Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8ce9defe018e32d777fb1b63/0/3130342e3235342e3139342e302f32342d3234203d3e20323039313831.roa
File:                     3130342e3235342e3139342e302f32342d3234203d3e20323039313831.roa (raw, json)
Hash identifier:          fmqw/zoL9X0Jbmt6FwK1NZMmM7hpmqrjYOKR4PmX8OU=
Subject key identifier:   28:FD:60:E5:EF:E7:5C:AF:E4:C6:F6:28:4D:B9:AD:14:20:36:3B:8A
Certificate issuer:       /CN=f832b107355da27671d2b5322edd41212fc6b822b0b01da1fd
Certificate serial:       7DA26A1C69A41DDC732DF527CD20E42DE55735DD
Authority key identifier: BC:DE:2B:00:12:18:FC:CC:04:46:74:45:02:EC:6F:A5:C9:85:F4:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/52a24bfe-7695-456c-8b3d-349b37b047d3/f832b107355da27671d2b5322edd41212fc6b822b0b01da1fd.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8ce9defe018e32d777fb1b63/0/3130342e3235342e3139342e302f32342d3234203d3e20323039313831.roa
Signing time:             Sun 17 Mar 2024 20:34:41 +0000
ROA not before:           Sun 17 Mar 2024 20:29:41 +0000
ROA not after:            Sun 16 Mar 2025 20:34:41 +0000
asID:                     209181
IP address blocks:        104.254.194.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade8ce9defe018e32d777fb1b63/0/BCDE2B001218FCCC0446744502EC6FA5C985F46B.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade8ce9defe018e32d777fb1b63/0/BCDE2B001218FCCC0446744502EC6FA5C985F46B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/52a24bfe-7695-456c-8b3d-349b37b047d3/f832b107355da27671d2b5322edd41212fc6b822b0b01da1fd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/52a24bfe-7695-456c-8b3d-349b37b047d3/52a24bfe-7695-456c-8b3d-349b37b047d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/52a24bfe-7695-456c-8b3d-349b37b047d3/52a24bfe-7695-456c-8b3d-349b37b047d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/52a24bfe-7695-456c-8b3d-349b37b047d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 02 May 2024 17:45:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:a2:6a:1c:69:a4:1d:dc:73:2d:f5:27:cd:20:e4:2d:e5:57:35:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f832b107355da27671d2b5322edd41212fc6b822b0b01da1fd
        Validity
            Not Before: Mar 17 20:29:41 2024 GMT
            Not After : Mar 16 20:34:41 2025 GMT
        Subject: CN=28FD60E5EFE75CAFE4C6F6284DB9AD1420363B8A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:d0:ad:08:bc:f4:20:0e:16:46:11:c8:52:db:
                    ad:4a:4f:2f:e4:97:fb:27:75:2b:f6:e9:a5:08:e4:
                    62:04:50:90:1f:cd:6d:13:26:c1:af:15:41:24:a5:
                    87:7c:de:c4:75:bd:97:2c:4a:7d:a3:ee:af:69:78:
                    0e:c9:c5:b5:b1:56:5b:ce:73:14:60:91:71:0b:1d:
                    b5:6f:23:c7:4e:25:10:23:e5:ce:28:85:f7:17:27:
                    14:05:75:e5:dd:9e:39:d5:40:eb:b1:52:4a:2a:4c:
                    02:03:76:08:fc:ed:0e:71:90:92:c1:15:d3:d7:86:
                    d7:28:36:4f:93:3c:47:47:58:ad:c4:7c:00:2d:7c:
                    72:6d:b9:7d:f5:d2:84:89:46:48:ed:95:2a:b2:22:
                    b9:fc:d9:f5:c7:c8:df:d2:df:80:94:13:b2:e6:76:
                    3c:8d:d8:40:e9:06:16:f8:35:27:9d:fe:8f:bc:7c:
                    58:ff:76:7d:be:73:0d:5d:f6:f3:c3:8b:df:88:9a:
                    20:b5:ee:fd:02:68:76:0c:cb:c9:55:38:3b:3d:ae:
                    e1:94:94:41:8d:3a:57:9b:c6:c0:59:a7:1c:ca:fb:
                    14:22:14:bc:16:58:a5:32:74:e3:cf:65:65:cf:e9:
                    db:98:74:0c:4b:87:09:33:61:07:bc:6b:85:5c:fe:
                    1a:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:FD:60:E5:EF:E7:5C:AF:E4:C6:F6:28:4D:B9:AD:14:20:36:3B:8A
            X509v3 Authority Key Identifier:
                keyid:BC:DE:2B:00:12:18:FC:CC:04:46:74:45:02:EC:6F:A5:C9:85:F4:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8ce9defe018e32d777fb1b63/0/BCDE2B001218FCCC0446744502EC6FA5C985F46B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/52a24bfe-7695-456c-8b3d-349b37b047d3/f832b107355da27671d2b5322edd41212fc6b822b0b01da1fd.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8ce9defe018e32d777fb1b63/0/3130342e3235342e3139342e302f32342d3234203d3e20323039313831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.254.194.0/24

    Signature Algorithm: sha256WithRSAEncryption
         92:e2:e7:e4:a9:9c:f4:4a:b1:15:c3:08:c9:5e:ee:31:95:e9:
         91:44:54:0e:95:d2:e7:99:67:4d:85:81:21:3a:ea:e5:7e:8c:
         8f:32:2b:13:b3:93:7d:4e:f5:db:0b:53:37:c1:33:db:38:52:
         2d:1d:fe:e2:a3:5d:d8:ae:c8:47:c8:bd:9a:6f:d7:b1:41:e8:
         de:a3:b1:02:c1:74:69:11:58:59:bf:22:31:3f:e6:de:69:08:
         b4:af:f4:0b:64:f5:26:55:f8:e0:91:38:66:22:f4:78:5d:5f:
         85:bb:c5:3b:53:76:8c:9c:2a:08:71:ce:75:89:bd:97:71:56:
         2a:09:0f:11:3a:8b:c1:1b:84:22:05:66:28:de:01:52:8b:56:
         93:50:e6:8d:c4:f2:63:c9:94:69:a4:22:0c:69:10:35:2d:28:
         09:cc:c9:13:e6:c8:0e:b9:91:49:3b:a1:95:d5:e9:4b:ad:50:
         7b:d0:a0:44:a2:a8:75:7d:c3:79:95:07:8e:55:da:c3:ae:96:
         e9:9c:cf:24:28:12:03:41:0e:b3:60:29:d2:d5:83:62:8b:42:
         ae:ce:7c:7f:ec:d5:7b:a7:8b:02:d4:eb:56:e1:88:c6:14:6f:
         ef:1d:50:62:b0:c9:9b:67:25:28:99:b9:af:1e:f4:0f:ec:d6:
         5d:bf:9f:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 19:12:08 2024 by rpki-client on console-fra.rpki-client.org