Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8baa64a8018bb2dab7cc0a91/0/3230342e31342e37322e302f32342d3234203d3e203332373830.roa
File:                     3230342e31342e37322e302f32342d3234203d3e203332373830.roa (raw, json)
Hash identifier:          OvB2GAGsPfCU2GkVL4Wem62ms85hxH9wJDdG6mz5Hro=
Subject key identifier:   3F:63:10:A5:F8:E4:E3:1D:6E:C1:3E:61:FC:9F:48:46:9A:39:06:C9
Certificate issuer:       /CN=9c94a1c4191d6eeaf7e77336a5edbc05cb99ac63c7835a8bc3
Certificate serial:       747DA12D50D03A6CBB7FDDC33D3BD973F0628A4F
Authority key identifier: DF:4E:46:83:A0:C8:76:F6:8A:72:BD:DF:AA:05:88:30:93:56:C3:D6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/081bd66e-b1d1-405a-8a32-c830ec790ce5/9c94a1c4191d6eeaf7e77336a5edbc05cb99ac63c7835a8bc3.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8baa64a8018bb2dab7cc0a91/0/3230342e31342e37322e302f32342d3234203d3e203332373830.roa
Signing time:             Thu 09 Nov 2023 06:53:49 +0000
ROA not before:           Thu 09 Nov 2023 06:48:49 +0000
ROA not after:            Thu 07 Nov 2024 06:53:49 +0000
asID:                     32780
IP address blocks:        204.14.72.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8baa64a8018bb2dab7cc0a91/0/DF4E4683A0C876F68A72BDDFAA0588309356C3D6.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8baa64a8018bb2dab7cc0a91/0/DF4E4683A0C876F68A72BDDFAA0588309356C3D6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/081bd66e-b1d1-405a-8a32-c830ec790ce5/9c94a1c4191d6eeaf7e77336a5edbc05cb99ac63c7835a8bc3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/081bd66e-b1d1-405a-8a32-c830ec790ce5/081bd66e-b1d1-405a-8a32-c830ec790ce5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/081bd66e-b1d1-405a-8a32-c830ec790ce5/081bd66e-b1d1-405a-8a32-c830ec790ce5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/081bd66e-b1d1-405a-8a32-c830ec790ce5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 10:48:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:7d:a1:2d:50:d0:3a:6c:bb:7f:dd:c3:3d:3b:d9:73:f0:62:8a:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9c94a1c4191d6eeaf7e77336a5edbc05cb99ac63c7835a8bc3
        Validity
            Not Before: Nov  9 06:48:49 2023 GMT
            Not After : Nov  7 06:53:49 2024 GMT
        Subject: CN=3F6310A5F8E4E31D6EC13E61FC9F48469A3906C9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:21:f5:70:2f:4e:06:2b:11:3a:0e:fe:54:05:
                    ae:0b:f7:22:b6:45:56:b9:76:9f:93:58:6c:48:9b:
                    ca:2f:c6:ef:c1:ec:0c:00:3d:ee:9b:20:32:a4:25:
                    8d:a6:28:fa:96:d5:e2:3b:f2:02:5f:34:0b:7d:9b:
                    ad:c1:11:04:82:61:33:59:37:07:5d:30:7d:eb:ec:
                    8d:2f:92:52:fa:b7:22:83:77:a9:0e:06:a9:50:5e:
                    df:75:01:a2:b0:89:e6:a2:3b:1a:9c:31:64:05:54:
                    8e:bd:97:40:fd:37:9c:c0:5b:d3:8f:35:76:22:8b:
                    a0:ed:70:98:b0:90:44:a5:d8:e7:83:ad:11:9d:4e:
                    7b:97:8a:05:f0:65:8d:02:b4:e0:29:89:28:f1:74:
                    93:29:15:c9:aa:57:48:c8:d6:2d:5b:2c:9c:b6:08:
                    14:c9:31:f2:56:0d:f8:18:15:bb:05:31:87:e1:c2:
                    76:b4:64:8c:5a:8c:a5:66:6a:50:b8:07:f5:34:85:
                    50:da:27:93:82:43:ae:3f:7b:a5:19:08:83:d3:48:
                    86:ec:3a:ee:8f:74:03:3b:4d:0c:bf:34:97:cb:2f:
                    fc:f2:98:13:7d:15:6f:af:ea:6c:f9:2b:16:50:08:
                    96:4f:18:73:c0:5e:36:e7:c8:ad:23:10:0c:24:a8:
                    a9:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:63:10:A5:F8:E4:E3:1D:6E:C1:3E:61:FC:9F:48:46:9A:39:06:C9
            X509v3 Authority Key Identifier:
                keyid:DF:4E:46:83:A0:C8:76:F6:8A:72:BD:DF:AA:05:88:30:93:56:C3:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8baa64a8018bb2dab7cc0a91/0/DF4E4683A0C876F68A72BDDFAA0588309356C3D6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/081bd66e-b1d1-405a-8a32-c830ec790ce5/9c94a1c4191d6eeaf7e77336a5edbc05cb99ac63c7835a8bc3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8baa64a8018bb2dab7cc0a91/0/3230342e31342e37322e302f32342d3234203d3e203332373830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.14.72.0/24

    Signature Algorithm: sha256WithRSAEncryption
         aa:db:cc:eb:77:cb:83:04:42:2d:fa:87:94:2a:1d:ff:db:10:
         8b:65:73:cd:73:19:bf:21:13:11:13:e9:0e:fc:1d:52:f3:11:
         fb:22:62:bd:ee:d4:3c:cc:8f:3a:4d:4f:ca:c6:5a:02:3a:f1:
         1f:d8:18:cf:f7:13:7f:c9:23:36:83:7a:ed:96:7f:48:20:e5:
         aa:52:d2:74:51:c4:c6:d8:94:77:7d:4a:fe:ed:cc:42:0a:2e:
         7f:a7:9a:20:5b:c4:53:a8:27:c1:7c:7a:7d:fe:3c:8a:6e:f3:
         65:94:6d:22:08:b7:96:a3:0c:c4:35:c9:88:6c:cf:38:18:7a:
         ec:a5:7f:51:6d:d1:04:e3:b5:43:5d:5b:4e:f7:17:a5:93:85:
         ed:d5:98:fd:18:ae:13:af:f5:ae:22:8c:7c:0b:44:13:20:8c:
         44:0e:1b:1a:7d:61:43:50:a7:41:be:7a:56:2e:42:87:48:da:
         9b:96:7f:dd:c7:db:c6:5a:2f:2b:d2:7f:ec:e4:3a:7c:55:10:
         7b:56:62:86:74:9e:15:51:5f:4d:21:a1:41:c5:c6:40:d6:68:
         9e:ae:e7:a1:9c:5a:65:bb:8e:38:d7:b3:39:10:af:0d:d2:32:
         75:2d:d6:ad:75:0b:78:d7:97:d2:cd:be:93:ac:98:f8:dd:e3:
         28:27:6e:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 10:17:29 2024 by rpki-client on console-ams.rpki-client.org