Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8cea2ac6018dcc61b42651d6/0/3134372e3138392e3135322e302f32332d3234203d3e2037303138.roa
File:                     3134372e3138392e3135322e302f32332d3234203d3e2037303138.roa (raw, json)
Hash identifier:          cmKGFH/Ov3FMl5UHe4IwPKvZ7TElJRmIoQwl+7gQdvI=
Subject key identifier:   0A:34:F9:7A:1A:DB:12:BF:48:7C:AB:F6:03:A2:38:DA:34:90:43:50
Certificate issuer:       /CN=d585ddc72480f69736d0dbfb4fb7bbbbea3025977ba96c315b
Certificate serial:       3FBD574DE5BFF30F5706603345E4B2533FA45BAA
Authority key identifier: 1E:92:70:97:F9:61:CD:62:C6:84:22:11:20:67:91:58:56:88:EA:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4016a9a5-6e7c-4633-a4c3-24ad1b7f0785/d585ddc72480f69736d0dbfb4fb7bbbbea3025977ba96c315b.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8cea2ac6018dcc61b42651d6/0/3134372e3138392e3135322e302f32332d3234203d3e2037303138.roa
Signing time:             Fri 13 Dec 2024 15:17:16 +0000
ROA not before:           Fri 13 Dec 2024 15:12:16 +0000
ROA not after:            Fri 12 Dec 2025 15:17:16 +0000
asID:                     7018
IP address blocks:        147.189.152.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8cea2ac6018dcc61b42651d6/0/1E927097F961CD62C6842211206791585688EA6B.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8cea2ac6018dcc61b42651d6/0/1E927097F961CD62C6842211206791585688EA6B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4016a9a5-6e7c-4633-a4c3-24ad1b7f0785/d585ddc72480f69736d0dbfb4fb7bbbbea3025977ba96c315b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4016a9a5-6e7c-4633-a4c3-24ad1b7f0785/4016a9a5-6e7c-4633-a4c3-24ad1b7f0785.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4016a9a5-6e7c-4633-a4c3-24ad1b7f0785/4016a9a5-6e7c-4633-a4c3-24ad1b7f0785.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4016a9a5-6e7c-4633-a4c3-24ad1b7f0785.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Apr 2025 17:31:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:bd:57:4d:e5:bf:f3:0f:57:06:60:33:45:e4:b2:53:3f:a4:5b:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d585ddc72480f69736d0dbfb4fb7bbbbea3025977ba96c315b
        Validity
            Not Before: Dec 13 15:12:16 2024 GMT
            Not After : Dec 12 15:17:16 2025 GMT
        Subject: CN=0A34F97A1ADB12BF487CABF603A238DA34904350
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:48:c5:f5:d0:3d:99:df:c1:a9:06:5c:1d:fa:
                    a7:73:73:6d:68:e1:63:c5:8d:43:d1:43:7c:b2:ac:
                    9e:52:79:4e:a5:d7:b2:2a:85:2f:22:fb:ba:86:f2:
                    39:e1:e5:34:50:f5:b0:fc:31:37:4a:e2:f4:3b:93:
                    f1:1c:fc:35:19:cd:28:9f:03:a9:85:9e:03:0c:bb:
                    b2:03:95:85:69:85:79:3a:e4:b5:61:6b:a8:e0:f7:
                    32:75:45:aa:72:b3:b4:9a:14:21:5b:eb:db:fb:72:
                    87:7a:f5:68:1d:03:4c:e6:a2:99:75:e6:f6:b8:66:
                    ec:79:ed:07:7b:d6:31:06:47:70:d4:67:2a:00:90:
                    7a:0f:4d:b4:03:71:3d:eb:8e:49:d3:3a:70:6f:8a:
                    69:2b:87:80:14:68:53:2d:76:4a:44:82:53:4a:e5:
                    f1:f6:74:5a:09:ef:83:c9:59:5f:c7:ed:2f:36:82:
                    42:84:64:62:bb:88:50:71:e7:5e:c2:9a:85:2a:02:
                    84:74:67:b7:6e:a1:0d:bc:41:6a:8b:1d:2e:6a:d5:
                    57:54:b1:74:8e:cb:53:5f:06:f3:07:14:fd:3c:27:
                    64:3f:38:1d:93:fe:fd:d6:60:34:8a:9f:88:68:66:
                    c4:b1:4b:e5:00:31:59:90:bd:ca:02:2c:46:4c:28:
