Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80f1a80a0181733c5c5f6b5b/0/3137322e38322e39302e302f32342d3234203d3e20313336353537.roa
File:                     3137322e38322e39302e302f32342d3234203d3e20313336353537.roa (raw, json)
Hash identifier:          pDNon7O75I2GPZSNpfCwt9GahE3/3upNx2l7rFtoIPE=
Subject key identifier:   E5:86:49:BA:21:3E:55:B8:61:C3:B1:35:41:7F:22:AC:95:58:FC:6C
Certificate issuer:       /CN=0985ea50df54e795a4be14ad5188a8e52873787039bb6b27b2
Certificate serial:       0BBD0FCFCF85D4C09D08F737CF1B9913E41DBAFE
Authority key identifier: 18:C0:92:4D:23:1D:A3:01:95:16:0B:25:EE:E6:32:7E:B4:03:06:F8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7225b415-8ae0-4523-b37f-74ed780676aa/0985ea50df54e795a4be14ad5188a8e52873787039bb6b27b2.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181733c5c5f6b5b/0/3137322e38322e39302e302f32342d3234203d3e20313336353537.roa
Signing time:             Tue 05 Dec 2023 16:51:06 +0000
ROA not before:           Tue 05 Dec 2023 16:46:06 +0000
ROA not after:            Tue 03 Dec 2024 16:51:06 +0000
asID:                     136557
IP address blocks:        172.82.90.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181733c5c5f6b5b/0/18C0924D231DA30195160B25EEE6327EB40306F8.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181733c5c5f6b5b/0/18C0924D231DA30195160B25EEE6327EB40306F8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7225b415-8ae0-4523-b37f-74ed780676aa/0985ea50df54e795a4be14ad5188a8e52873787039bb6b27b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7225b415-8ae0-4523-b37f-74ed780676aa/7225b415-8ae0-4523-b37f-74ed780676aa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7225b415-8ae0-4523-b37f-74ed780676aa/7225b415-8ae0-4523-b37f-74ed780676aa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7225b415-8ae0-4523-b37f-74ed780676aa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 May 2024 00:39:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:bd:0f:cf:cf:85:d4:c0:9d:08:f7:37:cf:1b:99:13:e4:1d:ba:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0985ea50df54e795a4be14ad5188a8e52873787039bb6b27b2
        Validity
            Not Before: Dec  5 16:46:06 2023 GMT
            Not After : Dec  3 16:51:06 2024 GMT
        Subject: CN=E58649BA213E55B861C3B135417F22AC9558FC6C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:be:f2:69:e9:52:a2:56:df:59:80:1b:61:7f:
                    d6:47:4a:a3:95:a3:5e:43:e9:0b:f4:45:0c:c9:26:
                    5b:01:61:13:b7:b3:d7:01:ab:35:b7:e3:2a:7d:33:
                    03:03:5b:c1:8d:3d:00:18:47:1f:9b:ea:32:6f:c1:
                    7f:74:3d:8e:85:8c:6e:a5:48:4f:21:e3:c3:b5:98:
                    56:ea:38:b3:74:90:9e:d9:da:1b:e9:01:9e:6b:b8:
                    57:1f:bb:66:1d:38:ef:24:23:a7:28:e9:09:c6:03:
                    4e:3e:22:0c:c8:58:f2:d1:73:d4:ca:ac:22:7e:ca:
                    b1:9e:02:4f:58:25:e1:12:0e:c4:8d:9d:5a:e4:71:
                    a6:de:33:f5:45:01:31:a9:cf:65:c1:78:4a:63:96:
                    e4:0e:5c:f5:e9:b9:e9:0c:9b:34:d4:34:39:31:b1:
                    e3:45:35:17:23:6c:4c:2e:fc:57:0f:54:5f:9f:76:
                    3d:ff:07:45:8a:de:d9:73:94:32:d2:87:c5:77:b7:
                    c0:e3:94:cb:13:53:30:3a:85:58:20:6c:78:e4:c7:
                    90:a3:1a:9d:4e:3d:b3:9f:cd:f7:50:51:6a:0f:f9:
                    d8:c4:3d:40:84:61:68:59:cb:d2:83:e2:cd:25:8e:
                    c7:17:d1:f1:ce:04:84:43:2e:9e:f5:84:d9:37:b7:
                    7c:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:86:49:BA:21:3E:55:B8:61:C3:B1:35:41:7F:22:AC:95:58:FC:6C
            X509v3 Authority Key Identifier:
                keyid:18:C0:92:4D:23:1D:A3:01:95:16:0B:25:EE:E6:32:7E:B4:03:06:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181733c5c5f6b5b/0/18C0924D231DA30195160B25EEE6327EB40306F8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7225b415-8ae0-4523-b37f-74ed780676aa/0985ea50df54e795a4be14ad5188a8e52873787039bb6b27b2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181733c5c5f6b5b/0/3137322e38322e39302e302f32342d3234203d3e20313336353537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.82.90.0/24

    Signature Algorithm: sha256WithRSAEncryption
         43:f3:5b:33:a2:af:1e:9d:e8:83:7a:1c:2b:57:a0:04:f1:69:
         70:33:81:08:8e:03:e6:b9:7b:84:a6:a1:c4:dd:e2:ef:00:14:
         db:7b:0c:4e:f1:ce:e7:ad:01:2a:fe:0d:2e:18:e3:10:a5:91:
         dc:de:ca:41:ff:05:02:28:c1:df:14:05:1e:cd:ab:6f:50:8b:
         20:c1:29:14:f9:7f:51:f8:55:e7:80:b2:63:43:8a:04:dc:da:
         8f:99:de:ee:e5:b7:af:4f:44:98:26:69:c7:5e:72:81:af:ef:
         bf:5b:f0:49:ca:3c:a0:5f:61:3d:00:bd:1e:b9:85:b0:26:24:
         cd:96:d0:0a:4d:20:c3:f7:71:29:1c:8f:90:75:a6:d9:b2:70:
         76:1c:d3:66:78:23:ec:a8:24:c3:39:9d:74:ec:b7:06:e7:8a:
         96:6d:64:4f:a8:ac:9e:ce:cd:ec:e1:1a:d0:a4:fa:b2:f4:58:
         fc:75:d9:56:96:32:be:b3:62:5e:f3:86:ab:14:8e:b6:6b:73:
         a8:e0:b4:91:15:62:a8:d4:47:5a:4c:1b:77:6c:51:28:30:3d:
         39:23:f9:f2:5c:30:eb:08:73:62:72:4c:ae:97:3b:8f:f7:98:
         26:96:9e:af:13:6d:a4:25:b6:8e:2e:36:cb:e3:3e:ab:01:12:
         08:b6:f0:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 29 00:28:04 2024 by rpki-client on console-fra.rpki-client.org