Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80f1a80a0181733c5c5f6b5b/0/3137322e38322e39312e302f32342d3234203d3e20323132333936.roa
File:                     3137322e38322e39312e302f32342d3234203d3e20323132333936.roa (raw, json)
Hash identifier:          rNg7Xn8oMe9e4TSR87RGUOWX1p4MZoFS+KVTkm3vQzw=
Subject key identifier:   DF:47:B8:43:65:22:2B:2B:44:75:D0:97:F6:BA:08:D4:2B:10:18:37
Certificate issuer:       /CN=0985ea50df54e795a4be14ad5188a8e52873787039bb6b27b2
Certificate serial:       0E950C5DEF242F25ED5D18577101CE2E10CD2EAA
Authority key identifier: 18:C0:92:4D:23:1D:A3:01:95:16:0B:25:EE:E6:32:7E:B4:03:06:F8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7225b415-8ae0-4523-b37f-74ed780676aa/0985ea50df54e795a4be14ad5188a8e52873787039bb6b27b2.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181733c5c5f6b5b/0/3137322e38322e39312e302f32342d3234203d3e20323132333936.roa
Signing time:             Wed 12 Jun 2024 20:09:08 +0000
ROA not before:           Wed 12 Jun 2024 20:04:08 +0000
ROA not after:            Wed 11 Jun 2025 20:09:08 +0000
asID:                     212396
IP address blocks:        172.82.91.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181733c5c5f6b5b/0/18C0924D231DA30195160B25EEE6327EB40306F8.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181733c5c5f6b5b/0/18C0924D231DA30195160B25EEE6327EB40306F8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7225b415-8ae0-4523-b37f-74ed780676aa/0985ea50df54e795a4be14ad5188a8e52873787039bb6b27b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7225b415-8ae0-4523-b37f-74ed780676aa/7225b415-8ae0-4523-b37f-74ed780676aa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7225b415-8ae0-4523-b37f-74ed780676aa/7225b415-8ae0-4523-b37f-74ed780676aa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7225b415-8ae0-4523-b37f-74ed780676aa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 18:07:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:95:0c:5d:ef:24:2f:25:ed:5d:18:57:71:01:ce:2e:10:cd:2e:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0985ea50df54e795a4be14ad5188a8e52873787039bb6b27b2
        Validity
            Not Before: Jun 12 20:04:08 2024 GMT
            Not After : Jun 11 20:09:08 2025 GMT
        Subject: CN=DF47B84365222B2B4475D097F6BA08D42B101837
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:b3:db:45:8b:f5:14:80:83:d9:75:6b:16:ab:
                    f4:cf:55:78:ca:9c:ac:fd:03:5d:24:e8:72:25:4e:
                    78:5b:a0:aa:ff:70:8d:f6:f4:2f:4a:08:cd:cc:68:
                    79:0d:6e:3b:3e:3a:7b:1f:05:86:5d:09:b9:db:41:
                    80:c6:07:6b:63:76:e9:12:53:d4:ba:0b:0e:f5:ca:
                    a2:67:f4:65:20:43:3d:9a:b2:19:00:1a:ac:12:63:
                    28:9f:49:6b:df:22:01:a1:38:77:1a:01:5b:85:70:
                    33:cd:a4:ae:e0:83:08:0e:a1:01:1e:e9:c7:ae:49:
                    5e:1e:9a:cb:13:e9:d2:63:e3:96:f6:67:e2:ca:c1:
                    37:4c:c9:ce:2c:3f:f5:87:fa:e5:38:94:d0:5e:cb:
                    3c:2d:0a:5f:17:ca:e2:b2:24:a3:27:18:43:63:94:
                    dc:28:34:b7:d5:d6:da:68:49:f6:9f:5b:d8:93:29:
                    a2:27:7e:2a:63:0c:af:0c:f8:6f:70:19:4a:33:4b:
                    9a:1d:cd:38:ac:de:9e:cd:dc:8d:a9:29:be:18:f0:
                    3c:35:0c:90:41:c6:30:f2:d1:41:c8:1f:cf:5e:05:
                    e3:31:89:92:10:1f:06:42:18:19:39:24:83:8f:62:
                    89:d3:39:3f:ee:01:dd:a9:1a:a2:3f:6a:8b:b2:18:
                    62:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:47:B8:43:65:22:2B:2B:44:75:D0:97:F6:BA:08:D4:2B:10:18:37