                    67:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:34:F9:7A:1A:DB:12:BF:48:7C:AB:F6:03:A2:38:DA:34:90:43:50
            X509v3 Authority Key Identifier:
                keyid:1E:92:70:97:F9:61:CD:62:C6:84:22:11:20:67:91:58:56:88:EA:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8cea2ac6018dcc61b42651d6/0/1E927097F961CD62C6842211206791585688EA6B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4016a9a5-6e7c-4633-a4c3-24ad1b7f0785/d585ddc72480f69736d0dbfb4fb7bbbbea3025977ba96c315b.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8cea2ac6018dcc61b42651d6/0/3134372e3138392e3135322e302f32332d3234203d3e2037303138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.189.152.0/23

    Signature Algorithm: sha256WithRSAEncryption
         61:7f:44:7a:e4:5e:91:b6:e8:b7:c5:0f:0e:d5:c5:c3:7f:bd:
         7e:dd:0e:96:9a:e6:3b:fe:7c:d5:b5:2e:67:c7:82:c6:d7:21:
         2c:79:47:33:5c:ac:d5:4a:76:48:59:9f:87:53:8e:92:cc:ef:
         32:6c:38:93:ff:7d:58:33:29:ca:f2:a8:6f:01:ba:8a:65:57:
         ea:2e:d4:8c:cd:26:62:9a:07:e9:12:09:0d:8f:c1:1f:66:4d:
         3b:8c:dd:97:14:3f:19:c2:9e:f7:24:ac:e9:99:04:58:66:da:
         be:8d:d6:c9:9b:5d:6d:6d:3e:14:a4:a7:fd:a4:6d:8d:9c:1d:
         6f:54:97:c7:40:40:8a:d1:e2:02:69:5b:55:74:ce:aa:7c:13:
         e0:4e:4a:cb:0f:8d:ea:30:5b:66:f8:db:55:b4:f6:94:67:ef:
         f5:e4:54:a0:49:66:c3:17:90:a0:eb:06:8b:d6:3e:88:76:2c:
         d1:7c:d2:a2:f8:94:f0:16:f9:87:db:aa:ad:97:07:4f:0f:db:
         77:bb:97:1d:1a:ba:bf:5b:da:ee:87:c3:bd:6e:b9:b7:5b:ed:
         14:95:60:33:e1:0e:3c:80:43:2a:7c:8d:62:19:38:83:31:61:
         2e:3c:37:b1:2a:16:37:35:23:48:ac:b9:3c:14:33:54:ec:45:
         15:b4:79:cf
-----BEGIN CERTIFICATE-----
MIIFsjCCBJqgAwIBAgIUP71XTeW/8w9XBmAzReSyUz+kW6owDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZDU4NWRkYzcyNDgwZjY5NzM2ZDBkYmZiNGZiN2JiYmJl
YTMwMjU5NzdiYTk2YzMxNWIwHhcNMjQxMjEzMTUxMjE2WhcNMjUxMjEyMTUxNzE2
WjAzMTEwLwYDVQQDEygwQTM0Rjk3QTFBREIxMkJGNDg3Q0FCRjYwM0EyMzhEQTM0
OTA0MzUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn0jF9dA9md/B
qQZcHfqnc3NtaOFjxY1D0UN8sqyeUnlOpdeyKoUvIvu6hvI54eU0UPWw/DE3SuL0
O5PxHPw1Gc0onwOphZ4DDLuyA5WFaYV5OuS1YWuo4PcydUWqcrO0mhQhW+vb+3KH
evVoHQNM5qKZdeb2uGbsee0He9YxBkdw1GcqAJB6D020A3E9645J0zpwb4ppK4eA
FGhTLXZKRIJTSuXx9nRaCe+DyVlfx+0vNoJChGRiu4hQcedewpqFKgKEdGe3bqEN
vEFqix0uatVXVLF0jstTXwbzBxT9PCdkPzgdk/791mA0ip+IaGbEsUvlADFZkL3K
AixGTChnHwIDAQABo4ICsjCCAq4wHQYDVR0OBBYEFAo0+Xoa2xK/SHyr9gOiONo0
kENQMB8GA1UdIwQYMBaAFB6ScJf5Yc1ixoQiESBnkVhWiOprMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmOGNlYTJhYzYwMThkY2M2MWI0MjY1MWQ2LzAv
MUU5MjcwOTdGOTYxQ0Q2MkM2ODQyMjExMjA2NzkxNTg1Njg4RUE2Qi5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi
MGI4NDE1LzQwMTZhOWE1LTZlN2MtNDYzMy1hNGMzLTI0YWQxYjdmMDc4NS9kNTg1
ZGRjNzI0ODBmNjk3MzZkMGRiZmI0ZmI3YmJiYmVhMzAyNTk3N2JhOTZjMzE1Yi5j
ZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjhjZWEyYWM2MDE4ZGNj
NjFiNDI2NTFkNi8wLzMxMzQzNzJlMzEzODM5MmUzMTM1MzIyZTMwMmYzMjMzMmQz
MjM0MjAzZDNlMjAzNzMwMzEzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO
AjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAZO9mDANBgkqhkiG9w0BAQsF
AAOCAQEAYX9EeuRekbbot8UPDtXFw3+9ft0OlprmO/581bUuZ8eCxtchLHlHM1ys
1Up2SFmfh1OOkszvMmw4k/99WDMpyvKobwG6imVX6i7UjM0mYpoH6RIJDY/BH2ZN
O4zdlxQ/GcKe9ySs6ZkEWGbavo3WyZtdbW0+FKSn/aRtjZwdb1SXx0BAitHiAmlb
VXTOqnwT4E5Kyw+N6jBbZvjbVbT2lGfv9eRUoElmwxeQoOsGi9Y+iHYs0XzSoviU
8Bb5h9uqrZcHTw/bd7uXHRq6v1va7ofDvW65t1vtFJVgM+EOPIBDKnyNYhk4gzFh
Ljw3sSoWNzUjSKy5PBQzVOxFFbR5zw==
-----END CERTIFICATE-----
Generated at Fri Apr 4 21:02:30 2025 by rpki-client