Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf86941d5c0186998663d80702/0/3230382e39312e3139302e302f32342d3234203d3e20383334.roa
File:                     3230382e39312e3139302e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier:          RbExpaaOMyDFECAlQMbAJxPco6g+eqqWrke4X3aQKLI=
Subject key identifier:   ED:49:BA:27:1E:BD:62:CC:76:17:45:B4:D4:2A:76:7A:B0:16:D5:F0
Certificate issuer:       /CN=58f72174a0a9e3d07a37cad87c2235a762efa6a9b620372845
Certificate serial:       3D11D728B957FDD09CC57E100A8A105EE3E22B1E
Authority key identifier: E9:AB:82:D4:D9:BF:4C:16:EA:6E:7C:FA:F3:EE:14:CF:EC:5A:4A:8A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ae85d24a-77d4-4cf7-80aa-c071199c2889/58f72174a0a9e3d07a37cad87c2235a762efa6a9b620372845.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf86941d5c0186998663d80702/0/3230382e39312e3139302e302f32342d3234203d3e20383334.roa
Signing time:             Fri 30 Jun 2023 00:00:33 +0000
ROA not before:           Thu 29 Jun 2023 23:55:33 +0000
ROA not after:            Fri 28 Jun 2024 00:00:33 +0000
asID:                     834
IP address blocks:        208.91.190.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf86941d5c0186998663d80702/0/E9AB82D4D9BF4C16EA6E7CFAF3EE14CFEC5A4A8A.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf86941d5c0186998663d80702/0/E9AB82D4D9BF4C16EA6E7CFAF3EE14CFEC5A4A8A.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ae85d24a-77d4-4cf7-80aa-c071199c2889/58f72174a0a9e3d07a37cad87c2235a762efa6a9b620372845.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ae85d24a-77d4-4cf7-80aa-c071199c2889/ae85d24a-77d4-4cf7-80aa-c071199c2889.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ae85d24a-77d4-4cf7-80aa-c071199c2889/ae85d24a-77d4-4cf7-80aa-c071199c2889.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ae85d24a-77d4-4cf7-80aa-c071199c2889.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 02 May 2024 12:19:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:11:d7:28:b9:57:fd:d0:9c:c5:7e:10:0a:8a:10:5e:e3:e2:2b:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58f72174a0a9e3d07a37cad87c2235a762efa6a9b620372845
        Validity
            Not Before: Jun 29 23:55:33 2023 GMT
            Not After : Jun 28 00:00:33 2024 GMT
        Subject: CN=ED49BA271EBD62CC761745B4D42A767AB016D5F0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:2d:3b:5c:cf:88:aa:c7:3b:1a:b7:f5:1e:48:
                    99:33:c3:e9:29:86:03:f1:2f:3f:cc:90:50:5d:71:
                    e7:41:b8:f8:ef:29:58:0d:c7:28:fc:c4:a3:01:37:
                    ee:cc:a8:5d:f9:3c:a5:8c:a5:a5:ba:4b:57:a6:fd:
                    b5:33:06:49:99:45:c6:9e:fe:fe:d7:a8:e1:be:d7:
                    19:97:28:ed:01:85:6d:c7:b2:e6:35:1f:57:97:23:
                    e6:f5:39:b5:f5:ab:6a:f9:72:f3:ee:ec:f2:47:51:
                    bf:c0:f7:95:f6:f7:9f:d4:0c:ef:0f:c3:62:95:a9:
                    90:8c:9c:04:ff:78:58:8c:0e:ff:04:61:c4:2d:92:
                    82:28:15:39:e0:42:75:69:e3:f7:c1:45:7d:f2:b7:
                    17:7e:38:09:f5:75:02:7a:89:15:17:13:9b:97:c6:
                    ce:fd:fc:b4:b6:a4:d0:2a:da:2c:1c:8f:52:23:3c:
                    8c:64:bd:35:2c:dc:1d:fa:f5:02:45:0f:91:cd:b9:
                    9e:52:36:60:d3:2f:94:03:90:80:e1:48:3f:e7:74:
                    58:0f:78:47:c7:19:32:7c:0e:ed:6e:f1:ef:1f:7e:
                    a7:cf:ab:f0:1a:17:ce:e5:a1:13:5c:ec:e0:5f:fa:
                    b1:b0:eb:56:be:0d:2e:a3:f0:8b:4c:8d:6d:cd:2d:
                    22:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:49:BA:27:1E:BD:62:CC:76:17:45:B4:D4:2A:76:7A:B0:16:D5:F0
            X509v3 Authority Key Identifier:
                keyid:E9:AB:82:D4:D9:BF:4C:16:EA:6E:7C:FA:F3:EE:14:CF:EC:5A:4A:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf86941d5c0186998663d80702/0/E9AB82D4D9BF4C16EA6E7CFAF3EE14CFEC5A4A8A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ae85d24a-77d4-4cf7-80aa-c071199c2889/58f72174a0a9e3d07a37cad87c2235a762efa6a9b620372845.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf86941d5c0186998663d80702/0/3230382e39312e3139302e302f32342d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.91.190.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1d:69:5e:b4:9c:2f:78:63:df:d1:3a:6a:3e:13:86:12:82:91:
         d6:7b:1e:a3:d8:b3:c5:41:f5:d2:f7:92:55:7b:8c:37:03:b5:
         d7:ec:2f:7a:51:09:62:9e:82:27:fd:26:1e:70:e7:f0:24:45:
         93:75:0a:f6:dd:d9:0c:bc:e4:1d:78:17:32:ac:b5:8d:8f:c4:
         48:1a:88:97:9a:e6:68:60:c3:81:dc:4d:24:99:84:b0:bf:17:
         5c:74:8c:0a:02:9c:fb:a0:73:9e:f4:61:b5:bf:ad:7c:1e:29:
         7c:67:33:4a:5c:da:78:84:1f:06:37:bf:6f:ee:6b:cd:a0:c6:
         29:3e:47:da:f1:31:e7:9e:ef:45:11:0c:71:c3:fa:e3:67:e4:
         f7:d9:53:17:47:7c:e0:de:a5:34:1e:fc:1b:f4:21:5b:2b:d8:
         f3:22:ca:71:73:f8:82:e7:f6:20:68:6e:09:d1:27:9f:14:6d:
         00:ce:4f:e1:4c:c9:1f:90:bb:92:23:59:34:11:f9:c1:99:fd:
         e4:fb:8f:74:fb:6d:6d:69:cf:88:1c:86:da:df:a0:93:ee:f6:
         e3:c3:18:0f:a8:63:00:48:42:a9:b3:a2:31:fe:a7:ea:b5:ca:
         15:85:64:17:15:3e:d9:d3:f6:f1:17:88:3a:9e:3d:c6:2e:db:
         21:43:1c:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 10:32:48 2024 by rpki-client on console-fra.rpki-client.org