Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8588029e0185d07c5f6044eb/0/37342e3132302e3132322e302f32342d3234203d3e20313335343032.roa
File:                     37342e3132302e3132322e302f32342d3234203d3e20313335343032.roa (raw, json)
Hash identifier:          fjcpLhC1hPZzW89r5KuXqUsv4SVDlpWe2kmQxpRoV4o=
Subject key identifier:   23:AD:FB:E9:F6:D8:DC:EB:95:BA:E9:3E:ED:E5:E0:63:1D:49:8C:24
Certificate issuer:       /CN=9995ba05e90aa3951d9ab39d9355b6b683e32e6a19adf153f2
Certificate serial:       64B3E3C5816225DAEF37628A6862F890DF82C383
Authority key identifier: 35:14:EE:D0:EE:5C:55:34:23:A2:5F:1D:7D:56:FC:26:13:11:A1:EB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/907e0105-3516-47a0-a9c2-5f0b77661cb1/9995ba05e90aa3951d9ab39d9355b6b683e32e6a19adf153f2.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8588029e0185d07c5f6044eb/0/37342e3132302e3132322e302f32342d3234203d3e20313335343032.roa
Signing time:             Wed 21 Aug 2024 08:27:19 +0000
ROA not before:           Wed 21 Aug 2024 08:22:19 +0000
ROA not after:            Wed 20 Aug 2025 08:27:19 +0000
asID:                     135402
IP address blocks:        74.120.122.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8588029e0185d07c5f6044eb/0/3514EED0EE5C553423A25F1D7D56FC261311A1EB.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8588029e0185d07c5f6044eb/0/3514EED0EE5C553423A25F1D7D56FC261311A1EB.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/907e0105-3516-47a0-a9c2-5f0b77661cb1/9995ba05e90aa3951d9ab39d9355b6b683e32e6a19adf153f2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/907e0105-3516-47a0-a9c2-5f0b77661cb1/907e0105-3516-47a0-a9c2-5f0b77661cb1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/907e0105-3516-47a0-a9c2-5f0b77661cb1/907e0105-3516-47a0-a9c2-5f0b77661cb1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/907e0105-3516-47a0-a9c2-5f0b77661cb1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 20:04:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:b3:e3:c5:81:62:25:da:ef:37:62:8a:68:62:f8:90:df:82:c3:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9995ba05e90aa3951d9ab39d9355b6b683e32e6a19adf153f2
        Validity
            Not Before: Aug 21 08:22:19 2024 GMT
            Not After : Aug 20 08:27:19 2025 GMT
        Subject: CN=23ADFBE9F6D8DCEB95BAE93EEDE5E0631D498C24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:6c:01:4f:04:8d:26:bc:c7:07:72:3f:49:97:
                    15:d2:8c:9c:e4:6e:1c:77:a6:9d:db:e4:2e:eb:03:
                    c1:50:bc:42:89:dd:a6:59:77:c3:ac:32:86:bc:bc:
                    5c:95:1d:b4:21:69:fa:3c:7f:96:94:88:c6:35:4a:
                    f8:85:10:2f:c5:65:8e:1a:9c:6c:c9:87:11:36:7d:
                    30:76:b0:1c:1f:5e:8f:ef:19:e6:26:70:e5:40:53:
                    33:c7:1d:4e:8c:5e:e6:8c:1f:1e:bc:9d:31:30:6a:
                    91:11:dc:21:a8:48:35:5b:2d:0f:41:99:9e:2d:1a:
                    c2:12:32:d9:d1:0e:10:09:22:24:8a:f6:b6:1a:a7:
                    55:e2:af:c9:c4:f5:42:c9:f4:4f:b7:9f:0a:2f:eb:
                    30:45:f9:7d:72:0b:43:e1:f3:25:4c:2e:54:7b:d6:
                    f9:d3:c6:44:76:55:60:6b:e6:26:13:60:d4:dd:b1:
                    85:37:4b:51:58:91:6a:6f:3a:18:e7:80:34:ad:13:
                    04:45:83:94:e2:0f:b5:9d:84:20:05:2b:e9:7e:c4:
                    82:f8:0d:7c:ec:cd:e1:c5:75:8f:38:1d:7a:a7:41:
                    78:80:fb:fd:53:fc:72:13:d6:07:5f:ec:85:64:92:
                    55:e8:b4:44:28:82:5a:21:d7:be:3c:41:8a:19:35:
                    61:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:AD:FB:E9:F6:D8:DC:EB:95:BA:E9:3E:ED:E5:E0:63:1D:49:8C:24
            X509v3 Authority Key Identifier:
                keyid:35:14:EE:D0:EE:5C:55:34:23:A2:5F:1D:7D:56:FC:26:13:11:A1:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8588029e0185d07c5f6044eb/0/3514EED0EE5C553423A25F1D7D56FC261311A1EB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/907e0105-3516-47a0-a9c2-5f0b77661cb1/9995ba05e90aa3951d9ab39d9355b6b683e32e6a19adf153f2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8588029e0185d07c5f6044eb/0/37342e3132302e3132322e302f32342d3234203d3e20313335343032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.120.122.0/24

    Signature Algorithm: sha256WithRSAEncryption
         69:b3:1b:7c:9a:ad:4c:1c:03:5a:6f:4d:6a:76:f4:58:a4:20:
         69:ca:b9:d9:c8:3b:f8:a4:12:38:f6:47:d7:2e:54:ab:c3:d2:
         73:03:63:f3:12:b8:ca:4b:35:3f:ed:e3:c8:e2:37:d3:15:74:
         ff:83:55:e8:53:bb:25:11:bb:39:be:4b:d6:5e:6e:e4:aa:e4:
         63:10:fc:d6:62:67:b6:a6:a6:75:ed:06:d4:b6:32:a5:e4:d7:
         87:0b:90:01:44:ed:00:a5:f9:86:b6:44:70:a1:b5:46:46:f0:
         1a:e9:32:d3:7f:b3:2b:24:38:58:44:65:52:03:25:5e:8f:c6:
         ca:60:f3:6e:42:39:1e:01:aa:13:56:60:03:ad:98:37:c5:96:
         76:da:97:63:0a:52:8a:bd:78:73:89:25:f8:b2:16:f8:e4:4e:
         2a:a2:dd:b4:c2:3f:6c:8d:a1:61:1f:7a:4c:10:9e:98:1a:23:
         8d:f7:bc:7b:eb:4f:0e:79:67:cf:dc:86:6f:8a:ae:c0:24:c0:
         97:fd:f3:00:6e:6a:73:60:a3:b6:da:e7:98:e1:5a:21:1a:eb:
         7f:b7:8c:06:46:53:95:bf:88:0f:eb:51:a1:e2:8b:21:45:bc:
         bf:9d:63:71:f2:f7:1c:50:96:ea:69:40:62:39:95:f8:d3:df:
         81:ae:22:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 22:04:25 2024 by rpki-client on console-fra.rpki-client.org