Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8ce9defe018e32d777fb1b63/0/3130342e3235342e3139352e302f32342d3234203d3e20323132333834.roa
File:                     3130342e3235342e3139352e302f32342d3234203d3e20323132333834.roa (raw, json)
Hash identifier:          THZEewfWUhfC1yStCmZixtXUyzOwM6hxjQBA9O0joHI=
Subject key identifier:   CB:B9:DC:70:0A:66:FA:6E:9A:18:00:1D:D9:F8:34:BA:9F:64:9F:89
Certificate issuer:       /CN=f832b107355da27671d2b5322edd41212fc6b822b0b01da1fd
Certificate serial:       2B63CC6FAB9605B28596C1672FEB1F3E149B7802
Authority key identifier: BC:DE:2B:00:12:18:FC:CC:04:46:74:45:02:EC:6F:A5:C9:85:F4:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/52a24bfe-7695-456c-8b3d-349b37b047d3/f832b107355da27671d2b5322edd41212fc6b822b0b01da1fd.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8ce9defe018e32d777fb1b63/0/3130342e3235342e3139352e302f32342d3234203d3e20323132333834.roa
Signing time:             Tue 12 Mar 2024 13:26:29 +0000
ROA not before:           Tue 12 Mar 2024 13:21:29 +0000
ROA not after:            Tue 11 Mar 2025 13:26:29 +0000
asID:                     212384
IP address blocks:        104.254.195.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade8ce9defe018e32d777fb1b63/0/BCDE2B001218FCCC0446744502EC6FA5C985F46B.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade8ce9defe018e32d777fb1b63/0/BCDE2B001218FCCC0446744502EC6FA5C985F46B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/52a24bfe-7695-456c-8b3d-349b37b047d3/f832b107355da27671d2b5322edd41212fc6b822b0b01da1fd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/52a24bfe-7695-456c-8b3d-349b37b047d3/52a24bfe-7695-456c-8b3d-349b37b047d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/52a24bfe-7695-456c-8b3d-349b37b047d3/52a24bfe-7695-456c-8b3d-349b37b047d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/52a24bfe-7695-456c-8b3d-349b37b047d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 17:56:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:63:cc:6f:ab:96:05:b2:85:96:c1:67:2f:eb:1f:3e:14:9b:78:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f832b107355da27671d2b5322edd41212fc6b822b0b01da1fd
        Validity
            Not Before: Mar 12 13:21:29 2024 GMT
            Not After : Mar 11 13:26:29 2025 GMT
        Subject: CN=CBB9DC700A66FA6E9A18001DD9F834BA9F649F89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:8e:b4:01:e7:f4:1f:0d:ae:3a:7c:9e:ad:c2:
                    49:7a:ba:b5:af:a6:94:9d:ef:dc:36:76:f0:63:b4:
                    14:23:d4:da:df:bc:e0:7b:b2:c8:ae:4f:b9:4a:50:
                    5d:31:56:f1:6a:31:6e:6d:bc:d8:bf:56:bd:cd:ce:
                    f2:58:f6:88:bc:0b:c1:3c:38:c7:f5:1c:ef:f3:94:
                    a2:cb:b9:d7:be:29:32:1e:56:79:de:52:8e:45:a2:
                    17:97:ac:f5:9d:f4:95:7f:9e:c5:15:92:1a:ec:17:
                    01:de:c7:a5:6d:9a:03:5f:33:eb:63:2f:3a:8d:fe:
                    f9:45:15:92:90:54:90:b8:1a:7f:d1:4c:d3:bd:0c:
                    f2:af:1e:90:5d:b2:8c:c5:9d:b9:96:17:dd:fe:a7:
                    bc:11:34:4e:f5:f2:dd:70:c8:32:99:b4:8e:0e:06:
                    45:34:db:94:f3:31:da:ed:b0:84:77:bb:34:73:0c:
                    22:a5:e5:81:a6:7a:8f:d0:e4:47:c6:b3:63:2c:25:
                    3f:2c:a9:90:bb:9f:3c:71:93:7f:00:52:a1:fc:2c:
                    fc:33:cc:3e:1f:64:32:45:96:75:58:92:41:db:92:
                    76:ef:da:dc:c8:12:6d:a2:27:6f:c7:a1:c2:dc:13:
                    e2:3a:69:79:d3:70:bd:4b:0f:02:ac:c5:59:d6:ca:
                    41:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:B9:DC:70:0A:66:FA:6E:9A:18:00:1D:D9:F8:34:BA:9F:64:9F:89
            X509v3 Authority Key Identifier:
                keyid:BC:DE:2B:00:12:18:FC:CC:04:46:74:45:02:EC:6F:A5:C9:85:F4:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8ce9defe018e32d777fb1b63/0/BCDE2B001218FCCC0446744502EC6FA5C985F46B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/52a24bfe-7695-456c-8b3d-349b37b047d3/f832b107355da27671d2b5322edd41212fc6b822b0b01da1fd.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8ce9defe018e32d777fb1b63/0/3130342e3235342e3139352e302f32342d3234203d3e20323132333834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.254.195.0/24

    Signature Algorithm: sha256WithRSAEncryption
         38:07:fe:fb:70:11:86:3e:6d:b3:8f:06:2a:fb:57:5a:9b:6f:
         6f:dd:fc:4e:85:fd:d5:a1:12:9b:66:5f:cc:c9:71:ac:e9:1d:
         52:39:47:2c:4e:2c:ad:a0:27:cd:13:58:be:97:12:4f:69:56:
         78:e8:be:b4:75:98:f4:64:8c:2a:b8:d2:be:59:97:f0:0b:0b:
         64:12:59:b6:d5:2c:86:2e:12:6d:0c:55:d4:27:6b:1e:04:2b:
         e2:30:f8:01:be:1f:83:c1:fd:62:7e:de:1b:47:a3:08:37:36:
         88:bc:fe:40:a1:8b:73:90:88:44:77:a6:07:42:ad:6e:ea:f9:
         48:25:c2:2c:82:b5:a6:62:17:9a:bc:75:36:c3:dc:31:fa:95:
         a0:79:80:95:e8:a1:51:fc:27:6f:61:8d:40:ed:79:c8:84:6b:
         75:d9:fa:de:2b:ca:f1:29:c5:db:05:1b:fe:ad:90:ff:a6:bc:
         00:69:f0:98:eb:f1:e7:bc:c4:d2:8b:77:dd:3e:16:04:d5:27:
         41:92:39:b5:6b:34:48:89:4b:a7:90:83:a5:2e:ab:bc:9f:8b:
         62:c5:eb:59:b4:fc:71:4f:a4:dc:7f:98:72:61:05:5a:03:9f:
         9e:51:a5:ac:0c:bf:db:a1:8b:63:67:91:c0:c7:52:9f:98:a3:
         35:04:82:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 17:27:32 2024 by rpki-client on console-fra.rpki-client.org