Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade88e39bfa01892704d5f332eb/0/3136322e3231382e32352e302f32342d3234203d3e203139343337.roa
File:                     3136322e3231382e32352e302f32342d3234203d3e203139343337.roa (raw, json)
Hash identifier:          UVs5YLgDUHMYngV/a/NJoJCrRXcX3/JwsPAl5LR/UEs=
Subject key identifier:   D7:BB:4D:C2:A4:E9:67:3F:55:CA:32:E5:99:24:B7:0B:EF:8C:09:28
Certificate issuer:       /CN=74f7a45a3a510de918f6ddf7cca1df53d32dd9eb0564ed5cfb
Certificate serial:       242C000781E38B8B30DCC43C496260869EEC59FB
Authority key identifier: ED:23:65:19:8E:BA:74:92:78:14:95:16:E3:C7:6C:50:94:AE:99:3F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e16c2ee6-ee94-4ae3-a6f7-ccb776ef75a2/74f7a45a3a510de918f6ddf7cca1df53d32dd9eb0564ed5cfb.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01892704d5f332eb/0/3136322e3231382e32352e302f32342d3234203d3e203139343337.roa
Signing time:             Wed 05 Jun 2024 17:48:58 +0000
ROA not before:           Wed 05 Jun 2024 17:43:58 +0000
ROA not after:            Wed 04 Jun 2025 17:48:58 +0000
asID:                     19437
IP address blocks:        162.218.25.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01892704d5f332eb/0/ED2365198EBA749278149516E3C76C5094AE993F.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01892704d5f332eb/0/ED2365198EBA749278149516E3C76C5094AE993F.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e16c2ee6-ee94-4ae3-a6f7-ccb776ef75a2/74f7a45a3a510de918f6ddf7cca1df53d32dd9eb0564ed5cfb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e16c2ee6-ee94-4ae3-a6f7-ccb776ef75a2/e16c2ee6-ee94-4ae3-a6f7-ccb776ef75a2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e16c2ee6-ee94-4ae3-a6f7-ccb776ef75a2/e16c2ee6-ee94-4ae3-a6f7-ccb776ef75a2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e16c2ee6-ee94-4ae3-a6f7-ccb776ef75a2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:02:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:2c:00:07:81:e3:8b:8b:30:dc:c4:3c:49:62:60:86:9e:ec:59:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74f7a45a3a510de918f6ddf7cca1df53d32dd9eb0564ed5cfb
        Validity
            Not Before: Jun  5 17:43:58 2024 GMT
            Not After : Jun  4 17:48:58 2025 GMT
        Subject: CN=D7BB4DC2A4E9673F55CA32E59924B70BEF8C0928
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:db:78:42:7a:cc:fc:eb:7b:63:6b:69:18:4d:
                    84:9b:7e:00:85:e0:f7:14:4a:37:27:4f:b8:39:34:
                    ac:d9:e4:51:00:ac:13:ed:01:c9:9b:1e:6e:67:cd:
                    7c:c8:65:f3:37:d9:12:93:40:59:2c:e3:eb:15:7b:
                    bb:13:70:68:c3:9a:7c:8e:0b:22:00:81:6e:20:bb:
                    5f:9c:ad:c4:1e:89:c7:8d:b3:4d:b0:5e:1a:08:4f:
                    55:11:91:d2:1a:81:1d:91:34:ff:04:f7:91:fc:0b:
                    90:e4:31:a3:55:63:fd:90:30:a8:3b:34:90:19:c4:
                    68:46:d5:bf:ac:a2:a7:83:34:75:71:d0:82:02:ee:
                    2a:ab:85:ec:51:57:4a:df:4a:a2:6f:4b:83:18:e4:
                    b3:c9:b7:67:2b:c0:a2:55:36:cc:55:fa:61:82:2c:
                    3a:a8:8e:52:da:53:fb:99:58:0e:8c:e9:c0:71:6d:
                    1d:73:71:f7:eb:98:63:fd:00:0a:9a:8d:c3:1b:03:
                    de:55:4d:fd:bc:92:77:31:ba:3c:67:eb:08:6e:fc:
                    ce:4a:d7:b9:91:83:02:d5:b5:bc:94:4d:0c:0a:17:
                    df:86:3c:4f:14:e3:63:75:1a:22:7f:64:56:5b:29:
                    6d:b6:97:3d:87:a2:9d:10:73:44:6d:02:bb:8b:4a:
                    0b:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:BB:4D:C2:A4:E9:67:3F:55:CA:32:E5:99:24:B7:0B:EF:8C:09:28
            X509v3 Authority Key Identifier:
                keyid:ED:23:65:19:8E:BA:74:92:78:14:95:16:E3:C7:6C:50:94:AE:99:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01892704d5f332eb/0/ED2365198EBA749278149516E3C76C5094AE993F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e16c2ee6-ee94-4ae3-a6f7-ccb776ef75a2/74f7a45a3a510de918f6ddf7cca1df53d32dd9eb0564ed5cfb.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01892704d5f332eb/0/3136322e3231382e32352e302f32342d3234203d3e203139343337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.218.25.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7b:cb:59:a5:ed:93:f4:63:fe:d6:a1:44:97:b3:7f:7d:f0:79:
         ce:60:c2:ad:8e:b4:c5:d0:78:e6:b7:7d:b9:6f:dc:6c:05:0d:
         6b:d1:bd:08:f2:3e:bd:d9:9b:92:24:40:04:65:1b:ba:c8:fd:
         53:6f:1d:3f:f2:82:82:a5:33:dd:37:9d:da:96:ff:95:ac:f9:
         ec:32:e4:47:ab:a7:e3:fa:e2:a0:29:d7:8a:05:c7:28:7b:09:
         f4:2f:be:a7:ff:9c:82:d0:e6:8a:f4:bc:91:56:1e:92:88:3a:
         7b:25:6a:c1:cf:9e:56:61:d4:8e:dd:e9:cd:fa:6d:44:2f:7e:
         f1:3c:ae:eb:81:e9:1a:81:4b:ef:0d:21:0c:f4:f4:82:c9:9d:
         94:19:ec:57:b6:36:33:98:94:e1:0f:b6:33:02:39:37:2c:f4:
         24:7d:d6:a1:51:6b:e6:24:c9:ea:19:63:be:46:86:6a:d9:bf:
         02:22:7e:b3:1f:5d:dd:30:9f:4f:5d:cc:ee:be:07:f9:61:aa:
         53:b9:e0:4f:18:c7:82:63:d2:17:45:f7:04:d2:fc:e1:44:c6:
         6d:67:cc:f1:36:36:f6:9f:2a:5f:8f:c3:9d:a5:c6:fb:4a:9c:
         a0:bd:8c:a0:bb:87:b7:6b:2f:db:fa:ad:bc:8f:9f:4d:28:fb:
         65:e4:6f:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:31:37 2024 by rpki-client on console-fra.rpki-client.org