Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8927b1d8018954fb9b0c2587/0/3230362e3139372e3231312e302f32342d3234203d3e2037303138.roa
File:                     3230362e3139372e3231312e302f32342d3234203d3e2037303138.roa (raw, json)
Hash identifier:          C6q8lLKl26+vbDtj1eCaS7sN91l0xdQFTKXn/3+TVPU=
Subject key identifier:   5C:90:DC:B9:CD:3B:57:47:D4:3B:9E:AC:6A:96:E3:21:DE:7B:0C:A4
Certificate issuer:       /CN=eb9f2c6fff8b7979038e6f55b688739b1e27d97c242ec72f44
Certificate serial:       1DF925696664ABBC63ED85D8CB345F1E39C1B230
Authority key identifier: FF:0F:EB:AB:1F:7D:98:37:33:BC:5E:C6:25:C2:3D:2F:AE:F7:B9:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/df15a7a4-7ca1-4957-aad0-9d0af4a3484c/eb9f2c6fff8b7979038e6f55b688739b1e27d97c242ec72f44.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8927b1d8018954fb9b0c2587/0/3230362e3139372e3231312e302f32342d3234203d3e2037303138.roa
Signing time:             Fri 16 Aug 2024 19:48:59 +0000
ROA not before:           Fri 16 Aug 2024 19:43:59 +0000
ROA not after:            Fri 15 Aug 2025 19:48:59 +0000
asID:                     7018
IP address blocks:        206.197.211.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade8927b1d8018954fb9b0c2587/0/FF0FEBAB1F7D983733BC5EC625C23D2FAEF7B9AE.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade8927b1d8018954fb9b0c2587/0/FF0FEBAB1F7D983733BC5EC625C23D2FAEF7B9AE.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/df15a7a4-7ca1-4957-aad0-9d0af4a3484c/eb9f2c6fff8b7979038e6f55b688739b1e27d97c242ec72f44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/df15a7a4-7ca1-4957-aad0-9d0af4a3484c/df15a7a4-7ca1-4957-aad0-9d0af4a3484c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/df15a7a4-7ca1-4957-aad0-9d0af4a3484c/df15a7a4-7ca1-4957-aad0-9d0af4a3484c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/df15a7a4-7ca1-4957-aad0-9d0af4a3484c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 14:02:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:f9:25:69:66:64:ab:bc:63:ed:85:d8:cb:34:5f:1e:39:c1:b2:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb9f2c6fff8b7979038e6f55b688739b1e27d97c242ec72f44
        Validity
            Not Before: Aug 16 19:43:59 2024 GMT
            Not After : Aug 15 19:48:59 2025 GMT
        Subject: CN=5C90DCB9CD3B5747D43B9EAC6A96E321DE7B0CA4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:f8:00:c3:17:0d:ab:3c:b4:47:3c:f6:d3:02:
                    53:c9:5a:a5:71:d1:80:50:be:f3:ae:fa:a8:12:80:
                    6a:3a:66:ca:1c:68:ef:98:27:ea:a8:ab:0a:7f:f1:
                    a8:e9:3d:2e:b6:38:5f:0b:88:97:47:88:95:4c:59:
                    2c:7e:b8:ce:26:91:66:40:fa:e9:69:5e:8e:55:e9:
                    7b:7a:1d:0f:9f:bb:27:5f:ac:72:28:0d:d2:0d:ef:
                    0d:21:c7:95:ec:47:63:ab:b5:4b:8d:94:5a:26:80:
                    40:2d:ab:e0:f6:65:fe:22:21:94:c8:6b:ba:78:9e:
                    fd:4f:55:e9:ea:f3:f0:a8:83:70:90:bc:22:94:8d:
                    0c:0c:ed:60:f7:ab:7e:9f:af:5c:89:93:fe:ae:dc:
                    b9:05:08:2d:d3:b6:16:80:a3:9a:d7:65:45:1f:e7:
                    9c:23:d5:b3:5c:64:61:64:5e:77:5e:94:18:b5:c0:
                    75:51:53:f3:ec:56:ea:04:11:02:7e:31:06:2d:a5:
                    fc:40:d3:d2:47:1a:8f:24:39:9e:85:4b:0f:d8:0d:
                    9e:db:e1:ec:5b:db:4d:c6:a3:8a:96:01:25:f7:34:
                    9a:aa:89:e1:c7:a3:d6:5f:68:8e:a5:83:f9:f8:48:
                    13:7e:1b:dd:9d:88:92:c4:b3:9a:05:6e:ad:8d:76:
                    c4:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:90:DC:B9:CD:3B:57:47:D4:3B:9E:AC:6A:96:E3:21:DE:7B:0C:A4
            X509v3 Authority Key Identifier:
                keyid:FF:0F:EB:AB:1F:7D:98:37:33:BC:5E:C6:25:C2:3D:2F:AE:F7:B9:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8927b1d8018954fb9b0c2587/0/FF0FEBAB1F7D983733BC5EC625C23D2FAEF7B9AE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/df15a7a4-7ca1-4957-aad0-9d0af4a3484c/eb9f2c6fff8b7979038e6f55b688739b1e27d97c242ec72f44.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8927b1d8018954fb9b0c2587/0/3230362e3139372e3231312e302f32342d3234203d3e2037303138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.197.211.0/24

    Signature Algorithm: sha256WithRSAEncryption
         05:65:58:87:2f:13:f2:a5:c5:fe:d8:f9:aa:bc:95:b6:5f:87:
         83:48:d1:9a:78:d7:34:eb:e4:ba:e7:18:46:3c:f3:c3:0a:a6:
         8c:3f:09:09:98:1f:e4:41:74:6f:bc:cf:0e:f8:37:b0:98:99:
         fb:a6:e9:78:3c:f4:b9:07:a9:7d:91:a2:79:9a:f9:ec:88:7c:
         a7:9c:04:69:4e:ff:ee:a6:0a:4a:77:38:96:6b:d0:27:e5:e5:
         50:ac:b0:11:24:24:9f:83:71:92:48:7a:bc:d9:19:2b:da:52:
         4d:24:02:ba:76:34:90:6c:8b:a7:7b:d9:a5:46:ba:dc:cd:13:
         e6:4a:e0:24:fc:5c:f0:f2:f9:eb:8a:cc:03:59:21:76:67:b3:
         5d:04:5a:58:4b:c7:f8:90:a8:f3:b1:89:a0:48:a9:69:c6:f3:
         29:0c:e1:ee:97:25:af:09:7e:de:9b:3c:5d:d8:44:c7:ea:a2:
         c8:6f:9a:8c:44:b3:fa:42:f3:30:dd:92:22:65:a4:8a:91:b9:
         b8:b5:41:20:54:3d:63:f1:55:ea:4e:2c:13:fb:ee:49:9c:6d:
         c0:9d:9a:89:5d:fc:b6:e2:a2:a4:33:5f:d9:ad:9f:4b:19:20:
         10:49:0a:dc:be:8a:4e:14:40:6c:b0:ff:6f:4e:85:29:a3:10:
         33:5a:1e:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:09:15 2024 by rpki-client on console-ams.rpki-client.org