Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8baa64a8018bb2dab7cc0a91/0/3230342e31342e37372e302f32342d3234203d3e203135383330.roa
File:                     3230342e31342e37372e302f32342d3234203d3e203135383330.roa (raw, json)
Hash identifier:          ES+mz0JctmN9p/tjZO9PntzD3aTynWcdRGATeSVxza4=
Subject key identifier:   37:27:AF:28:EB:D2:B2:3B:65:23:A0:D2:24:F7:B8:D5:AC:E6:9B:08
Certificate issuer:       /CN=9c94a1c4191d6eeaf7e77336a5edbc05cb99ac63c7835a8bc3
Certificate serial:       1B6B7BB69D01BB0378C2008C86F2C8E976C45CBC
Authority key identifier: DF:4E:46:83:A0:C8:76:F6:8A:72:BD:DF:AA:05:88:30:93:56:C3:D6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/081bd66e-b1d1-405a-8a32-c830ec790ce5/9c94a1c4191d6eeaf7e77336a5edbc05cb99ac63c7835a8bc3.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8baa64a8018bb2dab7cc0a91/0/3230342e31342e37372e302f32342d3234203d3e203135383330.roa
Signing time:             Thu 10 Oct 2024 07:49:02 +0000
ROA not before:           Thu 10 Oct 2024 07:44:02 +0000
ROA not after:            Thu 09 Oct 2025 07:49:02 +0000
asID:                     15830
IP address blocks:        204.14.77.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8baa64a8018bb2dab7cc0a91/0/DF4E4683A0C876F68A72BDDFAA0588309356C3D6.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8baa64a8018bb2dab7cc0a91/0/DF4E4683A0C876F68A72BDDFAA0588309356C3D6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/081bd66e-b1d1-405a-8a32-c830ec790ce5/9c94a1c4191d6eeaf7e77336a5edbc05cb99ac63c7835a8bc3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/081bd66e-b1d1-405a-8a32-c830ec790ce5/081bd66e-b1d1-405a-8a32-c830ec790ce5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/081bd66e-b1d1-405a-8a32-c830ec790ce5/081bd66e-b1d1-405a-8a32-c830ec790ce5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/081bd66e-b1d1-405a-8a32-c830ec790ce5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 12:41:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:6b:7b:b6:9d:01:bb:03:78:c2:00:8c:86:f2:c8:e9:76:c4:5c:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9c94a1c4191d6eeaf7e77336a5edbc05cb99ac63c7835a8bc3
        Validity
            Not Before: Oct 10 07:44:02 2024 GMT
            Not After : Oct  9 07:49:02 2025 GMT
        Subject: CN=3727AF28EBD2B23B6523A0D224F7B8D5ACE69B08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:1a:87:e9:14:07:4d:46:d9:16:48:9f:7f:91:
                    8e:57:dd:58:3b:c3:63:ae:e5:54:a5:fc:e0:03:ca:
                    59:d0:4d:18:f0:13:e7:e9:f5:14:a9:60:9b:eb:5e:
                    be:95:fc:1b:cc:89:e2:bc:76:29:a2:c0:63:51:cf:
                    9f:63:aa:87:bd:85:7d:02:67:ae:af:8b:06:28:b0:
                    2b:6c:de:7e:d0:6e:fe:15:9e:5b:e6:91:f8:8a:a2:
                    e0:84:ad:7e:63:12:25:43:ad:b5:93:cf:fc:95:56:
                    50:28:cc:08:56:f0:c9:f1:1c:19:bc:e5:13:18:ea:
                    98:63:a0:e2:dc:22:c4:07:cb:2e:00:d6:76:94:c0:
                    ba:ce:c6:e7:be:e1:66:f0:53:da:36:d6:d4:6f:9d:
                    83:6d:68:d0:c8:d4:b9:d8:f7:d6:19:47:52:a6:33:
                    54:c6:7f:8a:2c:5f:6f:06:fb:31:7c:9e:92:72:a7:
                    e2:17:8f:24:0f:4b:b1:8a:81:54:1c:e2:1a:48:60:
                    0b:d2:7c:2a:e2:fd:e5:29:b8:f7:23:7b:91:24:b6:
                    86:bd:4a:90:72:87:ec:b0:25:1b:57:99:16:94:85:
                    2d:65:47:55:ec:20:aa:24:bd:0d:96:1b:65:d1:54:
                    85:01:89:94:0e:44:f3:1d:32:d7:03:ef:cb:33:0f:
                    b0:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:27:AF:28:EB:D2:B2:3B:65:23:A0:D2:24:F7:B8:D5:AC:E6:9B:08
            X509v3 Authority Key Identifier:
                keyid:DF:4E:46:83:A0:C8:76:F6:8A:72:BD:DF:AA:05:88:30:93:56:C3:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8baa64a8018bb2dab7cc0a91/0/DF4E4683A0C876F68A72BDDFAA0588309356C3D6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/081bd66e-b1d1-405a-8a32-c830ec790ce5/9c94a1c4191d6eeaf7e77336a5edbc05cb99ac63c7835a8bc3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8baa64a8018bb2dab7cc0a91/0/3230342e31342e37372e302f32342d3234203d3e203135383330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.14.77.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5b:33:9c:09:72:8a:93:56:e1:7d:02:07:3d:92:f6:b3:7b:66:
         ba:a7:ee:f4:16:05:ef:32:45:d6:c7:f7:bf:9a:75:1e:01:82:
         2a:bf:10:99:44:8b:10:79:b8:a6:ca:e1:45:6c:55:41:18:ee:
         09:99:f1:bf:0f:f3:df:e4:20:3d:12:c3:85:72:32:0c:dd:03:
         0a:bd:14:c3:1d:6f:95:53:75:d0:a4:4e:35:40:35:11:f5:65:
         77:d6:bc:93:ec:3b:f6:f9:d5:18:cb:14:00:f4:6b:d4:ee:c4:
         d3:8a:dd:00:10:78:79:a1:10:cb:fe:96:f4:41:c1:a3:33:4a:
         e1:8c:be:0a:09:31:35:0e:3e:28:b0:0f:73:c7:6e:41:d7:67:
         90:1e:51:be:01:9c:09:08:91:43:af:ab:25:fa:4f:fa:ce:03:
         ca:08:b6:0d:c6:d6:29:16:ca:86:bb:83:d3:56:38:7c:1d:27:
         18:c8:77:8f:f8:52:7b:eb:53:a8:c0:fd:cf:d4:a8:3f:1c:90:
         9f:ca:54:d9:cd:61:c5:bb:28:d7:c5:d0:b6:49:0d:39:12:63:
         e9:89:bc:e9:8c:2a:e1:e4:57:59:e9:cb:4b:8e:25:c0:5d:32:
         4a:89:1f:e9:35:b1:bc:5e:00:a1:ec:ed:7f:ec:a0:4b:a6:03:
         c9:fc:b9:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:49:17 2025 by rpki-client