Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/36342e34392e31322e302f32332d3234203d3e20343030333034.roa
File:                     36342e34392e31322e302f32332d3234203d3e20343030333034.roa (raw, json)
Hash identifier:          1wpWnOnYYINBB4EXFxuG0kRF5Jk4fkjm0gMK8OtSI7w=
Subject key identifier:   32:81:B7:87:8B:D4:02:94:30:6D:94:BC:C0:5C:04:61:F2:67:B7:35
Certificate issuer:       /CN=eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96
Certificate serial:       35A40746DE69CBC6A572A572A4070CA42EAB8E20
Authority key identifier: 0F:03:31:2E:E5:9E:3D:E8:27:35:F6:6B:54:94:15:DE:44:64:78:75
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/36342e34392e31322e302f32332d3234203d3e20343030333034.roa
Signing time:             Thu 27 Jun 2024 22:45:46 +0000
ROA not before:           Thu 27 Jun 2024 22:40:46 +0000
ROA not after:            Thu 26 Jun 2025 22:45:46 +0000
asID:                     400304
IP address blocks:        64.49.12.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/0F03312EE59E3DE82735F66B549415DE44647875.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/0F03312EE59E3DE82735F66B549415DE44647875.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/a01e997c-b89e-47c2-8d79-d31e58bc3ca4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/a01e997c-b89e-47c2-8d79-d31e58bc3ca4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:a4:07:46:de:69:cb:c6:a5:72:a5:72:a4:07:0c:a4:2e:ab:8e:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96
        Validity
            Not Before: Jun 27 22:40:46 2024 GMT
            Not After : Jun 26 22:45:46 2025 GMT
        Subject: CN=3281B7878BD40294306D94BCC05C0461F267B735
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:17:30:19:bc:c7:26:1b:02:65:4b:a5:be:ed:
                    14:c8:ae:bf:26:e4:33:d5:f7:dd:be:ec:e9:26:6c:
                    e4:2f:c9:74:07:69:c5:3f:5e:ae:5a:74:b4:12:22:
                    f6:4e:58:00:79:b3:b4:d2:12:53:88:91:15:c6:55:
                    46:34:2d:69:1f:a2:c5:0d:e9:9f:8d:d0:32:08:2f:
                    a5:6f:9f:27:50:df:d7:77:f1:51:23:14:10:df:83:
                    73:3e:60:3b:bf:74:24:b7:96:8a:7b:23:09:ad:1a:
                    f6:47:30:28:b6:03:be:83:c5:2c:36:fb:e0:07:3d:
                    11:83:2d:e4:88:c6:55:a5:80:97:09:19:5d:1b:85:
                    0f:43:6d:e0:a2:08:da:e6:b8:f4:d9:83:7b:a1:70:
                    65:63:5f:75:f2:2f:35:fe:fd:d5:f7:dc:39:fd:71:
                    ce:4d:aa:1d:94:09:61:36:4d:5e:ce:f2:b1:3e:a3:
                    0c:73:a3:bf:88:94:a5:66:a2:50:26:d0:44:99:5b:
                    b1:e8:64:04:cd:09:8c:56:f2:c7:e0:62:7c:29:95:
                    01:1e:9c:49:29:a6:7f:90:53:d0:3b:af:b8:cb:5b:
                    0f:63:1d:c4:4f:72:37:c9:36:5b:e9:66:8d:70:26:
                    83:2f:eb:e9:ab:fb:9e:0c:4f:49:e7:39:f3:1b:15:
                    88:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:81:B7:87:8B:D4:02:94:30:6D:94:BC:C0:5C:04:61:F2:67:B7:35
            X509v3 Authority Key Identifier:
                keyid:0F:03:31:2E:E5:9E:3D:E8:27:35:F6:6B:54:94:15:DE:44:64:78:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/0F03312EE59E3DE82735F66B549415DE44647875.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/36342e34392e31322e302f32332d3234203d3e20343030333034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.49.12.0/23

    Signature Algorithm: sha256WithRSAEncryption
         82:5b:d9:c9:eb:fd:cf:5d:a7:47:54:b5:99:26:2e:ac:69:b0:
         25:e4:28:39:7b:4e:68:3c:40:83:c0:42:7c:47:12:e9:44:92:
         97:14:0a:14:1a:32:50:39:6e:68:44:4e:c9:51:d4:9c:92:be:
         c7:98:5a:bc:0c:02:ed:cc:82:22:c2:08:2b:31:9f:1a:39:34:
         f6:5a:7c:26:77:a5:35:16:aa:80:61:ae:89:7a:bf:13:12:28:
         c5:5b:c6:e5:17:a1:ea:45:a4:64:eb:18:c3:f9:45:dd:0d:0e:
         10:da:97:51:4a:a5:00:dc:a2:f9:a3:d0:d3:67:a0:ba:14:7f:
         74:40:2b:5d:66:fd:3d:06:08:40:6d:a7:67:9a:d1:e2:dd:95:
         d0:51:a0:52:c0:36:3a:68:93:13:25:bf:7c:e0:76:89:8d:a9:
         63:37:f6:67:38:25:3c:4f:9c:88:dd:72:b3:02:0b:b8:01:30:
         84:8e:7a:e2:8d:00:3e:47:31:b8:a8:ab:f0:3f:2a:08:47:c9:
         03:50:e2:1f:60:d7:bb:13:1b:83:2c:a4:58:d7:33:ae:2c:70:
         8b:33:6f:e7:ee:06:29:28:f8:85:c7:35:91:f1:c4:e1:ae:65:
         89:76:62:11:39:71:bd:d8:c4:47:be:a6:df:c9:09:97:90:60:
         c3:aa:5b:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:03:21 2024 by rpki-client on console-fra.rpki-client.org