Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf86941d5c0186998663d80702/0/3230382e39312e3138382e302f32342d3234203d3e203134363138.roa
File:                     3230382e39312e3138382e302f32342d3234203d3e203134363138.roa (raw, json)
Hash identifier:          807DH0z+ACjHethdYoUkKYrNTU0etBGXOTVed49cRuY=
Subject key identifier:   50:3B:21:4B:05:7A:56:9C:AF:A0:44:23:DF:E3:40:1B:31:1F:32:99
Certificate issuer:       /CN=58f72174a0a9e3d07a37cad87c2235a762efa6a9b620372845
Certificate serial:       155DF0557428B683A4355ABDEB9C92572388939E
Authority key identifier: E9:AB:82:D4:D9:BF:4C:16:EA:6E:7C:FA:F3:EE:14:CF:EC:5A:4A:8A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ae85d24a-77d4-4cf7-80aa-c071199c2889/58f72174a0a9e3d07a37cad87c2235a762efa6a9b620372845.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf86941d5c0186998663d80702/0/3230382e39312e3138382e302f32342d3234203d3e203134363138.roa
Signing time:             Wed 21 Feb 2024 13:51:49 +0000
ROA not before:           Wed 21 Feb 2024 13:46:49 +0000
ROA not after:            Wed 19 Feb 2025 13:51:49 +0000
asID:                     14618
IP address blocks:        208.91.188.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf86941d5c0186998663d80702/0/E9AB82D4D9BF4C16EA6E7CFAF3EE14CFEC5A4A8A.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf86941d5c0186998663d80702/0/E9AB82D4D9BF4C16EA6E7CFAF3EE14CFEC5A4A8A.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ae85d24a-77d4-4cf7-80aa-c071199c2889/58f72174a0a9e3d07a37cad87c2235a762efa6a9b620372845.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ae85d24a-77d4-4cf7-80aa-c071199c2889/ae85d24a-77d4-4cf7-80aa-c071199c2889.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ae85d24a-77d4-4cf7-80aa-c071199c2889/ae85d24a-77d4-4cf7-80aa-c071199c2889.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ae85d24a-77d4-4cf7-80aa-c071199c2889.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:5d:f0:55:74:28:b6:83:a4:35:5a:bd:eb:9c:92:57:23:88:93:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58f72174a0a9e3d07a37cad87c2235a762efa6a9b620372845
        Validity
            Not Before: Feb 21 13:46:49 2024 GMT
            Not After : Feb 19 13:51:49 2025 GMT
        Subject: CN=503B214B057A569CAFA04423DFE3401B311F3299
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:b5:2f:45:56:a5:44:f3:4d:00:2f:94:38:3a:
                    61:89:4c:97:46:b3:e8:09:9b:fd:26:7f:fa:5b:3a:
                    73:19:a7:91:6e:ba:b1:2f:ab:85:e5:08:60:06:0a:
                    02:cc:19:c7:1a:bc:67:03:26:79:01:e1:36:43:35:
                    7e:00:7e:89:f5:0a:cf:69:00:a1:57:b5:1c:a5:c7:
                    f6:d2:7c:75:a4:2c:eb:82:ec:40:2b:fb:af:53:4c:
                    ad:12:04:2c:75:cf:c2:87:9a:e9:3e:d2:1c:af:94:
                    84:36:91:86:fb:48:be:fa:f5:e3:70:81:28:36:44:
                    b8:bb:99:03:1e:4f:cc:52:1f:f5:f4:17:c0:32:ec:
                    ac:88:d5:74:4c:29:a9:29:d1:13:96:7b:c1:b3:ab:
                    db:55:b8:5d:06:0d:d2:d7:23:c9:c8:d7:cc:8f:9a:
                    e0:f8:98:8d:ee:ea:df:58:d0:e6:8d:76:dd:1a:00:
                    08:92:9d:99:bb:00:8f:ae:6d:fe:6e:bd:7b:f8:1e:
                    2d:14:a0:87:15:f4:f1:94:bc:80:42:6f:65:39:7d:
                    6e:34:00:d9:9e:dc:e9:a1:f5:94:02:3f:c5:e3:8f:
                    ee:2f:34:27:07:f1:4a:0f:58:04:7a:5f:9c:ba:32:
                    2e:e5:3d:1d:ba:ae:3f:02:10:70:9b:75:1b:0b:c6:
                    15:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:3B:21:4B:05:7A:56:9C:AF:A0:44:23:DF:E3:40:1B:31:1F:32:99
