Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8cea2ac6018dcc61b42651d6/0/36342e35322e31342e302f32342d3234203d3e203230343733.roa
File:                     36342e35322e31342e302f32342d3234203d3e203230343733.roa (raw, json)
Hash identifier:          MyBNo+MQ5Iledb1fCL+/hxQ9pBKoDs+wbhCSaxOz4j4=
Subject key identifier:   25:0F:71:71:E3:2A:69:8F:50:52:C0:9E:9D:4C:7C:02:D4:91:91:38
Certificate issuer:       /CN=d585ddc72480f69736d0dbfb4fb7bbbbea3025977ba96c315b
Certificate serial:       691FED93E3A18E067594FFA99C9C7CDA5F2204F2
Authority key identifier: 1E:92:70:97:F9:61:CD:62:C6:84:22:11:20:67:91:58:56:88:EA:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4016a9a5-6e7c-4633-a4c3-24ad1b7f0785/d585ddc72480f69736d0dbfb4fb7bbbbea3025977ba96c315b.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8cea2ac6018dcc61b42651d6/0/36342e35322e31342e302f32342d3234203d3e203230343733.roa
Signing time:             Wed 21 Feb 2024 15:56:41 +0000
ROA not before:           Wed 21 Feb 2024 15:51:41 +0000
ROA not after:            Wed 19 Feb 2025 15:56:41 +0000
asID:                     20473
IP address blocks:        64.52.14.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8cea2ac6018dcc61b42651d6/0/1E927097F961CD62C6842211206791585688EA6B.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8cea2ac6018dcc61b42651d6/0/1E927097F961CD62C6842211206791585688EA6B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4016a9a5-6e7c-4633-a4c3-24ad1b7f0785/d585ddc72480f69736d0dbfb4fb7bbbbea3025977ba96c315b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4016a9a5-6e7c-4633-a4c3-24ad1b7f0785/4016a9a5-6e7c-4633-a4c3-24ad1b7f0785.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4016a9a5-6e7c-4633-a4c3-24ad1b7f0785/4016a9a5-6e7c-4633-a4c3-24ad1b7f0785.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4016a9a5-6e7c-4633-a4c3-24ad1b7f0785.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 04:13:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:1f:ed:93:e3:a1:8e:06:75:94:ff:a9:9c:9c:7c:da:5f:22:04:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d585ddc72480f69736d0dbfb4fb7bbbbea3025977ba96c315b
        Validity
            Not Before: Feb 21 15:51:41 2024 GMT
            Not After : Feb 19 15:56:41 2025 GMT
        Subject: CN=250F7171E32A698F5052C09E9D4C7C02D4919138
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:22:6e:e9:47:08:ff:b4:f3:a0:5b:36:9c:92:
                    5f:8c:af:21:d3:bb:a9:56:9d:53:77:76:d6:9e:b2:
                    af:0d:67:78:57:18:a2:1a:4b:b9:88:d7:87:b9:77:
                    70:0e:ed:e0:65:74:40:13:68:99:94:87:32:1b:28:
                    ab:e5:fe:03:48:9c:e6:a0:cf:55:31:20:26:8c:e2:
                    ab:ce:14:38:07:f2:b5:7e:d9:43:65:67:8d:29:72:
                    85:55:63:76:c4:48:c9:6b:23:57:f0:9e:5e:60:8c:
                    2d:20:ee:30:59:64:50:17:ed:fb:e0:38:e8:8a:c4:
                    06:bd:5a:0c:5b:7f:36:c3:da:18:fa:d9:8b:a5:f3:
                    3e:40:93:c9:a1:41:88:12:bd:7f:72:b0:c2:ce:f6:
                    2f:df:2f:24:3a:eb:aa:29:34:b2:e0:00:5e:17:42:
                    c8:50:30:7b:fd:fd:78:90:cf:a6:6e:4c:26:63:4e:
                    7c:74:c9:17:9e:ed:83:6a:88:07:3c:9d:32:f2:e8:
                    9d:e9:cf:e3:25:d9:dd:5c:c3:21:c5:ba:da:d4:09:
                    65:20:c3:00:85:86:f7:56:8b:72:f6:90:41:58:bb:
                    a4:85:70:13:03:06:fe:a1:87:6c:ec:91:d8:75:45:
                    26:ec:5a:ba:a0:2f:ab:e8:62:6f:3a:6a:69:6f:33:
                    00:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:0F:71:71:E3:2A:69:8F:50:52:C0:9E:9D:4C:7C:02:D4:91:91:38
            X509v3 Authority Key Identifier:
                keyid:1E:92:70:97:F9:61:CD:62:C6:84:22:11:20:67:91:58:56:88:EA:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8cea2ac6018dcc61b42651d6/0/1E927097F961CD62C6842211206791585688EA6B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4016a9a5-6e7c-4633-a4c3-24ad1b7f0785/d585ddc72480f69736d0dbfb4fb7bbbbea3025977ba96c315b.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8cea2ac6018dcc61b42651d6/0/36342e35322e31342e302f32342d3234203d3e203230343733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.52.14.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1a:1a:68:b8:45:c7:fc:76:a8:a7:19:ce:2b:5f:11:5b:c3:f6:
         e3:7f:4b:6f:7a:2f:9d:0f:8e:93:99:1d:68:59:73:a5:09:58:
         68:9f:c3:bc:d4:63:19:20:64:94:10:76:95:cf:27:ea:74:0a:
         4c:db:c9:29:8c:5c:7b:73:a8:b4:fe:cc:ef:49:81:8f:37:18:
         69:02:8a:73:f2:bb:a3:46:5d:eb:86:ca:97:ea:75:60:57:8d:
         23:4b:24:22:0a:2e:90:04:b1:28:05:5e:29:9f:75:26:ca:9c:
         26:b9:a6:87:22:6e:58:3e:96:1c:c3:02:77:ce:97:e8:21:fc:
         51:7f:7f:72:0b:d9:09:8e:1d:28:59:ce:44:1f:0c:57:f1:82:
         e3:4f:6c:bf:ad:a5:1a:60:2c:e2:20:9a:ae:1c:7d:f1:6d:07:
         a3:8c:d9:b9:a2:3f:8b:39:2c:3d:75:81:44:db:a8:31:e0:b2:
         8a:f8:4a:29:ac:a9:12:ea:c0:d7:f1:3e:c3:86:65:17:a8:4e:
         f5:ec:a1:59:f0:fd:7e:a7:f0:76:60:97:1f:c0:d9:06:15:75:
         d2:e6:82:3c:7c:cb:a8:1c:c3:fc:a8:3d:39:09:4a:c5:3d:0d:
         61:b1:7d:24:10:67:8d:3e:09:e0:3d:c6:b2:23:06:43:3c:de:
         ad:f1:23:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 01:47:29 2024 by rpki-client on console-fra.rpki-client.org