Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8e52381d018e8593884d2a30/0/3230392e38372e3137322e302f32322d3234203d3e20313734.roa
File:                     3230392e38372e3137322e302f32322d3234203d3e20313734.roa (raw, json)
Hash identifier:          EeRRsS8n/I/iSTLdWcHd29+Hi96SZ9/QIuPAwtEtDnM=
Subject key identifier:   CB:FE:0F:12:72:11:FC:8E:9C:7F:31:28:39:5A:F5:C7:58:CC:E2:D6
Certificate issuer:       /CN=137bca5a0ff837b3808ba493bd14ab78cc4fd6296629253051
Certificate serial:       6F5D02B4B896981BE9C14E1FD23CDA1C2E15E47B
Authority key identifier: 4F:44:9F:0C:CB:37:8E:C6:D3:FC:D7:6A:A7:EE:D5:9A:F1:15:93:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/35213db6-703a-4ad8-9450-0a0e1d371cff/137bca5a0ff837b3808ba493bd14ab78cc4fd6296629253051.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8e52381d018e8593884d2a30/0/3230392e38372e3137322e302f32322d3234203d3e20313734.roa
Signing time:             Thu 04 Apr 2024 15:59:06 +0000
ROA not before:           Thu 04 Apr 2024 15:54:06 +0000
ROA not after:            Thu 03 Apr 2025 15:59:06 +0000
asID:                     174
IP address blocks:        209.87.172.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8e52381d018e8593884d2a30/0/4F449F0CCB378EC6D3FCD76AA7EED59AF11593BB.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8e52381d018e8593884d2a30/0/4F449F0CCB378EC6D3FCD76AA7EED59AF11593BB.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/35213db6-703a-4ad8-9450-0a0e1d371cff/137bca5a0ff837b3808ba493bd14ab78cc4fd6296629253051.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/35213db6-703a-4ad8-9450-0a0e1d371cff/35213db6-703a-4ad8-9450-0a0e1d371cff.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/35213db6-703a-4ad8-9450-0a0e1d371cff/35213db6-703a-4ad8-9450-0a0e1d371cff.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/35213db6-703a-4ad8-9450-0a0e1d371cff.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 03:40:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:5d:02:b4:b8:96:98:1b:e9:c1:4e:1f:d2:3c:da:1c:2e:15:e4:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=137bca5a0ff837b3808ba493bd14ab78cc4fd6296629253051
        Validity
            Not Before: Apr  4 15:54:06 2024 GMT
            Not After : Apr  3 15:59:06 2025 GMT
        Subject: CN=CBFE0F127211FC8E9C7F3128395AF5C758CCE2D6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:8c:57:c8:47:24:20:81:f5:34:65:f4:2f:c1:
                    f2:14:2f:38:ea:73:24:55:bd:b0:5b:4a:67:b9:f3:
                    37:3b:fe:22:27:7d:5f:6f:64:f1:a7:26:8d:3e:12:
                    4e:b8:c3:11:f9:ad:39:b9:b7:11:28:c5:b6:1a:d4:
                    8b:06:22:6d:23:ae:ca:2d:55:fe:de:f1:c0:17:3c:
                    5b:b5:e7:18:49:00:63:d1:23:59:8a:a5:c2:92:73:
                    04:f0:1f:35:96:81:2f:5b:87:03:70:32:f5:12:e4:
                    34:26:49:8b:5c:7a:d8:87:76:79:69:27:75:03:da:
                    a4:81:2e:03:d9:74:e4:02:84:33:26:a0:9d:94:ed:
                    94:b9:72:50:67:2a:9e:17:55:66:f8:33:18:9b:ae:
                    14:75:42:66:42:fe:19:47:d5:96:73:54:e4:44:02:
                    50:ae:c8:35:bd:61:7f:48:c4:79:b7:cf:87:2e:62:
                    67:f0:5e:22:96:14:00:8a:98:66:c3:d7:3d:a7:85:
                    0d:f9:78:21:7a:42:cc:6b:76:10:45:00:90:56:b1:
                    28:cf:94:56:79:00:dc:92:58:c5:5e:4b:b7:db:07:
                    cb:4c:99:40:ff:54:e3:55:53:db:08:ff:c0:b9:86:
                    f6:71:52:f1:16:dc:81:fe:35:b7:c5:5c:fc:a7:c1:
                    05:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:FE:0F:12:72:11:FC:8E:9C:7F:31:28:39:5A:F5:C7:58:CC:E2:D6
            X509v3 Authority Key Identifier:
                keyid:4F:44:9F:0C:CB:37:8E:C6:D3:FC:D7:6A:A7:EE:D5:9A:F1:15:93:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8e52381d018e8593884d2a30/0/4F449F0CCB378EC6D3FCD76AA7EED59AF11593BB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/35213db6-703a-4ad8-9450-0a0e1d371cff/137bca5a0ff837b3808ba493bd14ab78cc4fd6296629253051.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8e52381d018e8593884d2a30/0/3230392e38372e3137322e302f32322d3234203d3e20313734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.87.172.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7b:3f:b9:a0:17:c7:a3:03:3f:d0:42:8f:48:81:14:09:dd:11:
         a4:58:27:2d:01:07:f0:bb:ff:9f:af:30:b0:7e:c5:24:1c:dd:
         17:ac:f2:46:35:23:22:f9:31:2e:f5:a1:3a:79:2b:62:8b:62:
         57:04:e5:0c:bc:f8:e8:7b:b3:33:9d:77:8a:c9:8d:a7:7f:fb:
         2a:52:b8:62:a4:87:0d:72:f8:84:d3:50:35:6f:6b:f2:3b:cb:
         66:f2:21:11:0d:c3:ff:75:20:ac:1f:aa:4d:1a:ab:71:5f:09:
         be:5b:e4:11:f9:80:96:8d:1c:0d:d2:55:08:40:3f:3d:76:d6:
         38:40:dd:ca:be:e2:a3:42:ef:80:53:63:a1:04:de:73:d7:d1:
         e7:88:e8:69:a4:1e:c7:80:94:86:4d:61:50:2d:e9:7c:e8:19:
         d6:ae:f9:5f:f6:d0:88:de:f7:d7:2e:85:c3:ea:a3:01:cf:ad:
         81:5b:ea:b2:ca:a4:43:2e:85:a5:6a:f3:28:ad:84:ba:8c:f1:
         6b:5a:69:06:bf:42:bd:d4:ee:b8:c5:b8:a6:88:71:59:19:8d:
         25:ec:6c:02:b1:34:51:23:37:f0:f0:9b:5a:81:c8:f4:bf:39:
         48:bf:3f:a0:e3:18:97:65:59:71:0d:9b:da:cc:be:69:44:f0:
         21:34:e6:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 04:02:22 2024 by rpki-client on console-fra.rpki-client.org