Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8baa64a8018bb2dab7cc0a91/0/3230342e31342e37372e302f32342d3234203d3e203135383330.roa
File:                     3230342e31342e37372e302f32342d3234203d3e203135383330.roa (raw, json)
Hash identifier:          cCRfNHUHEc7rEbq+9hw9wpMAZ4oHi7wIerZeBV+/WhQ=
Subject key identifier:   0A:3A:EA:59:DA:6B:29:01:24:D0:66:E1:31:55:A3:55:E3:78:FC:9F
Certificate issuer:       /CN=9c94a1c4191d6eeaf7e77336a5edbc05cb99ac63c7835a8bc3
Certificate serial:       787C3F8D3DBB8D72A344699E7C7B9594090B8515
Authority key identifier: DF:4E:46:83:A0:C8:76:F6:8A:72:BD:DF:AA:05:88:30:93:56:C3:D6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/081bd66e-b1d1-405a-8a32-c830ec790ce5/9c94a1c4191d6eeaf7e77336a5edbc05cb99ac63c7835a8bc3.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8baa64a8018bb2dab7cc0a91/0/3230342e31342e37372e302f32342d3234203d3e203135383330.roa
Signing time:             Thu 09 Nov 2023 06:53:37 +0000
ROA not before:           Thu 09 Nov 2023 06:48:37 +0000
ROA not after:            Thu 07 Nov 2024 06:53:37 +0000
asID:                     15830
IP address blocks:        204.14.77.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8baa64a8018bb2dab7cc0a91/0/DF4E4683A0C876F68A72BDDFAA0588309356C3D6.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8baa64a8018bb2dab7cc0a91/0/DF4E4683A0C876F68A72BDDFAA0588309356C3D6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/081bd66e-b1d1-405a-8a32-c830ec790ce5/9c94a1c4191d6eeaf7e77336a5edbc05cb99ac63c7835a8bc3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/081bd66e-b1d1-405a-8a32-c830ec790ce5/081bd66e-b1d1-405a-8a32-c830ec790ce5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/081bd66e-b1d1-405a-8a32-c830ec790ce5/081bd66e-b1d1-405a-8a32-c830ec790ce5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/081bd66e-b1d1-405a-8a32-c830ec790ce5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 05 May 2024 17:31:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:7c:3f:8d:3d:bb:8d:72:a3:44:69:9e:7c:7b:95:94:09:0b:85:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9c94a1c4191d6eeaf7e77336a5edbc05cb99ac63c7835a8bc3
        Validity
            Not Before: Nov  9 06:48:37 2023 GMT
            Not After : Nov  7 06:53:37 2024 GMT
        Subject: CN=0A3AEA59DA6B290124D066E13155A355E378FC9F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:4d:00:0d:bb:ec:80:62:51:f4:2b:6d:0f:2f:
                    ce:ca:8c:65:93:d6:00:e3:3f:cb:82:ef:83:fe:f8:
                    2f:47:6c:a4:a9:f8:0d:18:d0:e8:23:d2:86:11:05:
                    e5:09:a6:f0:20:97:bd:a2:9c:5d:6f:ea:15:73:5b:
                    76:60:93:3d:be:b0:91:14:d1:60:32:6d:30:e5:ca:
                    38:4e:fb:92:85:f4:1b:2d:66:70:8b:62:66:06:21:
                    7a:fa:d9:1f:8f:1a:e3:df:2a:3f:28:92:b5:0b:1a:
                    8e:28:af:82:b9:59:31:a1:0c:33:fd:b5:6b:65:e7:
                    62:ec:c1:0a:41:13:fc:07:43:46:e4:57:e3:1e:98:
                    f1:9d:70:17:2d:5f:31:19:9a:e3:4b:4b:6a:75:18:
                    29:bd:fe:61:5e:8d:e3:14:fd:e8:bb:3a:a2:53:87:
                    1f:1a:54:eb:cc:5a:e7:f7:57:cc:cc:e3:fa:e3:2a:
                    a0:82:83:4f:32:01:6d:1c:f0:77:c7:62:37:67:fa:
                    4e:8e:f4:0f:c6:d5:c0:f8:b7:0a:b6:0d:9b:c3:53:
                    19:a1:94:bf:59:a5:41:42:b7:06:0d:22:85:8c:8e:
                    06:0e:4a:e8:40:16:4b:54:1b:c0:e9:e0:7e:83:46:
                    3f:13:22:2b:6f:6d:dc:38:e2:7f:a8:3d:ad:1d:05:
                    6a:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:3A:EA:59:DA:6B:29:01:24:D0:66:E1:31:55:A3:55:E3:78:FC:9F
            X509v3 Authority Key Identifier:
                keyid:DF:4E:46:83:A0:C8:76:F6:8A:72:BD:DF:AA:05:88:30:93:56:C3:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8baa64a8018bb2dab7cc0a91/0/DF4E4683A0C876F68A72BDDFAA0588309356C3D6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/081bd66e-b1d1-405a-8a32-c830ec790ce5/9c94a1c4191d6eeaf7e77336a5edbc05cb99ac63c7835a8bc3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8baa64a8018bb2dab7cc0a91/0/3230342e31342e37372e302f32342d3234203d3e203135383330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.14.77.0/24

    Signature Algorithm: sha256WithRSAEncryption
         45:b6:24:92:81:f0:58:8a:2d:e9:88:38:60:dd:97:0f:06:94:
         2c:d5:93:e7:d7:a2:7d:5e:04:8a:6a:e1:3c:35:e6:6d:64:cd:
         8d:21:29:73:a4:07:fb:53:81:25:c1:1a:a8:f5:04:c0:84:04:
         71:68:35:7d:f7:b5:19:b6:d1:90:6a:67:73:b3:d1:4a:88:b3:
         29:8d:7b:d1:97:ec:b9:ab:ed:f4:7a:c4:e8:13:a6:2e:4c:15:
         76:3c:a4:f4:86:a8:e5:8f:cd:be:c5:ff:28:74:5e:8a:a1:6b:
         7f:e8:8a:d3:f4:4f:68:25:5a:9b:b6:ec:a2:16:80:61:34:c7:
         17:86:6d:cb:43:11:bf:02:84:0b:4c:16:3b:4a:89:21:92:4e:
         98:6e:b8:43:c2:d7:dd:6c:5e:44:65:43:aa:78:f8:1c:7f:68:
         ec:28:c0:bb:5c:ff:7b:32:0c:42:b2:58:e8:4a:49:1d:c4:23:
         65:f8:75:27:fe:9e:20:8d:d6:13:46:e0:68:45:53:b4:bb:6f:
         de:10:f0:cf:70:09:7d:85:a2:88:c9:6d:1f:ae:6d:03:fe:55:
         d7:7c:62:49:4d:d3:d2:67:c5:41:e2:34:2d:4b:a3:6b:28:ca:
         b8:b4:b5:2e:ce:52:3e:6c:51:fa:1a:44:3e:36:62:dc:f7:b8:
         9f:08:3e:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 15:54:29 2024 by rpki-client on console-ams.rpki-client.org