Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8baa64a8018bb2dab7cc0a91/0/3230342e31342e37382e302f32342d3234203d3e20343030303339.roa
File:                     3230342e31342e37382e302f32342d3234203d3e20343030303339.roa (raw, json)
Hash identifier:          /vVgV+XT9+pG4AxT8/PwyaRS2LtMLsD1AW4mZuqqA6E=
Subject key identifier:   12:75:FD:97:C2:BE:33:3B:FC:F1:77:5D:BE:91:68:BC:60:7E:8C:21
Certificate issuer:       /CN=9c94a1c4191d6eeaf7e77336a5edbc05cb99ac63c7835a8bc3
Certificate serial:       797C1480AC5F5B7A5CFD57DF644FCBBBC1AC4F5B
Authority key identifier: DF:4E:46:83:A0:C8:76:F6:8A:72:BD:DF:AA:05:88:30:93:56:C3:D6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/081bd66e-b1d1-405a-8a32-c830ec790ce5/9c94a1c4191d6eeaf7e77336a5edbc05cb99ac63c7835a8bc3.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8baa64a8018bb2dab7cc0a91/0/3230342e31342e37382e302f32342d3234203d3e20343030303339.roa
Signing time:             Thu 10 Oct 2024 07:49:02 +0000
ROA not before:           Thu 10 Oct 2024 07:44:02 +0000
ROA not after:            Thu 09 Oct 2025 07:49:02 +0000
asID:                     400039
IP address blocks:        204.14.78.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8baa64a8018bb2dab7cc0a91/0/DF4E4683A0C876F68A72BDDFAA0588309356C3D6.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8baa64a8018bb2dab7cc0a91/0/DF4E4683A0C876F68A72BDDFAA0588309356C3D6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/081bd66e-b1d1-405a-8a32-c830ec790ce5/9c94a1c4191d6eeaf7e77336a5edbc05cb99ac63c7835a8bc3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/081bd66e-b1d1-405a-8a32-c830ec790ce5/081bd66e-b1d1-405a-8a32-c830ec790ce5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/081bd66e-b1d1-405a-8a32-c830ec790ce5/081bd66e-b1d1-405a-8a32-c830ec790ce5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/081bd66e-b1d1-405a-8a32-c830ec790ce5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 12:41:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:7c:14:80:ac:5f:5b:7a:5c:fd:57:df:64:4f:cb:bb:c1:ac:4f:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9c94a1c4191d6eeaf7e77336a5edbc05cb99ac63c7835a8bc3
        Validity
            Not Before: Oct 10 07:44:02 2024 GMT
            Not After : Oct  9 07:49:02 2025 GMT
        Subject: CN=1275FD97C2BE333BFCF1775DBE9168BC607E8C21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:77:ba:b4:a0:09:4f:a9:a5:9c:ba:73:4f:c3:
                    2b:cb:3d:8f:cb:85:47:67:3d:c8:ea:68:27:f7:d9:
                    2d:24:0f:94:ef:6d:2d:cb:8b:35:b9:5e:34:11:2b:
                    29:c7:d4:bd:8d:c9:b0:ee:43:f6:8d:ec:e5:1c:4a:
                    1e:78:e2:4e:4a:42:cc:d9:9f:a8:54:e6:5c:91:ef:
                    8f:d1:95:69:d4:7a:93:bd:b6:56:2f:29:5b:d8:a8:
                    02:68:16:8f:f9:c9:58:79:1d:06:c7:52:31:9c:69:
                    9e:30:34:51:5a:7e:32:90:05:ad:3c:ef:ce:b6:68:
                    db:94:10:ec:e4:27:ef:48:13:7f:94:65:93:0f:3d:
                    fc:f1:bf:9f:82:5e:ba:4e:46:c0:33:ca:eb:8d:d2:
                    3e:9a:e1:48:f5:e2:48:99:0f:e5:3b:43:ea:59:7f:
                    7b:b2:b2:64:35:1d:2c:30:6d:31:13:f2:c4:a2:83:
                    62:50:07:e3:43:a6:db:b2:02:d6:0a:5e:e4:8a:8b:
                    63:2f:0a:dc:f0:1f:61:06:1a:c1:ff:e8:7c:4e:b2:
                    3e:78:08:2d:21:f4:c0:53:3c:e1:26:9b:02:40:f4:
                    e7:d4:48:fe:c9:35:0b:54:64:6d:d3:e0:ce:54:b5:
                    04:4d:96:f3:bc:ff:d2:45:eb:81:2b:f3:20:bb:0e:
                    9a:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:75:FD:97:C2:BE:33:3B:FC:F1:77:5D:BE:91:68:BC:60:7E:8C:21
            X509v3 Authority Key Identifier:
                keyid:DF:4E:46:83:A0:C8:76:F6:8A:72:BD:DF:AA:05:88:30:93:56:C3:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8baa64a8018bb2dab7cc0a91/0/DF4E4683A0C876F68A72BDDFAA0588309356C3D6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/081bd66e-b1d1-405a-8a32-c830ec790ce5/9c94a1c4191d6eeaf7e77336a5edbc05cb99ac63c7835a8bc3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8baa64a8018bb2dab7cc0a91/0/3230342e31342e37382e302f32342d3234203d3e20343030303339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.14.78.0/24

    Signature Algorithm: sha256WithRSAEncryption
         01:21:07:29:bd:0a:d7:bc:03:98:2b:f0:51:ff:2b:c3:31:19:
         48:91:5f:ef:ea:3a:53:29:ec:53:33:9e:a2:37:3d:b0:ee:ed:
         79:3a:b6:64:6e:48:a9:98:86:29:37:3c:83:46:95:29:1a:e2:
         fc:e0:a2:e1:d0:a0:d8:83:bc:b6:de:51:a0:94:2e:24:fe:5b:
         85:fe:37:d2:40:5a:60:79:47:e9:6b:6f:da:1f:47:99:59:70:
         f2:e1:f9:d6:6f:b6:fa:36:20:78:0c:8e:f8:8b:11:bf:84:d2:
         5b:17:b4:15:86:01:10:6f:c2:f5:d0:ab:5c:df:e0:eb:1b:aa:
         af:55:65:79:83:4c:a9:23:da:c2:32:00:90:cc:a1:43:f7:fa:
         eb:92:67:fb:0b:f3:be:77:b3:45:73:f6:56:b3:11:87:03:c7:
         de:02:af:e8:74:d8:2f:e7:52:51:8b:fe:a9:a5:94:46:48:71:
         e7:38:bf:3e:de:16:ea:d7:4a:7b:67:c2:3c:e9:59:e5:9d:7f:
         83:c2:f0:6b:dc:9d:f0:bb:33:a1:42:f7:4a:3f:59:10:a2:10:
         3b:be:d2:a7:c2:07:f7:fd:73:9a:25:bc:56:b8:40:57:b4:9f:
         30:b2:e6:2a:e4:78:bc:c3:44:7d:f2:3a:30:0f:ec:72:3c:ed:
         48:20:27:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:03:39 2025 by rpki-client