Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/AS61138.roa
File:                     AS61138.roa (raw, json)
Hash identifier:          r2cNM4TsET10fujw2LaKOtuAulXFCSRzvzRT4uAq+Mw=
Subject key identifier:   8F:FE:CD:A6:82:36:32:7F:26:8F:66:A7:A8:6B:54:32:66:DD:40:15
Certificate issuer:       /CN=b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4
Certificate serial:       7AAC194539658394638EEA67C4FD16E4BFA555DD
Authority key identifier: A7:74:82:0B:3F:E2:B7:39:59:6F:4A:6B:F3:1F:BF:D2:6E:23:F2:BC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca/b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/AS61138.roa
Signing time:             Sat 16 Nov 2024 06:15:27 +0000
ROA not before:           Sat 16 Nov 2024 06:10:27 +0000
ROA not after:            Sat 15 Nov 2025 06:15:27 +0000
asID:                     61138
IP address blocks:        216.246.18.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/A774820B3FE2B739596F4A6BF31FBFD26E23F2BC.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/A774820B3FE2B739596F4A6BF31FBFD26E23F2BC.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca/b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca/26a5e08b-a8ed-4bab-8a32-52601ca93eca.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca/26a5e08b-a8ed-4bab-8a32-52601ca93eca.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 20:44:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:ac:19:45:39:65:83:94:63:8e:ea:67:c4:fd:16:e4:bf:a5:55:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4
        Validity
            Not Before: Nov 16 06:10:27 2024 GMT
            Not After : Nov 15 06:15:27 2025 GMT
        Subject: CN=8FFECDA68236327F268F66A7A86B543266DD4015
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:81:47:02:15:5e:24:a8:89:2d:f2:d0:bb:0f:
                    a0:03:7f:6f:ce:4e:5c:65:47:21:31:66:fc:71:af:
                    37:a9:95:85:17:0f:34:75:5e:1d:c3:62:6c:97:a1:
                    00:1f:8f:c3:86:d4:21:01:5d:2f:ea:50:f1:93:cd:
                    9b:04:3e:33:2a:06:be:89:0d:d8:21:fe:3a:bb:b2:
                    36:3d:bf:4f:2f:52:bc:56:90:89:f6:77:42:ee:b2:
                    92:09:ff:f1:ba:a3:8b:9e:64:06:21:09:76:8a:c6:
                    ef:27:13:44:1d:a0:ce:de:3c:56:e4:55:eb:e4:4a:
                    af:1b:5c:5a:58:4a:c4:38:2f:e9:05:a3:06:eb:34:
                    33:2f:a2:e3:14:ba:60:14:33:2d:31:90:34:59:ea:
                    b5:7d:7e:36:92:8e:db:3b:29:e2:e0:4e:59:8f:8a:
                    58:d9:92:6f:87:03:a6:e5:02:1f:6e:06:12:37:ed:
                    a1:c6:8d:9a:b7:8f:10:6b:d3:b8:50:7b:4a:20:25:
                    f4:11:a2:67:12:61:ee:02:1f:75:db:b2:5b:68:a4:
                    07:19:e2:76:0b:93:2c:e0:dc:04:7c:08:91:6d:fe:
                    5a:7f:16:05:44:4c:c2:29:71:90:d6:56:d0:d9:4c:
                    68:1e:32:ef:9b:fc:81:2f:df:45:28:3d:5f:03:6c:
                    58:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:FE:CD:A6:82:36:32:7F:26:8F:66:A7:A8:6B:54:32:66:DD:40:15
            X509v3 Authority Key Identifier:
