Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS205663.roa
File:                     AS205663.roa (raw, json)
Hash identifier:          nrRPIQz/VkpjDy/b9Dn9zRADsAvjbOtRMUT6n8YFscs=
Subject key identifier:   82:E4:A8:FC:B2:63:2F:15:46:D0:AB:2D:D9:8E:C0:8C:2D:60:C5:DF
Certificate issuer:       /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Certificate serial:       7CB3F95990BC4F5A908250C5CFF295ECDCE13690
Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS205663.roa
Signing time:             Tue 27 Feb 2024 18:11:19 +0000
ROA not before:           Tue 27 Feb 2024 18:06:19 +0000
ROA not after:            Tue 25 Feb 2025 18:11:19 +0000
asID:                     205663
IP address blocks:        192.228.114.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 18:32:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:b3:f9:59:90:bc:4f:5a:90:82:50:c5:cf:f2:95:ec:dc:e1:36:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
        Validity
            Not Before: Feb 27 18:06:19 2024 GMT
            Not After : Feb 25 18:11:19 2025 GMT
        Subject: CN=82E4A8FCB2632F1546D0AB2DD98EC08C2D60C5DF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:69:b4:4a:10:76:3f:41:81:08:92:d9:9a:18:
                    b4:f1:87:52:ab:3a:de:9c:3b:04:c9:5d:c3:85:41:
                    8e:9f:08:dc:62:36:d0:e5:19:ca:08:18:f4:21:5f:
                    b8:93:7a:b8:17:83:55:61:8a:14:33:63:44:87:ac:
                    3a:72:11:43:cc:8c:a4:3d:9e:b1:34:1a:46:b1:ba:
                    81:18:c6:88:1f:ed:02:b2:1e:a1:f3:46:97:82:3c:
                    64:79:66:de:86:3c:02:63:8e:7d:f7:0b:ee:15:a1:
                    83:ab:ef:78:46:3d:4f:26:78:d3:ec:3e:9e:38:4a:
                    e8:aa:1e:0f:e5:91:46:21:13:fb:db:58:63:82:f0:
                    21:fd:ef:6b:d1:28:15:57:2c:c3:b4:1a:4f:e6:6f:
                    00:0c:e9:ff:6b:3d:5d:cf:33:4c:52:b2:41:e1:a7:
                    cb:e4:5c:e2:74:1c:0a:5e:68:fe:b5:12:26:3f:57:
                    65:0c:13:fe:bc:05:28:6e:9b:83:41:bd:a4:c5:01:
                    bf:4b:78:c1:da:cd:1b:eb:3a:f9:aa:f5:96:e6:37:
                    21:dc:cc:08:0a:b7:a5:53:08:db:1c:66:31:ab:a0:
                    f7:2e:62:f5:14:16:90:e5:2b:db:36:23:9a:c2:cd:
                    9b:80:40:01:f4:91:fd:94:26:da:ef:5d:81:81:1e:
                    84:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:E4:A8:FC:B2:63:2F:15:46:D0:AB:2D:D9:8E:C0:8C:2D:60:C5:DF
            X509v3 Authority Key Identifier:
                keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS205663.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.228.114.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6b:70:b7:22:bc:1c:2a:22:83:68:3f:63:a0:a4:57:00:4a:f3:
