Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/36342e34392e31342e302f32342d3234203d3e20333936333536.roa
File:                     36342e34392e31342e302f32342d3234203d3e20333936333536.roa (raw, json)
Hash identifier:          l0/1vT8SBz5NAPo04dAB7NKW/rD6y9yjRcwR9X4kNq0=
Subject key identifier:   06:1A:F5:50:A2:78:7A:05:29:60:48:CC:6F:30:66:64:65:E9:6E:83
Certificate issuer:       /CN=eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96
Certificate serial:       4752914F645AEC77521647CC59747CCDFDC76349
Authority key identifier: 0F:03:31:2E:E5:9E:3D:E8:27:35:F6:6B:54:94:15:DE:44:64:78:75
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/36342e34392e31342e302f32342d3234203d3e20333936333536.roa
Signing time:             Thu 08 Aug 2024 19:44:31 +0000
ROA not before:           Thu 08 Aug 2024 19:39:31 +0000
ROA not after:            Thu 07 Aug 2025 19:44:31 +0000
asID:                     396356
IP address blocks:        64.49.14.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/0F03312EE59E3DE82735F66B549415DE44647875.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/0F03312EE59E3DE82735F66B549415DE44647875.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/a01e997c-b89e-47c2-8d79-d31e58bc3ca4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/a01e997c-b89e-47c2-8d79-d31e58bc3ca4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:52:91:4f:64:5a:ec:77:52:16:47:cc:59:74:7c:cd:fd:c7:63:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96
        Validity
            Not Before: Aug  8 19:39:31 2024 GMT
            Not After : Aug  7 19:44:31 2025 GMT
        Subject: CN=061AF550A2787A05296048CC6F30666465E96E83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:25:f9:aa:d6:87:b6:c0:77:67:4a:d9:70:b7:
                    f1:82:dc:7d:ae:c9:31:ce:34:99:f5:78:6b:3c:fc:
                    d9:16:5f:ca:16:69:21:45:c6:1c:b4:30:b9:e3:84:
                    39:10:8d:83:37:70:48:df:77:c4:5e:b1:b3:d1:27:
                    82:3c:af:e2:11:e6:71:6b:04:6b:fc:fa:0e:09:d8:
                    04:4b:94:b8:87:78:1e:a6:6c:15:80:b8:b7:ba:a7:
                    41:4f:a3:93:4c:29:2c:fb:51:d3:45:e9:c2:0c:49:
                    17:93:9a:65:dc:96:31:09:b7:8a:b6:94:cd:6b:cb:
                    05:97:84:f6:8b:44:d9:6c:77:91:27:d9:b1:c8:c4:
                    f2:47:f2:aa:a3:a3:3a:30:ec:e4:8b:78:b5:d7:79:
                    76:3b:d6:59:1e:84:f9:55:7f:7b:78:79:c6:dd:67:
                    4c:57:e9:6f:fc:52:f8:a8:b7:2e:bd:8b:d3:d4:3f:
                    97:53:c9:b4:75:1c:9f:c0:b3:4d:e2:6b:90:74:94:
                    e6:6b:44:34:50:ee:b3:ef:e1:70:b6:91:37:08:a0:
                    a7:09:c9:ea:24:b6:48:d9:95:5d:6b:73:91:87:a3:
                    ed:1a:43:64:bf:58:e0:26:66:c5:f3:95:a2:4e:fc:
                    f0:6e:96:50:33:93:97:47:a1:4e:29:c2:84:94:cf:
                    30:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:1A:F5:50:A2:78:7A:05:29:60:48:CC:6F:30:66:64:65:E9:6E:83
            X509v3 Authority Key Identifier:
                keyid:0F:03:31:2E:E5:9E:3D:E8:27:35:F6:6B:54:94:15:DE:44:64:78:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/0F03312EE59E3DE82735F66B549415DE44647875.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/36342e34392e31342e302f32342d3234203d3e20333936333536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.49.14.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d1:f6:5e:01:57:ce:94:a5:ca:a6:81:9f:f6:db:d2:c5:f1:f6:
         28:92:7f:5d:6e:51:1a:b5:bc:d0:dd:e3:fb:61:90:b8:53:c9:
         f5:f5:82:42:e2:06:1b:4a:d5:1b:b7:73:53:03:83:35:4a:c0:
         8f:4b:c4:4d:1a:ca:0f:b6:a0:4a:e4:af:ae:11:8e:84:af:09:
         e3:aa:25:27:6e:21:3b:75:2b:34:b8:3b:1e:df:5c:b5:32:85:
         2f:67:3e:f3:bd:0f:52:a5:ae:12:30:dd:be:f0:9a:e0:9a:d1:
         d1:b4:1d:e3:91:6c:31:79:82:b3:8d:26:2c:a5:ea:65:fd:5f:
         81:54:70:85:48:62:37:dd:08:a3:c5:f2:56:32:d9:02:ca:0e:
         a1:74:a4:56:54:7a:17:0d:8f:15:3c:51:62:f6:99:f1:2f:cf:
         f6:9b:5c:ac:23:2b:c3:3a:0f:0a:00:fa:c4:a6:3e:19:b1:aa:
         97:d6:30:dd:f9:33:32:ab:ba:a9:b4:84:1f:dd:fc:87:5c:b2:
         f4:fa:73:0e:52:9c:02:0c:a4:76:b9:53:99:16:ab:10:63:0e:
         68:25:38:b5:7b:62:23:74:65:45:70:7b:0f:97:45:1f:23:b7:
         d1:a4:00:72:b0:c2:a7:39:4f:d9:81:11:fa:20:02:d2:bc:42:
         d9:f9:b5:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:03:21 2024 by rpki-client on console-fra.rpki-client.org