Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS18450.roa
File:                     AS18450.roa (raw, json)
Hash identifier:          zJoaFOhFLvtahKzFcQj8iijG0kvk8R78W/rzOaMtZ6k=
Subject key identifier:   66:EB:BC:2C:B4:6A:27:9A:31:F3:1F:C2:6D:36:96:45:6A:33:5E:26
Certificate issuer:       /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Certificate serial:       38E11D32DEA5401CCE9FE641A553F28AB1DF8CE4
Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS18450.roa
Signing time:             Tue 05 Nov 2024 21:49:21 +0000
ROA not before:           Tue 05 Nov 2024 21:44:21 +0000
ROA not after:            Tue 04 Nov 2025 21:49:21 +0000
asID:                     18450
IP address blocks:        209.200.241.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 08:48:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:e1:1d:32:de:a5:40:1c:ce:9f:e6:41:a5:53:f2:8a:b1:df:8c:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
        Validity
            Not Before: Nov  5 21:44:21 2024 GMT
            Not After : Nov  4 21:49:21 2025 GMT
        Subject: CN=66EBBC2CB46A279A31F31FC26D3696456A335E26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:79:3a:aa:31:c6:24:27:c6:8a:0b:bd:b4:08:
                    bd:2d:77:2f:bd:31:59:06:64:74:2b:16:33:40:61:
                    d9:a8:5b:d6:84:db:be:99:64:7a:62:5c:58:29:2d:
                    76:4d:af:a3:f2:e2:bb:cf:ae:be:8b:75:be:07:bd:
                    bd:f1:5c:3b:33:85:58:cf:f7:0c:52:e3:ff:b9:be:
                    3d:da:60:74:b2:2c:2e:59:de:1c:39:86:22:9b:20:
                    fb:a9:d3:27:c5:12:39:4c:d7:ae:20:02:1a:42:d2:
                    6b:22:03:b2:bf:ad:d0:51:e7:6f:eb:17:06:5d:86:
                    2c:b5:2b:db:b9:9a:b4:04:15:e1:71:cd:39:a6:84:
                    d6:a7:67:6e:77:5f:6d:98:2e:0c:d1:ad:52:6f:de:
                    67:e6:bd:52:0d:6c:63:99:d8:ed:6e:bf:45:a0:d9:
                    70:c7:86:aa:78:5f:e8:14:f4:18:07:b4:b5:df:f6:
                    b9:79:af:d1:10:41:49:20:e2:d1:26:a1:58:0f:7e:
                    83:45:3b:b9:6d:a2:a4:af:7c:d5:cf:a3:70:5e:30:
                    1d:e4:63:1e:c4:2e:35:b2:51:6e:de:6f:c3:c3:c7:
                    81:8d:48:d7:59:3c:ba:e6:1c:8c:18:d4:35:64:0a:
                    fa:dd:ec:a5:df:89:84:44:88:8d:07:b9:6b:f5:a6:
                    39:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:EB:BC:2C:B4:6A:27:9A:31:F3:1F:C2:6D:36:96:45:6A:33:5E:26
            X509v3 Authority Key Identifier:
                keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS18450.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.200.241.0/24

    Signature Algorithm: sha256WithRSAEncryption
         89:fe:a7:5d:ae:f3:98:53:9a:27:6a:08:8a:7e:d8:53:70:65:
