Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8fded1a0019006e97cb128ef/0/3231362e3135312e3137342e302f32342d3234203d3e20383334.roa
File:                     3231362e3135312e3137342e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier:          zyvWGTyO/vF3FBuuicXcPUBaWRpOtpXOmpJ/tVZB/4o=
Subject key identifier:   4E:5B:EF:1E:20:00:9F:E1:04:8D:96:BF:2B:AA:68:E6:7B:2B:F2:C6
Certificate issuer:       /CN=7e2bb4e56cdfe2f40f824abdccd9b523466eccddb306c90c5b
Certificate serial:       783399206AF38D6D8EFA87E1E7B3308E151B960A
Authority key identifier: C3:A3:D9:17:F4:39:9B:C2:6C:0A:68:77:18:2B:EA:3C:D9:FE:F4:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/efa01acb-51ec-4048-8589-d09390791aed/7e2bb4e56cdfe2f40f824abdccd9b523466eccddb306c90c5b.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8fded1a0019006e97cb128ef/0/3231362e3135312e3137342e302f32342d3234203d3e20383334.roa
Signing time:             Tue 11 Jun 2024 10:49:36 +0000
ROA not before:           Tue 11 Jun 2024 10:44:36 +0000
ROA not after:            Tue 10 Jun 2025 10:49:36 +0000
asID:                     834
IP address blocks:        216.151.174.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade8fded1a0019006e97cb128ef/0/C3A3D917F4399BC26C0A6877182BEA3CD9FEF402.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade8fded1a0019006e97cb128ef/0/C3A3D917F4399BC26C0A6877182BEA3CD9FEF402.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/efa01acb-51ec-4048-8589-d09390791aed/7e2bb4e56cdfe2f40f824abdccd9b523466eccddb306c90c5b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/efa01acb-51ec-4048-8589-d09390791aed/efa01acb-51ec-4048-8589-d09390791aed.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/efa01acb-51ec-4048-8589-d09390791aed/efa01acb-51ec-4048-8589-d09390791aed.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/efa01acb-51ec-4048-8589-d09390791aed.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 26 Jun 2024 17:07:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:33:99:20:6a:f3:8d:6d:8e:fa:87:e1:e7:b3:30:8e:15:1b:96:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e2bb4e56cdfe2f40f824abdccd9b523466eccddb306c90c5b
        Validity
            Not Before: Jun 11 10:44:36 2024 GMT
            Not After : Jun 10 10:49:36 2025 GMT
        Subject: CN=4E5BEF1E20009FE1048D96BF2BAA68E67B2BF2C6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:fb:7f:98:1e:64:25:b6:87:8f:4e:5f:01:95:
                    b4:fa:99:c4:8c:86:fd:ff:3b:a1:87:68:15:0f:2f:
                    ee:82:6f:55:73:4d:70:f0:25:dd:26:50:cf:eb:7f:
                    c2:52:3b:ee:6b:9f:b4:e1:30:04:0c:d3:db:fb:bd:
                    48:9d:25:58:f9:51:dc:80:d5:c9:f1:5e:50:04:8d:
                    20:13:67:6b:19:45:ba:f4:d2:34:7c:ba:58:3a:b4:
                    6e:12:19:39:8d:2f:73:00:3a:e3:d3:8b:e9:3f:1e:
                    9e:be:ec:c9:28:6a:e5:1a:44:23:cd:e0:d0:fe:0e:
                    79:2d:14:ff:2e:3a:4c:f9:29:52:ab:17:28:db:a4:
                    21:5c:59:53:84:fb:ba:a7:75:b4:86:60:03:7c:44:
                    3e:07:84:6a:e9:ca:fd:5e:ff:f2:19:49:c1:50:45:
                    86:19:0e:66:da:be:0a:2c:fb:ec:38:2f:94:b5:b9:
                    96:eb:d5:18:cd:86:02:78:29:98:09:bf:e7:a2:f8:
                    d0:f2:4a:48:19:b7:b9:95:d1:5a:83:c8:e8:90:8a:
                    f1:a4:14:e4:0d:2d:34:50:36:f8:cf:52:51:40:68:
                    5c:16:2b:58:08:b6:5b:07:97:f1:cd:17:54:8c:d3:
                    e5:2e:b6:7d:6a:a9:15:ab:d0:c2:d6:e3:1e:ad:ea:
                    48:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:5B:EF:1E:20:00:9F:E1:04:8D:96:BF:2B:AA:68:E6:7B:2B:F2:C6
            X509v3 Authority Key Identifier:
                keyid:C3:A3:D9:17:F4:39:9B:C2:6C:0A:68:77:18:2B:EA:3C:D9:FE:F4:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8fded1a0019006e97cb128ef/0/C3A3D917F4399BC26C0A6877182BEA3CD9FEF402.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/efa01acb-51ec-4048-8589-d09390791aed/7e2bb4e56cdfe2f40f824abdccd9b523466eccddb306c90c5b.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8fded1a0019006e97cb128ef/0/3231362e3135312e3137342e302f32342d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.151.174.0/24

    Signature Algorithm: sha256WithRSAEncryption
         71:15:e7:ee:07:33:73:ce:4f:ce:82:6e:57:03:02:c4:70:30:
         05:32:95:3e:29:a8:2f:8a:05:1b:61:cd:59:03:dc:c2:dc:c2:
         35:f0:2b:a7:5e:32:76:58:23:da:1b:fa:1a:40:de:d7:24:7b:
         95:f5:46:c4:01:34:e0:a0:20:28:11:f3:76:be:5f:bf:ed:d6:
         89:71:3a:a9:1e:fb:2d:6e:97:40:89:e6:8f:68:e7:40:81:26:
         e6:36:0d:b3:86:1b:57:39:46:5c:2c:ad:c4:cd:95:37:05:e0:
         77:81:fc:77:13:85:47:b8:af:93:b0:18:81:4c:2c:94:5f:db:
         f1:2b:45:68:e7:3a:4d:9c:56:3a:82:a2:14:2e:f5:85:6a:40:
         5e:18:a0:1c:69:6e:ea:9c:5d:2c:bc:88:45:41:f7:d9:b6:e4:
         21:65:50:f4:c5:5e:f0:3f:dd:68:a4:7a:83:1e:5d:5f:22:25:
         0f:b3:ff:e7:bf:76:ef:c9:41:ad:1f:c3:c4:75:c5:ba:0e:34:
         1e:3d:17:cb:15:d6:4b:a5:46:6c:f9:6e:21:c1:f9:a1:c5:c1:
         9a:0c:8d:e7:f5:fd:ba:42:72:0f:e9:c8:a9:42:22:33:e6:f9:
         0a:a0:f4:fd:fe:4f:a8:8f:27:78:19:18:74:7a:99:1b:a5:15:
         53:83:51:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 03:05:53 2024 by rpki-client on console.sobornost.net