            X509v3 Authority Key Identifier:
                keyid:E9:AB:82:D4:D9:BF:4C:16:EA:6E:7C:FA:F3:EE:14:CF:EC:5A:4A:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf86941d5c0186998663d80702/0/E9AB82D4D9BF4C16EA6E7CFAF3EE14CFEC5A4A8A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ae85d24a-77d4-4cf7-80aa-c071199c2889/58f72174a0a9e3d07a37cad87c2235a762efa6a9b620372845.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf86941d5c0186998663d80702/0/3230382e39312e3138382e302f32342d3234203d3e203134363138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.91.188.0/24

    Signature Algorithm: sha256WithRSAEncryption
         80:f7:e5:e7:3f:ef:e7:b3:4f:8a:84:78:67:8a:a3:3a:58:ec:
         de:00:a7:ca:3b:18:71:7a:26:7e:9d:7b:85:fa:ae:f8:4c:46:
         21:bb:60:5f:da:ff:9a:02:0d:cc:d2:b8:37:a0:7a:cf:e0:b6:
         d4:03:6c:5c:74:c0:bb:f1:c1:d3:f7:6f:f0:6a:1d:d8:16:d4:
         d3:df:0b:fc:71:5b:be:cd:f5:ee:8c:13:6c:b1:f3:30:b9:2f:
         f5:30:02:02:c4:dc:64:4e:49:29:fa:8d:b8:50:aa:3f:0c:a5:
         e2:7f:6b:2d:23:5c:b4:1f:18:37:2a:33:3a:b9:c5:4c:87:8a:
         0e:f4:cc:18:bd:2f:99:4a:64:ee:f5:52:3a:f5:ee:a4:06:e6:
         39:44:02:b5:60:d2:09:69:bf:9d:0c:8d:7c:eb:3c:b9:ac:f3:
         05:2a:31:41:17:14:c1:4c:97:cc:86:b8:a5:2f:40:1e:6c:fb:
         4a:c4:19:e9:48:3d:f7:ab:6b:b5:7b:5f:de:07:4d:eb:4b:6a:
         97:e1:9b:61:9f:b0:a0:0b:12:65:db:81:ba:61:92:68:8b:bc:
         6e:7d:9e:29:f4:e4:0c:94:05:fa:e1:d8:6a:15:4e:22:6d:e6:
         15:34:c3:54:8c:45:e0:11:ad:6b:8d:7a:de:94:90:d5:ea:12:
         55:83:45:f4
-----BEGIN CERTIFICATE-----
MIIFsjCCBJqgAwIBAgIUFV3wVXQotoOkNVq965ySVyOIk54wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNThmNzIxNzRhMGE5ZTNkMDdhMzdjYWQ4N2MyMjM1YTc2
MmVmYTZhOWI2MjAzNzI4NDUwHhcNMjQwMjIxMTM0NjQ5WhcNMjUwMjE5MTM1MTQ5
WjAzMTEwLwYDVQQDEyg1MDNCMjE0QjA1N0E1NjlDQUZBMDQ0MjNERkUzNDAxQjMx
MUYzMjk5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtbUvRValRPNN
AC+UODphiUyXRrPoCZv9Jn/6WzpzGaeRbrqxL6uF5QhgBgoCzBnHGrxnAyZ5AeE2
QzV+AH6J9QrPaQChV7Ucpcf20nx1pCzrguxAK/uvU0ytEgQsdc/Ch5rpPtIcr5SE
NpGG+0i++vXjcIEoNkS4u5kDHk/MUh/19BfAMuysiNV0TCmpKdETlnvBs6vbVbhd
Bg3S1yPJyNfMj5rg+JiN7urfWNDmjXbdGgAIkp2ZuwCPrm3+br17+B4tFKCHFfTx
lLyAQm9lOX1uNADZntzpofWUAj/F44/uLzQnB/FKD1gEel+cujIu5T0duq4/AhBw
m3UbC8YVOQIDAQABo4ICsjCCAq4wHQYDVR0OBBYEFFA7IUsFelacr6BEI9/jQBsx
HzKZMB8GA1UdIwQYMBaAFOmrgtTZv0wW6m58+vPuFM/sWkqKMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmODY5NDFkNWMwMTg2OTk4NjYzZDgwNzAyLzAv
RTlBQjgyRDREOUJGNEMxNkVBNkU3Q0ZBRjNFRTE0Q0ZFQzVBNEE4QS5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0
OTMzYWU1L2FlODVkMjRhLTc3ZDQtNGNmNy04MGFhLWMwNzExOTljMjg4OS81OGY3
MjE3NGEwYTllM2QwN2EzN2NhZDg3YzIyMzVhNzYyZWZhNmE5YjYyMDM3Mjg0NS5j
ZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg2OTQxZDVjMDE4Njk5
ODY2M2Q4MDcwMi8wLzMyMzAzODJlMzkzMTJlMzEzODM4MmUzMDJmMzIzNDJkMzIz
NDIwM2QzZTIwMzEzNDM2MzEzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO
AjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEANBbvDANBgkqhkiG9w0BAQsF
AAOCAQEAgPfl5z/v57NPioR4Z4qjOljs3gCnyjsYcXomfp17hfqu+ExGIbtgX9r/
mgINzNK4N6B6z+C21ANsXHTAu/HB0/dv8God2BbU098L/HFbvs317owTbLHzMLkv
9TACAsTcZE5JKfqNuFCqPwyl4n9rLSNctB8YNyozOrnFTIeKDvTMGL0vmUpk7vVS
OvXupAbmOUQCtWDSCWm/nQyNfOs8uazzBSoxQRcUwUyXzIa4pS9AHmz7SsQZ6Ug9
96trtXtf3gdN60tql+GbYZ+woAsSZduBumGSaIu8bn2eKfTkDJQF+uHYahVOIm3m
FTTDVIxF4BGta4163pSQ1eoSVYNF9A==
-----END CERTIFICATE-----
Generated at Thu May 2 05:10:04 2024 by rpki-client on console-ams.rpki-client.org