Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/3139322e3230382e362e302f32342d3234203d3e2037303138.roa
File:                     3139322e3230382e362e302f32342d3234203d3e2037303138.roa (raw, json)
Hash identifier:          /a3KuSgN6rd5ZBzRJJFZHxjo695pco8GpJ9xVGYMYgE=
Subject key identifier:   DB:7D:65:4F:DD:A9:A4:5B:4A:FC:70:36:91:E9:E2:9A:7D:47:3F:A2
Certificate issuer:       /CN=c487e481b4a0d3800626ef058f9b9ae9411745794ebeaa34b7
Certificate serial:       309B6189818C905BED4AB8CC945A9200F6C3A988
Authority key identifier: 66:18:76:BF:25:91:B8:70:21:FA:45:24:F5:40:65:A1:18:C3:15:60
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9612d9a4-803d-4413-aef7-b133b4ff80b7/c487e481b4a0d3800626ef058f9b9ae9411745794ebeaa34b7.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/3139322e3230382e362e302f32342d3234203d3e2037303138.roa
Signing time:             Sat 17 Aug 2024 10:23:11 +0000
ROA not before:           Sat 17 Aug 2024 10:18:11 +0000
ROA not after:            Sat 16 Aug 2025 10:23:11 +0000
asID:                     7018
IP address blocks:        192.208.6.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/661876BF2591B87021FA4524F54065A118C31560.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/661876BF2591B87021FA4524F54065A118C31560.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9612d9a4-803d-4413-aef7-b133b4ff80b7/c487e481b4a0d3800626ef058f9b9ae9411745794ebeaa34b7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9612d9a4-803d-4413-aef7-b133b4ff80b7/9612d9a4-803d-4413-aef7-b133b4ff80b7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9612d9a4-803d-4413-aef7-b133b4ff80b7/9612d9a4-803d-4413-aef7-b133b4ff80b7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9612d9a4-803d-4413-aef7-b133b4ff80b7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 19:47:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:9b:61:89:81:8c:90:5b:ed:4a:b8:cc:94:5a:92:00:f6:c3:a9:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c487e481b4a0d3800626ef058f9b9ae9411745794ebeaa34b7
        Validity
            Not Before: Aug 17 10:18:11 2024 GMT
            Not After : Aug 16 10:23:11 2025 GMT
        Subject: CN=DB7D654FDDA9A45B4AFC703691E9E29A7D473FA2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:dc:a7:d3:71:89:27:e1:55:ba:d6:cc:be:57:
                    cd:c6:d3:b7:29:76:bd:58:95:a8:9e:5d:c2:28:e2:
                    c4:ad:6c:44:5f:cf:d4:58:c9:28:f1:99:e9:06:69:
                    d5:95:61:22:5b:b8:46:ca:f0:50:ec:90:a0:2a:64:
                    2a:88:31:3f:be:1f:3b:1f:18:e4:f1:b3:7c:a1:df:
                    4d:ee:f2:73:fc:62:ea:a1:06:a4:6e:e7:29:c0:1f:
                    8d:d0:ef:f6:0a:86:e7:14:20:34:b3:2b:bc:c5:09:
                    b1:0c:59:28:33:31:13:24:f3:d2:72:bd:b3:12:bf:
                    07:66:5d:35:66:16:f8:96:8a:ef:fd:14:a1:5c:9d:
                    f1:ff:01:a3:e6:e7:d3:76:e9:db:9b:a9:2b:d1:85:
                    ed:54:65:3d:88:c3:8e:2d:71:e5:7e:47:b8:c6:a5:
                    bf:94:bc:a2:15:9c:80:f3:b9:b1:8c:69:b2:ab:a4:
                    98:03:68:df:43:41:08:4c:b8:c6:60:28:73:41:ca:
                    f6:5c:23:9a:c1:bc:b3:e1:6e:8d:ca:c7:30:d5:4d:
                    d4:30:e8:66:26:9b:fd:a6:f2:97:6a:da:ea:18:42:
                    87:08:c8:72:d5:48:33:b4:a1:5c:65:c1:6d:a7:6a:
                    17:09:c9:94:c7:9c:d2:2a:bc:d3:02:f6:ee:30:86:
                    54:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:7D:65:4F:DD:A9:A4:5B:4A:FC:70:36:91:E9:E2:9A:7D:47:3F:A2
            X509v3 Authority Key Identifier:
                keyid:66:18:76:BF:25:91:B8:70:21:FA:45:24:F5:40:65:A1:18:C3:15:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/661876BF2591B87021FA4524F54065A118C31560.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9612d9a4-803d-4413-aef7-b133b4ff80b7/c487e481b4a0d3800626ef058f9b9ae9411745794ebeaa34b7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/3139322e3230382e362e302f32342d3234203d3e2037303138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.208.6.0/24

    Signature Algorithm: sha256WithRSAEncryption
         53:f2:0a:f8:87:7a:8b:91:ee:5f:fe:88:40:7a:d9:50:52:83:
         15:13:e1:c1:28:8a:26:db:6c:de:cf:93:99:33:9c:52:7d:24:
         4d:cd:ab:9b:39:7a:c0:96:fc:b6:4e:24:7a:70:e2:df:14:41:
         4f:84:bf:59:87:9b:8b:54:63:0f:36:f2:7c:30:b6:2e:14:0f:
         4c:87:92:e0:6b:b0:3e:1c:12:c7:65:d3:77:38:6d:a6:62:dc:
         4f:80:1f:22:69:ba:00:83:2e:49:ac:33:41:a6:e5:98:58:26:
         e9:36:c9:67:69:77:cb:43:1c:9e:73:d6:de:62:31:76:67:e2:
         76:dd:1e:a9:c7:cf:01:c3:8d:06:d0:be:7d:2c:50:66:b5:36:
         26:22:d6:54:a5:da:ca:61:5e:90:ab:3e:bc:cf:60:02:da:ff:
         5a:c1:e7:8f:5d:9d:b6:5e:6a:47:54:29:a4:91:03:59:ea:03:
         03:47:ec:a9:c3:c4:09:ff:0b:81:a4:02:43:28:f7:1c:a0:30:
         63:e8:76:d8:c2:0e:af:52:be:c8:8a:ca:e1:17:4f:8f:12:50:
         d8:a4:ad:9e:cc:16:2a:29:01:db:b8:88:d4:d3:51:fa:d7:a0:
         eb:3f:4c:46:41:95:ad:e7:55:90:dd:66:d1:6e:41:c4:b5:c0:
         d8:ac:c3:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:03:25 2024 by rpki-client on console-fra.rpki-client.org