Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf86941d5c0186998663d80702/0/36342e342e3137312e302f32342d3234203d3e20323030303137.roa
File:                     36342e342e3137312e302f32342d3234203d3e20323030303137.roa (raw, json)
Hash identifier:          9ptKbXmYaLjQsPUbsrCy3bViVxoO+EJ9ZlA2D06sZaE=
Subject key identifier:   BE:57:22:96:C1:C2:B5:D8:41:91:30:60:5F:EE:8E:87:8F:EA:55:C3
Certificate issuer:       /CN=58f72174a0a9e3d07a37cad87c2235a762efa6a9b620372845
Certificate serial:       398B398DDD415335F59FA55E97CE5E91D5F10BBF
Authority key identifier: E9:AB:82:D4:D9:BF:4C:16:EA:6E:7C:FA:F3:EE:14:CF:EC:5A:4A:8A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ae85d24a-77d4-4cf7-80aa-c071199c2889/58f72174a0a9e3d07a37cad87c2235a762efa6a9b620372845.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf86941d5c0186998663d80702/0/36342e342e3137312e302f32342d3234203d3e20323030303137.roa
Signing time:             Tue 06 Feb 2024 09:13:37 +0000
ROA not before:           Tue 06 Feb 2024 09:08:37 +0000
ROA not after:            Tue 04 Feb 2025 09:13:37 +0000
asID:                     200017
IP address blocks:        64.4.171.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf86941d5c0186998663d80702/0/E9AB82D4D9BF4C16EA6E7CFAF3EE14CFEC5A4A8A.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf86941d5c0186998663d80702/0/E9AB82D4D9BF4C16EA6E7CFAF3EE14CFEC5A4A8A.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ae85d24a-77d4-4cf7-80aa-c071199c2889/58f72174a0a9e3d07a37cad87c2235a762efa6a9b620372845.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ae85d24a-77d4-4cf7-80aa-c071199c2889/ae85d24a-77d4-4cf7-80aa-c071199c2889.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ae85d24a-77d4-4cf7-80aa-c071199c2889/ae85d24a-77d4-4cf7-80aa-c071199c2889.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ae85d24a-77d4-4cf7-80aa-c071199c2889.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 20:59:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:8b:39:8d:dd:41:53:35:f5:9f:a5:5e:97:ce:5e:91:d5:f1:0b:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58f72174a0a9e3d07a37cad87c2235a762efa6a9b620372845
        Validity
            Not Before: Feb  6 09:08:37 2024 GMT
            Not After : Feb  4 09:13:37 2025 GMT
        Subject: CN=BE572296C1C2B5D8419130605FEE8E878FEA55C3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:b6:6c:47:ce:18:2a:8f:2d:e6:cb:ff:eb:2b:
                    60:2e:55:a9:92:d3:23:47:bb:24:70:af:f9:45:65:
                    3d:53:d9:c4:02:37:29:dc:19:44:6f:38:cf:45:42:
                    07:50:81:54:03:87:9b:53:10:d4:65:c2:b7:db:4e:
                    e2:9f:e4:12:f3:fd:59:14:cf:c5:8b:23:51:ca:94:
                    e2:c6:40:1a:91:be:d7:ee:c0:1e:21:9e:9f:d7:91:
                    79:c1:3e:aa:3d:fc:03:21:56:28:88:b3:14:dd:6a:
                    1b:78:d2:ba:75:df:fa:12:4f:22:eb:4f:0c:b1:82:
                    d0:4f:44:43:17:da:04:50:41:e6:52:4f:09:59:0f:
                    2e:33:e7:f0:a4:69:ee:0c:78:04:5d:c7:0d:e2:68:
                    c2:49:90:8c:81:95:fb:cf:0e:e0:e9:13:41:12:e2:
                    8c:1e:4b:cf:64:d6:93:83:9b:62:42:9b:34:c1:83:
                    8d:e4:55:ea:6a:0f:a4:e8:cc:f3:ee:17:ad:43:cd:
                    22:47:11:0e:ee:dd:4b:4a:1a:6d:43:89:e3:aa:05:
                    88:4a:b8:64:90:93:62:2b:8f:b8:3f:43:31:c5:18:
                    ea:d2:70:93:fa:53:b6:25:a0:7f:35:2e:19:9d:69:
                    28:26:f8:c7:8e:5e:cd:b3:fc:f6:84:1f:27:1f:fc:
                    d3:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:57:22:96:C1:C2:B5:D8:41:91:30:60:5F:EE:8E:87:8F:EA:55:C3
            X509v3 Authority Key Identifier:
                keyid:E9:AB:82:D4:D9:BF:4C:16:EA:6E:7C:FA:F3:EE:14:CF:EC:5A:4A:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf86941d5c0186998663d80702/0/E9AB82D4D9BF4C16EA6E7CFAF3EE14CFEC5A4A8A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ae85d24a-77d4-4cf7-80aa-c071199c2889/58f72174a0a9e3d07a37cad87c2235a762efa6a9b620372845.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf86941d5c0186998663d80702/0/36342e342e3137312e302f32342d3234203d3e20323030303137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.4.171.0/24

    Signature Algorithm: sha256WithRSAEncryption
         21:08:f6:bd:02:2e:94:47:7a:04:56:bf:46:99:09:57:4f:b0:
         6f:5d:ea:ac:22:e6:27:66:02:e7:0f:b2:10:96:2f:f9:0f:55:
         f5:48:a4:cf:a9:13:10:e8:eb:8b:96:48:b4:e4:16:fb:fb:43:
         dc:37:7f:57:c1:b2:93:2f:ea:b4:66:b7:57:ee:4d:69:ec:2f:
         2c:82:90:95:b9:90:fe:5e:29:8c:87:23:28:10:bf:51:50:02:
         ea:65:17:be:46:60:43:c1:cd:f1:46:00:08:d1:58:8f:76:8f:
         fa:14:cf:4b:bc:ad:37:b3:6c:f0:85:1d:e1:2c:3f:1f:5f:39:
         fe:ce:b6:05:0f:d7:e5:a6:76:e1:2a:76:86:cf:01:5d:9c:f9:
         0d:ad:c8:4a:6f:2b:9d:4b:6b:0c:ca:93:b0:4e:c5:21:cf:77:
         3b:57:2f:39:1c:d5:3f:68:aa:f9:e9:c2:c7:7b:59:5c:21:ea:
         fa:fb:77:7f:6c:72:1a:e2:97:37:13:58:a4:23:cb:5a:f4:d6:
         30:7e:41:e8:ef:bf:a3:db:35:98:5e:60:a4:a0:b0:f5:d7:65:
         53:73:6e:f9:a5:47:16:ae:7b:1a:40:9a:dd:21:74:ac:ad:03:
         32:ff:81:78:eb:a5:5c:d3:e0:9c:a3:f2:49:d1:28:e4:b4:c7:
         07:a0:b1:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:34:59 2024 by rpki-client on console-ams.rpki-client.org