Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80f1a80a0181733c5c5f6b5b/0/3137322e38322e39302e302f32342d3234203d3e20343030353336.roa
File:                     3137322e38322e39302e302f32342d3234203d3e20343030353336.roa (raw, json)
Hash identifier:          tfzD4USocqU5BPi0xyONTGe+0SKr7/+jqkL2VyWGUjA=
Subject key identifier:   7C:F4:FA:73:54:61:44:9B:EA:65:50:F2:F7:CA:D3:17:A0:AA:51:F7
Certificate issuer:       /CN=0985ea50df54e795a4be14ad5188a8e52873787039bb6b27b2
Certificate serial:       503A92DD8EA2F0E7241907C9AE5E75B1224FC307
Authority key identifier: 18:C0:92:4D:23:1D:A3:01:95:16:0B:25:EE:E6:32:7E:B4:03:06:F8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7225b415-8ae0-4523-b37f-74ed780676aa/0985ea50df54e795a4be14ad5188a8e52873787039bb6b27b2.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181733c5c5f6b5b/0/3137322e38322e39302e302f32342d3234203d3e20343030353336.roa
Signing time:             Tue 02 Jul 2024 13:14:16 +0000
ROA not before:           Tue 02 Jul 2024 13:09:16 +0000
ROA not after:            Tue 01 Jul 2025 13:14:16 +0000
asID:                     400536
IP address blocks:        172.82.90.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181733c5c5f6b5b/0/18C0924D231DA30195160B25EEE6327EB40306F8.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181733c5c5f6b5b/0/18C0924D231DA30195160B25EEE6327EB40306F8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7225b415-8ae0-4523-b37f-74ed780676aa/0985ea50df54e795a4be14ad5188a8e52873787039bb6b27b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7225b415-8ae0-4523-b37f-74ed780676aa/7225b415-8ae0-4523-b37f-74ed780676aa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7225b415-8ae0-4523-b37f-74ed780676aa/7225b415-8ae0-4523-b37f-74ed780676aa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7225b415-8ae0-4523-b37f-74ed780676aa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 22:23:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:3a:92:dd:8e:a2:f0:e7:24:19:07:c9:ae:5e:75:b1:22:4f:c3:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0985ea50df54e795a4be14ad5188a8e52873787039bb6b27b2
        Validity
            Not Before: Jul  2 13:09:16 2024 GMT
            Not After : Jul  1 13:14:16 2025 GMT
        Subject: CN=7CF4FA735461449BEA6550F2F7CAD317A0AA51F7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:b2:b2:db:ff:7f:2f:a5:4d:b5:45:76:f3:04:
                    6a:c9:48:d6:02:ea:0d:57:b0:28:de:75:95:ba:43:
                    9f:75:47:08:1d:97:29:38:db:d4:74:8c:ca:7f:fa:
                    83:6d:a1:56:8c:78:6b:67:01:f1:b3:1f:03:26:bb:
                    9e:7c:44:7f:09:78:24:38:d6:9e:8a:30:2d:a9:0a:
                    00:2a:54:cd:fe:06:c4:f6:4e:65:f4:a2:16:1c:41:
                    08:a9:e3:9b:22:fd:b3:bd:dd:c9:c9:30:0f:ab:c1:
                    19:90:44:a5:91:1b:08:cc:79:7c:d4:5c:82:f3:b3:
                    f1:ee:46:f4:dc:f7:8e:ed:95:18:ee:9b:27:84:5a:
                    7f:bf:85:10:ee:dc:8a:a9:96:bb:52:42:87:34:aa:
                    5a:d4:73:ae:7a:3a:6d:26:ad:e7:53:0d:95:51:fa:
                    59:a8:1e:79:ce:e2:b1:21:f0:b4:ee:17:e1:45:95:
                    9a:3b:88:a8:d7:c9:09:34:b4:bc:c2:7e:e6:be:00:
                    8f:06:94:4c:ae:fb:9f:58:81:96:38:0f:3e:f9:29:
                    45:25:68:a5:94:fd:ab:da:81:cb:e9:10:64:74:b9:
                    4e:28:e4:96:d6:8f:ba:38:ed:8a:a6:04:5b:cd:91:
                    c9:b4:cb:3e:5b:74:3c:4c:e0:78:89:1c:19:0d:8e:
                    24:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:F4:FA:73:54:61:44:9B:EA:65:50:F2:F7:CA:D3:17:A0:AA:51:F7
            X509v3 Authority Key Identifier:
                keyid:18:C0:92:4D:23:1D:A3:01:95:16:0B:25:EE:E6:32:7E:B4:03:06:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181733c5c5f6b5b/0/18C0924D231DA30195160B25EEE6327EB40306F8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7225b415-8ae0-4523-b37f-74ed780676aa/0985ea50df54e795a4be14ad5188a8e52873787039bb6b27b2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181733c5c5f6b5b/0/3137322e38322e39302e302f32342d3234203d3e20343030353336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.82.90.0/24

    Signature Algorithm: sha256WithRSAEncryption
         47:ce:59:25:de:0f:40:48:99:72:d6:b3:61:8a:c9:dc:03:b6:
         1c:e6:26:19:d3:f4:af:b6:db:52:fc:7d:1b:2f:57:4f:59:09:
         34:43:e3:fc:9c:7e:de:81:77:a3:1b:b2:46:08:c7:a0:92:71:
         b8:0a:2a:39:95:c0:b7:4c:46:e1:51:a9:36:84:f0:d3:4b:21:
         ed:3f:c7:19:38:31:d4:2b:8f:ba:37:b3:00:00:25:5e:1b:26:
         a9:5f:aa:0e:14:5f:0c:86:68:57:d8:e5:4c:e8:c2:df:37:b4:
         b7:c0:45:33:67:5c:28:cc:14:a2:87:84:0f:2e:7b:85:79:ac:
         35:ab:da:2a:98:b8:13:71:a3:6b:23:3c:de:49:df:09:39:3c:
         db:10:22:43:75:49:2f:bc:1f:76:3c:c7:31:1f:91:11:48:c7:
         9d:4a:f4:ee:15:71:64:93:75:91:e1:e6:05:28:cb:a0:f2:c0:
         1a:4d:da:e8:f7:ec:fb:14:97:31:cb:1f:88:72:bf:69:60:f6:
         73:c8:0b:43:c7:2d:63:2b:5e:33:9b:62:14:c5:c9:c5:f4:ae:
         4c:cc:b9:10:73:b2:4d:9a:83:8e:ba:7b:a0:2a:d7:8c:b8:5f:
         e8:8e:22:75:d4:eb:69:5f:59:f6:9b:ff:ce:ad:37:94:2d:7d:
         e5:36:74:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:03:20 2024 by rpki-client on console-fra.rpki-client.org