Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf86941d5c0186998663d80702/0/36342e342e3136382e302f32342d3234203d3e20323132323338.roa
File:                     36342e342e3136382e302f32342d3234203d3e20323132323338.roa (raw, json)
Hash identifier:          SyTg5LPURXG9Anb5E2CpXDQ0v9MF9iosWPI6SbOkJVs=
Subject key identifier:   9B:68:18:3A:F4:2B:E5:0A:A6:25:67:1F:38:43:1E:AD:30:CA:69:ED
Certificate issuer:       /CN=58f72174a0a9e3d07a37cad87c2235a762efa6a9b620372845
Certificate serial:       48DE52A4AC610E6C460A21E16E4309B03B14444C
Authority key identifier: E9:AB:82:D4:D9:BF:4C:16:EA:6E:7C:FA:F3:EE:14:CF:EC:5A:4A:8A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ae85d24a-77d4-4cf7-80aa-c071199c2889/58f72174a0a9e3d07a37cad87c2235a762efa6a9b620372845.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf86941d5c0186998663d80702/0/36342e342e3136382e302f32342d3234203d3e20323132323338.roa
Signing time:             Mon 15 Apr 2024 14:45:03 +0000
ROA not before:           Mon 15 Apr 2024 14:40:03 +0000
ROA not after:            Mon 14 Apr 2025 14:45:03 +0000
asID:                     212238
IP address blocks:        64.4.168.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf86941d5c0186998663d80702/0/E9AB82D4D9BF4C16EA6E7CFAF3EE14CFEC5A4A8A.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf86941d5c0186998663d80702/0/E9AB82D4D9BF4C16EA6E7CFAF3EE14CFEC5A4A8A.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ae85d24a-77d4-4cf7-80aa-c071199c2889/58f72174a0a9e3d07a37cad87c2235a762efa6a9b620372845.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ae85d24a-77d4-4cf7-80aa-c071199c2889/ae85d24a-77d4-4cf7-80aa-c071199c2889.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ae85d24a-77d4-4cf7-80aa-c071199c2889/ae85d24a-77d4-4cf7-80aa-c071199c2889.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ae85d24a-77d4-4cf7-80aa-c071199c2889.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 20:59:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:de:52:a4:ac:61:0e:6c:46:0a:21:e1:6e:43:09:b0:3b:14:44:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58f72174a0a9e3d07a37cad87c2235a762efa6a9b620372845
        Validity
            Not Before: Apr 15 14:40:03 2024 GMT
            Not After : Apr 14 14:45:03 2025 GMT
        Subject: CN=9B68183AF42BE50AA625671F38431EAD30CA69ED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:e3:20:0a:a7:ed:0a:ae:db:f1:fa:5c:19:fe:
                    82:82:25:cc:99:cd:71:60:d5:86:88:15:3f:6c:50:
                    60:60:ec:3f:58:32:d7:5f:8b:af:07:2a:91:a8:1c:
                    bf:0c:48:6a:67:54:a1:d6:d1:d3:88:b7:00:ac:83:
                    59:72:98:c6:96:a6:8c:ad:b7:1a:38:45:7b:eb:b9:
                    28:67:21:f2:d6:95:ed:6a:aa:71:f4:84:86:ef:9d:
                    89:69:5f:82:f3:96:25:ec:2d:7d:d3:3c:0d:77:93:
                    ef:2d:6b:be:95:8f:8f:70:7d:f8:bc:43:a6:8e:43:
                    a8:be:2a:1b:1f:03:f8:52:02:79:51:60:60:ae:64:
                    64:02:dd:b8:25:1e:79:23:b3:03:25:06:92:bf:34:
                    90:61:8f:2d:73:95:14:09:2a:10:77:bc:ef:18:13:
                    8d:76:43:ac:a0:63:75:2d:48:97:c0:43:24:c5:f9:
                    7f:39:7c:82:c2:c1:1a:52:b8:12:9e:c5:c6:53:e2:
                    cb:0a:0d:83:03:cc:64:66:63:0a:1b:5f:e2:e4:85:
                    9e:b8:5f:c6:51:b3:44:54:b0:81:71:4e:98:73:29:
                    1a:bd:01:73:3f:3f:5f:53:5a:e4:6f:c0:1b:a4:0a:
                    91:00:7c:ce:ef:a9:38:46:6b:33:61:49:59:03:04:
                    af:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:68:18:3A:F4:2B:E5:0A:A6:25:67:1F:38:43:1E:AD:30:CA:69:ED
            X509v3 Authority Key Identifier:
                keyid:E9:AB:82:D4:D9:BF:4C:16:EA:6E:7C:FA:F3:EE:14:CF:EC:5A:4A:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf86941d5c0186998663d80702/0/E9AB82D4D9BF4C16EA6E7CFAF3EE14CFEC5A4A8A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ae85d24a-77d4-4cf7-80aa-c071199c2889/58f72174a0a9e3d07a37cad87c2235a762efa6a9b620372845.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf86941d5c0186998663d80702/0/36342e342e3136382e302f32342d3234203d3e20323132323338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.4.168.0/24

    Signature Algorithm: sha256WithRSAEncryption
         52:27:b4:1c:97:6f:24:dc:94:73:7a:9e:1c:47:9d:13:56:b1:
         76:28:22:fe:3d:92:91:91:8e:11:83:cb:ca:66:e7:bd:c6:db:
         5f:9b:71:7e:74:12:37:1b:14:eb:de:68:ed:ac:83:a4:ad:e9:
         72:e4:b6:05:61:26:85:7f:9d:61:a4:49:03:3f:99:0c:85:ca:
         f6:e9:d0:6b:95:61:41:32:31:f9:12:39:9f:01:6e:14:3d:61:
         e9:e6:98:2e:b8:2e:e5:cc:26:a3:10:03:06:c4:76:8d:ab:ab:
         e9:03:2c:37:36:fd:ff:30:8b:e5:07:85:59:23:3b:87:79:60:
         a0:08:ca:47:77:12:db:4e:d1:47:88:ad:84:45:18:b2:e3:ca:
         88:b1:20:02:80:19:e5:56:5a:ee:11:3b:db:4d:e5:37:32:da:
         0e:6a:05:f0:5b:2e:44:7e:39:08:4a:94:82:f3:b4:93:17:a9:
         c8:24:bc:d6:50:7d:94:ec:b8:df:f7:bb:53:4a:46:55:dc:9d:
         58:bf:b5:88:e0:70:09:c7:88:0c:4d:a0:4c:a3:69:b6:75:d3:
         de:64:ff:05:53:41:05:70:56:1d:17:81:57:3d:8a:ab:9a:c6:
         44:48:7f:7c:2b:e4:fc:9d:8b:6c:7e:4f:2b:69:5b:0d:84:81:
         6f:f7:fb:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:34:39 2024 by rpki-client on console-fra.rpki-client.org