Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/0/3137322e3130392e302e302f31382d3138203d3e2035363530.roa
File:                     3137322e3130392e302e302f31382d3138203d3e2035363530.roa (raw, json)
Hash identifier:          264Q4s+xpSkpKo8JgXC6xANK9w8E/S3qLIffI2Grp/c=
Subject key identifier:   DD:9B:D7:D5:D9:E7:22:E4:D0:BF:5E:94:D5:4E:9A:0B:98:BB:EB:C7
Certificate issuer:       /CN=9cb00234359fcb78eee51e200b0e1e0a17b72696203dc83a90
Certificate serial:       3019397D3DCB726A679F5ADABCCAB2F20E37F0F2
Authority key identifier: 82:A9:16:3A:2E:99:48:4B:AC:A0:78:20:EC:4F:79:C6:86:66:49:8B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86e0b138-bef4-49fe-9dd1-fa51383dbfce/9cb00234359fcb78eee51e200b0e1e0a17b72696203dc83a90.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/0/3137322e3130392e302e302f31382d3138203d3e2035363530.roa
Signing time:             Wed 19 Feb 2025 05:08:49 +0000
ROA not before:           Wed 19 Feb 2025 05:03:49 +0000
ROA not after:            Wed 18 Feb 2026 05:08:49 +0000
asID:                     5650
IP address blocks:        172.109.0.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/0/82A9163A2E99484BACA07820EC4F79C68666498B.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/0/82A9163A2E99484BACA07820EC4F79C68666498B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86e0b138-bef4-49fe-9dd1-fa51383dbfce/9cb00234359fcb78eee51e200b0e1e0a17b72696203dc83a90.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86e0b138-bef4-49fe-9dd1-fa51383dbfce/86e0b138-bef4-49fe-9dd1-fa51383dbfce.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86e0b138-bef4-49fe-9dd1-fa51383dbfce/86e0b138-bef4-49fe-9dd1-fa51383dbfce.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86e0b138-bef4-49fe-9dd1-fa51383dbfce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 14:44:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:19:39:7d:3d:cb:72:6a:67:9f:5a:da:bc:ca:b2:f2:0e:37:f0:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9cb00234359fcb78eee51e200b0e1e0a17b72696203dc83a90
        Validity
            Not Before: Feb 19 05:03:49 2025 GMT
            Not After : Feb 18 05:08:49 2026 GMT
        Subject: CN=DD9BD7D5D9E722E4D0BF5E94D54E9A0B98BBEBC7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:00:53:e9:cb:91:d2:d5:30:b2:cf:99:74:53:
                    ca:8d:6c:b2:45:41:6a:4f:ca:34:a6:9f:db:12:ab:
                    f5:b4:04:d5:16:82:43:44:0b:ea:64:0b:2b:6b:3d:
                    90:69:2c:82:4a:c1:ae:a0:01:6d:e9:2c:6a:76:66:
                    6f:15:cb:87:75:78:f1:ce:b4:50:43:ee:4a:a9:70:
                    29:ba:55:2c:ac:32:2f:1d:c3:04:26:cf:85:c0:07:
                    d2:e4:41:b9:4e:36:e5:eb:ce:9b:b3:6d:b0:fb:66:
                    6c:0e:fe:53:60:bc:60:a7:e4:b0:e3:0a:14:e0:bc:
                    2f:50:39:22:36:59:50:51:bb:da:71:00:4d:6d:5b:
                    77:fc:9a:68:db:35:15:da:33:f3:36:d9:dd:f0:a6:
                    7a:8c:d6:70:a8:dd:ac:72:21:a4:01:d8:dd:05:25:
                    7b:af:76:b8:b3:3c:18:4f:98:6d:08:14:95:76:fa:
                    f4:5a:98:28:22:b5:20:15:b5:b4:ac:a7:6d:6b:19:
                    03:97:90:49:dc:46:26:17:77:61:4d:a5:4a:8c:97:
                    b8:50:bc:61:9e:88:99:6d:4e:fa:31:0d:57:f3:99:
                    cb:d5:b1:41:33:9c:12:f8:68:d2:52:58:e1:bb:7f:
                    25:59:f7:90:21:bd:3d:60:0e:7f:69:3d:69:0e:49:
                    5c:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:9B:D7:D5:D9:E7:22:E4:D0:BF:5E:94:D5:4E:9A:0B:98:BB:EB:C7
            X509v3 Authority Key Identifier:
                keyid:82:A9:16:3A:2E:99:48:4B:AC:A0:78:20:EC:4F:79:C6:86:66:49:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/0/82A9163A2E99484BACA07820EC4F79C68666498B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86e0b138-bef4-49fe-9dd1-fa51383dbfce/9cb00234359fcb78eee51e200b0e1e0a17b72696203dc83a90.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/0/3137322e3130392e302e302f31382d3138203d3e2035363530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.109.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         bb:6c:f3:59:60:ea:64:ac:27:84:d9:03:6c:cc:3c:4f:ad:9c:
         ca:d9:7c:60:56:9c:ab:85:04:01:a3:28:7d:82:1d:bc:65:d8:
         22:f1:16:66:bd:38:88:79:87:da:57:19:ed:59:45:fe:8b:54:
         23:3d:79:84:04:61:b0:d9:0a:e7:78:1b:db:e4:06:0c:de:f7:
         b4:6c:83:53:66:27:18:a2:c4:9d:1b:84:f7:d2:7e:6d:8b:cc:
         6b:f2:e7:2e:a8:15:2d:4b:6c:1c:e5:7b:fd:c6:ee:8a:72:bf:
         5b:40:6d:ab:72:6d:4c:87:ab:59:24:eb:c4:9d:d9:87:e5:48:
         09:41:67:db:6f:98:0d:0d:cf:63:2c:3c:05:9c:6e:25:b7:2e:
         e5:0d:0c:a1:26:cd:92:05:c3:a6:9c:80:06:b1:f5:ea:d7:36:
         9e:27:bf:e2:d0:fb:a1:59:cb:ed:25:bb:4f:5e:76:a9:99:7c:
         19:30:e2:1a:ce:b8:f4:95:2b:c6:94:ec:b7:f6:dd:34:23:1f:
         0f:ac:a1:04:19:58:7e:d7:5d:78:3a:15:19:f6:07:66:04:57:
         c8:fd:ce:b1:dd:57:4e:ea:73:45:b5:eb:a8:cb:b0:fb:43:49:
         25:c4:57:70:b9:a9:1f:28:d3:79:d1:29:fd:66:cf:b2:73:a2:
         b4:6d:4f:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 18:02:41 2025 by rpki-client