            X509v3 Authority Key Identifier:
                keyid:18:C0:92:4D:23:1D:A3:01:95:16:0B:25:EE:E6:32:7E:B4:03:06:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181733c5c5f6b5b/0/18C0924D231DA30195160B25EEE6327EB40306F8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7225b415-8ae0-4523-b37f-74ed780676aa/0985ea50df54e795a4be14ad5188a8e52873787039bb6b27b2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181733c5c5f6b5b/0/3137322e38322e39312e302f32342d3234203d3e20323132333936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.82.91.0/24

    Signature Algorithm: sha256WithRSAEncryption
         64:68:51:4e:9a:92:3e:70:3e:b2:2e:b9:b8:2e:e4:a6:84:da:
         09:81:30:bb:75:ea:0b:7f:4a:de:5f:84:96:61:c8:46:e3:a2:
         79:cf:d8:82:65:69:7f:b1:6a:f4:2e:9d:66:98:cf:e5:4e:85:
         f6:ed:cd:14:e3:29:40:1a:a1:e7:3d:86:a1:27:b8:87:37:2e:
         b5:f5:76:1d:6f:5a:20:98:b2:13:44:e1:ca:46:b4:35:6a:e0:
         3b:20:db:ea:f2:ae:a1:99:5d:1e:d3:7e:0d:2f:ab:eb:ea:be:
         8b:ad:2d:27:ce:80:cd:87:d2:27:ad:c4:d0:18:1d:ac:c1:89:
         1b:bf:af:41:db:c5:e3:1b:2e:e0:1b:3e:46:a5:28:f0:a5:fb:
         59:e3:5c:56:65:33:c9:dd:1c:9e:10:7d:8f:0f:b0:07:e3:c7:
         71:a9:05:19:37:55:1d:bb:aa:5e:1a:d7:3f:74:0a:a5:fe:82:
         16:7f:12:ef:52:fb:0f:eb:20:ff:ae:35:ff:23:b7:14:77:e7:
         be:8f:c7:69:aa:53:6b:81:67:49:41:b2:bf:cf:0e:0a:54:fd:
         a3:86:f4:ae:3f:07:0f:0c:89:bb:be:81:e0:6d:f8:cd:95:c9:
         35:79:d1:e4:b0:52:09:3e:fd:36:63:b3:29:af:8f:c6:b3:c8:
         d7:3e:b5:2c
-----BEGIN CERTIFICATE-----
MIIFsjCCBJqgAwIBAgIUDpUMXe8kLyXtXRhXcQHOLhDNLqowDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMDk4NWVhNTBkZjU0ZTc5NWE0YmUxNGFkNTE4OGE4ZTUy
ODczNzg3MDM5YmI2YjI3YjIwHhcNMjQwNjEyMjAwNDA4WhcNMjUwNjExMjAwOTA4
WjAzMTEwLwYDVQQDEyhERjQ3Qjg0MzY1MjIyQjJCNDQ3NUQwOTdGNkJBMDhENDJC
MTAxODM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA67PbRYv1FICD
2XVrFqv0z1V4ypys/QNdJOhyJU54W6Cq/3CN9vQvSgjNzGh5DW47Pjp7HwWGXQm5
20GAxgdrY3bpElPUugsO9cqiZ/RlIEM9mrIZABqsEmMon0lr3yIBoTh3GgFbhXAz
zaSu4IMIDqEBHunHrkleHprLE+nSY+OW9mfiysE3TMnOLD/1h/rlOJTQXss8LQpf
F8risiSjJxhDY5TcKDS31dbaaEn2n1vYkymiJ34qYwyvDPhvcBlKM0uaHc04rN6e
zdyNqSm+GPA8NQyQQcYw8tFByB/PXgXjMYmSEB8GQhgZOSSDj2KJ0zk/7gHdqRqi
P2qLshhiIQIDAQABo4ICsjCCAq4wHQYDVR0OBBYEFN9HuENlIisrRHXQl/a6CNQr
EBg3MB8GA1UdIwQYMBaAFBjAkk0jHaMBlRYLJe7mMn60Awb4MA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODBmMWE4MGEwMTgxNzMzYzVjNWY2YjViLzAv
MThDMDkyNEQyMzFEQTMwMTk1MTYwQjI1RUVFNjMyN0VCNDAzMDZGOC5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi
MGI4NDE1LzcyMjViNDE1LThhZTAtNDUyMy1iMzdmLTc0ZWQ3ODA2NzZhYS8wOTg1
ZWE1MGRmNTRlNzk1YTRiZTE0YWQ1MTg4YThlNTI4NzM3ODcwMzliYjZiMjdiMi5j
ZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZTgwZjFhODBhMDE4MTcz
M2M1YzVmNmI1Yi8wLzMxMzczMjJlMzgzMjJlMzkzMTJlMzAyZjMyMzQyZDMyMzQy
MDNkM2UyMDMyMzEzMjMzMzkzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO
AjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAKxSWzANBgkqhkiG9w0BAQsF
AAOCAQEAZGhRTpqSPnA+si65uC7kpoTaCYEwu3XqC39K3l+ElmHIRuOiec/YgmVp
f7Fq9C6dZpjP5U6F9u3NFOMpQBqh5z2GoSe4hzcutfV2HW9aIJiyE0Thyka0NWrg
OyDb6vKuoZldHtN+DS+r6+q+i60tJ86AzYfSJ63E0BgdrMGJG7+vQdvF4xsu4Bs+
RqUo8KX7WeNcVmUzyd0cnhB9jw+wB+PHcakFGTdVHbuqXhrXP3QKpf6CFn8S71L7
D+sg/641/yO3FHfnvo/HaapTa4FnSUGyv88OClT9o4b0rj8HDwyJu76B4G34zZXJ
NXnR5LBSCT79NmOzKa+PxrPI1z61LA==
-----END CERTIFICATE-----
Generated at Fri Nov 22 16:45:51 2024 by rpki-client on console-ams.rpki-client.org