         f5:eb:35:f2:bf:2a:7a:ed:7c:09:c2:d6:50:4a:d9:10:de:70:
         ac:a8:0c:99:58:28:38:93:03:89:95:d2:97:ba:91:81:87:c4:
         97:c0:e2:b0:f3:23:b6:cc:ea:9d:c3:7c:6d:ab:38:d7:8d:ce:
         97:68:94:63:c7:49:f3:da:e4:1f:d2:16:72:7b:dc:89:d0:5f:
         7b:d1:04:e6:f2:81:e2:77:6f:20:da:54:39:0b:32:c8:c0:ee:
         ff:cc:9e:fc:43:04:78:ac:3e:7c:33:70:f3:17:f0:85:84:df:
         7b:0b:4a:05:ed:46:5c:0d:f3:1e:2f:2f:60:30:c5:f3:47:b8:
         f8:06:b2:de:c8:2f:4c:81:01:e0:2e:0e:92:5f:fe:e8:6f:c7:
         06:e3:71:3a:4a:29:a6:d8:65:b9:4b:66:9b:24:ab:65:03:35:
         6f:58:ba:4c:27:e1:60:f9:e8:8f:5b:93:aa:d7:6d:52:18:6b:
         ab:30:30:24:22:ca:91:47:54:9c:b6:6e:a2:30:b1:0b:83:72:
         db:86:96:51:1f:60:c2:21:e4:c8:dd:94:14:e6:37:07:31:bd:
         8e:2d:42:63:00:c4:2d:e6:24:46:53:8f:b7:5a:23:d5:b5:fa:
         37:c9:43:a1
-----BEGIN CERTIFICATE-----
MIIFfjCCBGagAwIBAgIUOOEdMt6lQBzOn+ZBpVPyirHfjOQwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNDRkYTVkMTAzMjc3YzkzN2M1M2RjZTMwNWJkOWQ3OWMy
YmE3OTQyNTM1N2JiNTZlZWQwHhcNMjQxMTA1MjE0NDIxWhcNMjUxMTA0MjE0OTIx
WjAzMTEwLwYDVQQDEyg2NkVCQkMyQ0I0NkEyNzlBMzFGMzFGQzI2RDM2OTY0NTZB
MzM1RTI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvnk6qjHGJCfG
igu9tAi9LXcvvTFZBmR0KxYzQGHZqFvWhNu+mWR6YlxYKS12Ta+j8uK7z66+i3W+
B7298Vw7M4VYz/cMUuP/ub492mB0siwuWd4cOYYimyD7qdMnxRI5TNeuIAIaQtJr
IgOyv63QUedv6xcGXYYstSvbuZq0BBXhcc05poTWp2dud19tmC4M0a1Sb95n5r1S
DWxjmdjtbr9FoNlwx4aqeF/oFPQYB7S13/a5ea/REEFJIOLRJqFYD36DRTu5baKk
r3zVz6NwXjAd5GMexC41slFu3m/Dw8eBjUjXWTy65hyMGNQ1ZAr63eyl34mERIiN
B7lr9aY5IwIDAQABo4ICfjCCAnowHQYDVR0OBBYEFGbrvCy0aieaMfMfwm02lkVq
M14mMB8GA1UdIwQYMBaAFFtA03PWcXxwTEg8oGWM+1JXxOk8MA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmODE0M2JmNjIwMTgyMTEzZWVhNDkwZDMzLzEv
NUI0MEQzNzNENjcxN0M3MDRDNDgzQ0EwNjU4Q0ZCNTI1N0M0RTkzQy5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEz
YjAyZTI5LzJiZDBmYWM2LTFhNDYtNDBiNS1iZTY2LTllMGY3YjU0ZGY3Ny80NGRh
NWQxMDMyNzdjOTM3YzUzZGNlMzA1YmQ5ZDc5YzJiYTc5NDI1MzU3YmI1NmVlZC5j
ZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNyc3luYzovL3Jwa2ktcnBz
LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4MTQzYmY2MjAxODIxMTNlZWE0
OTBkMzMvMS9BUzE4NDUwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8G
CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0cjxMA0GCSqGSIb3DQEBCwUAA4IB
AQCJ/qddrvOYU5onagiKfthTcGX16zXyvyp67XwJwtZQStkQ3nCsqAyZWCg4kwOJ
ldKXupGBh8SXwOKw8yO2zOqdw3xtqzjXjc6XaJRjx0nz2uQf0hZye9yJ0F970QTm
8oHid28g2lQ5CzLIwO7/zJ78QwR4rD58M3DzF/CFhN97C0oF7UZcDfMeLy9gMMXz
R7j4BrLeyC9MgQHgLg6SX/7ob8cG43E6Simm2GW5S2abJKtlAzVvWLpMJ+Fg+eiP
W5Oq121SGGurMDAkIsqRR1Sctm6iMLELg3LbhpZRH2DCIeTI3ZQU5jcHMb2OLUJj
AMQt5iRGU4+3WiPVtfo3yUOh
-----END CERTIFICATE-----
Generated at Sun Feb 16 20:16:11 2025 by rpki-client