Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/3230352e3133342e3233332e302f32342d3234203d3e203137313339.roa
File:                     3230352e3133342e3233332e302f32342d3234203d3e203137313339.roa (raw, json)
Hash identifier:          7NuUoWxCBbX8PIYElNLnFGGwYAnPhHIh8JtiinLa6DY=
Subject key identifier:   27:B2:33:10:65:AA:62:20:94:DA:5D:05:80:AB:17:7B:84:B1:81:F7
Certificate issuer:       /CN=fb5ab1cb30ff430e23ac6e14a09173d9b9b4b3e328a76b388e
Certificate serial:       067E0458E15E6DB2CAC3EC914C7F0EDFA4509064
Authority key identifier: 0A:17:B4:0A:79:DF:FF:44:FA:FA:3D:40:F6:E4:D0:0D:83:51:4B:B3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490/fb5ab1cb30ff430e23ac6e14a09173d9b9b4b3e328a76b388e.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/3230352e3133342e3233332e302f32342d3234203d3e203137313339.roa
Signing time:             Thu 23 May 2024 10:59:12 +0000
ROA not before:           Thu 23 May 2024 10:54:12 +0000
ROA not after:            Thu 22 May 2025 10:59:12 +0000
asID:                     17139
IP address blocks:        205.134.233.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/0A17B40A79DFFF44FAFA3D40F6E4D00D83514BB3.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/0A17B40A79DFFF44FAFA3D40F6E4D00D83514BB3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490/fb5ab1cb30ff430e23ac6e14a09173d9b9b4b3e328a76b388e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490/293fb15b-5a85-4abe-bd24-232a114ae490.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490/293fb15b-5a85-4abe-bd24-232a114ae490.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 14 Jun 2024 11:38:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:7e:04:58:e1:5e:6d:b2:ca:c3:ec:91:4c:7f:0e:df:a4:50:90:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb5ab1cb30ff430e23ac6e14a09173d9b9b4b3e328a76b388e
        Validity
            Not Before: May 23 10:54:12 2024 GMT
            Not After : May 22 10:59:12 2025 GMT
        Subject: CN=27B2331065AA622094DA5D0580AB177B84B181F7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:1c:dd:32:3a:56:a9:69:58:4b:be:0c:8c:dd:
                    74:c5:59:2e:44:de:25:37:9a:fc:c6:15:42:f5:69:
                    47:29:a0:06:48:97:74:fc:85:a2:32:fb:ef:a7:ef:
                    cb:fa:01:d0:52:a2:f3:35:6e:b7:2f:f0:90:b6:ed:
                    f4:5e:c7:c5:fa:5d:70:93:f7:c1:ff:c6:be:1a:6b:
                    fd:9b:9d:79:89:b3:14:85:af:18:b7:87:4e:67:31:
                    8b:ed:80:d0:73:f0:3f:5e:ce:da:6a:ee:30:88:67:
                    1d:73:ba:01:7a:b3:7e:bf:65:4e:81:25:8a:90:90:
                    88:aa:93:ff:f2:06:04:c2:3e:9d:57:b8:9d:5c:c3:
                    83:1e:f1:2c:ef:38:50:bd:e2:88:18:35:86:a3:de:
                    63:f0:b7:a2:1b:42:24:0a:3e:f1:47:96:41:51:be:
                    e4:18:77:47:16:06:29:0d:cc:11:bc:5d:bb:6f:4b:
                    9b:15:bf:94:ad:0a:61:03:1c:7c:f8:17:2a:a9:1a:
                    a3:29:fa:fc:33:15:c6:66:a0:08:85:1e:71:40:38:
                    14:a9:8e:66:7f:41:11:12:91:ca:b4:19:bf:48:3a:
                    83:87:eb:b9:ae:0e:fc:8f:07:29:13:e6:ce:a5:0c:
                    89:fc:0e:19:6d:85:8b:ad:2a:37:f7:c1:38:d2:1c:
                    70:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:B2:33:10:65:AA:62:20:94:DA:5D:05:80:AB:17:7B:84:B1:81:F7
            X509v3 Authority Key Identifier:
