Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8927b1d8018954fb9b0c2587/0/3230362e3139372e3231312e302f32342d3234203d3e2037303138.roa
File:                     3230362e3139372e3231312e302f32342d3234203d3e2037303138.roa (raw, json)
Hash identifier:          AunYx2l6v8kxr+DVsljKWMX22Iy7mO/dsVLuDUIwUbk=
Subject key identifier:   8A:8A:38:D3:2C:1A:F6:C1:39:F8:B5:26:A6:39:16:B9:A9:B0:33:99
Certificate issuer:       /CN=eb9f2c6fff8b7979038e6f55b688739b1e27d97c242ec72f44
Certificate serial:       33C4C7AF478704FE6063BD1763C9604443AD8825
Authority key identifier: FF:0F:EB:AB:1F:7D:98:37:33:BC:5E:C6:25:C2:3D:2F:AE:F7:B9:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/df15a7a4-7ca1-4957-aad0-9d0af4a3484c/eb9f2c6fff8b7979038e6f55b688739b1e27d97c242ec72f44.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8927b1d8018954fb9b0c2587/0/3230362e3139372e3231312e302f32342d3234203d3e2037303138.roa
Signing time:             Fri 15 Sep 2023 19:02:30 +0000
ROA not before:           Fri 15 Sep 2023 18:57:30 +0000
ROA not after:            Fri 13 Sep 2024 19:02:30 +0000
asID:                     7018
IP address blocks:        206.197.211.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade8927b1d8018954fb9b0c2587/0/FF0FEBAB1F7D983733BC5EC625C23D2FAEF7B9AE.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade8927b1d8018954fb9b0c2587/0/FF0FEBAB1F7D983733BC5EC625C23D2FAEF7B9AE.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/df15a7a4-7ca1-4957-aad0-9d0af4a3484c/eb9f2c6fff8b7979038e6f55b688739b1e27d97c242ec72f44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/df15a7a4-7ca1-4957-aad0-9d0af4a3484c/df15a7a4-7ca1-4957-aad0-9d0af4a3484c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/df15a7a4-7ca1-4957-aad0-9d0af4a3484c/df15a7a4-7ca1-4957-aad0-9d0af4a3484c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/df15a7a4-7ca1-4957-aad0-9d0af4a3484c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 05 May 2024 08:07:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:c4:c7:af:47:87:04:fe:60:63:bd:17:63:c9:60:44:43:ad:88:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb9f2c6fff8b7979038e6f55b688739b1e27d97c242ec72f44
        Validity
            Not Before: Sep 15 18:57:30 2023 GMT
            Not After : Sep 13 19:02:30 2024 GMT
        Subject: CN=8A8A38D32C1AF6C139F8B526A63916B9A9B03399
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:c4:ff:83:09:36:65:94:88:60:0a:20:b2:ad:
                    2c:54:7e:f8:86:4e:50:5f:17:c6:4d:9e:cc:89:e5:
                    a5:aa:4d:9a:f2:ff:9f:5a:0e:54:b5:71:e7:62:65:
                    1d:ba:be:af:e9:41:c5:a4:44:74:3c:a0:bd:22:27:
                    26:49:4b:93:2b:ff:03:88:a5:6a:97:9b:08:c3:f1:
                    42:7b:91:dd:1c:4a:42:79:7d:45:2d:67:62:cc:2c:
                    1e:8e:4b:65:64:dd:75:e9:bf:e6:a2:32:1c:d2:41:
                    91:4b:37:45:b1:ff:de:be:ea:9c:d2:5a:f0:35:99:
                    73:2b:06:3d:c6:dc:df:24:c1:f2:93:a2:2f:84:c6:
                    03:44:68:b1:df:0c:ce:82:ba:29:e7:fe:dc:f0:61:
                    34:ba:33:d6:47:2a:3f:e1:be:0f:73:c1:bb:8e:c7:
                    be:1e:15:80:76:8e:29:e6:33:e2:3b:08:b6:7d:0e:
                    07:e9:34:7d:41:d6:e3:36:0f:ab:f9:85:95:22:17:
                    94:38:9c:eb:e6:af:fd:fe:62:f3:bc:b1:4d:de:5a:
                    70:41:5e:5b:6c:9d:3a:52:b3:0a:98:87:14:f9:28:
                    54:7b:1e:3f:a4:a5:4f:42:b5:40:87:b2:a3:5c:04:
                    0f:43:19:e5:b8:be:4e:a3:a9:e9:29:80:f4:70:cf:
                    59:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:8A:38:D3:2C:1A:F6:C1:39:F8:B5:26:A6:39:16:B9:A9:B0:33:99
            X509v3 Authority Key Identifier:
                keyid:FF:0F:EB:AB:1F:7D:98:37:33:BC:5E:C6:25:C2:3D:2F:AE:F7:B9:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8927b1d8018954fb9b0c2587/0/FF0FEBAB1F7D983733BC5EC625C23D2FAEF7B9AE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/df15a7a4-7ca1-4957-aad0-9d0af4a3484c/eb9f2c6fff8b7979038e6f55b688739b1e27d97c242ec72f44.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8927b1d8018954fb9b0c2587/0/3230362e3139372e3231312e302f32342d3234203d3e2037303138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.197.211.0/24

    Signature Algorithm: sha256WithRSAEncryption
         51:76:79:fd:78:72:b7:78:1a:85:d9:10:30:4d:2e:3f:2d:44:
         37:80:00:e7:ff:d3:f1:33:76:f5:61:81:a4:1e:42:a9:47:e5:
         76:a3:2f:c0:ef:2e:6c:ca:cb:5d:49:b8:87:6d:2b:2b:51:24:
         16:f0:83:36:89:1d:88:3b:e1:29:9f:af:8f:05:a8:3b:94:9f:
         6b:d9:6a:3e:15:f2:f4:0c:cd:e0:ac:b9:b8:f0:33:dc:a9:d2:
         29:cb:6b:31:dd:2c:e9:c2:1b:bd:f9:d8:9a:6d:78:e1:98:be:
         5e:9b:51:37:76:6e:98:84:e6:82:3c:6b:03:da:ad:98:b0:76:
         3d:be:2b:f4:c8:61:ce:46:ef:9f:53:63:76:1e:de:53:5b:2f:
         6a:7e:e2:1a:45:e9:c7:73:30:a0:bd:39:c5:1f:d1:ec:13:00:
         c9:a8:3c:d5:7f:48:93:ab:2c:b0:13:47:2d:a7:db:b1:6b:b7:
         ed:ab:4b:98:79:1a:46:45:42:01:78:8d:91:5b:7b:3b:cf:16:
         4a:ec:4d:8c:e0:31:b8:37:20:54:d5:1c:6c:1d:a1:79:bb:70:
         36:71:92:26:3c:c2:63:25:4e:ac:6c:d2:05:d2:51:d9:1a:75:
         41:97:0e:14:40:41:68:c2:2f:37:f3:dd:12:ad:dd:f0:55:23:
         ca:2e:fc:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 08:30:40 2024 by rpki-client on console-fra.rpki-client.org