Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/0/3137322e3130392e302e302f31362d3136203d3e2035363530.roa
File:                     3137322e3130392e302e302f31362d3136203d3e2035363530.roa (raw, json)
Hash identifier:          wKc36EU0iLmE5Fbz1AmHF/y/3CM3MIlDph1it5G7OHY=
Subject key identifier:   80:1A:90:39:7E:9F:7C:3E:D3:3D:A9:18:05:A6:67:16:CD:FC:51:E8
Certificate issuer:       /CN=9cb00234359fcb78eee51e200b0e1e0a17b72696203dc83a90
Certificate serial:       7773E767A9B3FF612596BBEF504120F0A6870B
Authority key identifier: 82:A9:16:3A:2E:99:48:4B:AC:A0:78:20:EC:4F:79:C6:86:66:49:8B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86e0b138-bef4-49fe-9dd1-fa51383dbfce/9cb00234359fcb78eee51e200b0e1e0a17b72696203dc83a90.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/0/3137322e3130392e302e302f31362d3136203d3e2035363530.roa
Signing time:             Tue 26 Mar 2024 04:22:19 +0000
ROA not before:           Tue 26 Mar 2024 04:17:19 +0000
ROA not after:            Tue 25 Mar 2025 04:22:19 +0000
asID:                     5650
IP address blocks:        172.109.0.0/16 maxlen: 16

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/0/82A9163A2E99484BACA07820EC4F79C68666498B.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/0/82A9163A2E99484BACA07820EC4F79C68666498B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86e0b138-bef4-49fe-9dd1-fa51383dbfce/9cb00234359fcb78eee51e200b0e1e0a17b72696203dc83a90.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86e0b138-bef4-49fe-9dd1-fa51383dbfce/86e0b138-bef4-49fe-9dd1-fa51383dbfce.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86e0b138-bef4-49fe-9dd1-fa51383dbfce/86e0b138-bef4-49fe-9dd1-fa51383dbfce.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86e0b138-bef4-49fe-9dd1-fa51383dbfce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 May 2024 12:38:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:73:e7:67:a9:b3:ff:61:25:96:bb:ef:50:41:20:f0:a6:87:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9cb00234359fcb78eee51e200b0e1e0a17b72696203dc83a90
        Validity
            Not Before: Mar 26 04:17:19 2024 GMT
            Not After : Mar 25 04:22:19 2025 GMT
        Subject: CN=801A90397E9F7C3ED33DA91805A66716CDFC51E8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:95:10:37:42:14:be:33:9d:d2:bd:fb:f0:e6:
                    15:6e:5b:7a:e7:6a:dd:62:98:a8:b3:ad:79:68:b1:
                    1d:37:1e:32:cf:40:cc:32:d3:ce:f3:06:b8:f6:10:
                    29:94:d6:f0:d1:d2:5e:17:50:0e:fd:fa:45:e1:c3:
                    19:1a:5e:df:2d:eb:98:f3:9a:a2:e5:73:dc:37:4f:
                    f0:f6:5f:44:55:d9:dd:93:64:4e:dc:15:bb:4d:2d:
                    a2:d6:f1:49:06:95:c3:ec:27:f3:16:b0:42:c3:8a:
                    13:2c:62:6b:99:ff:f9:35:75:f9:3f:ba:bd:b1:c5:
                    28:c9:2b:89:dd:3a:45:bc:bc:2c:b1:93:9b:e6:3c:
                    08:5d:e8:24:7f:26:b0:ba:e8:a0:40:75:cc:d8:b3:
                    7a:ab:03:04:ef:a9:ee:aa:05:d9:6c:ed:30:d5:d9:
                    6c:1e:08:65:07:bd:45:c0:65:c6:56:2b:99:33:f4:
                    ba:87:4e:e7:e6:e8:9e:a7:17:ad:61:b0:ca:91:6d:
                    b3:48:8e:ff:f7:65:02:40:fc:65:10:a7:2b:ee:41:
                    f7:b4:2d:bf:07:6e:e8:ba:60:ce:c5:dd:60:0d:4b:
                    54:2c:66:0d:5b:40:0f:e7:cb:20:ae:50:e0:8e:c7:
                    32:ae:2f:b5:3e:e6:fe:06:37:4d:5a:9a:5f:84:5c:
                    5c:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:1A:90:39:7E:9F:7C:3E:D3:3D:A9:18:05:A6:67:16:CD:FC:51:E8
            X509v3 Authority Key Identifier:
