Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8baa64a8018bb2dab7cc0a91/0/3230342e31342e37382e302f32342d3234203d3e20343030303339.roa
File:                     3230342e31342e37382e302f32342d3234203d3e20343030303339.roa (raw, json)
Hash identifier:          5Ht7F9yQALoCxHy2EWsMILr/kvYEoxO08tsdsHEWsV8=
Subject key identifier:   C0:87:5E:F7:AE:EE:FE:A4:A1:22:F6:F0:9F:51:02:50:2C:2A:3C:63
Certificate issuer:       /CN=9c94a1c4191d6eeaf7e77336a5edbc05cb99ac63c7835a8bc3
Certificate serial:       242D70A3BD0155B096F9D99BA1B769C57EBFED09
Authority key identifier: DF:4E:46:83:A0:C8:76:F6:8A:72:BD:DF:AA:05:88:30:93:56:C3:D6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/081bd66e-b1d1-405a-8a32-c830ec790ce5/9c94a1c4191d6eeaf7e77336a5edbc05cb99ac63c7835a8bc3.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8baa64a8018bb2dab7cc0a91/0/3230342e31342e37382e302f32342d3234203d3e20343030303339.roa
Signing time:             Thu 09 Nov 2023 06:53:40 +0000
ROA not before:           Thu 09 Nov 2023 06:48:40 +0000
ROA not after:            Thu 07 Nov 2024 06:53:40 +0000
asID:                     400039
IP address blocks:        204.14.78.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8baa64a8018bb2dab7cc0a91/0/DF4E4683A0C876F68A72BDDFAA0588309356C3D6.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8baa64a8018bb2dab7cc0a91/0/DF4E4683A0C876F68A72BDDFAA0588309356C3D6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/081bd66e-b1d1-405a-8a32-c830ec790ce5/9c94a1c4191d6eeaf7e77336a5edbc05cb99ac63c7835a8bc3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/081bd66e-b1d1-405a-8a32-c830ec790ce5/081bd66e-b1d1-405a-8a32-c830ec790ce5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/081bd66e-b1d1-405a-8a32-c830ec790ce5/081bd66e-b1d1-405a-8a32-c830ec790ce5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/081bd66e-b1d1-405a-8a32-c830ec790ce5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 05 May 2024 17:31:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:2d:70:a3:bd:01:55:b0:96:f9:d9:9b:a1:b7:69:c5:7e:bf:ed:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9c94a1c4191d6eeaf7e77336a5edbc05cb99ac63c7835a8bc3
        Validity
            Not Before: Nov  9 06:48:40 2023 GMT
            Not After : Nov  7 06:53:40 2024 GMT
        Subject: CN=C0875EF7AEEEFEA4A122F6F09F5102502C2A3C63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:47:f7:60:c1:f3:b6:0e:f8:89:94:f1:0f:d1:
                    f3:ee:6b:c6:10:a4:4e:3f:de:85:fa:88:5f:5f:49:
                    4d:35:45:fa:ea:04:0d:21:83:9a:26:5a:fc:77:b5:
                    c0:37:59:7a:dc:bb:ca:d8:02:fa:08:bb:12:31:c0:
                    5b:00:20:f3:13:2f:fc:d6:17:8b:ea:33:51:2d:cf:
                    2d:d5:6f:69:c2:ce:62:d9:d3:6c:1c:14:cf:96:77:
                    0f:56:b8:71:36:d7:c2:a6:68:4a:21:10:02:49:90:
                    eb:e7:b9:a7:1c:3b:f2:a3:04:f8:2a:fc:36:4f:05:
                    b6:e6:91:b4:ba:3c:3a:6d:59:7d:c3:ab:e4:fb:f6:
                    4a:81:6f:5d:c4:f9:4b:97:72:c6:7e:bc:31:69:ed:
                    bb:25:4c:88:27:21:e1:b2:ae:a7:6c:e7:bb:3f:72:
                    79:62:a7:eb:31:aa:1b:e5:29:9e:ba:bf:b7:23:8e:
                    d9:14:cb:d4:b8:f6:d1:bd:0f:2a:30:00:75:e6:a9:
                    65:50:7c:68:1e:6e:ff:2f:fc:f6:ce:44:d0:6a:57:
                    68:f8:94:ee:4c:f2:69:de:73:bc:41:ef:d9:79:b9:
                    b9:23:a0:bf:fb:a2:6e:98:6b:62:f9:cf:e4:39:86:
                    08:d1:ee:ac:1c:f4:a4:33:f2:54:b4:3b:bf:d2:01:
                    6c:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:87:5E:F7:AE:EE:FE:A4:A1:22:F6:F0:9F:51:02:50:2C:2A:3C:63
            X509v3 Authority Key Identifier:
                keyid:DF:4E:46:83:A0:C8:76:F6:8A:72:BD:DF:AA:05:88:30:93:56:C3:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8baa64a8018bb2dab7cc0a91/0/DF4E4683A0C876F68A72BDDFAA0588309356C3D6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/081bd66e-b1d1-405a-8a32-c830ec790ce5/9c94a1c4191d6eeaf7e77336a5edbc05cb99ac63c7835a8bc3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8baa64a8018bb2dab7cc0a91/0/3230342e31342e37382e302f32342d3234203d3e20343030303339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.14.78.0/24

    Signature Algorithm: sha256WithRSAEncryption
         96:97:5b:69:0c:85:c3:21:cb:5e:5b:47:2c:f6:6b:0e:af:23:
         1e:3a:c0:4e:0b:c4:94:a3:62:69:c6:3c:75:6a:01:87:62:9f:
         3f:5d:e6:55:cc:c7:dc:51:e2:d3:87:94:b0:ba:c3:71:0e:b4:
         75:03:b4:d4:f6:61:90:2b:bb:ab:9a:de:80:9c:bf:9b:24:12:
         09:66:36:4c:03:34:fe:68:24:28:96:cd:60:04:7b:89:a6:2d:
         19:fe:61:71:24:5c:43:30:25:73:27:97:10:c9:a2:84:30:b2:
         4b:09:99:96:3e:76:27:72:b1:3a:38:05:1c:9a:7e:e4:e5:91:
         31:bd:ab:ae:18:4b:b8:5f:c8:31:fb:45:bb:d2:f5:45:97:ee:
         42:c5:db:8a:d7:bd:40:a6:03:9b:a6:d9:fa:e8:86:5d:38:ae:
         28:ff:11:e2:78:12:ba:83:7f:f0:98:9a:fb:a3:c6:81:99:9d:
         70:c6:f6:1f:47:23:53:84:ab:97:76:5e:f0:d3:13:dc:90:f0:
         ed:f4:a5:34:a8:38:e8:bd:ed:8c:d8:00:1b:cd:d4:f4:e7:be:
         5f:0e:aa:94:65:8c:12:87:3b:98:6e:7e:01:0d:85:0a:df:a3:
         49:9a:1a:54:50:0c:c8:b8:25:7a:df:4f:ac:0a:32:19:3f:f0:
         94:20:d3:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 15:45:00 2024 by rpki-client on console-fra.rpki-client.org