Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80f1a80a0181733c5c5f6b5b/0/3137322e38322e38392e302f32342d3234203d3e20333939343939.roa
File:                     3137322e38322e38392e302f32342d3234203d3e20333939343939.roa (raw, json)
Hash identifier:          TSL2/kkqzeozh4qk4Rp5zFBr//vV0gbR+kAJBDhAPZg=
Subject key identifier:   5F:17:4F:F2:8E:DE:16:BE:3B:4A:65:C8:68:C8:16:07:11:C3:52:8E
Certificate issuer:       /CN=0985ea50df54e795a4be14ad5188a8e52873787039bb6b27b2
Certificate serial:       1C405F2BB9894AC4B238397015971033647B4EE5
Authority key identifier: 18:C0:92:4D:23:1D:A3:01:95:16:0B:25:EE:E6:32:7E:B4:03:06:F8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7225b415-8ae0-4523-b37f-74ed780676aa/0985ea50df54e795a4be14ad5188a8e52873787039bb6b27b2.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181733c5c5f6b5b/0/3137322e38322e38392e302f32342d3234203d3e20333939343939.roa
Signing time:             Mon 13 May 2024 18:42:09 +0000
ROA not before:           Mon 13 May 2024 18:37:09 +0000
ROA not after:            Mon 12 May 2025 18:42:09 +0000
asID:                     399499
IP address blocks:        172.82.89.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181733c5c5f6b5b/0/18C0924D231DA30195160B25EEE6327EB40306F8.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181733c5c5f6b5b/0/18C0924D231DA30195160B25EEE6327EB40306F8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7225b415-8ae0-4523-b37f-74ed780676aa/0985ea50df54e795a4be14ad5188a8e52873787039bb6b27b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7225b415-8ae0-4523-b37f-74ed780676aa/7225b415-8ae0-4523-b37f-74ed780676aa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7225b415-8ae0-4523-b37f-74ed780676aa/7225b415-8ae0-4523-b37f-74ed780676aa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7225b415-8ae0-4523-b37f-74ed780676aa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 18:07:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:40:5f:2b:b9:89:4a:c4:b2:38:39:70:15:97:10:33:64:7b:4e:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0985ea50df54e795a4be14ad5188a8e52873787039bb6b27b2
        Validity
            Not Before: May 13 18:37:09 2024 GMT
            Not After : May 12 18:42:09 2025 GMT
        Subject: CN=5F174FF28EDE16BE3B4A65C868C8160711C3528E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:46:3f:84:0e:ab:bf:c9:a8:b9:43:c1:02:8e:
                    15:ad:ac:9d:aa:e1:67:78:0f:ed:4c:1a:e9:48:a7:
                    e5:42:a6:ac:f0:d6:a2:4d:b5:aa:45:0e:6c:22:51:
                    65:c2:fb:60:f7:3c:49:03:18:c8:35:03:48:c9:73:
                    10:92:c2:41:77:a7:a1:f5:da:b3:8f:e6:47:2a:f0:
                    b0:2d:5a:be:73:06:a5:43:68:9b:f1:99:dc:9d:f6:
                    91:73:29:ec:2f:8b:58:d3:85:27:e7:a0:5d:49:ae:
                    99:f3:52:79:00:88:bd:3d:a5:cd:d2:cc:e4:98:cb:
                    36:31:db:58:79:f7:02:aa:ac:33:3e:58:08:1a:a8:
                    d6:a1:48:7d:57:9c:dc:87:3d:83:58:c7:2f:ed:66:
                    4b:6b:14:5e:dc:4a:12:7c:77:82:b6:4d:23:a6:fd:
                    c5:4d:2d:02:93:7c:31:b6:c9:f9:9b:12:3a:1a:76:
                    24:11:13:52:da:ee:6d:bd:85:39:18:49:9b:fc:63:
                    c7:01:65:2d:ac:8a:54:bf:16:8e:7b:5b:c3:bf:08:
                    d9:bb:17:09:9a:61:e7:3b:fc:65:67:17:f6:b4:1c:
                    1a:b4:88:c2:ac:60:3e:fd:82:b3:87:c3:ff:6e:4b:
                    c1:cb:50:8a:3c:d7:93:12:40:a1:3b:38:72:99:49:
                    2d:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:17:4F:F2:8E:DE:16:BE:3B:4A:65:C8:68:C8:16:07:11:C3:52:8E
            X509v3 Authority Key Identifier:
                keyid:18:C0:92:4D:23:1D:A3:01:95:16:0B:25:EE:E6:32:7E:B4:03:06:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181733c5c5f6b5b/0/18C0924D231DA30195160B25EEE6327EB40306F8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7225b415-8ae0-4523-b37f-74ed780676aa/0985ea50df54e795a4be14ad5188a8e52873787039bb6b27b2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181733c5c5f6b5b/0/3137322e38322e38392e302f32342d3234203d3e20333939343939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.82.89.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4f:db:f4:a4:e4:9b:9f:3c:1d:fd:54:81:ce:da:73:e0:9a:b5:
         f8:1f:fb:39:5f:0b:17:83:55:2f:3e:00:91:3c:ca:5b:4f:b6:
         13:8b:96:1e:d4:97:cd:c5:09:c4:7d:42:f1:fc:71:57:7f:25:
         23:23:ad:da:3a:99:d7:ca:27:1e:60:17:f5:23:97:12:d2:92:
         5f:39:4b:1c:79:2b:af:0b:3b:3c:da:4b:6b:c3:8f:ef:2d:3f:
         9a:a0:9d:00:59:3f:71:30:52:d2:eb:85:d8:f1:b7:57:7a:3f:
         f5:d5:5d:12:77:98:12:22:54:fa:15:e9:a3:3c:5d:cd:ce:d7:
         2e:18:df:db:48:cd:21:f0:9d:43:39:5b:f2:a0:9c:bd:89:4b:
         2c:58:3e:b6:c9:12:7e:5d:6c:36:a3:af:cb:bd:76:62:be:78:
         2b:44:ab:8b:77:e4:3b:96:51:b6:75:ee:45:d2:0b:8d:90:ad:
         95:d2:db:e3:6e:e8:b4:6b:52:e9:f5:f0:9a:b4:13:a3:bd:96:
         b9:f1:d1:cd:21:18:d5:fe:fe:97:3c:8e:7a:0e:f1:65:d6:10:
         50:79:5e:0d:ad:d5:9c:f8:dd:69:a3:74:b0:89:bc:c4:29:95:
         05:a5:98:2e:f3:16:6a:57:e7:5d:72:b1:20:da:5b:86:3d:c4:
         ba:86:62:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:45:51 2024 by rpki-client on console-ams.rpki-client.org