Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf889c43e70188b36905d41605/0/3130382e3136302e3231322e302f32322d3234203d3e203134363138.roa
File:                     3130382e3136302e3231322e302f32322d3234203d3e203134363138.roa (raw, json)
Hash identifier:          POiZDZlh4PovYzvwrU4S+K+CDzJumoREwesjARMeti8=
Subject key identifier:   16:D8:EA:E4:B3:0F:DC:7B:2B:BA:82:39:1D:0E:11:D4:D1:17:94:48
Certificate issuer:       /CN=4ad63afcc9b7d51860a25f5fecc2492d35bd0aa4135018de42
Certificate serial:       1C664F576AF6E07AA120BCED0780FFDAE7828F81
Authority key identifier: 87:4A:35:3A:EE:F2:A6:07:A1:AB:A8:E4:3D:20:F1:8E:C9:41:1A:F8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3eb60598-76ca-49b0-9a1f-01270603d8d9/4ad63afcc9b7d51860a25f5fecc2492d35bd0aa4135018de42.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf889c43e70188b36905d41605/0/3130382e3136302e3231322e302f32322d3234203d3e203134363138.roa
Signing time:             Tue 14 May 2024 07:01:15 +0000
ROA not before:           Tue 14 May 2024 06:56:15 +0000
ROA not after:            Tue 13 May 2025 07:01:15 +0000
asID:                     14618
IP address blocks:        108.160.212.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf889c43e70188b36905d41605/0/874A353AEEF2A607A1ABA8E43D20F18EC9411AF8.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf889c43e70188b36905d41605/0/874A353AEEF2A607A1ABA8E43D20F18EC9411AF8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3eb60598-76ca-49b0-9a1f-01270603d8d9/4ad63afcc9b7d51860a25f5fecc2492d35bd0aa4135018de42.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3eb60598-76ca-49b0-9a1f-01270603d8d9/3eb60598-76ca-49b0-9a1f-01270603d8d9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3eb60598-76ca-49b0-9a1f-01270603d8d9/3eb60598-76ca-49b0-9a1f-01270603d8d9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3eb60598-76ca-49b0-9a1f-01270603d8d9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 22:43:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:66:4f:57:6a:f6:e0:7a:a1:20:bc:ed:07:80:ff:da:e7:82:8f:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ad63afcc9b7d51860a25f5fecc2492d35bd0aa4135018de42
        Validity
            Not Before: May 14 06:56:15 2024 GMT
            Not After : May 13 07:01:15 2025 GMT
        Subject: CN=16D8EAE4B30FDC7B2BBA82391D0E11D4D1179448
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:48:49:a2:63:4f:71:db:d5:ea:df:95:59:c6:
                    6c:00:fc:42:49:e9:bd:ab:dd:5e:45:b2:c3:4c:9c:
                    50:bf:24:77:80:68:32:c8:27:e1:89:83:6b:97:dd:
                    a8:81:51:86:1a:01:3d:19:53:8f:98:95:b0:dd:e0:
                    84:ce:9d:24:8d:8a:6a:6d:29:34:c7:d3:96:6a:2b:
                    08:d4:eb:2a:94:45:bb:54:90:34:ba:1f:4b:58:53:
                    34:2d:f6:0d:10:ee:60:91:a0:41:80:95:42:eb:1d:
                    24:76:36:24:be:b9:30:c4:a4:14:f6:dc:e3:b4:08:
                    e5:23:05:0f:2b:d5:76:9d:55:18:21:be:18:48:28:
                    99:90:7a:4e:fa:b8:6f:eb:cf:38:0c:b0:cc:73:25:
                    49:e9:5a:ce:05:fe:42:4f:ea:ea:2b:40:ad:7f:1d:
                    a0:7c:b6:be:ff:1d:2c:be:bf:6d:c8:39:a7:f2:e4:
                    91:8e:1e:4c:95:12:ad:26:93:21:d1:c9:05:c7:bd:
                    c6:a6:57:5d:b1:f9:b9:e5:7b:6b:03:81:77:84:07:
                    88:01:13:e6:4b:4b:3e:88:4c:42:84:0c:91:e6:1c:
                    2a:6a:31:23:34:a3:2a:53:12:43:77:da:a5:6c:b5:
                    7e:91:c1:bd:c1:0d:78:03:b1:f7:af:5e:54:0b:84:
                    39:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:D8:EA:E4:B3:0F:DC:7B:2B:BA:82:39:1D:0E:11:D4:D1:17:94:48
            X509v3 Authority Key Identifier:
                keyid:87:4A:35:3A:EE:F2:A6:07:A1:AB:A8:E4:3D:20:F1:8E:C9:41:1A:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf889c43e70188b36905d41605/0/874A353AEEF2A607A1ABA8E43D20F18EC9411AF8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3eb60598-76ca-49b0-9a1f-01270603d8d9/4ad63afcc9b7d51860a25f5fecc2492d35bd0aa4135018de42.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf889c43e70188b36905d41605/0/3130382e3136302e3231322e302f32322d3234203d3e203134363138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.160.212.0/22

    Signature Algorithm: sha256WithRSAEncryption
         49:b0:e0:42:4f:2b:69:82:cb:44:cd:5f:74:92:39:f0:88:63:
         c3:00:3d:e2:6d:00:1f:2d:09:a9:8f:05:da:79:71:09:01:a9:
         40:7b:6a:d4:32:44:f3:3a:b4:d1:c6:7d:62:60:2e:f7:f4:6d:
         2a:02:6b:6b:9c:c0:22:2f:61:d2:9f:2a:6b:3a:e5:6d:20:7d:
         c4:2f:83:95:99:33:9e:d1:9a:a7:84:8e:92:dc:e6:73:1f:4c:
         18:2b:aa:a8:3c:ad:4c:b8:0c:53:32:44:a5:3d:a7:9f:d6:24:
         cc:e3:7e:d5:13:ef:07:18:98:69:93:bb:58:a4:8d:cd:01:88:
         06:78:9d:86:21:66:de:d7:3c:f0:92:84:2b:ae:a0:af:49:55:
         06:b5:e9:56:c8:f2:97:a4:ab:15:a9:a6:ca:7d:b8:73:94:e8:
         81:d3:8b:db:4b:e3:9f:1e:80:cb:3a:8b:6d:97:14:14:1d:33:
         11:ca:16:0a:c2:f9:83:0b:0e:68:fd:fb:a9:31:61:d4:d8:89:
         23:5f:87:9c:2b:25:44:69:7e:54:e7:f9:f4:1b:b8:88:5a:e3:
         2c:30:fe:2f:ba:4a:2a:0e:00:19:49:1a:2a:17:11:20:49:f6:
         06:f9:41:eb:e1:7f:01:16:1a:bf:dc:ee:54:64:35:a2:61:1d:
         98:a2:3b:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:34:59 2024 by rpki-client on console-ams.rpki-client.org