Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8baa64a8018bae05840d043b/0/3137322e39392e32332e302f32342d3234203d3e20333938393632.roa
File:                     3137322e39392e32332e302f32342d3234203d3e20333938393632.roa (raw, json)
Hash identifier:          UV+NS4RDE3laSAOqILeu1bSFaZ+kPxBcW3bt9vXRQfs=
Subject key identifier:   F9:66:ED:59:06:A3:67:78:44:7E:F0:AF:D8:6A:0E:30:BC:5E:F1:D9
Certificate issuer:       /CN=8aa800a814af0deb066a95f7996f83cd729a48d075b0952fbe
Certificate serial:       051532C948C71D38BF6DB013299E9971131F0A66
Authority key identifier: 4A:65:9D:2B:D2:0D:70:6E:89:F0:E9:C8:A1:E8:22:F2:DD:AE:BE:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/946afd34-6971-423f-b22a-575e2c73ab27/8aa800a814af0deb066a95f7996f83cd729a48d075b0952fbe.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8baa64a8018bae05840d043b/0/3137322e39392e32332e302f32342d3234203d3e20333938393632.roa
Signing time:             Wed 08 Nov 2023 08:34:25 +0000
ROA not before:           Wed 08 Nov 2023 08:29:25 +0000
ROA not after:            Wed 06 Nov 2024 08:34:25 +0000
asID:                     398962
IP address blocks:        172.99.23.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8baa64a8018bae05840d043b/0/4A659D2BD20D706E89F0E9C8A1E822F2DDAEBE1F.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8baa64a8018bae05840d043b/0/4A659D2BD20D706E89F0E9C8A1E822F2DDAEBE1F.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/946afd34-6971-423f-b22a-575e2c73ab27/8aa800a814af0deb066a95f7996f83cd729a48d075b0952fbe.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/946afd34-6971-423f-b22a-575e2c73ab27/946afd34-6971-423f-b22a-575e2c73ab27.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/946afd34-6971-423f-b22a-575e2c73ab27/946afd34-6971-423f-b22a-575e2c73ab27.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/946afd34-6971-423f-b22a-575e2c73ab27.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 08 Jun 2024 19:44:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:15:32:c9:48:c7:1d:38:bf:6d:b0:13:29:9e:99:71:13:1f:0a:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8aa800a814af0deb066a95f7996f83cd729a48d075b0952fbe
        Validity
            Not Before: Nov  8 08:29:25 2023 GMT
            Not After : Nov  6 08:34:25 2024 GMT
        Subject: CN=F966ED5906A36778447EF0AFD86A0E30BC5EF1D9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:e7:20:43:59:92:a6:9f:d8:ac:55:34:0f:af:
                    9a:02:af:ed:a0:ed:89:65:ee:02:46:61:36:21:50:
                    bc:16:08:94:06:6c:9a:ed:c9:a7:0f:69:9a:6d:80:
                    ab:55:6f:b4:cc:3b:b7:7c:f0:69:80:f0:d7:34:e9:
                    3c:f6:34:9b:44:ab:aa:11:5b:e4:d3:be:a0:18:97:
                    d1:4d:af:af:06:81:ce:c8:8d:ce:54:74:8c:94:84:
                    2c:4e:5d:84:5d:8d:b7:1c:11:4f:0e:c2:2f:6f:23:
                    bc:dd:af:23:90:0d:a0:26:4f:cb:45:0e:f0:a9:e5:
                    7d:57:7b:19:9e:15:c0:f5:59:85:d0:3e:95:72:9d:
                    21:dd:f6:47:27:b1:21:16:c9:e8:7c:7f:75:ce:d0:
                    51:41:db:63:aa:55:ed:6b:3f:67:1f:27:63:49:36:
                    16:b3:01:9b:b2:bc:4a:04:a8:6e:15:71:b5:99:38:
                    5f:a4:d1:69:32:ad:18:28:08:71:85:bf:6f:aa:9d:
                    2d:2a:65:9d:c8:bf:d8:bd:00:65:ca:c0:78:19:e7:
                    80:17:ec:9e:6c:42:4b:b5:34:81:d1:c4:73:ed:c4:
                    7a:63:65:fa:b4:a1:73:9d:45:42:16:68:99:5b:ef:
                    97:b8:77:6f:39:80:4b:e6:96:f2:5f:15:18:2b:36:
                    e6:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:66:ED:59:06:A3:67:78:44:7E:F0:AF:D8:6A:0E:30:BC:5E:F1:D9
            X509v3 Authority Key Identifier:
                keyid:4A:65:9D:2B:D2:0D:70:6E:89:F0:E9:C8:A1:E8:22:F2:DD:AE:BE:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8baa64a8018bae05840d043b/0/4A659D2BD20D706E89F0E9C8A1E822F2DDAEBE1F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/946afd34-6971-423f-b22a-575e2c73ab27/8aa800a814af0deb066a95f7996f83cd729a48d075b0952fbe.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8baa64a8018bae05840d043b/0/3137322e39392e32332e302f32342d3234203d3e20333938393632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.99.23.0/24

    Signature Algorithm: sha256WithRSAEncryption
         23:0c:fe:48:d9:d4:9d:18:f6:c3:34:8b:d6:0d:72:f5:7e:52:
         45:44:b2:88:76:c6:1f:5f:1c:c1:2f:81:3e:58:5c:31:e5:5a:
         06:3e:0e:a9:2b:cb:23:68:c5:45:a2:2c:8b:f7:d6:5e:30:cd:
         0c:45:f3:19:b7:c9:99:e3:12:5a:b6:7b:ce:f7:50:da:9f:8d:
         c4:3c:bf:8d:d9:fe:76:13:e4:90:a3:67:06:f9:46:ca:49:17:
         b1:c7:0f:20:68:c3:6b:eb:09:23:ee:9a:da:c0:b7:83:71:5f:
         c3:e7:27:89:c4:8d:47:c2:63:21:33:f4:54:ee:c2:b0:19:68:
         a3:38:11:11:7c:5c:63:7e:aa:ea:3c:81:85:07:fd:1c:19:a8:
         e0:2c:45:12:e5:64:42:f5:8e:d8:20:16:7b:d7:6f:58:d5:d8:
         16:a2:6d:a4:eb:d8:d3:84:57:f7:a8:7d:c9:f0:94:ff:8c:c0:
         d3:e1:c2:9b:fb:a5:e8:19:d0:02:70:c7:70:c9:7b:5a:65:dc:
         b5:f9:96:32:eb:68:8b:e5:dd:94:ab:af:b9:9a:43:61:4f:9e:
         26:df:72:e0:6c:50:0f:53:73:26:69:b5:23:27:4e:de:26:77:
         2b:74:04:81:dc:b6:f8:79:92:36:81:fb:5a:59:56:06:ae:f8:
         a9:74:82:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 17:44:51 2024 by rpki-client on console-fra.rpki-client.org