Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/AS19318.roa
File:                     AS19318.roa (raw, json)
Hash identifier:          08KwgFbWUDiR19DSKlhQIhdDy2Cem5wkliNsqiem1KI=
Subject key identifier:   2A:A1:01:88:5C:CF:88:AB:41:DE:BD:31:75:5A:61:F5:BF:9B:CD:DD
Certificate issuer:       /CN=b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4
Certificate serial:       111DDAD28AF40FC1267E5CB5652A136AB9B2C4EE
Authority key identifier: A7:74:82:0B:3F:E2:B7:39:59:6F:4A:6B:F3:1F:BF:D2:6E:23:F2:BC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca/b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/AS19318.roa
Signing time:             Fri 15 Nov 2024 18:38:35 +0000
ROA not before:           Fri 15 Nov 2024 18:33:35 +0000
ROA not after:            Fri 14 Nov 2025 18:38:35 +0000
asID:                     19318
IP address blocks:        66.225.229.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/A774820B3FE2B739596F4A6BF31FBFD26E23F2BC.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/A774820B3FE2B739596F4A6BF31FBFD26E23F2BC.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca/b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca/26a5e08b-a8ed-4bab-8a32-52601ca93eca.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca/26a5e08b-a8ed-4bab-8a32-52601ca93eca.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 20:44:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:1d:da:d2:8a:f4:0f:c1:26:7e:5c:b5:65:2a:13:6a:b9:b2:c4:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4
        Validity
            Not Before: Nov 15 18:33:35 2024 GMT
            Not After : Nov 14 18:38:35 2025 GMT
        Subject: CN=2AA101885CCF88AB41DEBD31755A61F5BF9BCDDD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:02:87:9f:01:0c:06:4f:b6:19:10:ca:05:f6:
                    5d:82:f4:39:25:6b:f6:5d:eb:b5:b4:92:eb:c9:57:
                    35:49:6d:5e:a5:86:a2:39:e2:bd:b3:ee:ff:58:9b:
                    67:5c:62:78:fd:38:e8:17:5a:9e:3a:ae:ef:80:e8:
                    74:6f:df:1e:ef:d8:24:da:a5:a1:c9:98:98:c5:b2:
                    9c:8e:67:1a:5e:9d:7e:44:7a:c6:67:44:5c:e1:81:
                    c1:5f:90:f3:54:43:04:04:f3:51:d0:da:d3:0a:0e:
                    ad:b2:85:dd:44:ec:e3:ae:d1:fe:57:c3:a3:7c:61:
                    ec:a9:48:ed:a6:93:3a:3d:37:53:43:8e:48:f7:27:
                    35:0c:bf:6f:87:ff:3d:73:32:5d:9c:0b:6f:3d:84:
                    6e:3c:22:c4:9c:50:3c:61:aa:44:4e:96:2a:09:38:
                    4a:d1:5e:38:5c:e5:aa:61:db:02:e4:b7:ed:7d:f0:
                    c8:9c:a8:7f:cf:72:f7:15:76:ab:6c:fe:2b:25:74:
                    26:68:be:6f:f9:8d:07:71:92:f4:bb:fc:3d:d5:5a:
                    f1:60:16:e2:f3:1b:2d:67:da:34:05:2a:cc:b4:c3:
                    f0:a4:21:54:12:39:e7:16:db:74:b4:67:a1:fe:71:
                    af:6a:41:5f:10:36:40:ca:a6:92:6d:52:18:04:df:
                    5b:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:A1:01:88:5C:CF:88:AB:41:DE:BD:31:75:5A:61:F5:BF:9B:CD:DD
            X509v3 Authority Key Identifier:
                keyid:A7:74:82:0B:3F:E2:B7:39:59:6F:4A:6B:F3:1F:BF:D2:6E:23:F2:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/A774820B3FE2B739596F4A6BF31FBFD26E23F2BC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca/b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/AS19318.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.225.229.0/24

    Signature Algorithm: sha256WithRSAEncryption
         95:44:2f:65:d0:78:12:cb:5f:89:1e:40:ec:9f:c2:df:55:a6:
         14:82:f3:43:39:52:f1:d7:40:1b:21:14:f0:59:da:5a:3c:b1:
         df:68:3c:49:df:f7:6a:e7:75:66:21:63:c7:85:b7:81:73:52:
         69:71:4a:88:5c:b5:1c:95:ad:4d:d8:15:65:0b:fd:4a:55:6b:
         57:44:32:d9:c8:cd:e4:87:e7:bc:07:a8:16:c6:bb:48:17:e5:
         f0:ad:21:f5:5b:9a:b5:2d:1f:76:f6:1f:8a:51:14:ad:db:b3:
         06:43:85:9a:4f:7f:bc:45:be:8d:7e:f5:05:df:f1:aa:07:b4:
         50:e3:d9:9e:a8:f4:13:a1:f7:d3:a2:d5:3e:0a:af:94:68:e7:
         d3:02:ef:57:48:a0:79:d8:2b:0b:02:41:91:88:64:c3:24:18:
         5b:da:b3:de:b3:37:b8:02:df:93:22:cd:94:15:41:25:ff:c6:
         fe:89:13:e5:3c:8c:34:1d:0a:4a:37:47:25:b7:3b:3b:97:51:
         ce:5a:8d:9a:76:0a:1e:a2:f4:c6:f1:77:85:f2:c7:8d:7d:9b:
         0f:23:6d:79:ba:24:1b:d9:e4:23:fa:ae:3e:bc:df:67:57:69:
         26:8e:47:1f:05:a2:70:f7:04:68:ad:f3:a6:a2:57:1e:8a:c7:
         53:65:e4:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:34:40 2024 by rpki-client on console-fra.rpki-client.org