Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf89e02e8b018ab95d1cec7a41/0/3133382e3131382e3131362e302f32322d3234203d3e203430383530.roa
File:                     3133382e3131382e3131362e302f32322d3234203d3e203430383530.roa (raw, json)
Hash identifier:          6N4BP/VU427jIUqJbFznVHC4y7fTWC01Rw0a88rVLeA=
Subject key identifier:   7E:98:20:F7:01:9D:29:18:E4:99:03:36:92:10:E2:1B:97:08:3B:53
Certificate issuer:       /CN=0b75eb340709c863b5ee2132841f8644dd26fad4a204af7738
Certificate serial:       54BC349E720E173D52B778EEB50F1E2FA877606D
Authority key identifier: 54:0B:53:6A:C1:A2:BB:8F:D1:20:16:62:B4:30:48:5B:DE:4F:A6:D0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1a4b6836-4e28-439c-9ea2-50482aa15b68/0b75eb340709c863b5ee2132841f8644dd26fad4a204af7738.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf89e02e8b018ab95d1cec7a41/0/3133382e3131382e3131362e302f32322d3234203d3e203430383530.roa
Signing time:             Thu 22 Aug 2024 20:25:51 +0000
ROA not before:           Thu 22 Aug 2024 20:20:51 +0000
ROA not after:            Thu 21 Aug 2025 20:25:51 +0000
asID:                     40850
IP address blocks:        138.118.116.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf89e02e8b018ab95d1cec7a41/0/540B536AC1A2BB8FD1201662B430485BDE4FA6D0.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf89e02e8b018ab95d1cec7a41/0/540B536AC1A2BB8FD1201662B430485BDE4FA6D0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1a4b6836-4e28-439c-9ea2-50482aa15b68/0b75eb340709c863b5ee2132841f8644dd26fad4a204af7738.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1a4b6836-4e28-439c-9ea2-50482aa15b68/1a4b6836-4e28-439c-9ea2-50482aa15b68.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1a4b6836-4e28-439c-9ea2-50482aa15b68/1a4b6836-4e28-439c-9ea2-50482aa15b68.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1a4b6836-4e28-439c-9ea2-50482aa15b68.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 03:22:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:bc:34:9e:72:0e:17:3d:52:b7:78:ee:b5:0f:1e:2f:a8:77:60:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0b75eb340709c863b5ee2132841f8644dd26fad4a204af7738
        Validity
            Not Before: Aug 22 20:20:51 2024 GMT
            Not After : Aug 21 20:25:51 2025 GMT
        Subject: CN=7E9820F7019D2918E49903369210E21B97083B53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:9d:67:10:55:59:48:8c:86:ab:0a:1a:ed:fd:
                    15:bb:99:a0:23:5c:75:4a:a9:65:26:bc:e5:c0:83:
                    1e:ef:0a:7e:54:bb:7b:cc:9e:d0:75:6b:97:62:a1:
                    04:86:f5:44:f5:2f:53:a3:cc:23:68:bf:18:8f:1c:
                    ab:dd:98:67:9d:0f:fb:1b:7e:30:6d:6b:5d:8c:1f:
                    9e:d5:da:b5:73:23:79:25:47:ac:8b:fc:10:8c:7c:
                    73:5e:ea:9e:75:52:42:be:5a:a8:95:12:93:52:85:
                    01:e2:97:ff:36:d3:8f:02:7d:d6:bc:5f:0f:5d:3a:
                    ed:c3:b6:4b:a8:d2:8e:c2:9a:6b:88:d7:64:b8:1c:
                    77:cd:63:35:20:bd:2d:98:ac:15:9e:6e:d2:4d:27:
                    48:f4:fc:d7:b7:dd:57:98:70:46:49:25:df:8b:10:
                    2e:ab:ac:f1:a5:1c:85:b5:a7:38:2c:e9:e0:36:95:
                    eb:51:6c:02:b1:76:6e:5b:c2:e6:fa:22:3f:82:94:
                    b0:10:c4:c0:e7:8e:03:71:f9:a4:5d:a7:41:0f:43:
                    f6:f0:5b:2f:7c:fc:cd:f8:d8:39:10:4d:69:83:1a:
                    fc:10:1b:95:8e:47:21:4b:e7:50:3a:b3:db:91:a0:
                    3e:14:9d:ca:0d:e5:93:88:7e:0e:c9:0d:e2:3d:9e:
                    14:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:98:20:F7:01:9D:29:18:E4:99:03:36:92:10:E2:1B:97:08:3B:53
            X509v3 Authority Key Identifier:
                keyid:54:0B:53:6A:C1:A2:BB:8F:D1:20:16:62:B4:30:48:5B:DE:4F:A6:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf89e02e8b018ab95d1cec7a41/0/540B536AC1A2BB8FD1201662B430485BDE4FA6D0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1a4b6836-4e28-439c-9ea2-50482aa15b68/0b75eb340709c863b5ee2132841f8644dd26fad4a204af7738.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf89e02e8b018ab95d1cec7a41/0/3133382e3131382e3131362e302f32322d3234203d3e203430383530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.118.116.0/22

    Signature Algorithm: sha256WithRSAEncryption
         69:3b:a9:90:77:51:f3:94:fb:33:20:af:07:12:ed:e6:d8:1a:
         49:a4:22:dc:5c:d9:b8:95:bd:37:37:bc:00:5e:ff:fd:28:21:
         a5:79:9a:c0:3d:7e:b9:7e:ad:de:27:41:80:79:6f:d7:85:5e:
         9e:37:7c:3c:13:4a:68:5b:2f:d1:73:d1:ae:af:80:5e:68:24:
         6b:ac:8d:67:f8:af:2b:d6:ba:bb:b7:98:c3:0c:02:41:17:f0:
         ad:4d:e1:eb:27:06:13:87:54:15:99:96:16:8c:c3:9d:0d:38:
         9c:f6:6d:fc:d8:3b:60:73:de:e5:cc:5a:c0:9b:f4:93:ee:e6:
         ba:82:07:c7:35:66:17:be:f1:17:a8:24:41:fe:93:85:aa:bf:
         26:08:c2:c2:3f:dc:06:28:16:6f:3c:e9:54:a6:13:eb:a2:41:
         91:e5:6b:f0:58:8e:03:36:4a:63:92:3a:66:bc:1e:47:54:99:
         a2:23:ba:69:9f:81:9f:2c:8c:de:e5:9d:b2:d8:ce:51:07:74:
         6d:4f:84:2b:93:e2:f8:51:63:0f:31:c1:2e:10:cb:33:77:af:
         0e:e7:13:37:eb:a6:6a:94:83:6a:4f:d8:c7:fc:e7:4e:fe:9f:
         50:24:db:e7:0e:22:d0:44:e0:66:d4:04:b2:47:48:b0:0d:81:
         d8:14:41:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:12:53 2025 by rpki-client