Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8588029e0185d07c5f6044eb/0/37342e3132302e3132312e302f32342d3234203d3e2037303138.roa
File:                     37342e3132302e3132312e302f32342d3234203d3e2037303138.roa (raw, json)
Hash identifier:          Z/+JSCl9craraWXBL2wo07BjH2UHHErDbWoFwYf7xW4=
Subject key identifier:   B5:71:1F:98:C0:12:D1:7D:D6:C1:1E:13:E1:FF:81:EC:24:FB:A9:89
Certificate issuer:       /CN=9995ba05e90aa3951d9ab39d9355b6b683e32e6a19adf153f2
Certificate serial:       631E026934B48FFDA5715AD2821C18F80076029F
Authority key identifier: 35:14:EE:D0:EE:5C:55:34:23:A2:5F:1D:7D:56:FC:26:13:11:A1:EB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/907e0105-3516-47a0-a9c2-5f0b77661cb1/9995ba05e90aa3951d9ab39d9355b6b683e32e6a19adf153f2.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8588029e0185d07c5f6044eb/0/37342e3132302e3132312e302f32342d3234203d3e2037303138.roa
Signing time:             Tue 27 Feb 2024 16:01:15 +0000
ROA not before:           Tue 27 Feb 2024 15:56:15 +0000
ROA not after:            Tue 25 Feb 2025 16:01:15 +0000
asID:                     7018
IP address blocks:        74.120.121.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8588029e0185d07c5f6044eb/0/3514EED0EE5C553423A25F1D7D56FC261311A1EB.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8588029e0185d07c5f6044eb/0/3514EED0EE5C553423A25F1D7D56FC261311A1EB.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/907e0105-3516-47a0-a9c2-5f0b77661cb1/9995ba05e90aa3951d9ab39d9355b6b683e32e6a19adf153f2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/907e0105-3516-47a0-a9c2-5f0b77661cb1/907e0105-3516-47a0-a9c2-5f0b77661cb1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/907e0105-3516-47a0-a9c2-5f0b77661cb1/907e0105-3516-47a0-a9c2-5f0b77661cb1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/907e0105-3516-47a0-a9c2-5f0b77661cb1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 04 May 2024 16:01:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:1e:02:69:34:b4:8f:fd:a5:71:5a:d2:82:1c:18:f8:00:76:02:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9995ba05e90aa3951d9ab39d9355b6b683e32e6a19adf153f2
        Validity
            Not Before: Feb 27 15:56:15 2024 GMT
            Not After : Feb 25 16:01:15 2025 GMT
        Subject: CN=B5711F98C012D17DD6C11E13E1FF81EC24FBA989
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:07:a8:b0:98:4f:f3:40:09:96:f1:fb:9c:2d:
                    1c:33:01:fc:cc:a4:10:02:32:82:3b:6b:21:b8:40:
                    7e:4a:85:cf:a3:b2:19:fe:e9:0b:6a:7f:02:87:67:
                    8f:84:cb:36:4d:1c:f9:7a:bb:b1:94:cf:14:15:f6:
                    39:89:e7:dd:b7:21:68:bb:ba:ea:7c:1b:55:69:9b:
                    ea:96:9c:da:2e:77:1e:5c:fc:bf:b8:20:1d:0d:57:
                    27:8d:7f:94:02:c7:07:c8:fe:49:44:66:10:a6:a2:
                    4c:29:35:0b:be:2c:bc:61:51:5b:f8:99:3b:7c:b5:
                    32:90:03:ce:01:27:ba:9d:3c:50:5e:21:02:70:5c:
                    1e:4f:bb:d1:ab:5b:41:06:38:7f:6e:a9:82:06:c2:
                    6b:7c:b7:7c:e8:fd:a0:1d:3c:1a:2f:40:7c:65:db:
                    91:62:70:88:18:54:8f:e5:9a:89:b3:0c:ba:f7:7e:
                    8d:f4:7d:2b:d8:57:aa:3a:fa:c4:f5:1b:4a:a4:87:
                    3c:0a:2d:db:14:a0:02:f8:a4:b3:ea:6e:20:c6:07:
                    5f:db:47:89:94:12:6b:47:d9:26:2a:04:b6:04:a5:
                    11:46:c0:fe:c0:5b:52:57:be:a1:3a:66:98:d9:a0:
                    67:b9:11:a2:c0:a5:82:c7:f2:92:be:1c:8b:d6:de:
                    4c:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:71:1F:98:C0:12:D1:7D:D6:C1:1E:13:E1:FF:81:EC:24:FB:A9:89
            X509v3 Authority Key Identifier:
                keyid:35:14:EE:D0:EE:5C:55:34:23:A2:5F:1D:7D:56:FC:26:13:11:A1:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8588029e0185d07c5f6044eb/0/3514EED0EE5C553423A25F1D7D56FC261311A1EB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/907e0105-3516-47a0-a9c2-5f0b77661cb1/9995ba05e90aa3951d9ab39d9355b6b683e32e6a19adf153f2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8588029e0185d07c5f6044eb/0/37342e3132302e3132312e302f32342d3234203d3e2037303138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.120.121.0/24

    Signature Algorithm: sha256WithRSAEncryption
         cf:a0:7e:48:f0:e1:5b:1f:55:8b:54:cd:98:83:a8:8f:0d:04:
         2c:1f:f1:1c:ae:00:44:fc:76:92:55:ec:10:fd:c7:f7:be:65:
         30:63:cf:15:d2:31:ad:e6:e8:32:42:0e:49:1d:00:91:80:d9:
         bc:e6:40:18:8d:bd:9e:5e:c2:e9:5d:b3:8d:25:22:4f:2c:e5:
         db:72:cf:d2:ba:80:14:cd:16:67:e4:c0:b4:4a:4a:b9:32:31:
         9c:57:5b:fb:6a:f3:e8:bd:d7:b1:63:34:a3:3b:26:63:1d:21:
         62:ec:cd:46:f9:38:c4:69:c1:8e:53:37:78:54:8c:91:dc:e9:
         09:0b:47:10:29:be:11:2a:07:85:7c:73:2f:50:40:09:77:c8:
         7a:f0:9a:3b:52:4f:c0:dd:25:f8:73:84:ac:38:a1:cd:c5:27:
         11:e8:4c:d5:30:59:af:62:d2:bf:87:7b:0b:56:a3:66:94:ce:
         8c:00:74:de:36:8c:8b:e0:14:f2:3c:54:4b:54:25:e5:67:ce:
         e0:5f:c7:b2:c0:59:e6:1c:24:0e:ab:df:16:fa:0e:d5:ab:b3:
         00:20:7e:99:0d:be:92:a0:1e:e4:90:57:9f:a0:8b:a5:f5:13:
         4c:dd:97:eb:00:a0:61:4c:60:7a:7b:f2:40:02:67:c5:d1:3d:
         72:e1:d5:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 17:55:55 2024 by rpki-client on console-ams.rpki-client.org