Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8baa64a8018bb2dab7cc0a91/0/3230342e31342e37342e302f32342d3234203d3e2037303138.roa
File:                     3230342e31342e37342e302f32342d3234203d3e2037303138.roa (raw, json)
Hash identifier:          XrBeM72LnOtusjhS0SCkWs61HnIwCFHmpl7MxTBzNOM=
Subject key identifier:   91:CE:DB:CD:05:87:C8:EA:58:76:66:77:B1:97:95:46:59:D6:65:CD
Certificate issuer:       /CN=9c94a1c4191d6eeaf7e77336a5edbc05cb99ac63c7835a8bc3
Certificate serial:       1C7D55B820E7CA0652CC7318F4755C53C94B6C6F
Authority key identifier: DF:4E:46:83:A0:C8:76:F6:8A:72:BD:DF:AA:05:88:30:93:56:C3:D6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/081bd66e-b1d1-405a-8a32-c830ec790ce5/9c94a1c4191d6eeaf7e77336a5edbc05cb99ac63c7835a8bc3.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8baa64a8018bb2dab7cc0a91/0/3230342e31342e37342e302f32342d3234203d3e2037303138.roa
Signing time:             Mon 18 Nov 2024 15:21:42 +0000
ROA not before:           Mon 18 Nov 2024 15:16:42 +0000
ROA not after:            Mon 17 Nov 2025 15:21:42 +0000
asID:                     7018
IP address blocks:        204.14.74.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8baa64a8018bb2dab7cc0a91/0/DF4E4683A0C876F68A72BDDFAA0588309356C3D6.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8baa64a8018bb2dab7cc0a91/0/DF4E4683A0C876F68A72BDDFAA0588309356C3D6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/081bd66e-b1d1-405a-8a32-c830ec790ce5/9c94a1c4191d6eeaf7e77336a5edbc05cb99ac63c7835a8bc3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/081bd66e-b1d1-405a-8a32-c830ec790ce5/081bd66e-b1d1-405a-8a32-c830ec790ce5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/081bd66e-b1d1-405a-8a32-c830ec790ce5/081bd66e-b1d1-405a-8a32-c830ec790ce5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/081bd66e-b1d1-405a-8a32-c830ec790ce5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 20:21:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:7d:55:b8:20:e7:ca:06:52:cc:73:18:f4:75:5c:53:c9:4b:6c:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9c94a1c4191d6eeaf7e77336a5edbc05cb99ac63c7835a8bc3
        Validity
            Not Before: Nov 18 15:16:42 2024 GMT
            Not After : Nov 17 15:21:42 2025 GMT
        Subject: CN=91CEDBCD0587C8EA58766677B197954659D665CD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:68:79:ec:f5:71:a1:15:df:57:a9:1b:4d:77:
                    33:50:70:f4:5a:84:53:fe:50:de:9f:ba:33:f0:f5:
                    1b:fd:bf:ac:8d:16:3f:6e:d1:ea:5b:4e:9c:c7:ae:
                    a0:72:61:6f:8e:8c:8b:dd:48:b7:1a:49:8e:0c:2a:
                    16:1e:ee:6f:e7:ec:09:44:92:60:65:53:50:8d:96:
                    38:7e:66:93:bb:16:a8:7d:1e:36:06:e2:b8:56:66:
                    9e:6e:75:2a:03:4a:4d:1b:6e:d0:d2:1a:1e:11:c2:
                    34:6f:79:9c:02:9c:65:f2:34:d5:b4:72:6b:59:60:
                    1f:d9:00:8f:15:08:5e:f7:69:dc:95:cd:2f:97:ac:
                    08:ee:26:cb:0b:1d:ee:f0:66:58:2b:b4:4d:ea:d1:
                    93:69:c7:d9:30:b5:bf:9a:b8:88:5c:6d:a3:84:4a:
                    6b:b6:39:a6:22:9a:5d:09:7d:7c:72:6a:72:4a:80:
                    f9:17:c5:ed:69:48:9e:62:17:3d:87:49:70:18:ae:
                    8f:0b:8b:1b:41:87:e0:7d:18:5b:ac:44:10:4d:cb:
                    d8:01:fa:5b:22:85:a1:48:cf:d2:5f:4b:91:01:9e:
                    43:8e:cd:15:b8:33:ec:2b:ca:98:80:bf:e6:1b:f1:
                    c0:5b:6e:db:1e:72:d9:c0:09:74:fb:1e:17:b5:96:
                    6a:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:CE:DB:CD:05:87:C8:EA:58:76:66:77:B1:97:95:46:59:D6:65:CD
            X509v3 Authority Key Identifier:
                keyid:DF:4E:46:83:A0:C8:76:F6:8A:72:BD:DF:AA:05:88:30:93:56:C3:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8baa64a8018bb2dab7cc0a91/0/DF4E4683A0C876F68A72BDDFAA0588309356C3D6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/081bd66e-b1d1-405a-8a32-c830ec790ce5/9c94a1c4191d6eeaf7e77336a5edbc05cb99ac63c7835a8bc3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8baa64a8018bb2dab7cc0a91/0/3230342e31342e37342e302f32342d3234203d3e2037303138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.14.74.0/24

    Signature Algorithm: sha256WithRSAEncryption
         85:cf:5e:9a:cc:a4:d7:54:5b:e6:34:58:5c:b8:7b:13:39:52:
         af:05:93:b7:b4:74:0e:95:d1:46:3d:34:21:ac:1d:09:76:a7:
         a4:2e:58:30:ac:90:88:ff:27:18:39:c9:0c:fa:8b:f0:ed:cc:
         bc:a0:2c:95:aa:66:ac:f4:63:d4:a9:f8:34:a0:b8:67:57:4c:
         d3:ee:83:9e:1f:1e:31:e9:07:a1:86:0e:c7:c3:08:3d:10:e0:
         84:6a:78:c9:27:41:5f:d4:c2:b9:1d:97:fb:cf:27:e9:df:78:
         2c:66:f9:4f:64:6d:50:b5:08:af:b4:d7:84:91:10:19:ae:cf:
         56:a1:ae:ae:0d:1e:31:35:db:7b:50:ea:de:c0:a4:90:4a:6b:
         62:09:79:ea:61:ad:52:05:5e:0e:3f:b1:6f:6e:e4:c4:a3:9c:
         dc:f9:2b:08:e1:27:e1:43:fe:27:79:98:4a:a3:c6:07:65:a1:
         7c:ef:6e:e9:e6:02:6a:47:8c:d9:6e:76:85:44:72:5a:83:29:
         b5:d5:f0:4a:1c:59:79:e2:db:ea:6d:29:f3:4a:f0:8a:17:2a:
         9a:a5:b2:f6:49:3c:95:d4:1c:9b:cb:6f:d7:2b:87:89:91:3e:
         62:29:5b:60:88:b6:50:92:3e:8d:ca:c0:f7:4c:94:0b:8f:d0:
         0e:e5:68:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 19:12:35 2024 by rpki-client on console-fra.rpki-client.org