Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8b15078d018b1529da02004a/0/3230352e3233332e3230312e302f32342d3234203d3e20323131343339.roa
File:                     3230352e3233332e3230312e302f32342d3234203d3e20323131343339.roa (raw, json)
Hash identifier:          lkluWzqbVLmKWuEONKMYBPWHPh5uC2b1q4HOYLqNxKE=
Subject key identifier:   68:48:AA:06:4C:94:2A:3C:E4:05:98:FC:B9:61:7D:4E:31:91:2E:1D
Certificate issuer:       /CN=904d489a2dbd27553a164925cbbda5b551914c5797b4bdcf79
Certificate serial:       317A5066A704BF76D1A66C3FAA7DC4FEB4BD65AD
Authority key identifier: 75:30:F0:69:80:0B:DF:ED:65:48:7B:49:D2:4C:07:D7:DD:ED:9E:56
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f5f23ad-ba92-4342-9c5f-7645311a9589/904d489a2dbd27553a164925cbbda5b551914c5797b4bdcf79.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8b15078d018b1529da02004a/0/3230352e3233332e3230312e302f32342d3234203d3e20323131343339.roa
Signing time:             Wed 24 Jan 2024 15:48:07 +0000
ROA not before:           Wed 24 Jan 2024 15:43:07 +0000
ROA not after:            Wed 22 Jan 2025 15:48:07 +0000
asID:                     211439
IP address blocks:        205.233.201.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade8b15078d018b1529da02004a/0/7530F069800BDFED65487B49D24C07D7DDED9E56.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade8b15078d018b1529da02004a/0/7530F069800BDFED65487B49D24C07D7DDED9E56.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f5f23ad-ba92-4342-9c5f-7645311a9589/904d489a2dbd27553a164925cbbda5b551914c5797b4bdcf79.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f5f23ad-ba92-4342-9c5f-7645311a9589/6f5f23ad-ba92-4342-9c5f-7645311a9589.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f5f23ad-ba92-4342-9c5f-7645311a9589/6f5f23ad-ba92-4342-9c5f-7645311a9589.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f5f23ad-ba92-4342-9c5f-7645311a9589.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 May 2024 15:21:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:7a:50:66:a7:04:bf:76:d1:a6:6c:3f:aa:7d:c4:fe:b4:bd:65:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=904d489a2dbd27553a164925cbbda5b551914c5797b4bdcf79
        Validity
            Not Before: Jan 24 15:43:07 2024 GMT
            Not After : Jan 22 15:48:07 2025 GMT
        Subject: CN=6848AA064C942A3CE40598FCB9617D4E31912E1D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:3f:90:b0:de:f8:c4:c0:4d:85:ad:55:6f:b7:
                    89:0c:b8:4b:4e:26:4d:bb:ae:36:44:4d:0f:ce:2d:
                    a3:b8:58:e8:f7:9c:8c:9d:71:8c:7a:24:bc:66:c7:
                    55:15:60:78:e3:e9:c4:ae:a5:4d:fa:57:35:5f:93:
                    ef:e8:95:4f:3a:27:36:b9:f2:5d:6e:d9:30:d0:f8:
                    5a:aa:36:0b:4a:ba:b6:96:c9:17:e7:b2:e6:9d:ea:
                    b5:f0:99:27:d6:05:74:7b:cf:2e:91:fb:b8:6c:16:
                    b2:82:17:a8:29:89:d1:86:4a:9e:01:b6:03:82:62:
                    18:d1:22:24:a3:05:99:47:fd:3d:f1:25:70:72:bf:
                    e0:a9:b4:e2:35:f9:96:2f:89:6c:b7:71:2c:e2:50:
                    3e:56:bb:bf:61:45:13:d7:02:1d:1f:c5:b3:16:e7:
                    a8:aa:c2:bc:54:d4:54:2a:40:f8:e3:85:2e:be:e1:
                    51:47:58:7e:48:4c:2a:5b:53:de:7d:ce:19:7a:51:
                    3b:1d:3c:a2:d9:9b:ce:ff:de:58:00:65:91:32:a5:
                    c8:45:34:2d:a8:1f:66:a5:58:c6:33:05:a1:2e:31:
                    1c:e9:aa:6f:a9:64:17:da:f2:8e:18:f5:79:c8:b9:
                    71:fa:d3:6f:a5:1a:73:d8:fd:a3:de:36:08:3b:4a:
                    53:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:48:AA:06:4C:94:2A:3C:E4:05:98:FC:B9:61:7D:4E:31:91:2E:1D
            X509v3 Authority Key Identifier:
                keyid:75:30:F0:69:80:0B:DF:ED:65:48:7B:49:D2:4C:07:D7:DD:ED:9E:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8b15078d018b1529da02004a/0/7530F069800BDFED65487B49D24C07D7DDED9E56.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f5f23ad-ba92-4342-9c5f-7645311a9589/904d489a2dbd27553a164925cbbda5b551914c5797b4bdcf79.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8b15078d018b1529da02004a/0/3230352e3233332e3230312e302f32342d3234203d3e20323131343339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.233.201.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b1:38:ab:79:85:13:8e:e6:e1:60:57:6d:23:39:32:3f:5c:03:
         5b:5f:2a:8b:44:73:74:57:3d:59:00:f3:d2:f2:dc:26:55:62:
         ae:06:ff:60:96:dd:5d:09:d9:6b:c9:e2:05:dc:60:02:ec:b0:
         c4:69:e5:00:99:37:75:88:7f:98:11:ea:ad:00:1a:64:50:10:
         e3:ab:e9:a8:a9:7a:d7:2d:16:fc:65:43:ff:8d:46:ae:d4:1d:
         48:54:a0:d1:07:20:fc:6e:6c:41:53:00:51:8e:29:7a:27:ad:
         6b:d9:94:39:37:5c:50:34:71:9e:17:05:2b:59:5e:75:d5:ec:
         3b:17:fe:d4:ed:5a:81:c9:9b:68:8a:a8:85:dc:10:47:bb:37:
         68:ec:62:eb:7f:d4:86:65:1f:97:84:2c:7e:85:87:4b:62:28:
         d5:c8:b2:df:07:a9:79:15:9e:f3:0a:ee:48:ef:a5:e0:09:4a:
         e5:d2:40:1f:60:33:60:41:b4:3a:e1:0d:3c:c9:34:0f:ae:b2:
         54:4a:c3:e6:23:b6:83:43:f4:47:16:6d:42:28:21:fa:c0:10:
         61:2f:59:ee:9b:16:ef:5e:b3:4f:47:ca:99:3a:87:ff:5f:3e:
         c9:cb:43:71:40:1b:03:7b:4c:c2:7d:5c:ec:ff:68:50:04:7f:
         f1:77:a2:10
-----BEGIN CERTIFICATE-----
MIIFtjCCBJ6gAwIBAgIUMXpQZqcEv3bRpmw/qn3E/rS9Za0wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyOTA0ZDQ4OWEyZGJkMjc1NTNhMTY0OTI1Y2JiZGE1YjU1
MTkxNGM1Nzk3YjRiZGNmNzkwHhcNMjQwMTI0MTU0MzA3WhcNMjUwMTIyMTU0ODA3
WjAzMTEwLwYDVQQDEyg2ODQ4QUEwNjRDOTQyQTNDRTQwNTk4RkNCOTYxN0Q0RTMx
OTEyRTFEMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvz+QsN74xMBN
ha1Vb7eJDLhLTiZNu642RE0Pzi2juFjo95yMnXGMeiS8ZsdVFWB44+nErqVN+lc1
X5Pv6JVPOic2ufJdbtkw0PhaqjYLSrq2lskX57Lmneq18Jkn1gV0e88ukfu4bBay
gheoKYnRhkqeAbYDgmIY0SIkowWZR/098SVwcr/gqbTiNfmWL4lst3Es4lA+Vru/
YUUT1wIdH8WzFueoqsK8VNRUKkD444UuvuFRR1h+SEwqW1Pefc4ZelE7HTyi2ZvO
/95YAGWRMqXIRTQtqB9mpVjGMwWhLjEc6apvqWQX2vKOGPV5yLlx+tNvpRpz2P2j
3jYIO0pT+wIDAQABo4ICtjCCArIwHQYDVR0OBBYEFGhIqgZMlCo85AWY/LlhfU4x
kS4dMB8GA1UdIwQYMBaAFHUw8GmAC9/tZUh7SdJMB9fd7Z5WMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlOGIxNTA3OGQwMThiMTUyOWRhMDIwMDRhLzAv
NzUzMEYwNjk4MDBCREZFRDY1NDg3QjQ5RDI0QzA3RDdEREVEOUU1Ni5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi
MGI4NDE1LzZmNWYyM2FkLWJhOTItNDM0Mi05YzVmLTc2NDUzMTFhOTU4OS85MDRk
NDg5YTJkYmQyNzU1M2ExNjQ5MjVjYmJkYTViNTUxOTE0YzU3OTdiNGJkY2Y3OS5j
ZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZThiMTUwNzhkMDE4YjE1
MjlkYTAyMDA0YS8wLzMyMzAzNTJlMzIzMzMzMmUzMjMwMzEyZTMwMmYzMjM0MmQz
MjM0MjAzZDNlMjAzMjMxMzEzNDMzMzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADN6ckwDQYJKoZIhvcN
AQELBQADggEBALE4q3mFE47m4WBXbSM5Mj9cA1tfKotEc3RXPVkA89Ly3CZVYq4G
/2CW3V0J2WvJ4gXcYALssMRp5QCZN3WIf5gR6q0AGmRQEOOr6aipetctFvxlQ/+N
Rq7UHUhUoNEHIPxubEFTAFGOKXonrWvZlDk3XFA0cZ4XBStZXnXV7DsX/tTtWoHJ
m2iKqIXcEEe7N2jsYut/1IZlH5eELH6Fh0tiKNXIst8HqXkVnvMK7kjvpeAJSuXS
QB9gM2BBtDrhDTzJNA+uslRKw+YjtoND9EcWbUIoIfrAEGEvWe6bFu9es09Hypk6
h/9fPsnLQ3FAGwN7TMJ9XOz/aFAEf/F3ohA=
-----END CERTIFICATE-----
Generated at Mon May 20 15:10:55 2024 by rpki-client on console-fra.rpki-client.org