Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS210531.roa
File:                     AS210531.roa (raw, json)
Hash identifier:          nUSA9opnURoWkwvQU0D5ZdRjvHHcHBGcvMMLqTB/48M=
Subject key identifier:   3A:96:E9:7F:C1:DE:8A:87:44:B1:6B:31:90:4F:6C:88:94:DF:43:48
Certificate issuer:       /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial:       3FB7FA8345894D9DBE4CE71CF98D1F69A47125E2
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS210531.roa
Signing time:             Tue 23 Jan 2024 08:01:12 +0000
ROA not before:           Tue 23 Jan 2024 07:56:12 +0000
ROA not after:            Tue 21 Jan 2025 08:01:12 +0000
asID:                     210531
IP address blocks:        98.142.244.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 13:38:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:b7:fa:83:45:89:4d:9d:be:4c:e7:1c:f9:8d:1f:69:a4:71:25:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
        Validity
            Not Before: Jan 23 07:56:12 2024 GMT
            Not After : Jan 21 08:01:12 2025 GMT
        Subject: CN=3A96E97FC1DE8A8744B16B31904F6C8894DF4348
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:8a:53:15:db:4e:1c:62:b8:8a:ee:31:39:bd:
                    13:71:c4:6c:c0:94:f6:62:55:8e:b0:51:57:29:e9:
                    99:74:6d:c2:b8:6c:da:22:43:8d:eb:b4:df:1d:d0:
                    8f:02:e0:25:11:31:78:6a:f9:60:76:8c:a4:4e:e6:
                    b3:f3:b0:30:a8:fa:18:8d:af:0b:88:60:e3:01:d0:
                    24:f0:b6:2d:f0:59:6a:e7:34:a7:a6:ac:91:58:fa:
                    38:d3:8b:e8:8f:97:fe:4b:d3:57:68:07:4f:37:fe:
                    fa:3b:48:f4:71:bd:9b:e5:a7:b6:39:d2:5b:9b:13:
                    f8:80:5a:58:f4:ab:f2:2f:b5:43:b3:7a:6d:01:75:
                    1a:aa:0b:23:23:c9:01:76:5f:01:64:fe:30:35:81:
                    4d:71:39:b6:20:cf:90:95:2b:b9:5e:9e:c6:c7:69:
                    d4:10:aa:35:53:0c:24:35:4b:f7:27:58:05:1e:65:
                    c5:17:31:81:9d:05:02:af:24:1b:78:19:92:0d:c7:
                    0a:85:2a:49:1e:0e:af:bb:3e:c0:eb:91:c1:66:70:
                    b8:a9:0b:96:a0:bf:5a:34:af:c2:d8:3e:d3:f5:43:
                    59:72:10:c4:14:dc:32:a6:ec:5e:5d:a0:77:62:be:
                    94:d8:71:02:6f:1d:32:0c:62:9f:73:73:32:21:ff:
                    db:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:96:E9:7F:C1:DE:8A:87:44:B1:6B:31:90:4F:6C:88:94:DF:43:48
            X509v3 Authority Key Identifier:
                keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS210531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.142.244.0/24

    Signature Algorithm: sha256WithRSAEncryption
         07:a9:45:70:02:9f:5b:7e:7c:9a:00:c4:d3:08:46:27:98:99:
         a9:c0:3f:c5:27:69:62:8f:04:61:1f:b5:dc:bc:d2:a4:8d:22:
         7d:15:c3:5f:49:6e:61:f1:46:17:8c:19:f1:27:f7:e8:60:6c:
         d3:86:c4:6c:d8:0b:d0:d4:99:e7:80:f2:38:a3:c5:77:0c:f1:
         35:f5:34:74:1b:ee:d4:6e:3b:c5:e7:a0:44:1d:01:09:48:84:
         ef:eb:3f:2a:e1:9f:0a:fd:1c:2c:3a:ab:20:d9:2d:11:ff:f1:
         65:b6:26:aa:fe:cc:fe:34:00:5c:ff:ab:42:56:ba:30:22:03:
         c9:97:cb:fe:87:d7:a5:d3:8b:7e:0d:07:11:41:0a:d5:ac:db:
         cd:f2:a8:16:7b:99:83:7c:91:dc:47:5f:ca:12:c7:9c:f6:56:
         96:96:83:5e:cf:a1:2b:b3:56:4c:4a:f3:bc:6d:cc:5d:63:0f:
         2d:46:f8:1a:04:0e:70:3e:05:3f:c7:d1:10:0d:af:8c:8b:ee:
         45:fd:3e:91:b3:08:8c:ef:d4:63:67:91:76:ae:8c:83:c3:ed:
         58:5a:d1:d5:d7:a3:e6:a5:f6:a6:de:0b:a3:71:55:06:a4:41:
         34:91:49:fb:c9:d4:2a:36:63:ad:49:a5:b1:3e:98:bd:d3:d1:
         34:81:cd:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 13:03:47 2024 by rpki-client on console-fra.rpki-client.org