Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS137235.roa
File:                     AS137235.roa (raw, json)
Hash identifier:          7cKNk99IzW+XDAggHG9PTHVylob92w6bffNt9OgIS10=
Subject key identifier:   E1:D6:FE:64:38:39:22:AB:8F:4D:25:3A:40:81:89:C7:FF:B4:11:7F
Certificate issuer:       /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Certificate serial:       745EB9AE09A7098CF4353273730FF1019C3D202C
Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS137235.roa
Signing time:             Tue 08 Oct 2024 11:58:44 +0000
ROA not before:           Tue 08 Oct 2024 11:53:44 +0000
ROA not after:            Tue 07 Oct 2025 11:58:44 +0000
asID:                     137235
IP address blocks:        192.228.118.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:5e:b9:ae:09:a7:09:8c:f4:35:32:73:73:0f:f1:01:9c:3d:20:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
        Validity
            Not Before: Oct  8 11:53:44 2024 GMT
            Not After : Oct  7 11:58:44 2025 GMT
        Subject: CN=E1D6FE64383922AB8F4D253A408189C7FFB4117F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:be:1a:50:b6:79:f7:cb:29:62:98:39:d0:ff:
                    d3:37:db:0b:d7:95:14:6b:cd:b3:23:08:5b:a1:51:
                    8e:71:d2:70:92:45:ee:c9:e1:c8:a3:bf:9a:bf:f7:
                    61:d0:d8:e6:8a:8d:b6:23:c9:65:e6:07:f9:ce:a3:
                    8d:12:b2:d4:3b:62:0c:13:2a:74:75:70:a0:28:a0:
                    43:c7:09:58:02:ef:b4:df:c4:91:61:7e:1d:57:07:
                    fe:8a:e7:a3:39:d8:c2:05:99:49:08:13:b2:cc:84:
                    ed:0d:8a:c6:66:47:33:84:f5:8c:e7:75:52:2b:9c:
                    da:c1:bd:6d:fe:13:b3:5c:5c:bb:56:61:3b:bb:0e:
                    93:5d:86:48:09:6d:d0:7a:7f:ad:9b:73:67:37:d2:
                    47:9b:39:2f:d6:95:d2:e6:a8:7b:85:5b:1d:04:9c:
                    62:a9:96:5f:d5:65:53:95:20:73:c5:8f:6a:ed:41:
                    1f:c3:1b:68:fc:7a:d5:59:94:51:1d:d5:93:05:95:
                    fd:1d:af:33:49:c6:9c:04:e3:fc:f3:38:93:a3:90:
                    d2:c1:f5:34:a5:30:7f:e8:5e:98:c2:a1:31:6b:5d:
                    ff:e7:3d:52:e2:c1:46:bc:ea:6d:1a:27:ec:85:79:
                    db:ce:f0:90:23:39:a1:aa:7a:07:80:1c:d0:69:b3:
                    93:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:D6:FE:64:38:39:22:AB:8F:4D:25:3A:40:81:89:C7:FF:B4:11:7F
            X509v3 Authority Key Identifier:
                keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS137235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.228.118.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c7:60:5a:34:d4:9c:e6:b6:a6:18:2e:2e:4c:ba:56:74:9a:58:
         2c:7b:73:63:8b:6a:c4:76:7a:4e:05:f4:f1:cc:57:a2:80:cc:
         54:5f:c6:8e:0a:20:bf:ef:98:f0:33:fa:e7:95:a8:25:9d:e4:
         c1:80:a3:78:dd:4e:fd:56:00:65:bf:17:2d:fb:4b:df:81:c8:
         a0:89:8f:8c:ac:1e:91:12:12:9e:9f:a1:9c:09:38:93:2d:a0:
         8c:95:a8:ec:91:18:d6:d0:21:12:2f:d0:31:4d:90:72:45:e0:
         52:f9:e0:3d:71:89:f4:3e:4d:45:ba:43:8b:40:cb:01:cb:90:
         d8:6a:e4:00:e5:53:f0:f0:17:f8:a0:1b:cb:db:44:53:12:e7:
         16:24:bd:2d:44:44:b4:5e:14:ae:5c:3c:fc:d8:9e:35:4d:e2:
         79:21:1a:82:20:05:77:e3:07:9f:bd:b1:b5:f7:6f:3d:4f:10:
         1b:66:15:36:87:aa:67:d8:49:ce:1e:5a:e1:3a:13:38:99:0a:
         ed:9d:2b:6d:f5:ee:d9:e1:f3:ef:c6:1d:97:e9:07:3d:19:ea:
         2c:82:6b:4d:91:b1:50:ff:bb:43:a6:19:fb:ec:6f:01:84:ac:
         5a:8a:49:3c:9a:27:fb:f7:84:b2:0a:9f:54:8d:8c:39:44:a3:
         7e:b1:32:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:34:58 2024 by rpki-client on console-ams.rpki-client.org