Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8e52381d018e8593884d2a30/0/3230392e38372e3136302e302f32312d3234203d3e2037303239.roa
File:                     3230392e38372e3136302e302f32312d3234203d3e2037303239.roa (raw, json)
Hash identifier:          rB8JOZXy70W7A8N/X8am4dFRaq49hx0mtxOm3ZIUnJw=
Subject key identifier:   8C:10:77:5A:A9:68:0E:4D:14:DB:68:4E:39:1B:9E:92:A6:66:89:70
Certificate issuer:       /CN=137bca5a0ff837b3808ba493bd14ab78cc4fd6296629253051
Certificate serial:       632219304E5238ECA587C2A24EF7F4846E510B08
Authority key identifier: 4F:44:9F:0C:CB:37:8E:C6:D3:FC:D7:6A:A7:EE:D5:9A:F1:15:93:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/35213db6-703a-4ad8-9450-0a0e1d371cff/137bca5a0ff837b3808ba493bd14ab78cc4fd6296629253051.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8e52381d018e8593884d2a30/0/3230392e38372e3136302e302f32312d3234203d3e2037303239.roa
Signing time:             Thu 04 Apr 2024 15:59:05 +0000
ROA not before:           Thu 04 Apr 2024 15:54:05 +0000
ROA not after:            Thu 03 Apr 2025 15:59:05 +0000
asID:                     7029
IP address blocks:        209.87.160.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8e52381d018e8593884d2a30/0/4F449F0CCB378EC6D3FCD76AA7EED59AF11593BB.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8e52381d018e8593884d2a30/0/4F449F0CCB378EC6D3FCD76AA7EED59AF11593BB.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/35213db6-703a-4ad8-9450-0a0e1d371cff/137bca5a0ff837b3808ba493bd14ab78cc4fd6296629253051.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/35213db6-703a-4ad8-9450-0a0e1d371cff/35213db6-703a-4ad8-9450-0a0e1d371cff.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/35213db6-703a-4ad8-9450-0a0e1d371cff/35213db6-703a-4ad8-9450-0a0e1d371cff.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/35213db6-703a-4ad8-9450-0a0e1d371cff.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 19 Jun 2024 00:17:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:22:19:30:4e:52:38:ec:a5:87:c2:a2:4e:f7:f4:84:6e:51:0b:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=137bca5a0ff837b3808ba493bd14ab78cc4fd6296629253051
        Validity
            Not Before: Apr  4 15:54:05 2024 GMT
            Not After : Apr  3 15:59:05 2025 GMT
        Subject: CN=8C10775AA9680E4D14DB684E391B9E92A6668970
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:95:cc:4d:db:b8:46:bf:9e:50:66:f8:8f:5a:
                    93:56:e7:8f:ae:ca:b9:19:56:ae:66:44:49:9a:2e:
                    c4:61:bd:b5:44:36:5d:bd:9e:da:01:e5:60:93:5e:
                    17:1e:5a:e2:96:13:95:7b:1c:d0:f5:de:eb:6a:8c:
                    29:e9:89:6f:15:11:37:e9:52:4c:6f:36:60:2f:3e:
                    c6:6d:b8:8a:49:b6:45:88:d4:a1:07:b4:e5:13:a4:
                    33:57:4d:45:e1:2d:d9:7e:b6:4b:ef:c8:cb:6d:c2:
                    fc:a3:ba:25:ff:2f:86:8f:87:e3:94:fb:79:be:fa:
                    21:20:ea:a9:f4:88:22:de:3a:8b:b8:a7:50:95:23:
                    79:2a:4e:11:3c:2b:ae:d1:ba:6b:62:33:34:0d:b5:
                    4a:78:10:02:49:5a:19:f0:e7:74:fa:0d:d8:b5:06:
                    a3:39:09:2f:c3:94:17:eb:9a:5e:62:95:fd:2b:d3:
                    c2:a3:60:1d:b2:2e:52:cd:34:71:c9:f2:04:ce:48:
                    2e:de:d2:f4:8d:79:29:ca:aa:e8:87:3f:0a:f2:7a:
                    56:78:c3:f2:8e:d6:97:78:2c:94:1a:c7:6c:4e:c0:
                    e4:ff:b3:8d:ee:0e:18:d5:7b:36:77:33:7c:93:01:
                    54:e6:fd:11:92:f2:ab:dc:48:06:d2:51:9c:b5:10:
                    99:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:10:77:5A:A9:68:0E:4D:14:DB:68:4E:39:1B:9E:92:A6:66:89:70
            X509v3 Authority Key Identifier:
                keyid:4F:44:9F:0C:CB:37:8E:C6:D3:FC:D7:6A:A7:EE:D5:9A:F1:15:93:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8e52381d018e8593884d2a30/0/4F449F0CCB378EC6D3FCD76AA7EED59AF11593BB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/35213db6-703a-4ad8-9450-0a0e1d371cff/137bca5a0ff837b3808ba493bd14ab78cc4fd6296629253051.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8e52381d018e8593884d2a30/0/3230392e38372e3136302e302f32312d3234203d3e2037303239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.87.160.0/21

    Signature Algorithm: sha256WithRSAEncryption
         3b:de:3e:01:5f:79:b3:2a:fc:5e:52:d3:61:92:15:92:b8:2b:
         13:75:91:04:ea:61:2e:65:54:fd:09:83:1a:ae:62:a1:2a:65:
         19:c2:83:7b:4b:63:03:09:9f:a4:65:4c:ee:bf:92:fb:61:f3:
         6b:a1:72:73:12:77:8d:3d:39:fa:50:53:bc:d7:ae:fb:6e:68:
         6f:78:71:59:6b:0e:af:53:5a:3f:ee:69:9f:ee:95:99:65:7a:
         58:77:35:62:e6:86:81:e2:1f:15:06:c5:9c:9f:1e:b9:e0:ed:
         d1:49:8f:15:52:b5:e5:c0:f4:68:48:18:80:13:50:7b:fc:99:
         d7:4d:ac:2c:11:81:fe:db:f5:b4:c9:b6:bc:ed:99:82:ab:e6:
         2c:e7:3f:fe:96:b3:d4:28:9b:b7:47:63:58:ea:c8:b9:f6:e3:
         15:ae:0c:5b:04:33:4e:15:0e:29:4d:34:22:92:1b:9d:2e:e4:
         f8:fc:c7:28:0b:fe:f1:3e:e6:fd:40:1d:87:7a:d5:26:b4:11:
         56:b8:25:05:bd:d2:98:18:6d:59:f6:91:5c:e9:33:55:6d:3f:
         51:80:df:8d:5f:ab:98:0f:3a:e7:8d:7d:dd:ea:8b:4f:e7:0d:
         5f:4a:91:15:54:44:df:25:76:e3:71:0f:1b:1c:90:de:0e:4f:
         9c:63:7e:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 18 00:27:14 2024 by rpki-client on console-ams.rpki-client.org