Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8e52381d018e8593884d2a30/0/3230392e38372e3137322e302f32322d3234203d3e2037303239.roa
File:                     3230392e38372e3137322e302f32322d3234203d3e2037303239.roa (raw, json)
Hash identifier:          P8gUPZS3qz5Vjb6MUj5y/Daqk6JK3gosb1EOD+pK7gw=
Subject key identifier:   FE:92:A4:94:C0:CC:0B:71:95:12:0D:DC:53:42:38:E9:1C:AD:EF:14
Certificate issuer:       /CN=137bca5a0ff837b3808ba493bd14ab78cc4fd6296629253051
Certificate serial:       04BDBE8DDEEDCD2EF26CE61208589D172C8033D0
Authority key identifier: 4F:44:9F:0C:CB:37:8E:C6:D3:FC:D7:6A:A7:EE:D5:9A:F1:15:93:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/35213db6-703a-4ad8-9450-0a0e1d371cff/137bca5a0ff837b3808ba493bd14ab78cc4fd6296629253051.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8e52381d018e8593884d2a30/0/3230392e38372e3137322e302f32322d3234203d3e2037303239.roa
Signing time:             Thu 04 Apr 2024 15:59:06 +0000
ROA not before:           Thu 04 Apr 2024 15:54:06 +0000
ROA not after:            Thu 03 Apr 2025 15:59:06 +0000
asID:                     7029
IP address blocks:        209.87.172.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8e52381d018e8593884d2a30/0/4F449F0CCB378EC6D3FCD76AA7EED59AF11593BB.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8e52381d018e8593884d2a30/0/4F449F0CCB378EC6D3FCD76AA7EED59AF11593BB.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/35213db6-703a-4ad8-9450-0a0e1d371cff/137bca5a0ff837b3808ba493bd14ab78cc4fd6296629253051.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/35213db6-703a-4ad8-9450-0a0e1d371cff/35213db6-703a-4ad8-9450-0a0e1d371cff.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/35213db6-703a-4ad8-9450-0a0e1d371cff/35213db6-703a-4ad8-9450-0a0e1d371cff.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/35213db6-703a-4ad8-9450-0a0e1d371cff.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 02 Jun 2024 15:45:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:bd:be:8d:de:ed:cd:2e:f2:6c:e6:12:08:58:9d:17:2c:80:33:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=137bca5a0ff837b3808ba493bd14ab78cc4fd6296629253051
        Validity
            Not Before: Apr  4 15:54:06 2024 GMT
            Not After : Apr  3 15:59:06 2025 GMT
        Subject: CN=FE92A494C0CC0B7195120DDC534238E91CADEF14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:96:a5:c1:bc:17:a0:9e:c5:f5:69:7a:28:06:
                    63:fc:da:31:92:15:ed:1f:04:08:e2:43:c8:46:e9:
                    e1:59:14:2e:b7:bf:19:c7:57:b9:40:5b:05:74:86:
                    7e:07:a5:1e:36:bc:e0:05:b0:14:c6:1e:2d:18:85:
                    ba:a2:d9:09:38:40:6e:18:c9:3c:73:5b:b3:a7:5a:
                    5e:dc:30:d9:25:e6:8f:91:11:77:a2:91:8d:27:55:
                    67:32:03:99:76:29:e3:ce:b5:aa:94:6f:d7:35:6a:
                    00:b2:9b:cd:82:6d:5c:31:b5:f0:64:84:98:89:05:
                    f2:24:75:a1:5b:00:60:fd:54:91:72:7e:08:ef:fa:
                    62:5e:7e:2b:b8:7c:84:ea:69:f0:17:92:c8:a9:79:
                    b5:f9:48:23:dd:03:23:4e:48:bf:66:0c:db:df:6a:
                    2d:1f:8f:cb:86:e0:b9:9d:99:5e:fa:73:8c:e4:2b:
                    68:65:50:28:3f:ac:20:7d:5a:53:b2:15:f3:8f:3b:
                    10:f4:4f:6a:7f:82:ab:29:f4:ad:58:48:6f:5a:1e:
                    6e:27:01:3b:18:13:91:e3:bd:43:7f:6a:74:b6:c3:
                    cc:03:82:d7:79:65:77:1c:86:26:69:0f:96:90:fa:
                    0a:f8:56:ee:e9:6e:f1:3c:4a:e7:9e:61:a0:cf:9a:
                    b0:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:92:A4:94:C0:CC:0B:71:95:12:0D:DC:53:42:38:E9:1C:AD:EF:14
            X509v3 Authority Key Identifier:
                keyid:4F:44:9F:0C:CB:37:8E:C6:D3:FC:D7:6A:A7:EE:D5:9A:F1:15:93:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8e52381d018e8593884d2a30/0/4F449F0CCB378EC6D3FCD76AA7EED59AF11593BB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/35213db6-703a-4ad8-9450-0a0e1d371cff/137bca5a0ff837b3808ba493bd14ab78cc4fd6296629253051.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8e52381d018e8593884d2a30/0/3230392e38372e3137322e302f32322d3234203d3e2037303239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.87.172.0/22

    Signature Algorithm: sha256WithRSAEncryption
         83:48:1e:d0:77:d6:72:59:04:5c:41:e1:60:52:2f:a8:ac:0a:
         7e:ec:8d:cb:df:99:6b:34:2b:e3:e1:a4:ca:a1:39:46:46:4b:
         3e:13:90:4e:de:32:17:84:cb:0e:8e:6f:ff:f4:87:1c:cb:4b:
         d0:b4:14:c2:01:a0:e9:75:ff:cd:20:5d:eb:b7:3e:a4:d5:b4:
         a9:b1:6c:da:47:d4:4d:fb:9f:d2:6d:76:26:dc:69:cb:a0:e2:
         ad:d8:39:29:2e:45:6b:29:80:c5:47:d8:f9:be:b6:6b:ca:41:
         97:73:68:4c:79:3d:3b:80:14:f8:13:96:12:46:cc:d4:e2:fc:
         1e:c0:33:09:48:d0:f5:4e:f3:9f:c1:40:89:12:03:06:8c:4b:
         21:49:a9:2e:65:6e:a2:c1:01:5d:5d:1f:e4:d9:f2:61:37:09:
         0a:99:a2:bd:31:3a:1f:4d:96:03:bb:5d:10:1f:a9:92:ea:cc:
         25:b6:9d:68:37:f4:3d:82:55:44:a7:9d:0c:c3:57:73:23:5f:
         07:45:59:a2:27:09:0e:9b:3d:49:8b:ab:f8:d3:63:c5:ed:db:
         29:1c:d0:7a:16:bb:3f:38:eb:77:e8:b9:a2:f8:2e:20:5c:6d:
         1d:92:54:ec:e4:7d:8a:78:2a:46:60:a6:91:08:e8:62:81:04:
         f2:19:77:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 15:44:28 2024 by rpki-client on console-fra.rpki-client.org