                keyid:0A:17:B4:0A:79:DF:FF:44:FA:FA:3D:40:F6:E4:D0:0D:83:51:4B:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/0A17B40A79DFFF44FAFA3D40F6E4D00D83514BB3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490/fb5ab1cb30ff430e23ac6e14a09173d9b9b4b3e328a76b388e.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/3230352e3133342e3233332e302f32342d3234203d3e203137313339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.134.233.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1b:e1:b4:b4:90:3a:22:ea:bc:fa:53:10:fc:b8:25:34:99:a7:
         53:94:3d:32:85:64:ef:fb:c0:48:b0:05:ea:d5:f3:5b:d9:39:
         5f:43:a8:b6:e5:ac:b9:8d:6c:2f:cb:84:f6:d8:b8:b5:10:de:
         a2:0f:79:85:84:95:9f:5c:03:e8:c5:44:f3:88:90:20:60:e8:
         ac:8c:fc:29:3d:95:4c:f0:a9:2b:d9:de:97:8d:df:44:42:2b:
         05:32:99:4b:c9:60:4f:d3:55:e4:54:e1:73:5d:cf:4c:c2:c2:
         6d:e1:0e:64:ba:a1:40:37:fc:b1:db:97:0f:8d:66:29:71:9d:
         ba:20:de:0d:40:84:c0:e6:16:45:71:49:69:b1:d8:38:04:13:
         f0:ca:a7:5e:95:0f:10:42:f3:c8:dc:92:aa:9e:74:7f:9a:41:
         91:55:00:ed:6c:e3:91:5d:79:1f:49:c0:1d:fb:b2:1e:12:76:
         9b:62:e6:73:35:a9:50:2b:fa:df:05:8a:97:89:60:27:88:58:
         01:7b:52:1f:70:71:7f:e0:fb:d1:2f:c2:f8:72:31:37:03:e2:
         7b:1e:a6:20:e6:62:d6:08:9c:c1:94:8b:87:ae:22:a1:55:8c:
         85:87:05:f4:2a:88:e8:63:af:e7:a5:7c:bd:c2:2a:d5:f7:1b:
         99:d9:8f:a5
-----BEGIN CERTIFICATE-----
MIIFtDCCBJygAwIBAgIUBn4EWOFebbLKw+yRTH8O36RQkGQwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZmI1YWIxY2IzMGZmNDMwZTIzYWM2ZTE0YTA5MTczZDli
OWI0YjNlMzI4YTc2YjM4OGUwHhcNMjQwNTIzMTA1NDEyWhcNMjUwNTIyMTA1OTEy
WjAzMTEwLwYDVQQDEygyN0IyMzMxMDY1QUE2MjIwOTREQTVEMDU4MEFCMTc3Qjg0
QjE4MUY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyxzdMjpWqWlY
S74MjN10xVkuRN4lN5r8xhVC9WlHKaAGSJd0/IWiMvvvp+/L+gHQUqLzNW63L/CQ
tu30XsfF+l1wk/fB/8a+Gmv9m515ibMUha8Yt4dOZzGL7YDQc/A/Xs7aau4wiGcd
c7oBerN+v2VOgSWKkJCIqpP/8gYEwj6dV7idXMODHvEs7zhQveKIGDWGo95j8Lei
G0IkCj7xR5ZBUb7kGHdHFgYpDcwRvF27b0ubFb+UrQphAxx8+BcqqRqjKfr8MxXG
ZqAIhR5xQDgUqY5mf0EREpHKtBm/SDqDh+u5rg78jwcpE+bOpQyJ/A4ZbYWLrSo3
98E40hxwDQIDAQABo4ICtDCCArAwHQYDVR0OBBYEFCeyMxBlqmIglNpdBYCrF3uE
sYH3MB8GA1UdIwQYMBaAFAoXtAp53/9E+vo9QPbk0A2DUUuzMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmOGYwYjgwNmMwMThmYTUxMzZlMjkxODRhLzAv
MEExN0I0MEE3OURGRkY0NEZBRkEzRDQwRjZFNEQwMEQ4MzUxNEJCMy5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNmVhZDA3M2MtYjlmMC00NTIzLWIzOWUtYTNjN2Rh
Yjk3YzI1LzI5M2ZiMTViLTVhODUtNGFiZS1iZDI0LTIzMmExMTRhZTQ5MC9mYjVh
YjFjYjMwZmY0MzBlMjNhYzZlMTRhMDkxNzNkOWI5YjRiM2UzMjhhNzZiMzg4ZS5j
ZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjhmMGI4MDZjMDE4ZmE1
MTM2ZTI5MTg0YS8wLzMyMzAzNTJlMzEzMzM0MmUzMjMzMzMyZTMwMmYzMjM0MmQz
MjM0MjAzZDNlMjAzMTM3MzEzMzM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzYbpMA0GCSqGSIb3DQEB
CwUAA4IBAQAb4bS0kDoi6rz6UxD8uCU0madTlD0yhWTv+8BIsAXq1fNb2TlfQ6i2
5ay5jWwvy4T22Li1EN6iD3mFhJWfXAPoxUTziJAgYOisjPwpPZVM8Kkr2d6Xjd9E
QisFMplLyWBP01XkVOFzXc9MwsJt4Q5kuqFAN/yx25cPjWYpcZ26IN4NQITA5hZF
cUlpsdg4BBPwyqdelQ8QQvPI3JKqnnR/mkGRVQDtbOORXXkfScAd+7IeEnabYuZz
NalQK/rfBYqXiWAniFgBe1IfcHF/4PvRL8L4cjE3A+J7HqYg5mLWCJzBlIuHriKh
VYyFhwX0KojoY6/npXy9wirV9xuZ2Y+l
-----END CERTIFICATE-----
Generated at Thu Jun 13 10:57:29 2024 by rpki-client on console-ams.rpki-client.org