Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8588029e0185d07c5f6044eb/0/37342e3132302e3132302e302f32342d3234203d3e2039333132.roa
File:                     37342e3132302e3132302e302f32342d3234203d3e2039333132.roa (raw, json)
Hash identifier:          /fsl/hcO+3nwPxKb54c3oCjBtmPGBnOaVn5HUy9a3NI=
Subject key identifier:   1E:A0:C8:A4:E4:7F:08:80:EC:B8:36:AA:14:04:90:F3:F2:B8:B9:EA
Certificate issuer:       /CN=9995ba05e90aa3951d9ab39d9355b6b683e32e6a19adf153f2
Certificate serial:       544D7D2370EB929D3A04487E2E26C2A0C6CBCFF7
Authority key identifier: 35:14:EE:D0:EE:5C:55:34:23:A2:5F:1D:7D:56:FC:26:13:11:A1:EB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/907e0105-3516-47a0-a9c2-5f0b77661cb1/9995ba05e90aa3951d9ab39d9355b6b683e32e6a19adf153f2.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8588029e0185d07c5f6044eb/0/37342e3132302e3132302e302f32342d3234203d3e2039333132.roa
Signing time:             Fri 22 Dec 2023 20:01:12 +0000
ROA not before:           Fri 22 Dec 2023 19:56:12 +0000
ROA not after:            Fri 20 Dec 2024 20:01:12 +0000
asID:                     9312
IP address blocks:        74.120.120.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8588029e0185d07c5f6044eb/0/3514EED0EE5C553423A25F1D7D56FC261311A1EB.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8588029e0185d07c5f6044eb/0/3514EED0EE5C553423A25F1D7D56FC261311A1EB.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/907e0105-3516-47a0-a9c2-5f0b77661cb1/9995ba05e90aa3951d9ab39d9355b6b683e32e6a19adf153f2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/907e0105-3516-47a0-a9c2-5f0b77661cb1/907e0105-3516-47a0-a9c2-5f0b77661cb1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/907e0105-3516-47a0-a9c2-5f0b77661cb1/907e0105-3516-47a0-a9c2-5f0b77661cb1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/907e0105-3516-47a0-a9c2-5f0b77661cb1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 00:26:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:4d:7d:23:70:eb:92:9d:3a:04:48:7e:2e:26:c2:a0:c6:cb:cf:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9995ba05e90aa3951d9ab39d9355b6b683e32e6a19adf153f2
        Validity
            Not Before: Dec 22 19:56:12 2023 GMT
            Not After : Dec 20 20:01:12 2024 GMT
        Subject: CN=1EA0C8A4E47F0880ECB836AA140490F3F2B8B9EA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:bc:98:91:c8:34:33:31:54:d0:b6:98:29:fc:
                    13:b0:7b:c7:e8:6e:26:96:08:a5:3b:35:9f:a8:08:
                    67:02:34:e2:80:11:17:ca:da:d3:54:77:35:32:1f:
                    70:0e:31:b9:e7:b3:0e:b9:2c:ea:e6:6e:32:86:83:
                    b5:e7:c2:9b:5a:e4:8f:77:41:fc:47:eb:8b:37:7b:
                    15:a4:b3:b3:01:e9:d2:98:86:03:72:0d:4d:5f:34:
                    49:ff:62:6f:b8:f9:df:86:42:0f:d6:60:86:22:65:
                    d2:80:6c:74:42:ae:78:0f:b3:28:06:70:c9:7d:de:
                    71:f2:dc:9f:44:72:48:85:56:38:22:45:fd:fb:3f:
                    81:43:ee:48:ef:ef:e7:1b:53:55:52:69:09:1f:60:
                    23:bd:e7:56:1c:48:3f:79:ca:aa:d2:81:a0:5d:6a:
                    ae:88:77:7d:b4:16:00:04:31:8b:5d:0b:13:46:fb:
                    47:cf:8f:bb:7e:a1:07:a0:98:b8:4b:60:c8:ab:39:
                    c7:55:09:3f:81:4f:27:8d:2c:22:e9:15:1e:a6:b2:
                    04:13:79:3f:f0:3b:bf:e8:03:fd:78:42:09:f4:72:
                    9c:e9:ab:47:46:b1:bf:20:04:84:c8:e0:1c:b2:fb:
                    74:b7:40:70:2c:0b:a1:1d:b3:b6:aa:41:4f:93:e6:
                    9f:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:A0:C8:A4:E4:7F:08:80:EC:B8:36:AA:14:04:90:F3:F2:B8:B9:EA
            X509v3 Authority Key Identifier:
                keyid:35:14:EE:D0:EE:5C:55:34:23:A2:5F:1D:7D:56:FC:26:13:11:A1:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8588029e0185d07c5f6044eb/0/3514EED0EE5C553423A25F1D7D56FC261311A1EB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/907e0105-3516-47a0-a9c2-5f0b77661cb1/9995ba05e90aa3951d9ab39d9355b6b683e32e6a19adf153f2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8588029e0185d07c5f6044eb/0/37342e3132302e3132302e302f32342d3234203d3e2039333132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.120.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         17:1d:df:26:55:7d:66:4a:23:9d:1a:a8:a7:b9:28:da:49:8c:
         73:bb:2b:c4:bd:2a:15:c2:51:1e:24:1f:25:15:93:b3:cc:31:
         93:cc:1b:63:34:70:71:df:3a:91:d0:47:d0:7b:3a:e1:bb:53:
         87:31:92:51:99:58:c3:6e:3c:71:4d:72:32:41:49:18:ec:91:
         66:84:b5:5e:7d:95:fa:04:d7:bf:fa:95:a9:04:00:8f:72:b9:
         1a:3c:ef:49:3a:87:91:69:16:3e:31:48:35:d0:0c:15:14:1b:
         4b:24:15:41:50:51:19:f5:15:4f:be:88:73:70:06:3a:ae:90:
         95:83:a4:e5:cb:8c:38:c4:db:8e:7d:7c:b8:ab:f8:99:7c:49:
         3c:a6:db:4a:c9:4e:76:50:de:c1:c7:5b:04:dc:e2:d3:4b:a5:
         ba:ab:e9:77:61:fe:aa:e7:0c:f5:3b:3d:d1:7a:fb:12:04:cb:
         8b:cd:d5:e9:5d:bf:ff:8b:c3:3a:45:d7:3e:0d:53:f2:ab:fc:
         00:68:e7:b1:a6:f1:b7:b7:2c:f5:01:1e:a3:7a:d0:35:a4:da:
         8e:02:8e:e5:c3:ad:cd:45:7f:2d:be:7d:8a:c8:88:ec:5a:eb:
         fc:a9:4b:9c:80:c9:f3:42:c3:32:78:22:75:2c:ff:d3:5f:87:
         60:57:11:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 00:23:28 2024 by rpki-client on console-fra.rpki-client.org