Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8e52381d018e8593884d2a30/0/3230392e38372e3136302e302f32312d3234203d3e20313734.roa
File:                     3230392e38372e3136302e302f32312d3234203d3e20313734.roa (raw, json)
Hash identifier:          RTONKQmY6Vx9ON92RUGQTT50ME/VIpQpNC/jdOVtudw=
Subject key identifier:   10:36:34:5A:26:F7:19:F6:80:FF:24:68:FC:A9:9D:F5:47:BF:90:60
Certificate issuer:       /CN=137bca5a0ff837b3808ba493bd14ab78cc4fd6296629253051
Certificate serial:       640C42CEEA5E0A3F70AF0B7915F22D38B66E57D1
Authority key identifier: 4F:44:9F:0C:CB:37:8E:C6:D3:FC:D7:6A:A7:EE:D5:9A:F1:15:93:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/35213db6-703a-4ad8-9450-0a0e1d371cff/137bca5a0ff837b3808ba493bd14ab78cc4fd6296629253051.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8e52381d018e8593884d2a30/0/3230392e38372e3136302e302f32312d3234203d3e20313734.roa
Signing time:             Thu 04 Apr 2024 15:59:05 +0000
ROA not before:           Thu 04 Apr 2024 15:54:05 +0000
ROA not after:            Thu 03 Apr 2025 15:59:05 +0000
asID:                     174
IP address blocks:        209.87.160.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8e52381d018e8593884d2a30/0/4F449F0CCB378EC6D3FCD76AA7EED59AF11593BB.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8e52381d018e8593884d2a30/0/4F449F0CCB378EC6D3FCD76AA7EED59AF11593BB.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/35213db6-703a-4ad8-9450-0a0e1d371cff/137bca5a0ff837b3808ba493bd14ab78cc4fd6296629253051.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/35213db6-703a-4ad8-9450-0a0e1d371cff/35213db6-703a-4ad8-9450-0a0e1d371cff.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/35213db6-703a-4ad8-9450-0a0e1d371cff/35213db6-703a-4ad8-9450-0a0e1d371cff.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/35213db6-703a-4ad8-9450-0a0e1d371cff.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 03:40:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:0c:42:ce:ea:5e:0a:3f:70:af:0b:79:15:f2:2d:38:b6:6e:57:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=137bca5a0ff837b3808ba493bd14ab78cc4fd6296629253051
        Validity
            Not Before: Apr  4 15:54:05 2024 GMT
            Not After : Apr  3 15:59:05 2025 GMT
        Subject: CN=1036345A26F719F680FF2468FCA99DF547BF9060
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:20:39:63:06:bc:1d:a1:2a:b1:a2:b9:d4:90:
                    eb:84:04:0e:75:a9:c2:b3:4c:ce:e7:81:78:bf:d4:
                    52:30:a0:32:51:e3:ea:de:de:09:a3:5b:49:81:d8:
                    c6:32:2b:49:30:ee:9a:e9:f3:d2:c2:4f:c3:9d:42:
                    00:17:93:56:0d:0a:fa:d6:dc:51:e2:b5:36:f2:10:
                    5d:d3:b0:7e:e0:a2:44:30:1b:7d:5b:44:2e:76:66:
                    bf:b5:07:cb:b8:75:25:3d:1a:6d:84:f8:ec:82:f2:
                    fb:5a:0d:6c:9c:3e:3f:56:01:5b:08:26:4e:bd:71:
                    62:c6:a4:51:fd:80:98:ad:77:3b:91:7a:06:44:e5:
                    a3:f8:7b:60:a9:d4:22:bb:ac:29:eb:32:0a:d7:c1:
                    b1:d7:6e:77:d4:a9:71:11:23:32:85:bf:5c:1e:ef:
                    da:b0:ac:4e:b1:c1:4e:45:c4:ff:01:7e:05:83:d6:
                    97:06:de:d0:a2:1f:80:70:b7:ba:ba:89:b6:e0:4b:
                    5f:43:f7:81:5c:97:15:3e:9c:86:1c:91:ea:0e:89:
                    3f:70:a0:b5:72:4f:af:2b:f3:42:cf:bb:05:75:67:
                    b9:f7:b5:e5:90:fb:66:0a:78:f1:30:51:2d:3b:ae:
                    0b:c3:ae:8d:3b:98:ab:80:24:62:c8:6c:29:58:c6:
                    5f:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:36:34:5A:26:F7:19:F6:80:FF:24:68:FC:A9:9D:F5:47:BF:90:60
            X509v3 Authority Key Identifier:
                keyid:4F:44:9F:0C:CB:37:8E:C6:D3:FC:D7:6A:A7:EE:D5:9A:F1:15:93:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8e52381d018e8593884d2a30/0/4F449F0CCB378EC6D3FCD76AA7EED59AF11593BB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/35213db6-703a-4ad8-9450-0a0e1d371cff/137bca5a0ff837b3808ba493bd14ab78cc4fd6296629253051.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8e52381d018e8593884d2a30/0/3230392e38372e3136302e302f32312d3234203d3e20313734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.87.160.0/21

    Signature Algorithm: sha256WithRSAEncryption
         75:96:55:0d:02:d6:4b:38:3f:98:e1:80:a4:32:5b:f5:f2:5c:
         9f:33:97:ac:ff:26:e5:00:d4:cf:19:2e:88:b5:11:d2:0e:00:
         ab:77:3a:56:c3:b1:37:07:55:31:f6:b0:9f:bf:56:65:72:19:
         6c:74:d4:a7:58:51:10:f4:34:25:38:5b:f0:b2:50:07:1b:85:
         b0:30:df:74:e2:4d:15:b7:5a:8d:56:b2:61:99:81:01:c0:c2:
         79:f4:2a:fe:53:7a:83:4b:fc:66:e2:05:ea:17:b8:c9:f7:10:
         91:68:f8:e2:08:52:d8:69:ee:ae:e1:64:bd:07:8c:47:fd:f8:
         9c:dd:73:ed:4d:3d:86:91:3f:fc:7f:56:38:c1:56:71:fd:ca:
         06:44:1d:a9:65:6e:75:8a:8d:65:40:81:ff:dd:fe:ce:9d:85:
         e2:ab:15:6a:54:75:52:38:cb:90:3c:97:d3:4d:cc:94:8a:5f:
         0d:a5:fb:c8:d9:f3:0e:0b:4b:f7:a3:15:25:d8:b5:cc:58:fe:
         59:66:24:24:dc:d8:1a:f1:8d:26:8a:bd:1d:1f:48:eb:0b:5d:
         b4:53:aa:8a:41:09:c4:20:4a:b3:c1:fc:3c:00:ee:0f:d9:a0:
         cc:51:db:be:dd:fd:9d:ae:66:0b:ad:c3:cb:fc:a7:9e:d8:e0:
         66:3d:94:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 04:02:22 2024 by rpki-client on console-fra.rpki-client.org