Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8b15078d018b1529da02004a/0/3230352e3233332e3230312e302f32342d3234203d3e20323131333733.roa
File:                     3230352e3233332e3230312e302f32342d3234203d3e20323131333733.roa (raw, json)
Hash identifier:          hfYDerm4qeouufejOfrCbB5pLOKJFLfZp+ZgiG1cLMU=
Subject key identifier:   68:86:C5:1B:92:8D:A5:39:88:53:E3:FF:54:15:44:68:02:8A:2D:87
Certificate issuer:       /CN=904d489a2dbd27553a164925cbbda5b551914c5797b4bdcf79
Certificate serial:       44677E942CAC0670D1FC666E33C7DD9208CD0046
Authority key identifier: 75:30:F0:69:80:0B:DF:ED:65:48:7B:49:D2:4C:07:D7:DD:ED:9E:56
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f5f23ad-ba92-4342-9c5f-7645311a9589/904d489a2dbd27553a164925cbbda5b551914c5797b4bdcf79.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8b15078d018b1529da02004a/0/3230352e3233332e3230312e302f32342d3234203d3e20323131333733.roa
Signing time:             Mon 09 Sep 2024 16:48:59 +0000
ROA not before:           Mon 09 Sep 2024 16:43:59 +0000
ROA not after:            Mon 08 Sep 2025 16:48:59 +0000
asID:                     211373
IP address blocks:        205.233.201.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade8b15078d018b1529da02004a/0/7530F069800BDFED65487B49D24C07D7DDED9E56.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade8b15078d018b1529da02004a/0/7530F069800BDFED65487B49D24C07D7DDED9E56.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f5f23ad-ba92-4342-9c5f-7645311a9589/904d489a2dbd27553a164925cbbda5b551914c5797b4bdcf79.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f5f23ad-ba92-4342-9c5f-7645311a9589/6f5f23ad-ba92-4342-9c5f-7645311a9589.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f5f23ad-ba92-4342-9c5f-7645311a9589/6f5f23ad-ba92-4342-9c5f-7645311a9589.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f5f23ad-ba92-4342-9c5f-7645311a9589.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 17:01:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:67:7e:94:2c:ac:06:70:d1:fc:66:6e:33:c7:dd:92:08:cd:00:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=904d489a2dbd27553a164925cbbda5b551914c5797b4bdcf79
        Validity
            Not Before: Sep  9 16:43:59 2024 GMT
            Not After : Sep  8 16:48:59 2025 GMT
        Subject: CN=6886C51B928DA5398853E3FF54154468028A2D87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:3a:55:69:bb:fd:48:3e:8e:4a:4d:53:b7:a2:
                    ef:39:f4:c6:be:90:ef:19:1f:ca:81:ba:30:9d:6e:
                    87:85:61:73:0d:ef:bc:1c:55:74:b2:ee:fc:0d:a3:
                    d0:06:a9:c6:7d:89:b8:6a:9e:9b:fd:3d:d7:b9:59:
                    e9:a5:41:04:e0:cd:7a:ea:ca:0e:c0:61:73:85:ca:
                    5c:a5:84:40:f6:9a:a0:65:39:87:55:17:e7:c9:ec:
                    f3:4d:78:df:b6:46:f0:18:2b:43:92:52:2a:da:49:
                    e5:51:d7:30:d6:83:b5:41:63:87:89:2a:87:98:4a:
                    3d:3b:f7:1a:9f:cf:e9:c9:f4:35:7e:88:3f:78:73:
                    03:89:02:b0:d1:e4:38:cf:34:dd:52:aa:b6:10:7a:
                    f3:1c:cf:b2:b3:c0:88:d3:23:00:b7:91:69:1b:b9:
                    d5:f1:7e:c0:bc:7d:41:a6:21:45:b4:1b:61:c6:ed:
                    0c:71:89:7e:4e:ba:00:d3:21:da:1b:74:b0:12:f1:
                    87:d0:45:47:9d:54:57:98:56:ca:96:da:3f:99:cf:
                    da:ea:77:95:26:a6:35:f3:98:91:61:53:0e:9d:56:
                    50:0e:be:79:55:20:de:25:f7:6c:99:bc:57:65:1a:
                    91:19:3d:20:9a:1e:63:d7:26:9a:cc:32:c6:ee:e0:
                    ad:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:86:C5:1B:92:8D:A5:39:88:53:E3:FF:54:15:44:68:02:8A:2D:87
            X509v3 Authority Key Identifier:
                keyid:75:30:F0:69:80:0B:DF:ED:65:48:7B:49:D2:4C:07:D7:DD:ED:9E:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8b15078d018b1529da02004a/0/7530F069800BDFED65487B49D24C07D7DDED9E56.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f5f23ad-ba92-4342-9c5f-7645311a9589/904d489a2dbd27553a164925cbbda5b551914c5797b4bdcf79.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8b15078d018b1529da02004a/0/3230352e3233332e3230312e302f32342d3234203d3e20323131333733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.233.201.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2b:20:2c:a4:c4:65:5b:25:2b:a7:0c:91:da:71:c4:31:97:af:
         14:6a:95:06:2d:ca:f3:ae:21:a9:58:59:38:d7:de:3c:4a:dd:
         40:16:a3:2b:4e:9c:b6:a9:72:3b:d3:99:fb:4d:40:5d:ad:59:
         e5:b9:8e:ab:5d:42:ef:63:e7:01:22:5d:f0:4b:3e:24:0d:f7:
         ba:bc:7a:c4:2d:48:be:7d:49:7a:f0:1f:ce:fb:bc:ca:86:be:
         c6:dc:01:da:c0:a7:e6:48:23:60:ad:4d:30:bd:88:66:1a:87:
         26:54:c2:c7:38:08:c8:ad:54:d7:2b:01:46:e7:ea:71:fa:c9:
         e0:4e:6d:03:f7:c1:4f:77:0c:8e:81:2c:c1:0c:84:c0:19:ee:
         94:30:90:9d:10:d6:e4:cf:94:e4:d7:7d:50:c4:46:4c:cb:2a:
         6a:f0:5f:d7:b4:2c:7a:6b:b5:67:a0:97:76:8d:0a:ec:1b:f9:
         53:8f:b7:a4:c0:f0:e6:c6:2e:4d:fb:61:a6:be:e9:bd:75:0d:
         22:35:52:9c:16:97:93:9b:50:ec:b5:44:7f:11:37:34:2f:3d:
         db:8a:e4:9a:a9:23:9d:a9:94:1f:ec:79:2e:18:b1:b3:98:74:
         6f:15:a4:95:3a:42:ce:66:3a:9f:58:80:6e:df:18:93:2d:ae:
         1a:fb:74:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 18:45:15 2024 by rpki-client on console-ams.rpki-client.org