Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8ce9defe018e32d777fb1b63/0/3130342e3235342e3139322e302f32342d3234203d3e203134363138.roa
File:                     3130342e3235342e3139322e302f32342d3234203d3e203134363138.roa (raw, json)
Hash identifier:          wHKTt8sP44sLAuKDfDx4zcQl4i+r13LeMyre/gfrZUs=
Subject key identifier:   51:91:1E:7E:CA:8F:79:59:5C:EF:C5:89:7C:77:2B:C7:AC:A4:EE:C4
Certificate issuer:       /CN=f832b107355da27671d2b5322edd41212fc6b822b0b01da1fd
Certificate serial:       72877149C5BF2E48F0E5D7BBB2A629E9C2094DFF
Authority key identifier: BC:DE:2B:00:12:18:FC:CC:04:46:74:45:02:EC:6F:A5:C9:85:F4:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/52a24bfe-7695-456c-8b3d-349b37b047d3/f832b107355da27671d2b5322edd41212fc6b822b0b01da1fd.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8ce9defe018e32d777fb1b63/0/3130342e3235342e3139322e302f32342d3234203d3e203134363138.roa
Signing time:             Tue 03 Dec 2024 19:26:08 +0000
ROA not before:           Tue 03 Dec 2024 19:21:08 +0000
ROA not after:            Tue 02 Dec 2025 19:26:08 +0000
asID:                     14618
IP address blocks:        104.254.192.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade8ce9defe018e32d777fb1b63/0/BCDE2B001218FCCC0446744502EC6FA5C985F46B.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade8ce9defe018e32d777fb1b63/0/BCDE2B001218FCCC0446744502EC6FA5C985F46B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/52a24bfe-7695-456c-8b3d-349b37b047d3/f832b107355da27671d2b5322edd41212fc6b822b0b01da1fd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/52a24bfe-7695-456c-8b3d-349b37b047d3/52a24bfe-7695-456c-8b3d-349b37b047d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/52a24bfe-7695-456c-8b3d-349b37b047d3/52a24bfe-7695-456c-8b3d-349b37b047d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/52a24bfe-7695-456c-8b3d-349b37b047d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 05 Feb 2025 19:54:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:87:71:49:c5:bf:2e:48:f0:e5:d7:bb:b2:a6:29:e9:c2:09:4d:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f832b107355da27671d2b5322edd41212fc6b822b0b01da1fd
        Validity
            Not Before: Dec  3 19:21:08 2024 GMT
            Not After : Dec  2 19:26:08 2025 GMT
        Subject: CN=51911E7ECA8F79595CEFC5897C772BC7ACA4EEC4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:cb:2a:e5:75:b1:42:67:85:5c:2d:8e:a3:5f:
                    d0:24:dc:32:b0:b7:7d:93:f7:98:c8:4d:36:3f:67:
                    46:85:d5:e8:77:82:e4:56:09:b4:42:ea:bc:67:73:
                    07:b7:1d:26:09:44:94:ee:d0:22:f7:47:1b:9e:4f:
                    55:0d:60:4e:ff:18:36:c2:3d:e8:a0:94:7d:a4:b7:
                    8b:0a:08:83:49:eb:f8:14:fc:4f:7c:51:e6:a2:e8:
                    f6:5c:1c:95:71:bc:d6:f0:47:e5:2b:bf:ba:59:09:
                    d6:32:af:f4:9a:ba:bd:6c:33:a1:9e:f0:2c:0c:2c:
                    8f:8c:7b:52:15:e1:06:4c:f1:7a:2d:23:53:ab:e5:
                    76:f0:2b:9b:a8:70:e0:c3:bb:7b:90:6b:1d:9b:c1:
                    c3:7c:20:85:42:45:01:4f:85:58:b9:01:92:52:24:
                    b3:13:4b:6c:c0:58:1f:96:71:9f:e1:a5:d8:fb:97:
                    25:32:86:b4:f4:af:68:97:24:11:1d:36:75:09:89:
                    2b:97:be:9b:05:10:d9:0e:70:5f:cf:a2:08:6a:f8:
                    c0:92:b3:fd:ae:50:60:d4:3d:45:bd:e1:2b:a6:40:
                    78:ad:a8:83:cf:05:5d:be:4e:6a:7f:46:7b:1a:dd:
                    3d:0a:e9:3e:99:41:9f:83:d9:16:98:e0:c7:c8:f3:
                    eb:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:91:1E:7E:CA:8F:79:59:5C:EF:C5:89:7C:77:2B:C7:AC:A4:EE:C4
            X509v3 Authority Key Identifier:
                keyid:BC:DE:2B:00:12:18:FC:CC:04:46:74:45:02:EC:6F:A5:C9:85:F4:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8ce9defe018e32d777fb1b63/0/BCDE2B001218FCCC0446744502EC6FA5C985F46B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/52a24bfe-7695-456c-8b3d-349b37b047d3/f832b107355da27671d2b5322edd41212fc6b822b0b01da1fd.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8ce9defe018e32d777fb1b63/0/3130342e3235342e3139322e302f32342d3234203d3e203134363138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.254.192.0/24

    Signature Algorithm: sha256WithRSAEncryption
         90:5c:94:18:2f:96:92:7e:ee:00:4c:65:23:ee:40:c9:8e:06:
         05:61:8c:a3:69:8f:71:44:02:e3:9d:69:06:12:a8:4e:45:db:
         29:6e:a9:bb:7a:05:5f:45:e9:41:cd:26:34:58:6b:09:56:ec:
         29:68:3f:5e:1d:9b:e1:62:3c:84:d8:61:eb:f5:1f:13:3a:0c:
         2a:8d:54:0c:62:e3:07:f9:e9:72:92:f5:bf:10:66:b4:06:24:
         ac:5d:f1:fc:21:e3:35:49:d5:bf:e6:59:56:8e:d4:d3:5b:1e:
         b0:73:ec:b0:64:36:14:d6:36:6b:58:13:6a:b0:db:45:25:e5:
         3e:f1:ee:9a:e4:95:a0:8e:2d:27:49:4d:8f:e2:b4:5e:cd:bd:
         ef:0f:48:21:ad:08:96:28:0c:6b:39:02:0d:66:70:90:2b:6f:
         24:0b:b8:75:54:b8:46:00:7a:fa:71:3d:97:94:e1:9d:f4:47:
         51:19:a0:df:bf:c5:b2:c7:65:98:0d:4e:34:e0:a5:4b:41:b3:
         6e:8b:e2:dd:ae:c3:ab:e6:55:ee:0e:01:6e:d3:7c:0b:23:cb:
         7b:39:3a:97:4f:46:e0:87:6d:af:d4:12:c1:e2:db:3e:4a:11:
         bd:0f:77:0e:47:9d:cc:4c:92:06:df:22:4e:01:95:d6:77:ff:
         d9:73:cb:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:58:21 2025 by rpki-client