Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf86941d5c0186998663d80702/0/36342e342e3136392e302f32342d3234203d3e203431303935.roa
File:                     36342e342e3136392e302f32342d3234203d3e203431303935.roa (raw, json)
Hash identifier:          WPLA/U2BcprjWedqFgq5RQsgFOJEnErvRsQVI3Rhvfo=
Subject key identifier:   E1:80:24:1A:A2:99:EA:5D:A0:18:D1:AA:AC:11:8C:3D:08:6D:A9:A1
Certificate issuer:       /CN=58f72174a0a9e3d07a37cad87c2235a762efa6a9b620372845
Certificate serial:       27DC7C5CF4301770D5AA6D6BDFD0CDFAB8BE6927
Authority key identifier: E9:AB:82:D4:D9:BF:4C:16:EA:6E:7C:FA:F3:EE:14:CF:EC:5A:4A:8A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ae85d24a-77d4-4cf7-80aa-c071199c2889/58f72174a0a9e3d07a37cad87c2235a762efa6a9b620372845.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf86941d5c0186998663d80702/0/36342e342e3136392e302f32342d3234203d3e203431303935.roa
Signing time:             Tue 02 Jul 2024 03:48:59 +0000
ROA not before:           Tue 02 Jul 2024 03:43:59 +0000
ROA not after:            Tue 01 Jul 2025 03:48:59 +0000
asID:                     41095
IP address blocks:        64.4.169.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf86941d5c0186998663d80702/0/E9AB82D4D9BF4C16EA6E7CFAF3EE14CFEC5A4A8A.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf86941d5c0186998663d80702/0/E9AB82D4D9BF4C16EA6E7CFAF3EE14CFEC5A4A8A.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ae85d24a-77d4-4cf7-80aa-c071199c2889/58f72174a0a9e3d07a37cad87c2235a762efa6a9b620372845.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ae85d24a-77d4-4cf7-80aa-c071199c2889/ae85d24a-77d4-4cf7-80aa-c071199c2889.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ae85d24a-77d4-4cf7-80aa-c071199c2889/ae85d24a-77d4-4cf7-80aa-c071199c2889.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ae85d24a-77d4-4cf7-80aa-c071199c2889.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 20:59:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:dc:7c:5c:f4:30:17:70:d5:aa:6d:6b:df:d0:cd:fa:b8:be:69:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58f72174a0a9e3d07a37cad87c2235a762efa6a9b620372845
        Validity
            Not Before: Jul  2 03:43:59 2024 GMT
            Not After : Jul  1 03:48:59 2025 GMT
        Subject: CN=E180241AA299EA5DA018D1AAAC118C3D086DA9A1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:fd:63:ed:a1:d5:e9:4c:9e:c5:d0:d0:34:f5:
                    d6:43:96:f5:74:4a:8b:75:58:74:e5:fd:0d:ce:22:
                    c1:80:ba:60:15:2c:79:17:4f:9f:f5:cc:f0:21:e9:
                    b9:3f:12:c3:bc:c2:36:d3:34:59:b1:de:d8:f0:3d:
                    9c:f1:4a:4e:5a:6c:13:33:48:ec:ec:85:9d:21:19:
                    ce:7b:ae:ed:c3:ff:f0:ff:7a:06:e0:55:4a:b8:43:
                    5b:87:c9:2c:bb:cf:47:d8:a1:86:cc:3d:6d:28:e4:
                    19:b6:9d:ce:1f:88:f1:d8:cc:f0:08:a9:d3:35:77:
                    1f:69:8e:24:3b:a6:19:7b:02:5c:ad:fa:c0:13:2f:
                    e1:e6:80:df:d9:8d:54:71:3b:53:59:09:cd:c6:65:
                    b1:51:4a:e0:cf:1a:8e:04:fa:9d:a1:0a:ea:c6:cb:
                    14:88:75:6d:29:9f:58:cc:7c:9d:08:ed:d2:d3:97:
                    3b:e1:52:02:56:46:e1:19:27:c5:d4:f1:87:b3:0b:
                    c2:48:96:4c:c4:6d:ea:b8:ec:bc:77:55:d5:3e:f9:
                    ce:c0:68:82:e4:f1:d5:eb:12:68:24:fc:4e:2c:a7:
                    7b:a4:5d:aa:de:ed:a6:60:2b:b9:21:ff:b9:ac:aa:
                    25:f6:79:7c:ff:a5:c2:30:f3:d7:96:64:27:30:f4:
                    2f:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:80:24:1A:A2:99:EA:5D:A0:18:D1:AA:AC:11:8C:3D:08:6D:A9:A1
            X509v3 Authority Key Identifier:
                keyid:E9:AB:82:D4:D9:BF:4C:16:EA:6E:7C:FA:F3:EE:14:CF:EC:5A:4A:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf86941d5c0186998663d80702/0/E9AB82D4D9BF4C16EA6E7CFAF3EE14CFEC5A4A8A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ae85d24a-77d4-4cf7-80aa-c071199c2889/58f72174a0a9e3d07a37cad87c2235a762efa6a9b620372845.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf86941d5c0186998663d80702/0/36342e342e3136392e302f32342d3234203d3e203431303935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.4.169.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6c:92:6e:42:5b:a5:23:72:3e:66:72:7d:2e:9c:c9:82:5e:18:
         7d:75:bd:62:06:3e:bb:5d:8e:cf:d1:e9:e5:ae:8f:79:13:84:
         7f:00:83:3f:69:eb:79:d9:e1:2b:4e:ec:76:fc:4d:51:07:46:
         87:73:08:6d:e2:93:4c:71:91:90:ee:78:90:55:c9:fe:6b:54:
         d3:7c:12:3f:af:45:10:36:6a:f2:1d:15:0c:50:35:c7:3b:24:
         aa:0b:23:2f:1d:25:9b:59:18:e1:8b:07:c6:e9:61:bc:04:13:
         1e:2d:f3:22:87:bf:ee:50:37:d1:0c:8f:9c:2a:2f:57:1c:b1:
         02:52:8f:64:2d:81:fd:d9:48:07:7c:1c:91:28:7c:27:a4:ec:
         fa:90:d1:e7:72:36:76:b8:1e:39:b6:a8:4b:e5:13:23:64:50:
         9f:35:28:2f:14:6d:c6:30:db:e6:c7:ea:fb:94:36:3b:03:6d:
         54:33:08:c4:b3:ba:a8:55:1e:da:d0:a6:38:b2:5b:b4:19:c6:
         b9:ca:27:93:a1:68:26:72:83:76:52:70:12:74:01:91:11:f5:
         60:57:dc:27:02:de:28:54:c2:57:3d:28:70:35:c9:dd:25:5c:
         52:e3:b2:2a:a3:4f:a7:bd:a9:fa:c3:10:f0:88:d5:96:09:4d:
         38:e0:85:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:34:59 2024 by rpki-client on console-ams.rpki-client.org