         30:c9:9f:eb:b3:03:a9:19:23:16:86:dd:7d:55:c5:11:85:67:
         94:2d:d1:7d:df:89:d6:29:09:39:82:cd:76:9a:92:9e:3a:c7:
         d7:51:69:91:89:cf:9d:8a:7a:7d:45:52:d1:b3:bc:03:91:b8:
         50:cf:c6:21:49:42:a0:0e:e3:2c:0c:6b:6e:7e:90:d8:67:33:
         6f:4c:43:d5:84:42:bc:93:30:45:01:72:da:e3:8f:3c:86:9f:
         67:be:6d:ee:57:52:da:41:92:77:70:d9:c1:9f:71:16:06:5f:
         fc:d2:c3:8b:28:01:f3:4d:96:c7:cc:b4:8d:14:a0:54:7f:64:
         17:c9:4b:a4:5f:92:77:72:ab:58:35:dd:c1:fa:5b:ba:ca:5a:
         a4:b0:34:45:6a:06:e2:ec:d5:7e:87:15:ba:42:65:ca:66:f7:
         ac:b3:29:71:da:02:97:7e:79:26:7d:78:a6:1a:be:09:12:14:
         5a:20:3f:37:d4:cd:cf:5b:82:be:f4:ae:ff:e9:fc:31:f2:49:
         89:d1:6f:3b:1c:e4:f1:4a:95:9c:ae:b5:f1:ae:1e:d9:bf:96:
         2b:16:8b:57:e7:57:7a:9f:24:49:9e:6f:4b:48:14:f2:26:1b:
         a2:9e:ad:90
-----BEGIN CERTIFICATE-----
MIIFfzCCBGegAwIBAgIUfLP5WZC8T1qQglDFz/KV7NzhNpAwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNDRkYTVkMTAzMjc3YzkzN2M1M2RjZTMwNWJkOWQ3OWMy
YmE3OTQyNTM1N2JiNTZlZWQwHhcNMjQwMjI3MTgwNjE5WhcNMjUwMjI1MTgxMTE5
WjAzMTEwLwYDVQQDEyg4MkU0QThGQ0IyNjMyRjE1NDZEMEFCMkREOThFQzA4QzJE
NjBDNURGMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqmm0ShB2P0GB
CJLZmhi08YdSqzrenDsEyV3DhUGOnwjcYjbQ5RnKCBj0IV+4k3q4F4NVYYoUM2NE
h6w6chFDzIykPZ6xNBpGsbqBGMaIH+0Csh6h80aXgjxkeWbehjwCY4599wvuFaGD
q+94Rj1PJnjT7D6eOEroqh4P5ZFGIRP721hjgvAh/e9r0SgVVyzDtBpP5m8ADOn/
az1dzzNMUrJB4afL5FzidBwKXmj+tRImP1dlDBP+vAUobpuDQb2kxQG/S3jB2s0b
6zr5qvWW5jch3MwICrelUwjbHGYxq6D3LmL1FBaQ5SvbNiOaws2bgEAB9JH9lCba
712BgR6EPQIDAQABo4ICfzCCAnswHQYDVR0OBBYEFILkqPyyYy8VRtCrLdmOwIwt
YMXfMB8GA1UdIwQYMBaAFFtA03PWcXxwTEg8oGWM+1JXxOk8MA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmODE0M2JmNjIwMTgyMTEzZWVhNDkwZDMzLzEv
NUI0MEQzNzNENjcxN0M3MDRDNDgzQ0EwNjU4Q0ZCNTI1N0M0RTkzQy5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEz
YjAyZTI5LzJiZDBmYWM2LTFhNDYtNDBiNS1iZTY2LTllMGY3YjU0ZGY3Ny80NGRh
NWQxMDMyNzdjOTM3YzUzZGNlMzA1YmQ5ZDc5YzJiYTc5NDI1MzU3YmI1NmVlZC5j
ZXIwcAYIKwYBBQUHAQsEZDBiMGAGCCsGAQUFBzALhlRyc3luYzovL3Jwa2ktcnBz
LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4MTQzYmY2MjAxODIxMTNlZWE0
OTBkMzMvMS9BUzIwNTY2My5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMDkcjANBgkqhkiG9w0BAQsFAAOC
AQEAa3C3IrwcKiKDaD9joKRXAErzMMmf67MDqRkjFobdfVXFEYVnlC3Rfd+J1ikJ
OYLNdpqSnjrH11FpkYnPnYp6fUVS0bO8A5G4UM/GIUlCoA7jLAxrbn6Q2Gczb0xD
1YRCvJMwRQFy2uOPPIafZ75t7ldS2kGSd3DZwZ9xFgZf/NLDiygB802Wx8y0jRSg
VH9kF8lLpF+Sd3KrWDXdwfpbuspapLA0RWoG4uzVfocVukJlymb3rLMpcdoCl355
Jn14phq+CRIUWiA/N9TNz1uCvvSu/+n8MfJJidFvOxzk8UqVnK618a4e2b+WKxaL
V+dXep8kSZ5vS0gU8iYbop6tkA==
-----END CERTIFICATE-----
Generated at Fri Nov 22 19:43:48 2024 by rpki-client on console-fra.rpki-client.org