Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf915cb0a401919022ef071efe/1/3136372e3235332e37382e302f32342d3332203d3e20333933353737.roa
File:                     3136372e3235332e37382e302f32342d3332203d3e20333933353737.roa (raw, json)
Hash identifier:          GZb6YePFx/8TROodoRsHL5LgIZ4iUTmhq30UyogeaRc=
Subject key identifier:   AF:4C:A3:FD:92:E2:AF:BA:EE:B6:2F:98:A4:58:CC:BF:C4:1A:26:7B
Certificate issuer:       /CN=0735111c25f6578195eb9729a303b6d74402d1d835d4389ed1
Certificate serial:       7B06F2AA0C8614F537C42BE11863CEAB60A070F8
Authority key identifier: E1:C2:F9:B8:BC:DE:6D:9C:27:61:54:58:33:55:B2:45:89:F4:9B:C8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/787ebbf9-1a0e-4410-81a0-a4a02a27fa2b/0735111c25f6578195eb9729a303b6d74402d1d835d4389ed1.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf915cb0a401919022ef071efe/1/3136372e3235332e37382e302f32342d3332203d3e20333933353737.roa
Signing time:             Mon 26 Aug 2024 19:22:07 +0000
ROA not before:           Mon 26 Aug 2024 19:17:07 +0000
ROA not after:            Mon 25 Aug 2025 19:22:07 +0000
asID:                     393577
IP address blocks:        167.253.78.0/24 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf915cb0a401919022ef071efe/1/E1C2F9B8BCDE6D9C276154583355B24589F49BC8.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf915cb0a401919022ef071efe/1/E1C2F9B8BCDE6D9C276154583355B24589F49BC8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/787ebbf9-1a0e-4410-81a0-a4a02a27fa2b/0735111c25f6578195eb9729a303b6d74402d1d835d4389ed1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/787ebbf9-1a0e-4410-81a0-a4a02a27fa2b/787ebbf9-1a0e-4410-81a0-a4a02a27fa2b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/787ebbf9-1a0e-4410-81a0-a4a02a27fa2b/787ebbf9-1a0e-4410-81a0-a4a02a27fa2b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/787ebbf9-1a0e-4410-81a0-a4a02a27fa2b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 06:21:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:06:f2:aa:0c:86:14:f5:37:c4:2b:e1:18:63:ce:ab:60:a0:70:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0735111c25f6578195eb9729a303b6d74402d1d835d4389ed1
        Validity
            Not Before: Aug 26 19:17:07 2024 GMT
            Not After : Aug 25 19:22:07 2025 GMT
        Subject: CN=AF4CA3FD92E2AFBAEEB62F98A458CCBFC41A267B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:e3:83:2d:64:31:20:fe:2a:b9:26:82:88:36:
                    34:34:74:dd:bc:08:8f:b1:fe:ec:34:0e:db:17:7f:
                    d3:3c:72:51:ee:14:a3:66:7f:c5:13:62:9e:cf:0b:
                    36:46:64:3e:4e:6d:9a:e7:8e:25:46:c7:38:63:46:
                    72:40:89:68:6d:01:d6:90:69:e9:31:87:aa:a6:c2:
                    28:00:c7:a1:fe:61:e6:10:d2:98:f5:53:da:a4:8b:
                    62:b5:14:58:ca:d1:e7:78:3f:9d:34:c4:04:d6:a1:
                    03:e7:05:1a:a7:78:18:9c:d0:29:60:2e:74:08:1e:
                    55:2b:39:06:f5:04:c3:f0:65:87:1e:a6:dc:69:be:
                    69:8e:ef:11:77:f2:54:f7:08:9b:55:de:80:79:13:
                    80:1f:06:b1:8c:39:e6:43:ab:c1:06:08:97:cb:92:
                    35:22:ef:0f:18:de:7d:92:59:5c:08:ff:e3:91:26:
                    f0:d1:92:8f:d9:d7:d2:7c:74:a2:5e:10:58:ec:05:
                    3f:ea:6a:e2:44:f0:4b:54:9f:f1:ef:8f:70:33:74:
                    08:81:c8:b8:45:2c:39:b5:cf:c6:0d:70:84:da:c6:
                    86:1a:fb:b6:39:0b:bc:a9:14:ca:8a:fd:92:05:4e:
                    eb:24:a0:94:fd:dd:5f:1a:92:5a:4f:6e:4f:6a:87:
                    19:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:4C:A3:FD:92:E2:AF:BA:EE:B6:2F:98:A4:58:CC:BF:C4:1A:26:7B
            X509v3 Authority Key Identifier:
                keyid:E1:C2:F9:B8:BC:DE:6D:9C:27:61:54:58:33:55:B2:45:89:F4:9B:C8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf915cb0a401919022ef071efe/1/E1C2F9B8BCDE6D9C276154583355B24589F49BC8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/787ebbf9-1a0e-4410-81a0-a4a02a27fa2b/0735111c25f6578195eb9729a303b6d74402d1d835d4389ed1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf915cb0a401919022ef071efe/1/3136372e3235332e37382e302f32342d3332203d3e20333933353737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.253.78.0/24

    Signature Algorithm: sha256WithRSAEncryption
         45:c6:6a:93:ac:80:aa:dd:7b:17:f3:90:c9:87:54:71:e0:68:
         df:bf:cf:29:66:bd:06:a9:29:64:bd:9d:96:ab:e0:5e:37:dd:
         2a:fd:ed:61:b8:b5:6b:4b:b0:63:f1:9c:be:36:c2:77:de:87:
         e0:4c:5b:c5:d7:bf:b9:e8:e6:bd:72:de:cc:d6:aa:f8:d4:44:
         9d:93:ab:e0:dd:2c:cb:8f:08:a5:d0:35:a5:8b:6f:e0:15:8e:
         ca:79:32:44:e2:09:ff:6a:0f:92:c6:99:ea:34:d2:f3:5b:af:
         ba:8a:04:d3:54:1c:61:ac:3e:4f:82:5e:c4:57:88:c9:66:e7:
         49:31:15:5b:9a:b9:ec:18:01:fa:83:98:fb:6e:56:44:b4:04:
         e3:c3:db:08:50:dc:df:f0:79:13:b6:53:11:4a:8f:03:84:5e:
         78:22:ef:57:0f:6b:cd:ed:e4:5e:45:d5:ce:de:1a:12:d6:4a:
         7e:4e:2e:00:c5:08:0b:6c:53:59:59:76:76:f2:90:10:b5:ac:
         42:e1:1e:a9:c3:f4:cc:c0:7a:7c:96:39:06:5e:60:c5:96:de:
         d7:49:2e:16:55:9c:23:01:6f:64:73:ba:8f:1a:30:2c:3d:c8:
         fb:e8:f9:24:3f:4c:10:72:8c:42:aa:43:b6:37:be:9d:8c:80:
         8c:bc:0e:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 06:50:08 2024 by rpki-client on console-fra.rpki-client.org