Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8baa64a8018bb2dab7cc0a91/0/3230342e31342e37332e302f32342d3234203d3e203332373830.roa
File:                     3230342e31342e37332e302f32342d3234203d3e203332373830.roa (raw, json)
Hash identifier:          HShcgljSNAKjxvrfxuQ8qaWB8aYJjXix0uha+xbN8g8=
Subject key identifier:   9D:99:F4:EF:77:08:C1:88:47:CB:54:E0:EF:3E:27:86:32:3F:B5:29
Certificate issuer:       /CN=9c94a1c4191d6eeaf7e77336a5edbc05cb99ac63c7835a8bc3
Certificate serial:       374ADAFE5277C1F59B229D38C5A7C22CDFA7B417
Authority key identifier: DF:4E:46:83:A0:C8:76:F6:8A:72:BD:DF:AA:05:88:30:93:56:C3:D6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/081bd66e-b1d1-405a-8a32-c830ec790ce5/9c94a1c4191d6eeaf7e77336a5edbc05cb99ac63c7835a8bc3.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8baa64a8018bb2dab7cc0a91/0/3230342e31342e37332e302f32342d3234203d3e203332373830.roa
Signing time:             Thu 09 Nov 2023 06:53:46 +0000
ROA not before:           Thu 09 Nov 2023 06:48:46 +0000
ROA not after:            Thu 07 Nov 2024 06:53:46 +0000
asID:                     32780
IP address blocks:        204.14.73.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8baa64a8018bb2dab7cc0a91/0/DF4E4683A0C876F68A72BDDFAA0588309356C3D6.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8baa64a8018bb2dab7cc0a91/0/DF4E4683A0C876F68A72BDDFAA0588309356C3D6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/081bd66e-b1d1-405a-8a32-c830ec790ce5/9c94a1c4191d6eeaf7e77336a5edbc05cb99ac63c7835a8bc3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/081bd66e-b1d1-405a-8a32-c830ec790ce5/081bd66e-b1d1-405a-8a32-c830ec790ce5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/081bd66e-b1d1-405a-8a32-c830ec790ce5/081bd66e-b1d1-405a-8a32-c830ec790ce5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/081bd66e-b1d1-405a-8a32-c830ec790ce5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 10:48:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:4a:da:fe:52:77:c1:f5:9b:22:9d:38:c5:a7:c2:2c:df:a7:b4:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9c94a1c4191d6eeaf7e77336a5edbc05cb99ac63c7835a8bc3
        Validity
            Not Before: Nov  9 06:48:46 2023 GMT
            Not After : Nov  7 06:53:46 2024 GMT
        Subject: CN=9D99F4EF7708C18847CB54E0EF3E2786323FB529
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:39:fc:71:0f:54:05:a0:29:95:9e:ab:91:b5:
                    e0:76:ee:92:fd:c0:2c:95:c2:68:53:15:3a:ff:69:
                    c1:1d:bc:0f:32:c9:1c:76:95:59:d8:e2:8c:2f:fe:
                    85:ae:ad:d8:e6:11:9d:ae:b6:84:9c:c2:53:97:66:
                    2b:2e:bc:84:01:e4:26:cd:84:e1:a3:c4:a7:16:03:
                    db:ed:44:5b:ee:72:d6:d5:95:11:5d:69:af:f5:37:
                    1f:a2:21:d5:73:6b:4d:ad:3b:bf:9f:48:79:cf:5e:
                    2c:63:07:4e:36:5b:87:1e:6a:bc:db:a6:ee:bc:b0:
                    b9:23:a6:e1:d8:f5:ed:a5:8e:48:0f:86:0c:cd:77:
                    32:ec:f4:34:f5:88:b6:b0:6a:21:cd:20:0c:a7:90:
                    ea:41:c3:6c:41:17:ff:ef:32:15:07:f2:77:a5:76:
                    c2:67:57:42:ba:a2:80:4c:28:b5:4c:76:3c:fd:28:
                    73:ab:68:78:bd:56:1e:3d:e6:5d:12:42:e5:a8:da:
                    49:ce:bd:4b:71:7e:a1:2b:de:12:62:73:1b:4c:d2:
                    7c:43:37:5b:92:f2:01:c7:20:5c:c1:8e:eb:59:05:
                    33:99:95:c9:ab:72:b2:4b:be:32:c3:b7:34:2a:69:
                    d3:80:ae:fa:9a:1d:98:f0:1c:9f:18:8e:52:dd:a7:
                    0b:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:99:F4:EF:77:08:C1:88:47:CB:54:E0:EF:3E:27:86:32:3F:B5:29
            X509v3 Authority Key Identifier:
                keyid:DF:4E:46:83:A0:C8:76:F6:8A:72:BD:DF:AA:05:88:30:93:56:C3:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8baa64a8018bb2dab7cc0a91/0/DF4E4683A0C876F68A72BDDFAA0588309356C3D6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/081bd66e-b1d1-405a-8a32-c830ec790ce5/9c94a1c4191d6eeaf7e77336a5edbc05cb99ac63c7835a8bc3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8baa64a8018bb2dab7cc0a91/0/3230342e31342e37332e302f32342d3234203d3e203332373830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.14.73.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0f:3e:db:52:45:20:99:18:06:a6:06:67:40:fc:c9:56:6b:e2:
         fb:a9:f7:da:c8:e2:4d:5e:01:3f:a4:c7:7b:82:2e:f3:d2:ec:
         23:cd:15:e0:f9:c0:70:d3:2e:f8:63:c4:4c:6b:0e:08:47:5f:
         d8:13:fd:e8:69:15:2b:1c:2f:b6:f2:f0:e3:e9:a6:28:fc:60:
         4e:62:af:12:0e:08:97:b7:12:10:63:ba:df:de:de:bc:6d:53:
         bd:a2:a2:90:b8:bb:15:74:4e:4e:78:26:a2:75:2a:1f:4f:b2:
         b8:96:9b:9e:10:ed:35:cc:21:50:65:fc:35:44:eb:fa:0c:c2:
         d2:fa:ca:f0:26:18:40:58:ed:2c:7c:39:c6:ba:9d:df:94:14:
         3e:b9:22:28:35:0c:b3:96:d2:fe:90:e0:17:79:46:f7:1d:f6:
         30:73:6b:9c:6e:0c:cb:46:5c:d2:de:f8:59:8e:80:d0:9f:b9:
         a5:71:36:98:6d:ef:83:dd:b2:8a:31:93:bd:29:e4:51:8d:58:
         ac:fa:c2:b4:d7:1f:57:cf:32:03:5e:67:f6:64:9c:73:9b:4e:
         69:7d:b6:02:8e:e7:da:31:2f:09:d6:85:c6:dd:cd:db:c1:bd:
         56:19:4d:9d:81:f1:b6:61:1c:1d:b0:39:d3:fe:2b:d2:10:b3:
         71:89:c7:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 08:50:46 2024 by rpki-client on console-fra.rpki-client.org