Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf86941d5c0186998663d80702/0/3230382e39312e3138392e302f32342d3234203d3e203134333135.roa
File:                     3230382e39312e3138392e302f32342d3234203d3e203134333135.roa (raw, json)
Hash identifier:          HscaWIERLDCUcCeZmNopZR81Nn0T2wngsi3uuNEwMFM=
Subject key identifier:   12:45:87:87:03:5A:A3:B6:48:78:C2:17:F4:0E:BD:EB:32:DE:55:12
Certificate issuer:       /CN=58f72174a0a9e3d07a37cad87c2235a762efa6a9b620372845
Certificate serial:       338C797560C4BA920C740240ACA3699AB7C9BBA3
Authority key identifier: E9:AB:82:D4:D9:BF:4C:16:EA:6E:7C:FA:F3:EE:14:CF:EC:5A:4A:8A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ae85d24a-77d4-4cf7-80aa-c071199c2889/58f72174a0a9e3d07a37cad87c2235a762efa6a9b620372845.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf86941d5c0186998663d80702/0/3230382e39312e3138392e302f32342d3234203d3e203134333135.roa
Signing time:             Tue 02 Jul 2024 07:30:43 +0000
ROA not before:           Tue 02 Jul 2024 07:25:43 +0000
ROA not after:            Tue 01 Jul 2025 07:30:43 +0000
asID:                     14315
IP address blocks:        208.91.189.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf86941d5c0186998663d80702/0/E9AB82D4D9BF4C16EA6E7CFAF3EE14CFEC5A4A8A.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf86941d5c0186998663d80702/0/E9AB82D4D9BF4C16EA6E7CFAF3EE14CFEC5A4A8A.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ae85d24a-77d4-4cf7-80aa-c071199c2889/58f72174a0a9e3d07a37cad87c2235a762efa6a9b620372845.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ae85d24a-77d4-4cf7-80aa-c071199c2889/ae85d24a-77d4-4cf7-80aa-c071199c2889.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ae85d24a-77d4-4cf7-80aa-c071199c2889/ae85d24a-77d4-4cf7-80aa-c071199c2889.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ae85d24a-77d4-4cf7-80aa-c071199c2889.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Nov 2024 21:43:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:8c:79:75:60:c4:ba:92:0c:74:02:40:ac:a3:69:9a:b7:c9:bb:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58f72174a0a9e3d07a37cad87c2235a762efa6a9b620372845
        Validity
            Not Before: Jul  2 07:25:43 2024 GMT
            Not After : Jul  1 07:30:43 2025 GMT
        Subject: CN=12458787035AA3B64878C217F40EBDEB32DE5512
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:93:bf:50:ca:b6:80:17:3b:b4:1d:60:15:a1:
                    51:93:aa:b8:68:f4:d9:81:5d:8f:0f:f6:52:5f:92:
                    8d:87:ce:08:fd:bc:e5:72:94:5e:34:30:3a:73:2c:
                    6f:69:a5:fc:56:ba:6a:4e:0f:13:b9:ab:f6:09:d2:
                    97:d2:a8:5e:01:ed:8f:1f:09:5d:5d:97:f8:8d:fe:
                    b8:1d:b1:9e:e1:a6:23:86:a2:20:0f:3d:99:71:97:
                    96:d0:80:4e:39:6f:4d:b4:58:7d:b6:a1:68:40:3a:
                    be:b5:50:20:7f:71:b6:91:1e:7e:c7:4d:29:97:12:
                    2e:a6:ee:e1:df:ad:f6:c4:e5:f5:76:e2:30:f1:8e:
                    d9:0c:d0:f2:0c:7e:d4:fe:f0:91:c7:28:af:b5:b9:
                    f6:70:72:11:44:99:14:00:6c:54:20:29:e5:90:d3:
                    a4:af:44:28:79:80:53:2e:f4:ad:32:e4:d2:2f:10:
                    a2:6a:d6:63:97:12:1e:ba:88:f9:df:ae:3e:59:e4:
                    7c:aa:45:dc:21:ca:4a:92:91:4e:d3:38:32:ee:2a:
                    9a:d8:91:c9:60:11:2c:b0:0b:7a:71:9e:cd:e9:34:
                    d3:a4:08:99:68:87:5c:48:f4:cf:88:5e:6b:aa:f0:
                    c8:0d:3c:03:e7:72:01:ea:bc:d2:59:ec:88:5e:97:
                    3e:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:45:87:87:03:5A:A3:B6:48:78:C2:17:F4:0E:BD:EB:32:DE:55:12
            X509v3 Authority Key Identifier:
                keyid:E9:AB:82:D4:D9:BF:4C:16:EA:6E:7C:FA:F3:EE:14:CF:EC:5A:4A:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf86941d5c0186998663d80702/0/E9AB82D4D9BF4C16EA6E7CFAF3EE14CFEC5A4A8A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ae85d24a-77d4-4cf7-80aa-c071199c2889/58f72174a0a9e3d07a37cad87c2235a762efa6a9b620372845.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf86941d5c0186998663d80702/0/3230382e39312e3138392e302f32342d3234203d3e203134333135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.91.189.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5f:62:95:de:f5:c5:9b:5e:05:25:73:49:b5:19:3c:ac:a4:6b:
         c7:8f:83:8d:61:de:c2:3c:d8:67:cc:06:1e:15:b7:df:43:d4:
         46:ae:5a:ca:e8:bb:cc:06:b2:00:94:c3:99:06:73:93:d3:29:
         1c:c8:5c:3e:48:45:ac:fc:33:da:0b:1f:86:b0:70:cf:67:f6:
         4c:11:6d:c2:b5:fd:01:4b:cc:96:d0:05:71:26:46:65:cc:52:
         68:b2:1b:49:ef:6f:38:00:03:ba:bd:94:f2:60:6d:16:b0:05:
         85:2e:5b:57:f7:6f:a0:72:64:db:bd:f8:be:5c:0b:5b:d6:ca:
         d0:72:c7:64:13:73:45:c8:0a:8b:b0:bf:d1:99:56:23:da:c2:
         5e:94:cc:ee:50:c2:11:f9:eb:4c:e8:14:e0:b7:b3:80:56:18:
         da:42:f8:05:7c:6c:e3:ae:b9:8d:dc:40:3d:73:aa:56:3e:51:
         25:19:fd:27:9e:71:d3:c9:7c:e0:7a:22:26:1d:67:f6:de:69:
         9c:48:a0:d8:2e:f1:73:07:6a:bd:b3:90:cd:f7:d5:6e:f0:02:
         2e:ef:f9:03:f1:16:71:4b:40:4e:b6:13:64:43:3f:fc:40:25:
         6c:f5:67:41:c6:c3:49:5a:26:6d:0b:8d:ae:5e:d8:b4:bf:df:
         c3:d5:e8:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 18:34:35 2024 by rpki-client on console-fra.rpki-client.org