Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade88e39bfa01892704d5f332eb/0/3136322e3231382e32352e302f32342d3234203d3e203139343337.roa
File:                     3136322e3231382e32352e302f32342d3234203d3e203139343337.roa (raw, json)
Hash identifier:          0/mJ3wQkU1npwrf5LPH1Gds0CQmHzrgBtITJZI3CXcQ=
Subject key identifier:   CB:CD:54:04:D5:A0:B5:DE:89:54:68:A4:76:93:36:07:C5:D8:A5:6E
Certificate issuer:       /CN=74f7a45a3a510de918f6ddf7cca1df53d32dd9eb0564ed5cfb
Certificate serial:       201442ACBDE036B06BC3140561E02C96C7793544
Authority key identifier: ED:23:65:19:8E:BA:74:92:78:14:95:16:E3:C7:6C:50:94:AE:99:3F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e16c2ee6-ee94-4ae3-a6f7-ccb776ef75a2/74f7a45a3a510de918f6ddf7cca1df53d32dd9eb0564ed5cfb.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01892704d5f332eb/0/3136322e3231382e32352e302f32342d3234203d3e203139343337.roa
Signing time:             Wed 05 Jul 2023 17:07:16 +0000
ROA not before:           Wed 05 Jul 2023 17:02:16 +0000
ROA not after:            Wed 03 Jul 2024 17:07:16 +0000
asID:                     19437
IP address blocks:        162.218.25.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01892704d5f332eb/0/ED2365198EBA749278149516E3C76C5094AE993F.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01892704d5f332eb/0/ED2365198EBA749278149516E3C76C5094AE993F.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e16c2ee6-ee94-4ae3-a6f7-ccb776ef75a2/74f7a45a3a510de918f6ddf7cca1df53d32dd9eb0564ed5cfb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e16c2ee6-ee94-4ae3-a6f7-ccb776ef75a2/e16c2ee6-ee94-4ae3-a6f7-ccb776ef75a2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e16c2ee6-ee94-4ae3-a6f7-ccb776ef75a2/e16c2ee6-ee94-4ae3-a6f7-ccb776ef75a2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e16c2ee6-ee94-4ae3-a6f7-ccb776ef75a2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 May 2024 18:36:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:14:42:ac:bd:e0:36:b0:6b:c3:14:05:61:e0:2c:96:c7:79:35:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74f7a45a3a510de918f6ddf7cca1df53d32dd9eb0564ed5cfb
        Validity
            Not Before: Jul  5 17:02:16 2023 GMT
            Not After : Jul  3 17:07:16 2024 GMT
        Subject: CN=CBCD5404D5A0B5DE895468A476933607C5D8A56E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:1c:4b:90:d3:11:b0:a1:c4:5d:51:e5:5f:01:
                    0a:1c:af:5c:69:09:12:58:3f:92:d9:fc:b4:3a:9a:
                    fe:1d:2e:65:f2:7c:dd:84:25:fc:03:ad:d5:40:67:
                    7f:6c:c1:fe:b2:70:ce:81:77:84:7d:f6:9d:3d:d2:
                    f3:bb:a5:d7:f9:49:9e:5e:66:5e:63:47:29:5d:42:
                    46:6c:66:e7:bc:7f:44:68:4f:ab:11:26:dd:45:78:
                    67:46:87:17:c7:e5:4a:77:b1:49:cb:85:8b:07:3a:
                    e1:99:03:6f:aa:9f:83:07:8a:18:dc:d7:88:bf:2f:
                    08:ef:4d:2e:09:e1:b3:ba:22:62:88:23:4e:8e:55:
                    c8:e3:5d:0c:c7:5b:b0:0a:37:18:ac:1d:d4:54:8c:
                    5e:4d:44:86:a9:cb:64:87:66:35:e1:33:99:cb:c9:
                    8d:33:66:3c:2a:d2:c6:1f:19:e8:74:ea:ab:35:62:
                    3f:00:c2:7d:f9:8b:48:fb:6c:44:22:23:1e:ea:f5:
                    f9:83:14:d0:96:ee:13:a2:82:0c:72:88:75:7d:2a:
                    d7:ac:3d:16:91:6f:de:92:f5:3d:ac:81:4d:1d:83:
                    1b:f5:42:72:34:14:37:3a:1b:24:a8:3d:37:f6:aa:
                    80:eb:c6:ab:76:36:9b:11:c5:50:b4:31:e4:61:55:
                    1c:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:CD:54:04:D5:A0:B5:DE:89:54:68:A4:76:93:36:07:C5:D8:A5:6E
            X509v3 Authority Key Identifier:
                keyid:ED:23:65:19:8E:BA:74:92:78:14:95:16:E3:C7:6C:50:94:AE:99:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01892704d5f332eb/0/ED2365198EBA749278149516E3C76C5094AE993F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e16c2ee6-ee94-4ae3-a6f7-ccb776ef75a2/74f7a45a3a510de918f6ddf7cca1df53d32dd9eb0564ed5cfb.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01892704d5f332eb/0/3136322e3231382e32352e302f32342d3234203d3e203139343337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.218.25.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0b:e9:30:3d:29:74:ea:ce:c4:d6:ed:ca:7c:d8:9b:94:5f:f5:
         e1:ed:c1:b3:d2:a9:b8:47:da:b3:c9:f9:72:9c:ac:e0:81:64:
         82:be:e0:a4:0c:54:89:7d:21:30:6b:02:e6:56:16:ae:93:35:
         b0:24:00:66:9b:a3:e4:0d:0f:3c:15:3e:fb:3d:31:48:f8:e0:
         c6:ca:65:78:6b:16:7f:14:49:15:81:95:5f:19:9b:74:8e:f7:
         de:8a:f5:0f:ae:a9:28:e3:12:4d:9c:19:35:40:11:8e:f1:82:
         56:69:20:bd:69:e7:39:76:77:a5:88:5d:0f:91:e9:6d:1d:63:
         6f:b4:79:26:dc:c9:eb:f4:ee:79:3a:c9:7c:50:3c:8c:29:7e:
         63:fc:aa:02:bc:71:f2:0f:86:d1:f1:a7:f4:7b:40:3f:9e:40:
         fe:b3:83:48:ef:bc:18:f5:ca:31:b9:67:ff:48:40:34:49:bc:
         d7:58:2b:a4:2d:19:ab:d5:f1:22:45:e8:fe:01:b0:31:c4:62:
         3d:88:5f:48:d8:e7:73:de:04:cb:91:d0:7d:88:6b:70:85:1d:
         fc:ac:40:88:c1:4e:b0:d1:5c:fd:f7:98:13:c7:ec:91:94:a9:
         06:94:25:e6:a2:32:56:27:ec:70:fc:23:d4:d4:9f:96:ad:38:
         56:b6:4f:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 11 18:13:35 2024 by rpki-client on console-fra.rpki-client.org