Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8b15078d018b1529da02004a/0/3230352e3233332e3230312e302f32342d3234203d3e20323131333733.roa
File:                     3230352e3233332e3230312e302f32342d3234203d3e20323131333733.roa (raw, json)
Hash identifier:          Nq4cT7FfYeJ3DJBvGrcbgY0+UUj4674FjcrRu4ktoGg=
Subject key identifier:   59:F9:D0:D7:AA:5D:1B:58:0B:91:3D:AB:6A:8F:18:B0:12:AA:EB:CD
Certificate issuer:       /CN=904d489a2dbd27553a164925cbbda5b551914c5797b4bdcf79
Certificate serial:       0177F362AC7092577EC45B5B57DF82F418DAB96B
Authority key identifier: 75:30:F0:69:80:0B:DF:ED:65:48:7B:49:D2:4C:07:D7:DD:ED:9E:56
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f5f23ad-ba92-4342-9c5f-7645311a9589/904d489a2dbd27553a164925cbbda5b551914c5797b4bdcf79.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8b15078d018b1529da02004a/0/3230352e3233332e3230312e302f32342d3234203d3e20323131333733.roa
Signing time:             Mon 09 Oct 2023 15:59:38 +0000
ROA not before:           Mon 09 Oct 2023 15:54:38 +0000
ROA not after:            Mon 07 Oct 2024 15:59:38 +0000
asID:                     211373
IP address blocks:        205.233.201.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade8b15078d018b1529da02004a/0/7530F069800BDFED65487B49D24C07D7DDED9E56.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade8b15078d018b1529da02004a/0/7530F069800BDFED65487B49D24C07D7DDED9E56.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f5f23ad-ba92-4342-9c5f-7645311a9589/904d489a2dbd27553a164925cbbda5b551914c5797b4bdcf79.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f5f23ad-ba92-4342-9c5f-7645311a9589/6f5f23ad-ba92-4342-9c5f-7645311a9589.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f5f23ad-ba92-4342-9c5f-7645311a9589/6f5f23ad-ba92-4342-9c5f-7645311a9589.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f5f23ad-ba92-4342-9c5f-7645311a9589.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 May 2024 02:24:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:77:f3:62:ac:70:92:57:7e:c4:5b:5b:57:df:82:f4:18:da:b9:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=904d489a2dbd27553a164925cbbda5b551914c5797b4bdcf79
        Validity
            Not Before: Oct  9 15:54:38 2023 GMT
            Not After : Oct  7 15:59:38 2024 GMT
        Subject: CN=59F9D0D7AA5D1B580B913DAB6A8F18B012AAEBCD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:ae:21:7a:dc:95:38:50:fb:3b:09:14:0d:f7:
                    56:38:af:bd:f5:3c:ac:10:57:48:86:84:31:d5:03:
                    95:e4:b5:1d:7d:18:e6:19:cf:56:64:96:5c:ad:24:
                    e8:65:e1:cd:6b:4c:95:fe:13:90:5f:4b:27:92:f3:
                    d7:3c:58:b7:04:19:cd:31:5b:dc:5b:d0:70:da:9b:
                    a1:ce:0b:19:b0:9c:48:96:c9:c6:80:59:ad:f7:51:
                    e4:1b:fe:ad:c8:a1:14:91:7c:32:46:d0:39:c1:e3:
                    97:a4:ac:91:30:90:e3:fd:08:06:69:cb:1f:04:12:
                    8f:24:2f:bb:96:0e:a3:97:a7:84:76:ab:07:4f:76:
                    17:54:ab:00:d9:0c:2e:80:79:fc:30:c3:4f:43:80:
                    b7:03:fb:97:a9:e1:6e:1c:2d:97:a1:34:97:64:c1:
                    ec:0e:dd:ca:50:82:96:78:9e:d6:b2:4d:ee:a0:cc:
                    16:72:e7:e1:cf:13:34:ae:4b:a7:c2:bd:c7:70:05:
                    2d:64:80:04:55:07:c7:d4:9b:d4:e8:3d:78:ae:82:
                    59:cf:17:47:8e:77:02:52:f8:db:ea:6f:22:c6:6e:
                    76:1b:a8:3a:15:b0:64:5e:ce:19:a8:df:f5:cb:da:
                    d0:12:5c:ae:02:4e:f2:8c:3c:47:1d:9c:fc:97:76:
                    5b:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:F9:D0:D7:AA:5D:1B:58:0B:91:3D:AB:6A:8F:18:B0:12:AA:EB:CD
            X509v3 Authority Key Identifier:
                keyid:75:30:F0:69:80:0B:DF:ED:65:48:7B:49:D2:4C:07:D7:DD:ED:9E:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8b15078d018b1529da02004a/0/7530F069800BDFED65487B49D24C07D7DDED9E56.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f5f23ad-ba92-4342-9c5f-7645311a9589/904d489a2dbd27553a164925cbbda5b551914c5797b4bdcf79.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8b15078d018b1529da02004a/0/3230352e3233332e3230312e302f32342d3234203d3e20323131333733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.233.201.0/24

    Signature Algorithm: sha256WithRSAEncryption
         27:89:d6:4b:c1:3e:5c:56:42:69:a8:e9:20:ee:05:80:bb:8b:
         b2:22:21:6a:54:56:6e:81:a7:ae:45:0e:06:7a:f5:b2:40:ea:
         9e:3b:a4:aa:03:15:52:97:dd:44:60:1d:9a:78:8a:1a:34:db:
         d9:cb:56:0f:ce:2b:d9:74:fc:96:40:54:b5:9b:95:70:13:60:
         a3:e9:c1:58:04:41:c1:6d:68:7e:6a:57:d2:17:46:f0:97:58:
         b1:e5:ab:db:e5:17:dc:80:7d:28:f7:b2:a1:1f:87:6a:a6:f7:
         27:1a:6b:93:b2:5f:a3:fd:dd:82:dd:6f:c1:e7:56:bb:69:54:
         82:53:9a:4d:b3:ac:be:55:43:e7:31:15:22:65:e9:42:9e:c5:
         fb:c0:ee:64:ee:a5:c5:e7:2e:43:2c:ea:00:61:b6:dc:d0:7e:
         1a:6e:85:2e:29:6f:30:82:0e:e6:01:7f:36:f4:5f:e8:ae:16:
         11:6d:ca:ae:49:30:61:09:5e:2b:32:63:6e:51:0c:7f:44:b6:
         39:8f:b1:1b:fa:0d:2b:61:e7:33:0b:3f:39:72:a8:68:68:ef:
         a6:09:2d:c8:82:fb:42:e9:19:2a:57:d6:6d:01:e5:d7:df:9c:
         f2:1d:0b:b4:b9:cd:87:73:24:8a:50:a0:95:15:df:7b:b5:b0:
         1a:21:74:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 01:44:59 2024 by rpki-client on console-ams.rpki-client.org