Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf88e8b907018968972e216de7/0/3130342e3235342e3231302e302f32332d3233203d3e203231373433.roa
File:                     3130342e3235342e3231302e302f32332d3233203d3e203231373433.roa (raw, json)
Hash identifier:          Gn9qMyllfU480VoYrjQK+CkcsQEy8b+2OVZDPNVXV6w=
Subject key identifier:   DA:09:A4:B2:E2:04:CB:F3:79:49:A4:72:40:11:E2:9E:A7:F6:14:EB
Certificate issuer:       /CN=eace280cefac9f5faf74f0e1147a4af5299062f74ce0521b62
Certificate serial:       164944F3E69E0991DDE0B60124C02C6E419ABC24
Authority key identifier: A5:5F:FA:03:5C:73:0C:87:9A:1E:F2:63:74:E3:60:02:4D:6D:1F:18
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9a69b8ce-24da-41b3-a08e-48d64c967360/eace280cefac9f5faf74f0e1147a4af5299062f74ce0521b62.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf88e8b907018968972e216de7/0/3130342e3235342e3231302e302f32332d3233203d3e203231373433.roa
Signing time:             Fri 15 Dec 2023 17:43:31 +0000
ROA not before:           Fri 15 Dec 2023 17:38:31 +0000
ROA not after:            Fri 13 Dec 2024 17:43:31 +0000
asID:                     21743
IP address blocks:        104.254.210.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf88e8b907018968972e216de7/0/A55FFA035C730C879A1EF26374E360024D6D1F18.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf88e8b907018968972e216de7/0/A55FFA035C730C879A1EF26374E360024D6D1F18.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9a69b8ce-24da-41b3-a08e-48d64c967360/eace280cefac9f5faf74f0e1147a4af5299062f74ce0521b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9a69b8ce-24da-41b3-a08e-48d64c967360/9a69b8ce-24da-41b3-a08e-48d64c967360.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9a69b8ce-24da-41b3-a08e-48d64c967360/9a69b8ce-24da-41b3-a08e-48d64c967360.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9a69b8ce-24da-41b3-a08e-48d64c967360.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 02 Jun 2024 17:37:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:49:44:f3:e6:9e:09:91:dd:e0:b6:01:24:c0:2c:6e:41:9a:bc:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eace280cefac9f5faf74f0e1147a4af5299062f74ce0521b62
        Validity
            Not Before: Dec 15 17:38:31 2023 GMT
            Not After : Dec 13 17:43:31 2024 GMT
        Subject: CN=DA09A4B2E204CBF37949A4724011E29EA7F614EB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:f1:0c:6a:1d:32:81:4e:d6:48:ac:26:98:01:
                    41:46:b1:79:0f:cc:07:c6:a0:43:c6:bb:60:ee:2b:
                    e4:6f:c9:75:2e:07:22:ee:1f:37:14:18:b5:23:f3:
                    db:2c:31:d1:1d:f8:4c:9a:e4:6e:43:7e:3e:9d:0d:
                    d3:fc:e8:f0:46:92:e0:9a:06:e5:80:6b:26:60:34:
                    3d:3d:2a:8a:47:ae:5b:b6:cc:52:1d:7f:cc:b7:bc:
                    aa:6e:5a:d8:2c:b3:3a:f1:1b:22:fa:ce:b4:cb:3e:
                    71:56:a7:73:f7:4f:3b:bf:2e:18:2d:fa:c0:35:df:
                    56:9c:83:e5:92:ac:a0:31:f8:d4:4c:d5:07:d9:b1:
                    a5:98:97:4c:af:73:c1:27:30:d6:56:2f:67:03:10:
                    11:7a:46:be:89:61:ab:6b:09:1b:a9:ca:92:89:b0:
                    2f:c4:ff:42:18:51:7c:a7:94:2e:56:7a:1f:a5:10:
                    fa:6a:b1:08:c9:3a:05:d5:6b:a1:ba:27:71:aa:13:
                    e2:4a:03:4f:ce:df:c3:72:c8:78:c9:57:b9:3b:d4:
                    2f:8a:a9:0a:ad:9e:ac:92:ff:79:41:40:33:3f:62:
                    c2:03:bc:3f:64:1d:e9:f9:8c:f2:fe:23:db:ed:9b:
                    8c:95:d7:d0:8d:7d:1a:53:cd:b8:43:b1:49:1b:25:
                    73:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:09:A4:B2:E2:04:CB:F3:79:49:A4:72:40:11:E2:9E:A7:F6:14:EB
            X509v3 Authority Key Identifier:
                keyid:A5:5F:FA:03:5C:73:0C:87:9A:1E:F2:63:74:E3:60:02:4D:6D:1F:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf88e8b907018968972e216de7/0/A55FFA035C730C879A1EF26374E360024D6D1F18.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9a69b8ce-24da-41b3-a08e-48d64c967360/eace280cefac9f5faf74f0e1147a4af5299062f74ce0521b62.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf88e8b907018968972e216de7/0/3130342e3235342e3231302e302f32332d3233203d3e203231373433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.254.210.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6c:eb:22:05:71:bc:d7:aa:1d:c7:bb:12:ca:a9:29:7f:12:32:
         d9:6f:13:a3:f5:fe:0e:c6:03:42:c1:50:79:3a:fb:41:f6:24:
         73:72:eb:8e:24:6d:a5:17:0a:94:04:9f:2c:4c:2c:1a:97:53:
         7c:7a:fc:d9:27:f1:ab:f3:ff:9a:47:1c:fd:39:40:e8:e4:01:
         f9:62:8c:3e:03:da:5c:28:de:89:c3:8b:a8:4e:e6:e0:7f:15:
         7f:d4:5f:e2:f1:a4:07:e2:95:07:5e:7e:01:c7:ef:f8:1e:c5:
         32:6f:56:0c:eb:fc:ba:97:89:67:c5:5b:da:b2:6e:7d:ab:6d:
         b5:05:db:ee:f5:e2:15:49:56:44:c3:7e:7d:39:c7:e9:1c:49:
         39:56:55:a9:d8:ad:7c:a2:8d:72:2e:9b:23:72:2e:20:b4:02:
         80:23:e2:f8:1a:92:a7:e0:c2:4d:07:2c:4e:5a:8d:9b:6d:7d:
         25:b3:05:b4:ba:2b:46:b5:69:0f:08:e8:90:7a:e7:9b:67:af:
         f3:9c:4e:72:eb:37:a6:fd:c2:b6:d5:90:ab:d0:cf:4c:7d:31:
         f3:b1:df:0c:62:30:c0:00:6e:fe:cf:15:da:30:e2:f7:20:a5:
         b3:2c:9e:2e:58:ad:09:48:06:74:61:de:ca:ca:4f:70:ef:5e:
         fc:3f:db:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 16:24:17 2024 by rpki-client on console-fra.rpki-client.org