Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade88e39bfa01892704d5f332eb/0/3136322e3231382e32372e302f32342d3234203d3e20383334.roa
File:                     3136322e3231382e32372e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier:          37zazZr8LMxEiFEC7CXVDdbOe909bfHwwKPZBe7QXVA=
Subject key identifier:   5F:F6:E1:EF:A0:3B:D7:D5:65:9A:6B:51:6F:2E:59:CA:41:97:89:94
Certificate issuer:       /CN=74f7a45a3a510de918f6ddf7cca1df53d32dd9eb0564ed5cfb
Certificate serial:       64E60EE7FD8711B0549D6C26C9E8213833D56EEB
Authority key identifier: ED:23:65:19:8E:BA:74:92:78:14:95:16:E3:C7:6C:50:94:AE:99:3F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e16c2ee6-ee94-4ae3-a6f7-ccb776ef75a2/74f7a45a3a510de918f6ddf7cca1df53d32dd9eb0564ed5cfb.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01892704d5f332eb/0/3136322e3231382e32372e302f32342d3234203d3e20383334.roa
Signing time:             Sun 17 Nov 2024 00:01:04 +0000
ROA not before:           Sat 16 Nov 2024 23:56:04 +0000
ROA not after:            Sun 16 Nov 2025 00:01:04 +0000
asID:                     834
IP address blocks:        162.218.27.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01892704d5f332eb/0/ED2365198EBA749278149516E3C76C5094AE993F.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01892704d5f332eb/0/ED2365198EBA749278149516E3C76C5094AE993F.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e16c2ee6-ee94-4ae3-a6f7-ccb776ef75a2/74f7a45a3a510de918f6ddf7cca1df53d32dd9eb0564ed5cfb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e16c2ee6-ee94-4ae3-a6f7-ccb776ef75a2/e16c2ee6-ee94-4ae3-a6f7-ccb776ef75a2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e16c2ee6-ee94-4ae3-a6f7-ccb776ef75a2/e16c2ee6-ee94-4ae3-a6f7-ccb776ef75a2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e16c2ee6-ee94-4ae3-a6f7-ccb776ef75a2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 15:59:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:e6:0e:e7:fd:87:11:b0:54:9d:6c:26:c9:e8:21:38:33:d5:6e:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74f7a45a3a510de918f6ddf7cca1df53d32dd9eb0564ed5cfb
        Validity
            Not Before: Nov 16 23:56:04 2024 GMT
            Not After : Nov 16 00:01:04 2025 GMT
        Subject: CN=5FF6E1EFA03BD7D5659A6B516F2E59CA41978994
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:d9:97:9a:3b:f7:4c:c6:dc:bb:43:ee:3d:ef:
                    c3:f0:0f:7d:3d:c2:c0:99:bb:dc:96:f4:a2:13:e7:
                    a5:b8:18:88:23:8b:77:83:d6:67:2e:32:b0:45:e5:
                    64:85:07:35:cd:8e:0c:c3:c5:6f:e0:84:43:a5:90:
                    e4:95:17:81:29:4a:2a:33:bb:29:ff:ab:ea:ac:46:
                    85:ed:28:00:9b:d1:3f:e7:e0:8d:bc:2a:b4:35:b6:
                    2f:1d:3c:e2:98:21:0d:75:e4:68:52:77:7c:b6:10:
                    3f:82:6d:42:c6:53:38:c3:fe:2a:0a:79:c0:48:9c:
                    8d:5e:8a:f0:83:eb:6a:20:2d:94:1f:82:a6:3e:c9:
                    da:0e:f1:b5:16:c7:a6:1d:13:94:a1:a4:77:f0:e6:
                    54:b1:c4:32:dd:5a:e5:d1:82:04:d5:43:7a:29:6e:
                    56:1e:a8:b2:22:70:ee:2b:cf:d5:5f:f3:99:0c:1e:
                    d9:98:0e:18:5b:36:57:5f:fa:03:de:07:0c:7a:da:
                    8d:ff:c0:54:f3:21:64:a6:4b:b6:32:48:87:e3:6d:
                    1e:42:e6:a2:0c:e2:2c:8a:e5:e2:f1:d6:f3:35:3a:
                    ea:e8:6a:49:65:2f:27:56:d6:2e:7d:17:46:3d:a8:
                    bb:50:19:ff:aa:e5:58:56:e4:7b:5e:b5:ea:ad:dc:
                    d4:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:F6:E1:EF:A0:3B:D7:D5:65:9A:6B:51:6F:2E:59:CA:41:97:89:94
            X509v3 Authority Key Identifier:
                keyid:ED:23:65:19:8E:BA:74:92:78:14:95:16:E3:C7:6C:50:94:AE:99:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01892704d5f332eb/0/ED2365198EBA749278149516E3C76C5094AE993F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e16c2ee6-ee94-4ae3-a6f7-ccb776ef75a2/74f7a45a3a510de918f6ddf7cca1df53d32dd9eb0564ed5cfb.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01892704d5f332eb/0/3136322e3231382e32372e302f32342d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.218.27.0/24

    Signature Algorithm: sha256WithRSAEncryption
         04:07:88:b4:55:57:60:c0:cf:ef:95:b9:31:7a:c8:e9:31:d3:
         69:ba:57:9b:9e:2c:6f:d8:2e:83:23:43:ba:76:38:ec:64:e3:
         fa:f8:c6:7d:da:08:31:e4:b1:9c:b1:8c:5b:78:1c:92:22:01:
         9f:99:c4:34:a1:a4:fb:57:8a:61:0f:5f:3f:ef:1f:b6:8a:85:
         86:71:9d:38:50:a2:22:2b:f4:75:ba:a3:4b:8a:e3:1a:59:6e:
         57:a3:d0:86:94:de:e6:86:92:fd:50:21:21:da:91:c4:81:ff:
         f6:b8:02:e3:84:8f:b1:10:2e:13:01:d5:e9:95:a6:84:16:91:
         08:5c:3c:f7:ab:c2:2c:84:33:9e:fc:dd:26:54:d7:4d:3f:04:
         b7:f7:c5:79:85:f5:d0:d8:d7:1b:0a:25:8a:7d:9b:62:20:6a:
         ea:73:16:9c:b0:62:3f:9c:c1:a1:dd:18:fe:c7:9c:15:43:8b:
         32:08:50:7d:02:fe:03:4f:85:f6:67:71:e5:3c:02:6f:64:5b:
         da:f7:48:a3:3b:04:d9:84:b6:a8:bf:de:47:ae:4c:ac:61:a0:
         b7:24:ee:9e:3b:82:ce:a9:9e:88:8c:a0:42:0a:fa:80:0c:ae:
         f7:20:03:8a:7e:bc:72:a6:10:74:d5:1b:53:1c:cb:7e:7c:05:
         61:5c:18:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 17:27:32 2024 by rpki-client on console-fra.rpki-client.org