Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/AS36352.roa
File:                     AS36352.roa (raw, json)
Hash identifier:          6cTcZxbUDv96UsQmQPHaTxAcOAaLY6rja3SDGzWPsQw=
Subject key identifier:   0B:51:5F:4A:E6:E2:45:E6:60:EE:6C:F6:2F:3C:6D:D4:50:05:16:B2
Certificate issuer:       /CN=b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4
Certificate serial:       2ECCBD92682D1AAFB7CDCDFCF046F6B548B1B261
Authority key identifier: A7:74:82:0B:3F:E2:B7:39:59:6F:4A:6B:F3:1F:BF:D2:6E:23:F2:BC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca/b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/AS36352.roa
Signing time:             Fri 15 Nov 2024 18:38:32 +0000
ROA not before:           Fri 15 Nov 2024 18:33:32 +0000
ROA not after:            Fri 14 Nov 2025 18:38:32 +0000
asID:                     36352
IP address blocks:        205.234.203.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/A774820B3FE2B739596F4A6BF31FBFD26E23F2BC.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/A774820B3FE2B739596F4A6BF31FBFD26E23F2BC.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca/b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca/26a5e08b-a8ed-4bab-8a32-52601ca93eca.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca/26a5e08b-a8ed-4bab-8a32-52601ca93eca.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 20:44:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:cc:bd:92:68:2d:1a:af:b7:cd:cd:fc:f0:46:f6:b5:48:b1:b2:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4
        Validity
            Not Before: Nov 15 18:33:32 2024 GMT
            Not After : Nov 14 18:38:32 2025 GMT
        Subject: CN=0B515F4AE6E245E660EE6CF62F3C6DD4500516B2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:6d:7a:97:d4:12:6e:f9:db:4d:25:20:73:74:
                    78:2c:19:ab:45:d6:2c:2d:fa:d1:a0:5c:2b:d9:8c:
                    29:91:5b:1f:36:af:f7:e7:c8:b3:6a:27:4f:0a:51:
                    f0:98:d3:43:80:48:8f:57:cb:d4:1c:a3:f1:2b:dc:
                    22:db:81:78:1c:06:52:e8:82:54:8f:c1:39:05:f5:
                    b8:71:73:f4:10:ab:17:aa:41:bd:82:ab:a8:02:a7:
                    f2:b4:5a:d3:69:1d:04:4d:7f:11:07:b3:05:cf:a5:
                    65:41:bd:42:95:bd:94:32:dc:c8:00:a1:77:85:93:
                    f0:0a:34:ff:c8:16:8e:27:99:0e:48:ec:e2:60:a3:
                    d9:46:df:fc:4a:55:e0:e3:45:df:1d:de:be:47:ce:
                    ad:9d:43:e4:39:36:da:2e:26:00:05:9b:1f:ba:d8:
                    52:ae:4c:09:39:ad:be:06:89:ab:2c:69:b9:ff:8e:
                    ed:3f:a5:43:82:4c:a9:34:95:67:6e:10:f5:0b:69:
                    2c:2e:58:8f:a8:ec:5c:0d:69:c4:9b:52:ae:b3:bc:
                    99:e2:ad:de:cb:1a:25:28:9f:3f:b4:98:57:8b:b0:
                    18:34:93:31:e7:56:9e:84:e1:a5:9d:4a:fa:4f:22:
                    c0:d9:4f:b7:52:32:f9:a6:0e:39:79:fb:6a:a1:d9:
                    df:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:51:5F:4A:E6:E2:45:E6:60:EE:6C:F6:2F:3C:6D:D4:50:05:16:B2
            X509v3 Authority Key Identifier:
                keyid:A7:74:82:0B:3F:E2:B7:39:59:6F:4A:6B:F3:1F:BF:D2:6E:23:F2:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/A774820B3FE2B739596F4A6BF31FBFD26E23F2BC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca/b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/AS36352.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.234.203.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ab:26:b7:cb:06:b5:0a:6f:de:0c:95:78:72:85:43:9b:38:97:
         b2:aa:d0:73:c6:b4:6e:10:0d:ab:ce:66:21:db:f4:c3:1f:10:
         54:51:24:fc:ae:7a:0f:b4:eb:21:0c:0a:8a:fc:f2:61:79:40:
         15:51:d4:e4:ab:4e:11:ac:6d:ad:32:51:59:5f:fb:47:91:7c:
         00:fd:ca:35:27:80:41:4b:be:2c:7c:64:e8:00:42:9d:0e:f1:
         6d:e5:7d:e9:94:bf:50:29:76:aa:39:ec:e6:03:ab:35:f8:3d:
         f1:29:94:05:7f:f7:fa:c8:b6:f7:57:99:8e:62:88:37:42:25:
         7d:7d:92:6e:a1:37:d6:79:26:d8:33:5b:c4:66:d0:60:40:6a:
         e7:44:9e:2e:eb:7c:f4:61:4e:dc:d1:e6:22:cb:0e:02:e5:4e:
         39:22:ae:bc:47:4d:db:79:e4:f4:f7:74:5c:77:9f:5f:d2:16:
         34:71:3d:1a:17:fb:da:2c:8e:74:b7:ad:97:81:0b:f6:73:f1:
         b2:8f:6b:c6:58:d5:34:e2:2f:d3:d4:8f:e5:41:7a:39:ee:74:
         f3:f7:16:11:76:62:17:86:31:47:a3:89:eb:a0:d0:75:fc:d9:
         be:8e:0d:d6:ef:64:99:18:d9:b1:4a:0f:b7:86:0b:71:c5:94:
         46:82:33:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:35:00 2024 by rpki-client on console-ams.rpki-client.org