Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade88e39bfa01892704d5f332eb/0/3136322e3231382e32342e302f32342d3234203d3e203139333138.roa
File:                     3136322e3231382e32342e302f32342d3234203d3e203139333138.roa (raw, json)
Hash identifier:          JTKlV1gJuDhnOJDA8t+KqJG0H5OuoWvTKAigIO/l7Gk=
Subject key identifier:   06:A3:97:6D:E0:48:E1:84:02:DF:80:53:1D:32:6D:75:C0:37:78:A2
Certificate issuer:       /CN=74f7a45a3a510de918f6ddf7cca1df53d32dd9eb0564ed5cfb
Certificate serial:       3EEE22040DE7F0E07636AFFAC2DD021CD9BC1866
Authority key identifier: ED:23:65:19:8E:BA:74:92:78:14:95:16:E3:C7:6C:50:94:AE:99:3F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e16c2ee6-ee94-4ae3-a6f7-ccb776ef75a2/74f7a45a3a510de918f6ddf7cca1df53d32dd9eb0564ed5cfb.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01892704d5f332eb/0/3136322e3231382e32342e302f32342d3234203d3e203139333138.roa
Signing time:             Wed 05 Jun 2024 17:48:58 +0000
ROA not before:           Wed 05 Jun 2024 17:43:58 +0000
ROA not after:            Wed 04 Jun 2025 17:48:58 +0000
asID:                     19318
IP address blocks:        162.218.24.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01892704d5f332eb/0/ED2365198EBA749278149516E3C76C5094AE993F.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01892704d5f332eb/0/ED2365198EBA749278149516E3C76C5094AE993F.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e16c2ee6-ee94-4ae3-a6f7-ccb776ef75a2/74f7a45a3a510de918f6ddf7cca1df53d32dd9eb0564ed5cfb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e16c2ee6-ee94-4ae3-a6f7-ccb776ef75a2/e16c2ee6-ee94-4ae3-a6f7-ccb776ef75a2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e16c2ee6-ee94-4ae3-a6f7-ccb776ef75a2/e16c2ee6-ee94-4ae3-a6f7-ccb776ef75a2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e16c2ee6-ee94-4ae3-a6f7-ccb776ef75a2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 15:59:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:ee:22:04:0d:e7:f0:e0:76:36:af:fa:c2:dd:02:1c:d9:bc:18:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74f7a45a3a510de918f6ddf7cca1df53d32dd9eb0564ed5cfb
        Validity
            Not Before: Jun  5 17:43:58 2024 GMT
            Not After : Jun  4 17:48:58 2025 GMT
        Subject: CN=06A3976DE048E18402DF80531D326D75C03778A2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:07:40:dd:32:81:67:f9:af:da:c2:a4:ee:f8:
                    77:95:93:85:45:8a:f8:7f:7d:67:15:13:fe:ab:95:
                    5b:42:9f:08:3c:47:3d:51:3c:f9:fa:81:ca:30:a4:
                    51:14:a6:b9:ae:55:0a:18:45:6a:e4:f8:bf:2c:92:
                    6e:2d:91:2c:72:8d:64:da:54:d8:72:c2:2e:07:e9:
                    8f:33:bf:09:44:95:67:f2:cd:c0:2e:7f:52:e6:6e:
                    34:47:9e:45:f3:e4:2b:0a:63:b3:de:0c:3f:5d:67:
                    9a:d2:ad:2b:6a:c9:78:bd:84:c0:33:97:fe:94:15:
                    47:20:c0:5c:a9:f0:56:31:b7:12:ce:b4:3e:d4:6b:
                    72:dd:03:a1:6e:d2:7b:6f:a9:30:55:c6:1a:9d:25:
                    09:59:f2:10:7e:15:a2:0e:20:7b:3b:e0:a6:2a:77:
                    9e:20:2e:7f:bf:e5:d9:fc:b4:c5:e1:0f:69:6e:b0:
                    51:6a:12:f1:2e:95:74:97:78:66:ea:d5:0a:6c:2c:
                    61:be:75:07:0f:5a:68:11:95:82:74:08:c5:a6:f6:
                    e2:db:8d:4f:b9:98:20:75:d8:bf:be:48:44:fc:74:
                    03:dd:30:f4:f9:ee:30:28:34:ae:fa:4e:d0:b5:8a:
                    f6:46:61:5c:45:61:c4:ba:06:4e:54:e4:f7:66:38:
                    30:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:A3:97:6D:E0:48:E1:84:02:DF:80:53:1D:32:6D:75:C0:37:78:A2
            X509v3 Authority Key Identifier:
                keyid:ED:23:65:19:8E:BA:74:92:78:14:95:16:E3:C7:6C:50:94:AE:99:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01892704d5f332eb/0/ED2365198EBA749278149516E3C76C5094AE993F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e16c2ee6-ee94-4ae3-a6f7-ccb776ef75a2/74f7a45a3a510de918f6ddf7cca1df53d32dd9eb0564ed5cfb.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01892704d5f332eb/0/3136322e3231382e32342e302f32342d3234203d3e203139333138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.218.24.0/24

    Signature Algorithm: sha256WithRSAEncryption
         45:e1:9f:b1:96:8b:5a:91:4e:ed:01:4f:b8:f0:b7:63:9c:a6:
         45:51:a6:ca:66:94:93:1a:e3:5f:67:5f:6c:57:a4:10:0e:13:
         2d:bd:06:34:81:85:80:39:fb:de:7b:ac:5f:86:01:ad:b6:13:
         01:e8:ce:27:07:8e:12:3e:e5:1c:64:6f:d0:f0:3b:9b:d2:87:
         dd:e3:50:7a:78:f7:ef:f0:4a:94:c4:b5:0c:1c:93:f6:b6:a4:
         a9:a9:b2:60:39:1b:c8:8c:fe:a1:2c:df:c0:91:40:7d:5a:4b:
         2a:ed:31:dd:9c:73:4e:2f:55:94:94:01:04:10:89:27:5b:a9:
         a9:29:68:0e:77:0a:cc:8b:8e:e5:94:16:b1:ef:83:72:5b:01:
         bb:1e:ec:4f:3d:62:49:1a:dd:92:3c:13:4f:fe:02:d6:dc:c1:
         a1:a5:9d:26:5b:8e:3b:4b:e5:ea:73:b0:bd:06:f3:23:0c:1e:
         c8:f6:fc:67:f0:a7:14:47:61:66:32:23:6f:af:8b:ae:25:97:
         d9:cb:7e:a5:56:17:22:cf:72:47:73:90:5d:45:da:2b:6c:3d:
         fd:cd:49:60:80:99:a3:7f:55:96:b0:99:55:e2:b1:0f:79:21:
         b3:af:2d:1b:d5:c9:05:a7:20:4d:82:28:c3:6d:7c:ee:0f:7c:
         4c:44:29:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 18:49:10 2024 by rpki-client on console-ams.rpki-client.org