Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8e52381d018e8593884d2a30/0/3230392e38372e3137302e302f32342d3234203d3e20383334.roa
File:                     3230392e38372e3137302e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier:          VnGpFW4cqQ2TKIV0N8PETpmeOYVR6ErLU02J1uadYVU=
Subject key identifier:   EC:69:F3:DA:E3:16:6E:41:CC:BE:3A:5A:9D:58:64:99:6A:74:8E:61
Certificate issuer:       /CN=137bca5a0ff837b3808ba493bd14ab78cc4fd6296629253051
Certificate serial:       3AFF9BDBE896DC83B93E026ED4EFCCE6E668A056
Authority key identifier: 4F:44:9F:0C:CB:37:8E:C6:D3:FC:D7:6A:A7:EE:D5:9A:F1:15:93:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/35213db6-703a-4ad8-9450-0a0e1d371cff/137bca5a0ff837b3808ba493bd14ab78cc4fd6296629253051.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8e52381d018e8593884d2a30/0/3230392e38372e3137302e302f32342d3234203d3e20383334.roa
Signing time:             Tue 25 Jun 2024 13:15:22 +0000
ROA not before:           Tue 25 Jun 2024 13:10:22 +0000
ROA not after:            Tue 24 Jun 2025 13:15:22 +0000
asID:                     834
IP address blocks:        209.87.170.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8e52381d018e8593884d2a30/0/4F449F0CCB378EC6D3FCD76AA7EED59AF11593BB.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8e52381d018e8593884d2a30/0/4F449F0CCB378EC6D3FCD76AA7EED59AF11593BB.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/35213db6-703a-4ad8-9450-0a0e1d371cff/137bca5a0ff837b3808ba493bd14ab78cc4fd6296629253051.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/35213db6-703a-4ad8-9450-0a0e1d371cff/35213db6-703a-4ad8-9450-0a0e1d371cff.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/35213db6-703a-4ad8-9450-0a0e1d371cff/35213db6-703a-4ad8-9450-0a0e1d371cff.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/35213db6-703a-4ad8-9450-0a0e1d371cff.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 27 Jun 2024 09:01:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:ff:9b:db:e8:96:dc:83:b9:3e:02:6e:d4:ef:cc:e6:e6:68:a0:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=137bca5a0ff837b3808ba493bd14ab78cc4fd6296629253051
        Validity
            Not Before: Jun 25 13:10:22 2024 GMT
            Not After : Jun 24 13:15:22 2025 GMT
        Subject: CN=EC69F3DAE3166E41CCBE3A5A9D5864996A748E61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:d9:8b:59:ed:f4:bc:1d:53:67:b9:4c:f2:ac:
                    ab:c4:e8:f2:65:50:1e:76:28:86:f5:a9:25:2c:88:
                    c6:fa:d5:e1:f2:bd:cb:fe:1c:7a:55:6a:10:ef:13:
                    0c:1f:f9:f5:c8:5c:7e:c8:82:14:ab:08:a6:ad:eb:
                    03:fe:82:1d:4b:5b:27:b1:f8:3c:a4:52:e7:cc:70:
                    37:0d:3e:8b:0a:f7:98:93:ab:f9:da:0e:8d:d9:3b:
                    99:0c:0d:3b:28:04:f6:a6:06:88:30:73:6c:e3:59:
                    13:14:a7:b6:53:5e:47:8c:e5:bb:0e:ce:4a:25:4d:
                    1c:02:79:fd:65:5e:59:ef:b6:b0:d0:28:9f:49:11:
                    c9:df:8c:57:e1:83:37:e0:3e:3a:7c:b6:f5:1d:e8:
                    c3:f0:19:96:90:9e:3e:e8:82:6e:f2:ae:c8:a1:22:
                    c1:80:f8:e7:ee:5a:04:02:c9:07:14:7d:51:5a:3b:
                    32:fc:67:8f:5c:05:79:de:9a:e8:ca:d5:d2:65:d5:
                    31:ba:4d:60:c1:05:3c:18:e6:12:9b:6a:23:7b:e9:
                    a3:3f:fc:91:7c:49:c6:47:b4:6b:b7:db:29:32:06:
                    87:47:af:91:24:3a:c2:49:dc:08:4f:2a:8b:0a:5f:
                    8c:11:cc:01:21:36:fd:3d:1d:b0:05:16:80:5e:c6:
                    26:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:69:F3:DA:E3:16:6E:41:CC:BE:3A:5A:9D:58:64:99:6A:74:8E:61
            X509v3 Authority Key Identifier:
                keyid:4F:44:9F:0C:CB:37:8E:C6:D3:FC:D7:6A:A7:EE:D5:9A:F1:15:93:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8e52381d018e8593884d2a30/0/4F449F0CCB378EC6D3FCD76AA7EED59AF11593BB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/35213db6-703a-4ad8-9450-0a0e1d371cff/137bca5a0ff837b3808ba493bd14ab78cc4fd6296629253051.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8e52381d018e8593884d2a30/0/3230392e38372e3137302e302f32342d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.87.170.0/24

    Signature Algorithm: sha256WithRSAEncryption
         95:d7:8c:4e:ce:ef:dc:76:84:a8:bc:7a:8e:cd:7d:bb:c9:4e:
         8d:65:67:59:cd:37:ac:2e:76:bb:51:55:f6:47:46:4a:38:5f:
         6d:cb:a9:59:c6:69:ca:fc:88:4c:83:d9:45:0d:e9:f5:31:9e:
         ae:29:a1:50:21:77:c4:6a:58:66:18:49:02:fc:d7:45:36:40:
         60:ec:b3:44:bd:5d:38:cc:21:f9:80:da:b8:79:01:0e:72:e3:
         54:14:7b:12:89:d7:0a:df:5e:5f:7e:73:ea:54:72:70:07:13:
         c1:20:55:65:c1:a4:85:e9:de:d4:f6:59:b7:a3:03:54:5a:07:
         87:f4:10:1c:70:9f:4b:d4:59:e5:94:d1:ba:1c:72:f8:20:ab:
         33:d1:68:b2:c4:17:d2:70:fe:8c:ba:e5:6b:a8:b4:ff:b0:f6:
         8d:4c:40:2e:9e:85:e3:07:2b:5f:d7:dd:39:e8:2d:49:46:59:
         5a:8e:c4:17:b0:f0:00:c8:70:64:59:0f:80:34:bc:a5:9a:97:
         b2:99:4f:10:d5:0a:48:8a:93:31:3e:5e:d0:96:7b:fa:f7:16:
         8e:c5:53:59:8b:3a:fe:e1:25:01:65:fe:14:7d:82:31:a4:4c:
         11:94:9c:d3:3f:27:ed:9b:ff:9a:60:f6:05:d0:f8:2f:c9:e2:
         21:35:31:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 12:55:30 2024 by rpki-client on console-fra.rpki-client.org