Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf82d5e52101850b65b10b358b/0/3136372e3235332e34372e302f32342d3234203d3e203530313034.roa
File:                     3136372e3235332e34372e302f32342d3234203d3e203530313034.roa (raw, json)
Hash identifier:          f5qgaY7px3eeO2BG3pkyCmcZLW02NopkJYUL33HPicY=
Subject key identifier:   53:44:F5:64:DD:2B:01:B3:04:CD:02:7B:70:33:FC:69:62:F0:07:44
Certificate issuer:       /CN=ed199e1daadbcd50649091bf3c154099a326233862ce25c671
Certificate serial:       119861271C21D62BC877E07F44FB25BF9067F9F0
Authority key identifier: B3:2D:01:46:71:A0:8A:F0:A5:5B:31:3E:AB:25:A8:2E:DD:40:2A:98
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c6babe0-c981-4c51-971c-b56bd0722eb1/ed199e1daadbcd50649091bf3c154099a326233862ce25c671.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf82d5e52101850b65b10b358b/0/3136372e3235332e34372e302f32342d3234203d3e203530313034.roa
Signing time:             Thu 04 Apr 2024 18:06:15 +0000
ROA not before:           Thu 04 Apr 2024 18:01:15 +0000
ROA not after:            Thu 03 Apr 2025 18:06:15 +0000
asID:                     50104
IP address blocks:        167.253.47.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf82d5e52101850b65b10b358b/0/B32D014671A08AF0A55B313EAB25A82EDD402A98.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf82d5e52101850b65b10b358b/0/B32D014671A08AF0A55B313EAB25A82EDD402A98.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c6babe0-c981-4c51-971c-b56bd0722eb1/ed199e1daadbcd50649091bf3c154099a326233862ce25c671.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c6babe0-c981-4c51-971c-b56bd0722eb1/5c6babe0-c981-4c51-971c-b56bd0722eb1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c6babe0-c981-4c51-971c-b56bd0722eb1/5c6babe0-c981-4c51-971c-b56bd0722eb1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c6babe0-c981-4c51-971c-b56bd0722eb1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Nov 2024 01:44:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:98:61:27:1c:21:d6:2b:c8:77:e0:7f:44:fb:25:bf:90:67:f9:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed199e1daadbcd50649091bf3c154099a326233862ce25c671
        Validity
            Not Before: Apr  4 18:01:15 2024 GMT
            Not After : Apr  3 18:06:15 2025 GMT
        Subject: CN=5344F564DD2B01B304CD027B7033FC6962F00744
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:3c:33:8a:54:ba:38:6e:66:75:80:1b:b0:5b:
                    4c:b2:aa:0f:fb:54:5d:cc:d8:dd:9d:63:3b:4e:68:
                    c1:56:72:da:b7:1d:f5:d3:74:88:7f:6d:59:ce:30:
                    e1:79:e4:54:fa:c9:8a:1d:e3:14:3b:c6:04:2d:5b:
                    66:6f:18:0d:3b:55:b7:71:92:4d:af:a9:df:b4:55:
                    11:83:bb:c3:cf:8b:e1:46:ae:a1:6a:60:09:83:e4:
                    94:e4:96:17:b7:4a:16:30:11:0d:33:1b:9a:86:cf:
                    d2:d2:e1:7a:3c:3f:ee:10:e3:6b:48:e8:f3:bd:30:
                    d5:c7:51:9c:f9:67:6f:fc:e3:20:4b:3e:0b:8b:e1:
                    7f:27:e4:31:39:7a:45:41:d4:94:f3:44:be:b5:86:
                    96:00:09:43:2d:0d:a5:b0:2d:9f:4c:86:53:ed:02:
                    37:e8:f4:11:c6:fa:35:a5:a2:ea:98:c1:fb:f9:79:
                    be:7d:c8:46:52:05:3b:88:15:26:c1:5a:19:df:2d:
                    2f:83:34:28:34:9f:67:bd:a8:9b:c2:8b:ad:16:9b:
                    cb:36:a6:d7:b6:30:3a:4e:38:25:f3:6a:7d:38:f4:
                    a3:32:d4:b8:a1:b3:2c:3b:48:72:fd:b0:1f:b1:2a:
                    88:48:7a:5d:85:a9:fe:f0:de:1d:eb:be:7a:29:b8:
                    ba:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:44:F5:64:DD:2B:01:B3:04:CD:02:7B:70:33:FC:69:62:F0:07:44
            X509v3 Authority Key Identifier:
                keyid:B3:2D:01:46:71:A0:8A:F0:A5:5B:31:3E:AB:25:A8:2E:DD:40:2A:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf82d5e52101850b65b10b358b/0/B32D014671A08AF0A55B313EAB25A82EDD402A98.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c6babe0-c981-4c51-971c-b56bd0722eb1/ed199e1daadbcd50649091bf3c154099a326233862ce25c671.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf82d5e52101850b65b10b358b/0/3136372e3235332e34372e302f32342d3234203d3e203530313034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.253.47.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9f:f4:1a:bc:55:01:fd:a1:42:e2:a7:64:db:d0:a5:43:c2:51:
         5c:e0:70:c6:0b:74:2c:bd:8f:20:59:0f:62:1d:b6:c3:3a:a5:
         9c:36:9d:31:70:bf:80:12:74:7b:26:08:66:82:fb:3e:c4:9d:
         10:ac:e3:09:1c:af:b6:9e:4b:d9:db:87:81:c8:88:f4:92:f3:
         83:38:a0:73:c1:73:9f:d4:81:54:05:d0:c8:8e:3c:69:84:59:
         39:f1:4f:29:c3:90:7a:76:10:38:50:12:43:94:90:21:8b:9f:
         e9:65:dd:4d:9b:a2:ef:94:31:bf:3c:48:7f:9f:eb:65:e2:da:
         6c:a1:90:7a:52:e9:bc:cc:b7:da:5e:7c:8e:27:33:5a:06:4f:
         e1:41:bf:2b:82:77:8b:0a:93:92:d9:17:a5:6b:65:51:51:7e:
         c8:f1:21:a7:91:36:61:ad:d3:51:1d:52:92:43:09:38:be:ec:
         a7:2a:8e:98:88:10:8d:6b:75:40:23:a1:c3:af:3b:4c:71:bf:
         35:9f:a4:02:ba:53:d3:0d:ec:6b:fd:a8:a3:8c:2f:fb:5f:25:
         7d:54:f4:aa:ba:10:0e:9d:9b:25:d3:b4:76:a7:7e:78:74:89:
         15:f0:bd:3a:fd:c7:8a:f4:fd:41:a5:99:86:e4:6c:71:8f:83:
         3a:f3:b2:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 23:39:48 2024 by rpki-client on console-fra.rpki-client.org