                keyid:82:A9:16:3A:2E:99:48:4B:AC:A0:78:20:EC:4F:79:C6:86:66:49:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/0/82A9163A2E99484BACA07820EC4F79C68666498B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86e0b138-bef4-49fe-9dd1-fa51383dbfce/9cb00234359fcb78eee51e200b0e1e0a17b72696203dc83a90.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/0/3137322e3130392e302e302f31362d3136203d3e2035363530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.109.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         59:d2:9c:ba:fd:17:d6:64:27:2c:3c:ac:1e:5e:fc:21:e8:75:
         03:5a:18:4b:4f:45:1c:40:52:61:ad:73:0f:96:8f:45:b4:e3:
         4a:89:9f:7b:3c:f9:3d:cb:b5:72:2d:37:e5:e1:d5:7a:f3:e9:
         7e:ba:bf:bb:7d:42:09:2d:e5:ba:27:29:83:e8:9a:6a:02:84:
         16:6d:d1:51:da:03:db:32:ec:71:41:67:82:95:67:7d:1d:ba:
         7f:8e:d5:af:c9:56:e8:5a:31:77:02:6f:fc:71:1f:89:7c:34:
         06:e4:e8:c4:84:20:24:4d:3b:94:5a:3b:07:9f:e8:de:3a:43:
         f2:ef:8b:ab:99:6c:cf:9b:09:01:7b:84:2e:a9:9c:3a:b1:8d:
         a0:a9:a8:43:ca:3e:96:b6:58:35:a4:f3:c0:16:ed:e2:6f:d6:
         e1:69:f2:81:cb:d3:a9:0e:66:bb:6b:ce:be:d2:a0:69:65:9b:
         55:36:21:77:b4:63:c5:9c:aa:2f:d1:f3:c4:3a:a9:0c:0d:a2:
         bc:78:0a:17:f0:b3:eb:7a:24:7d:06:08:5a:c3:57:fa:1f:1d:
         fb:d2:2a:b8:8a:0c:31:aa:dd:64:57:22:93:f6:de:da:a2:31:
         60:17:0a:8c:bf:3e:70:22:0e:19:3c:2f:b9:1a:5e:38:10:4c:
         f7:3d:c8:96
-----BEGIN CERTIFICATE-----
MIIFqzCCBJOgAwIBAgITd3PnZ6mz/2EllrvvUEEg8KaHCzANBgkqhkiG9w0BAQsF
ADA9MTswOQYDVQQDEzI5Y2IwMDIzNDM1OWZjYjc4ZWVlNTFlMjAwYjBlMWUwYTE3
YjcyNjk2MjAzZGM4M2E5MDAeFw0yNDAzMjYwNDE3MTlaFw0yNTAzMjUwNDIyMTla
MDMxMTAvBgNVBAMTKDgwMUE5MDM5N0U5RjdDM0VEMzNEQTkxODA1QTY2NzE2Q0RG
QzUxRTgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGlRA3QhS+M53S
vfvw5hVuW3rnat1imKizrXlosR03HjLPQMwy087zBrj2ECmU1vDR0l4XUA79+kXh
wxkaXt8t65jzmqLlc9w3T/D2X0RV2d2TZE7cFbtNLaLW8UkGlcPsJ/MWsELDihMs
YmuZ//k1dfk/ur2xxSjJK4ndOkW8vCyxk5vmPAhd6CR/JrC66KBAdczYs3qrAwTv
qe6qBdls7TDV2WweCGUHvUXAZcZWK5kz9LqHTufm6J6nF61hsMqRbbNIjv/3ZQJA
/GUQpyvuQfe0Lb8Hbui6YM7F3WANS1QsZg1bQA/nyyCuUOCOxzKuL7U+5v4GN01a
ml+EXFx/AgMBAAGjggKsMIICqDAdBgNVHQ4EFgQUgBqQOX6ffD7TPakYBaZnFs38
UegwHwYDVR0jBBgwFoAUgqkWOi6ZSEusoHgg7E95xoZmSYswDgYDVR0PAQH/BAQD
AgeAMIGFBgNVHR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0
L3JlcG9zaXRvcnkvOGE4NDhhZGU4NzI4OTU3ODAxODczMmE5MGEyZjA5N2YvMC84
MkE5MTYzQTJFOTk0ODRCQUNBMDc4MjBFQzRGNzlDNjg2NjY0OThCLmNybDCB8wYI
KwYBBQUHAQEEgeYwgeMwgeAGCCsGAQUFBzAChoHTcnN5bmM6Ly9ycGtpLmFyaW4u
bmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2VhLWU4MGEtNDAzZS1i
MDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1iM2NjLTRiMDMtYmRhNy0xYmUyMDQ5
MzNhZTUvODZlMGIxMzgtYmVmNC00OWZlLTlkZDEtZmE1MTM4M2RiZmNlLzljYjAw
MjM0MzU5ZmNiNzhlZWU1MWUyMDBiMGUxZTBhMTdiNzI2OTYyMDNkYzgzYTkwLmNl
cjCBnQYIKwYBBQUHAQsEgZAwgY0wgYoGCCsGAQUFBzALhn5yc3luYzovL3Jwa2kt
cnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4NzI4OTU3ODAxODczMmE5
MGEyZjA5N2YvMC8zMTM3MzIyZTMxMzAzOTJlMzAyZTMwMmYzMTM2MmQzMTM2MjAz
ZDNlMjAzNTM2MzUzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAeBggr
BgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMDAKxtMA0GCSqGSIb3DQEBCwUAA4IBAQBZ
0py6/RfWZCcsPKweXvwh6HUDWhhLT0UcQFJhrXMPlo9FtONKiZ97PPk9y7VyLTfl
4dV68+l+ur+7fUIJLeW6JymD6JpqAoQWbdFR2gPbMuxxQWeClWd9Hbp/jtWvyVbo
WjF3Am/8cR+JfDQG5OjEhCAkTTuUWjsHn+jeOkPy74urmWzPmwkBe4QuqZw6sY2g
qahDyj6Wtlg1pPPAFu3ib9bhafKBy9OpDma7a86+0qBpZZtVNiF3tGPFnKov0fPE
OqkMDaK8eAoX8LPreiR9Bghaw1f6Hx370iq4igwxqt1kVyKT9t7aojFgFwqMvz5w
Ig4ZPC+5Gl44EEz3PciW
-----END CERTIFICATE-----
Generated at Sun May 19 13:35:10 2024 by rpki-client on console-ams.rpki-client.org