Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80f1a80a0181733c5c5f6b5b/0/3137322e38322e38382e302f32342d3234203d3e2033323830.roa
File:                     3137322e38322e38382e302f32342d3234203d3e2033323830.roa (raw, json)
Hash identifier:          9fP4i/HzdLTs3MhNkmqhhiWYwt2ux6VbWnndnFOmcZY=
Subject key identifier:   D9:BB:B7:4B:BA:B4:8F:CC:86:F6:B5:2E:AA:C6:BA:CE:BF:47:77:B1
Certificate issuer:       /CN=0985ea50df54e795a4be14ad5188a8e52873787039bb6b27b2
Certificate serial:       3CED2B6F20F0A22DB1364CD71E9DF6B7E5646F5F
Authority key identifier: 18:C0:92:4D:23:1D:A3:01:95:16:0B:25:EE:E6:32:7E:B4:03:06:F8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7225b415-8ae0-4523-b37f-74ed780676aa/0985ea50df54e795a4be14ad5188a8e52873787039bb6b27b2.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181733c5c5f6b5b/0/3137322e38322e38382e302f32342d3234203d3e2033323830.roa
Signing time:             Fri 19 Apr 2024 21:16:21 +0000
ROA not before:           Fri 19 Apr 2024 21:11:21 +0000
ROA not after:            Fri 18 Apr 2025 21:16:21 +0000
asID:                     3280
IP address blocks:        172.82.88.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181733c5c5f6b5b/0/18C0924D231DA30195160B25EEE6327EB40306F8.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181733c5c5f6b5b/0/18C0924D231DA30195160B25EEE6327EB40306F8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7225b415-8ae0-4523-b37f-74ed780676aa/0985ea50df54e795a4be14ad5188a8e52873787039bb6b27b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7225b415-8ae0-4523-b37f-74ed780676aa/7225b415-8ae0-4523-b37f-74ed780676aa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7225b415-8ae0-4523-b37f-74ed780676aa/7225b415-8ae0-4523-b37f-74ed780676aa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7225b415-8ae0-4523-b37f-74ed780676aa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 May 2024 05:59:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:ed:2b:6f:20:f0:a2:2d:b1:36:4c:d7:1e:9d:f6:b7:e5:64:6f:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0985ea50df54e795a4be14ad5188a8e52873787039bb6b27b2
        Validity
            Not Before: Apr 19 21:11:21 2024 GMT
            Not After : Apr 18 21:16:21 2025 GMT
        Subject: CN=D9BBB74BBAB48FCC86F6B52EAAC6BACEBF4777B1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:7b:2b:99:c6:31:ee:c4:ae:a1:61:54:46:97:
                    50:d3:20:72:bb:d2:2b:65:f9:1e:f0:be:0a:ed:2d:
                    43:7f:f5:c0:af:16:8d:80:6a:96:e3:26:63:ff:f2:
                    a7:51:97:1f:34:fc:54:8b:3b:6e:1d:c5:49:15:af:
                    1c:26:44:0a:ef:85:57:c9:eb:86:6e:d6:86:fd:3d:
                    c6:d3:d9:0b:1e:77:c8:b2:0e:6f:b5:b7:af:5d:e4:
                    df:64:91:93:96:2b:c7:aa:b2:d3:50:3e:70:c5:2a:
                    f2:9b:f4:43:8b:28:d5:28:91:68:5b:10:41:77:f6:
                    94:c7:e6:ba:73:00:32:4d:fe:88:34:a9:83:ec:c4:
                    75:62:66:8e:7e:58:d6:67:a4:da:a6:50:8d:11:cd:
                    93:4d:e6:f1:ef:2d:85:61:90:33:73:8f:53:70:5e:
                    24:f7:2f:ec:de:80:26:f7:e0:3b:db:d7:ec:29:28:
                    64:a8:96:6d:a5:22:20:da:77:e3:d0:18:f0:2d:37:
                    e2:70:46:4c:ea:9d:e9:33:e6:e0:9e:d2:fb:54:3f:
                    9d:1b:43:94:1c:0d:b4:28:d6:ba:79:29:f7:7b:cd:
                    64:b0:38:82:e3:1a:25:d1:00:02:49:ee:b1:af:27:
                    ee:69:4c:4a:fa:4b:04:8f:d3:95:b9:83:ff:8f:67:
                    08:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:BB:B7:4B:BA:B4:8F:CC:86:F6:B5:2E:AA:C6:BA:CE:BF:47:77:B1
