Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/3137332e3234372e3232352e302f32342d3234203d3e203137313339.roa
File:                     3137332e3234372e3232352e302f32342d3234203d3e203137313339.roa (raw, json)
Hash identifier:          wtkPuhFRnO7Luv8XbG8l/b5EDGFo3uTl1i2+fEg7vn0=
Subject key identifier:   98:97:6F:62:F6:11:FE:57:06:71:0B:0C:6D:57:4B:B6:7F:85:E5:9B
Certificate issuer:       /CN=fb5ab1cb30ff430e23ac6e14a09173d9b9b4b3e328a76b388e
Certificate serial:       07C5CCB84042656D7E396C48C96746E6A6D1A33B
Authority key identifier: 0A:17:B4:0A:79:DF:FF:44:FA:FA:3D:40:F6:E4:D0:0D:83:51:4B:B3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490/fb5ab1cb30ff430e23ac6e14a09173d9b9b4b3e328a76b388e.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/3137332e3234372e3232352e302f32342d3234203d3e203137313339.roa
Signing time:             Thu 23 May 2024 11:08:12 +0000
ROA not before:           Thu 23 May 2024 11:03:12 +0000
ROA not after:            Thu 22 May 2025 11:08:12 +0000
asID:                     17139
IP address blocks:        173.247.225.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/0A17B40A79DFFF44FAFA3D40F6E4D00D83514BB3.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/0A17B40A79DFFF44FAFA3D40F6E4D00D83514BB3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490/fb5ab1cb30ff430e23ac6e14a09173d9b9b4b3e328a76b388e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490/293fb15b-5a85-4abe-bd24-232a114ae490.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490/293fb15b-5a85-4abe-bd24-232a114ae490.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 14 Jun 2024 11:38:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:c5:cc:b8:40:42:65:6d:7e:39:6c:48:c9:67:46:e6:a6:d1:a3:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb5ab1cb30ff430e23ac6e14a09173d9b9b4b3e328a76b388e
        Validity
            Not Before: May 23 11:03:12 2024 GMT
            Not After : May 22 11:08:12 2025 GMT
        Subject: CN=98976F62F611FE5706710B0C6D574BB67F85E59B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:7a:0a:ef:d5:6b:55:a6:3d:24:56:ed:62:76:
                    58:77:53:c2:f4:7c:31:f0:6e:22:ad:e9:0f:a1:b3:
                    fc:36:c8:8d:d7:3b:d5:fd:5b:cc:d5:1a:0d:cd:c6:
                    35:86:8b:55:9f:3c:96:45:13:18:24:fc:32:f3:71:
                    f3:33:9d:b0:94:93:f3:c8:ec:03:b8:00:b1:de:6b:
                    f1:c8:d8:06:81:c1:fb:c0:e2:e4:93:86:8c:b3:9b:
                    c8:90:c0:40:b3:81:5b:59:c0:71:69:b6:86:46:bf:
                    69:0f:d9:bb:40:56:b5:ad:a0:24:47:fa:dc:80:f6:
                    c2:16:05:d2:76:e2:0c:45:5f:9d:50:61:61:51:74:
                    a1:6f:41:e0:6c:50:37:9a:c2:c2:59:df:5a:ec:94:
                    93:7d:12:4e:49:02:6f:7f:14:30:4f:1c:8d:d4:37:
                    03:80:9c:b4:cd:da:47:03:2d:5f:08:cd:c6:8f:64:
                    7a:10:a5:92:74:50:2d:6b:6d:0a:93:22:e9:ce:4d:
                    e3:44:b5:fb:b5:16:87:16:a3:17:39:7d:bc:78:53:
                    b5:69:f9:5d:26:ae:6d:39:f4:13:a1:f7:67:c7:e5:
                    a1:5c:20:33:7d:5e:a2:48:cd:6c:c7:1e:60:5e:94:
                    b1:1a:17:4e:d7:53:6a:fb:ec:f0:69:a1:6e:df:03:
                    fb:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:97:6F:62:F6:11:FE:57:06:71:0B:0C:6D:57:4B:B6:7F:85:E5:9B
            X509v3 Authority Key Identifier:
                keyid:0A:17:B4:0A:79:DF:FF:44:FA:FA:3D:40:F6:E4:D0:0D:83:51:4B:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/0A17B40A79DFFF44FAFA3D40F6E4D00D83514BB3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490/fb5ab1cb30ff430e23ac6e14a09173d9b9b4b3e328a76b388e.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/3137332e3234372e3232352e302f32342d3234203d3e203137313339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.247.225.0/24

    Signature Algorithm: sha256WithRSAEncryption
         34:56:9f:f8:e9:98:0b:1f:be:51:76:c8:54:5e:aa:24:81:ab:
         ae:f2:98:f4:eb:4a:93:20:d5:6f:0a:ed:ec:72:01:cb:45:33:
         3c:2b:71:f9:a7:9c:da:d0:cc:2b:f8:6a:58:da:b5:1e:26:a7:
         3e:e3:78:44:f4:13:8b:a4:c1:be:87:df:4b:48:e3:9e:70:ee:
         89:30:22:b6:82:8e:21:3e:78:7f:a3:93:bc:c5:c4:04:96:e9:
         be:19:e4:b9:ce:06:87:0b:bf:03:f8:62:8e:ec:be:dc:c3:09:
         23:5c:fa:4e:d1:b2:c8:41:20:f2:e2:39:a8:7c:58:07:d1:0e:
         d9:f9:5c:85:c7:94:a5:14:3f:1d:32:67:3e:09:04:7c:c3:49:
         d5:41:97:f1:6b:51:6f:8e:e2:b8:aa:8f:3c:aa:13:be:75:ec:
         37:e9:4a:4b:11:cc:3b:bf:9e:2a:1c:f1:fa:18:80:c6:af:36:
         6d:80:ba:88:51:87:96:71:2a:f8:b5:81:13:d8:d6:84:f7:ea:
         64:74:cb:62:d0:a5:17:d0:f0:82:f6:39:be:a1:e3:7f:ff:0b:
         26:ed:95:fd:0c:d9:7d:06:42:18:27:1a:e4:4e:ff:76:d7:96:
         4e:6c:5e:cc:a0:0b:a3:70:01:3e:59:75:54:1d:4e:4e:ac:d8:
         12:d7:80:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 13 10:57:29 2024 by rpki-client on console-ams.rpki-client.org