Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf86941d5c0186998663d80702/0/3230382e39312e3139302e302f32342d3234203d3e203533333536.roa
File:                     3230382e39312e3139302e302f32342d3234203d3e203533333536.roa (raw, json)
Hash identifier:          pzF0Sd/vsJ8zAFpUgZS93jprgNMEnp4Gm0ULra7Eyag=
Subject key identifier:   ED:8F:D4:F7:87:96:E3:B1:A0:70:B5:AA:C2:D4:FB:8D:03:81:BA:44
Certificate issuer:       /CN=58f72174a0a9e3d07a37cad87c2235a762efa6a9b620372845
Certificate serial:       3DBE0A1FB1C4360F194A77C214A418CE877ED067
Authority key identifier: E9:AB:82:D4:D9:BF:4C:16:EA:6E:7C:FA:F3:EE:14:CF:EC:5A:4A:8A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ae85d24a-77d4-4cf7-80aa-c071199c2889/58f72174a0a9e3d07a37cad87c2235a762efa6a9b620372845.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf86941d5c0186998663d80702/0/3230382e39312e3139302e302f32342d3234203d3e203533333536.roa
Signing time:             Tue 29 Oct 2024 10:30:09 +0000
ROA not before:           Tue 29 Oct 2024 10:25:09 +0000
ROA not after:            Tue 28 Oct 2025 10:30:09 +0000
asID:                     53356
IP address blocks:        208.91.190.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf86941d5c0186998663d80702/0/E9AB82D4D9BF4C16EA6E7CFAF3EE14CFEC5A4A8A.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf86941d5c0186998663d80702/0/E9AB82D4D9BF4C16EA6E7CFAF3EE14CFEC5A4A8A.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ae85d24a-77d4-4cf7-80aa-c071199c2889/58f72174a0a9e3d07a37cad87c2235a762efa6a9b620372845.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ae85d24a-77d4-4cf7-80aa-c071199c2889/ae85d24a-77d4-4cf7-80aa-c071199c2889.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ae85d24a-77d4-4cf7-80aa-c071199c2889/ae85d24a-77d4-4cf7-80aa-c071199c2889.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ae85d24a-77d4-4cf7-80aa-c071199c2889.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 20:59:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:be:0a:1f:b1:c4:36:0f:19:4a:77:c2:14:a4:18:ce:87:7e:d0:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58f72174a0a9e3d07a37cad87c2235a762efa6a9b620372845
        Validity
            Not Before: Oct 29 10:25:09 2024 GMT
            Not After : Oct 28 10:30:09 2025 GMT
        Subject: CN=ED8FD4F78796E3B1A070B5AAC2D4FB8D0381BA44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:70:ef:18:2a:e2:03:da:99:90:d5:b3:01:56:
                    7c:c1:4c:f1:ce:c4:00:28:34:f0:b9:59:cc:7e:d9:
                    6e:e5:bc:a0:d5:2f:6a:8d:a2:90:30:2f:40:bc:a9:
                    18:f7:4e:b0:49:a3:38:47:1f:9d:5d:a6:42:ec:ed:
                    7f:f7:92:0c:24:ff:ed:ff:86:6c:76:b4:70:6b:23:
                    59:e9:20:69:96:5a:78:2c:24:0f:7f:ea:72:99:dd:
                    03:2e:92:fc:42:39:9c:ea:5d:84:40:ab:28:02:7c:
                    5f:d7:3f:ab:8d:e2:06:50:fc:25:48:fa:5b:2a:ea:
                    0c:56:e0:9c:43:33:06:e8:ee:2c:fb:62:e4:e7:7f:
                    aa:5b:4d:3a:16:cd:d5:68:7a:9e:19:be:96:db:07:
                    44:70:72:af:11:85:e6:08:97:c8:66:96:70:f7:55:
                    36:3e:8d:07:f6:c6:e3:9d:27:8e:56:5f:2e:f9:57:
                    fd:05:6a:98:ad:fe:c6:54:e3:5d:2a:70:49:68:1e:
                    2d:55:c1:68:a8:9c:cd:2e:2a:7a:fe:8a:0c:4d:c1:
                    e8:d9:37:6b:f0:5e:e1:2c:82:36:4b:28:28:e6:6b:
                    89:39:ec:b1:2a:6d:73:f9:4e:e0:72:26:2f:e0:9c:
                    e8:91:6c:ee:56:8b:a8:02:0f:d5:95:8c:31:a2:f4:
                    d7:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:8F:D4:F7:87:96:E3:B1:A0:70:B5:AA:C2:D4:FB:8D:03:81:BA:44
            X509v3 Authority Key Identifier:
                keyid:E9:AB:82:D4:D9:BF:4C:16:EA:6E:7C:FA:F3:EE:14:CF:EC:5A:4A:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf86941d5c0186998663d80702/0/E9AB82D4D9BF4C16EA6E7CFAF3EE14CFEC5A4A8A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ae85d24a-77d4-4cf7-80aa-c071199c2889/58f72174a0a9e3d07a37cad87c2235a762efa6a9b620372845.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf86941d5c0186998663d80702/0/3230382e39312e3139302e302f32342d3234203d3e203533333536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.91.190.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a0:5e:db:ed:15:3d:75:e0:67:57:96:c7:20:89:74:0d:22:cc:
         d4:2d:c9:d3:ff:da:9e:72:de:92:09:b8:be:cc:95:03:72:1e:
         01:25:0f:e0:2c:c4:78:a7:9f:f8:d1:fb:23:e3:d1:a3:82:e6:
         f4:78:e7:bb:21:a4:bf:da:2a:92:58:f6:a7:b9:02:74:68:95:
         ed:b4:a3:b3:6b:6c:bf:05:7a:50:89:8b:88:b3:07:16:ff:6e:
         d0:d6:81:92:b0:e2:8f:1a:1f:16:31:06:a2:bf:1e:2e:19:5a:
         82:ef:eb:f9:ed:97:39:fc:d8:43:31:2b:f5:85:14:d4:6e:7a:
         db:f8:a1:2c:72:5a:ae:3d:e9:bb:84:28:8f:83:90:b5:d6:4d:
         6e:52:95:97:3e:26:3c:a2:f5:bb:28:df:7f:5d:bc:48:49:9b:
         6c:30:ae:81:23:ee:92:39:04:42:00:6f:30:e6:b8:99:ea:3b:
         7e:82:7b:81:d3:03:12:ae:df:53:18:f1:64:fa:ae:1d:21:f7:
         bf:6c:d5:35:5b:5f:33:0d:7e:ca:6d:15:91:01:9b:26:dd:f1:
         67:10:18:97:44:ca:af:bd:2f:b9:f1:6e:3b:e0:45:5e:92:fc:
         db:c8:0e:02:6c:75:6d:0b:89:ca:05:12:2d:97:3b:d2:2f:b8:
         9d:b1:c7:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:34:59 2024 by rpki-client on console-ams.rpki-client.org