Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/3139322e3230382e342e302f32342d3234203d3e2037303138.roa
File:                     3139322e3230382e342e302f32342d3234203d3e2037303138.roa (raw, json)
Hash identifier:          jRmwv0nWnqZTzEXCh4WbEZaGd5bU8wdfJQWHIbT3DTE=
Subject key identifier:   81:B9:0F:49:1D:9C:77:1B:3D:DF:9D:F7:83:89:7F:04:B4:46:B6:48
Certificate issuer:       /CN=c487e481b4a0d3800626ef058f9b9ae9411745794ebeaa34b7
Certificate serial:       5AF6434CCCF7661940E44358592F8EBA229DD59B
Authority key identifier: 66:18:76:BF:25:91:B8:70:21:FA:45:24:F5:40:65:A1:18:C3:15:60
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9612d9a4-803d-4413-aef7-b133b4ff80b7/c487e481b4a0d3800626ef058f9b9ae9411745794ebeaa34b7.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/3139322e3230382e342e302f32342d3234203d3e2037303138.roa
Signing time:             Sat 17 Aug 2024 10:23:10 +0000
ROA not before:           Sat 17 Aug 2024 10:18:10 +0000
ROA not after:            Sat 16 Aug 2025 10:23:10 +0000
asID:                     7018
IP address blocks:        192.208.4.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/661876BF2591B87021FA4524F54065A118C31560.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/661876BF2591B87021FA4524F54065A118C31560.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9612d9a4-803d-4413-aef7-b133b4ff80b7/c487e481b4a0d3800626ef058f9b9ae9411745794ebeaa34b7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9612d9a4-803d-4413-aef7-b133b4ff80b7/9612d9a4-803d-4413-aef7-b133b4ff80b7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9612d9a4-803d-4413-aef7-b133b4ff80b7/9612d9a4-803d-4413-aef7-b133b4ff80b7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9612d9a4-803d-4413-aef7-b133b4ff80b7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 09:58:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:f6:43:4c:cc:f7:66:19:40:e4:43:58:59:2f:8e:ba:22:9d:d5:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c487e481b4a0d3800626ef058f9b9ae9411745794ebeaa34b7
        Validity
            Not Before: Aug 17 10:18:10 2024 GMT
            Not After : Aug 16 10:23:10 2025 GMT
        Subject: CN=81B90F491D9C771B3DDF9DF783897F04B446B648
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:d4:49:f0:fb:69:ac:61:b7:18:0a:a9:ef:dc:
                    78:4c:44:a2:30:84:72:fa:03:93:3f:4c:37:b1:25:
                    fb:02:8c:1b:7e:e1:45:82:4f:b0:d7:5d:3e:0f:74:
                    61:44:1c:8c:d4:01:04:8e:f1:8c:bc:da:23:75:23:
                    75:38:c4:33:73:10:21:43:01:77:60:f7:7a:54:30:
                    0d:96:42:bc:f3:14:9e:a0:05:71:cc:11:70:72:aa:
                    60:e2:b1:76:54:96:89:88:48:52:5a:aa:1d:22:73:
                    2a:70:ff:94:6a:66:7c:cf:45:4e:c4:1f:03:5c:e7:
                    89:96:6c:ee:51:41:82:78:80:29:02:f7:15:1d:76:
                    20:12:95:84:5e:c7:8e:d8:f8:36:fa:d5:e7:82:5a:
                    79:34:1c:f8:4f:89:17:2b:fc:01:82:9f:1d:58:f0:
                    1a:a8:2d:3e:ba:59:a5:06:bd:6d:65:6a:0c:31:7e:
                    f7:03:4b:e2:cb:ae:5a:a7:20:08:ae:5c:6b:e4:30:
                    8d:f7:ff:89:d7:dc:f4:2b:32:22:78:5e:39:fa:b8:
                    15:29:ee:db:24:3d:eb:64:7a:10:ce:3d:f4:8c:a5:
                    5b:cb:c9:27:2e:0b:8a:e7:39:1c:e8:97:d9:02:ed:
                    29:1c:0c:5a:d3:9f:76:5c:d5:d6:52:c2:05:9b:61:
                    6e:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:B9:0F:49:1D:9C:77:1B:3D:DF:9D:F7:83:89:7F:04:B4:46:B6:48
            X509v3 Authority Key Identifier:
                keyid:66:18:76:BF:25:91:B8:70:21:FA:45:24:F5:40:65:A1:18:C3:15:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/661876BF2591B87021FA4524F54065A118C31560.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9612d9a4-803d-4413-aef7-b133b4ff80b7/c487e481b4a0d3800626ef058f9b9ae9411745794ebeaa34b7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/3139322e3230382e342e302f32342d3234203d3e2037303138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.208.4.0/24

    Signature Algorithm: sha256WithRSAEncryption
         27:f3:81:bb:0f:aa:a2:f9:11:7f:de:bd:7d:42:ae:cd:ac:3e:
         6b:54:94:fb:a9:40:43:f9:a0:d2:4e:25:84:3d:0c:9c:fd:e5:
         a6:65:b5:5a:7a:c9:a0:9d:f2:5f:3f:6c:1b:d3:02:2f:d6:3e:
         86:72:98:d4:3d:f2:ef:3f:0c:06:a5:ae:58:25:c5:6b:ff:91:
         e0:bb:e8:0d:22:bc:4d:75:00:b8:75:bf:f3:46:04:4c:2e:b9:
         12:f7:79:b1:2b:e6:03:79:32:88:47:8d:07:c7:70:f7:5d:55:
         a3:55:f4:b2:df:fe:70:c7:46:e4:6e:dd:37:91:62:17:b7:70:
         99:91:d7:97:0f:da:82:80:86:d5:d1:e2:f7:d7:db:d7:79:12:
         44:2a:07:98:83:61:18:f5:43:6c:22:e9:16:73:c2:86:00:eb:
         9c:bc:e2:af:e7:80:f2:7e:6f:93:32:34:0c:bb:76:19:bc:d8:
         0c:82:76:60:fb:ab:26:4a:ee:af:42:96:8e:fd:f1:97:ca:b2:
         62:96:9e:40:d9:ce:5f:8e:b1:c7:e2:06:d6:65:dd:26:36:43:
         96:45:d9:c5:67:5c:5a:6c:09:4f:d9:4c:f3:e1:cc:f0:26:df:
         40:df:39:b5:42:86:52:15:2d:12:c5:05:01:61:98:2e:4b:b8:
         1d:cb:fa:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:28:31 2025 by rpki-client