            X509v3 Authority Key Identifier:
                keyid:18:C0:92:4D:23:1D:A3:01:95:16:0B:25:EE:E6:32:7E:B4:03:06:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181733c5c5f6b5b/0/18C0924D231DA30195160B25EEE6327EB40306F8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7225b415-8ae0-4523-b37f-74ed780676aa/0985ea50df54e795a4be14ad5188a8e52873787039bb6b27b2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181733c5c5f6b5b/0/3137322e38322e38382e302f32342d3234203d3e2033323830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.82.88.0/24

    Signature Algorithm: sha256WithRSAEncryption
         77:b3:7c:0c:11:7e:e9:c4:51:46:bd:b0:5d:b3:a8:b0:35:f3:
         3c:4a:cb:d9:c9:f4:29:1b:42:46:29:aa:d7:ee:4d:25:4b:8f:
         76:9f:a1:63:16:4b:6d:d9:f4:de:4f:57:08:29:ce:d5:c6:c2:
         f7:dc:83:ae:9d:36:19:b1:0e:9c:00:10:74:59:a4:88:1d:cb:
         bc:6f:13:eb:3c:f1:76:91:50:a6:51:3b:f0:6f:5d:0f:4f:2c:
         de:2a:fe:89:e4:44:b3:94:96:f0:bb:d1:f2:b3:4a:47:0e:4a:
         7b:55:51:39:aa:e1:73:7a:d6:51:bd:0a:a9:41:46:39:05:d3:
         ea:31:a1:e9:21:2e:5d:12:0e:25:4d:5a:8a:d4:24:f9:91:7f:
         52:78:b4:85:6d:2a:21:48:0d:26:83:5e:18:fb:ac:73:64:dd:
         6e:c5:e7:c3:ed:96:b9:3a:29:50:2b:55:e8:6a:85:a6:65:83:
         8d:c6:be:98:89:c2:64:08:77:48:20:31:56:d2:96:36:18:c2:
         22:b8:4a:eb:06:ca:43:a1:33:89:02:1b:3f:87:1c:e4:45:af:
         b1:86:05:b0:47:60:46:0d:72:73:34:23:8a:9c:b1:17:d3:e2:
         b6:25:be:52:78:18:21:32:e2:76:84:bf:74:a4:a3:ea:e9:de:
         1e:f1:57:0b
-----BEGIN CERTIFICATE-----
MIIFrTCCBJWgAwIBAgIUPO0rbyDwoi2xNkzXHp32t+Vkb18wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMDk4NWVhNTBkZjU0ZTc5NWE0YmUxNGFkNTE4OGE4ZTUy
ODczNzg3MDM5YmI2YjI3YjIwHhcNMjQwNDE5MjExMTIxWhcNMjUwNDE4MjExNjIx
WjAzMTEwLwYDVQQDEyhEOUJCQjc0QkJBQjQ4RkNDODZGNkI1MkVBQUM2QkFDRUJG
NDc3N0IxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1XsrmcYx7sSu
oWFURpdQ0yByu9IrZfke8L4K7S1Df/XArxaNgGqW4yZj//KnUZcfNPxUiztuHcVJ
Fa8cJkQK74VXyeuGbtaG/T3G09kLHnfIsg5vtbevXeTfZJGTlivHqrLTUD5wxSry
m/RDiyjVKJFoWxBBd/aUx+a6cwAyTf6INKmD7MR1YmaOfljWZ6TaplCNEc2TTebx
7y2FYZAzc49TcF4k9y/s3oAm9+A729fsKShkqJZtpSIg2nfj0BjwLTficEZM6p3p
M+bgntL7VD+dG0OUHA20KNa6eSn3e81ksDiC4xol0QACSe6xryfuaUxK+ksEj9OV
uYP/j2cIfQIDAQABo4ICrTCCAqkwHQYDVR0OBBYEFNm7t0u6tI/Mhva1LqrGus6/
R3exMB8GA1UdIwQYMBaAFBjAkk0jHaMBlRYLJe7mMn60Awb4MA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODBmMWE4MGEwMTgxNzMzYzVjNWY2YjViLzAv
MThDMDkyNEQyMzFEQTMwMTk1MTYwQjI1RUVFNjMyN0VCNDAzMDZGOC5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi
MGI4NDE1LzcyMjViNDE1LThhZTAtNDUyMy1iMzdmLTc0ZWQ3ODA2NzZhYS8wOTg1
ZWE1MGRmNTRlNzk1YTRiZTE0YWQ1MTg4YThlNTI4NzM3ODcwMzliYjZiMjdiMi5j
ZXIwgZ0GCCsGAQUFBwELBIGQMIGNMIGKBggrBgEFBQcwC4Z+cnN5bmM6Ly9ycGtp
LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRlODBmMWE4MGEwMTgxNzMz
YzVjNWY2YjViLzAvMzEzNzMyMmUzODMyMmUzODM4MmUzMDJmMzIzNDJkMzIzNDIw
M2QzZTIwMzMzMjM4MzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACsUlgwDQYJKoZIhvcNAQELBQADggEB
AHezfAwRfunEUUa9sF2zqLA18zxKy9nJ9CkbQkYpqtfuTSVLj3afoWMWS23Z9N5P
VwgpztXGwvfcg66dNhmxDpwAEHRZpIgdy7xvE+s88XaRUKZRO/BvXQ9PLN4q/onk
RLOUlvC70fKzSkcOSntVUTmq4XN61lG9CqlBRjkF0+oxoekhLl0SDiVNWorUJPmR
f1J4tIVtKiFIDSaDXhj7rHNk3W7F58Ptlrk6KVArVehqhaZlg43GvpiJwmQId0gg
MVbSljYYwiK4SusGykOhM4kCGz+HHORFr7GGBbBHYEYNcnM0I4qcsRfT4rYlvlJ4
GCEy4naEv3Sko+rp3h7xVws=
-----END CERTIFICATE-----
Generated at Sun May 19 06:14:14 2024 by rpki-client on console-ams.rpki-client.org