH5qHjXzStkZkuURnGzMk
ppgahIEoQJ6jhy7e6JtmRG7lRVkPTL0ELabrNqs3eBvrMAWYCxeVUleDm/njd416
wvFy1gZRnDLhe/skE2gLe+tvH+iGr4ls2EvXbzHzl+Pl6uS6R8B5hI+3piLyp85j
d2ixWG9h6hbArSt6xBBrHRFtfhKj+BnfBNVtNdbtZaHfI4zNOlhL7a/Kioy/wzJQ
v4engjGPZ+3m8zAlAh4FzNkNJh2fww==
-----END CERTIFICATE-----
Generated at Wed Jun 5 02:02:25 2024 by rpki-client on console-fra.rpki-client.org