                keyid:A7:74:82:0B:3F:E2:B7:39:59:6F:4A:6B:F3:1F:BF:D2:6E:23:F2:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/A774820B3FE2B739596F4A6BF31FBFD26E23F2BC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca/b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/AS61138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.246.18.0/24

    Signature Algorithm: sha256WithRSAEncryption
         48:59:52:82:ab:80:89:b9:e9:6f:da:58:56:6a:98:3d:6d:8f:
         51:c8:1a:a0:99:cd:b6:5e:e7:e9:e3:ff:43:ed:f8:bd:87:3b:
         80:62:9e:5d:9b:a9:ff:b7:6a:d4:18:7c:14:b8:c1:fa:51:70:
         b5:41:9b:2f:ff:bc:96:8b:8e:86:f6:eb:a1:dd:e0:38:97:77:
         b0:41:db:45:e3:0a:eb:f9:47:29:79:5b:a7:d4:64:26:78:d8:
         ec:0f:ca:b2:3d:7d:b1:c5:05:8b:76:35:12:2d:e0:2d:48:26:
         3c:36:0a:1d:17:19:a1:89:6c:bc:96:96:e1:e0:f9:bf:80:15:
         ec:8f:fe:c4:c0:67:3f:a0:e7:d5:29:34:4f:49:37:8b:c7:57:
         f2:04:ec:b7:e0:b0:5d:90:ab:0c:61:22:b9:0a:ad:28:70:69:
         07:4e:2d:9a:4a:62:67:42:5c:b4:fb:c2:92:ff:40:a7:3f:3c:
         26:79:4a:ca:3b:73:6b:9a:cc:b2:cd:b7:a0:0d:9c:1f:88:aa:
         c2:cf:a3:ec:64:cd:92:b9:ca:ef:39:43:3e:69:8f:d7:9b:a3:
         72:38:28:b8:92:31:a8:86:e9:a4:36:3e:3e:4f:a7:b3:0c:94:
         51:c0:ab:4f:27:c3:1c:23:18:a5:a6:1e:dd:e7:44:e0:bf:db:
         41:bd:2b:2a
-----BEGIN CERTIFICATE-----
MIIFfjCCBGagAwIBAgIUeqwZRTllg5RjjupnxP0W5L+lVd0wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyYjEwM2MzODI2ZTAwMDQ4NWRlNmI5NTg2NWRjMGIxMTlk
YTMzNTA4ZDdhOWY0YmY5ZTQwHhcNMjQxMTE2MDYxMDI3WhcNMjUxMTE1MDYxNTI3
WjAzMTEwLwYDVQQDEyg4RkZFQ0RBNjgyMzYzMjdGMjY4RjY2QTdBODZCNTQzMjY2
REQ0MDE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy4FHAhVeJKiJ
LfLQuw+gA39vzk5cZUchMWb8ca83qZWFFw80dV4dw2Jsl6EAH4/DhtQhAV0v6lDx
k82bBD4zKga+iQ3YIf46u7I2Pb9PL1K8VpCJ9ndC7rKSCf/xuqOLnmQGIQl2isbv
JxNEHaDO3jxW5FXr5EqvG1xaWErEOC/pBaMG6zQzL6LjFLpgFDMtMZA0Weq1fX42
ko7bOyni4E5Zj4pY2ZJvhwOm5QIfbgYSN+2hxo2at48Qa9O4UHtKICX0EaJnEmHu
Ah9127JbaKQHGeJ2C5Ms4NwEfAiRbf5afxYFREzCKXGQ1lbQ2UxoHjLvm/yBL99F
KD1fA2xYawIDAQABo4ICfjCCAnowHQYDVR0OBBYEFI/+zaaCNjJ/Jo9mp6hrVDJm
3UAVMB8GA1UdIwQYMBaAFKd0ggs/4rc5WW9Ka/Mfv9JuI/K8MA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmOTJlZTRkODQwMTkzMzExY2E4YjM0NjJhLzAv
QTc3NDgyMEIzRkUyQjczOTU5NkY0QTZCRjMxRkJGRDI2RTIzRjJCQy5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNjlmZDAxNTYtYmIxZi00OGI2LWJmMzItYzk0OTIy
ODZmMTk1LzI2YTVlMDhiLWE4ZWQtNGJhYi04YTMyLTUyNjAxY2E5M2VjYS9iMTAz
YzM4MjZlMDAwNDg1ZGU2Yjk1ODY1ZGMwYjExOWRhMzM1MDhkN2E5ZjRiZjllNC5j
ZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNyc3luYzovL3Jwa2ktcnBz
LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTMzMTFjYThi
MzQ2MmEvMC9BUzYxMTM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8G
CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2PYSMA0GCSqGSIb3DQEBCwUAA4IB
AQBIWVKCq4CJuelv2lhWapg9bY9RyBqgmc22Xufp4/9D7fi9hzuAYp5dm6n/t2rU
GHwUuMH6UXC1QZsv/7yWi46G9uuh3eA4l3ewQdtF4wrr+UcpeVun1GQmeNjsD8qy
PX2xxQWLdjUSLeAtSCY8NgodFxmhiWy8lpbh4Pm/gBXsj/7EwGc/oOfVKTRPSTeL
x1fyBOy34LBdkKsMYSK5Cq0ocGkHTi2aSmJnQly0+8KS/0CnPzwmeUrKO3Nrmsyy
zbegDZwfiKrCz6PsZM2SucrvOUM+aY/Xm6NyOCi4kjGohumkNj4+T6ezDJRRwKtP
J8McIxilph7d50Tgv9tBvSsq
-----END CERTIFICATE-----
Generated at Thu Nov 21 22:34:40 2024 by rpki-client on console-fra.rpki-client.org