Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/0/3137322e3130392e302e302f31382d3138203d3e2035363530.roa
File:                     3137322e3130392e302e302f31382d3138203d3e2035363530.roa (raw, json)
Hash identifier:          EqUmLTxDpBDPtCl/gq4eWx+AH+78qa4d+VZiN2iJCkg=
Subject key identifier:   83:E7:EC:C6:B5:21:A1:CC:06:9D:F4:81:AC:9E:9B:C6:1B:51:8B:D0
Certificate issuer:       /CN=9cb00234359fcb78eee51e200b0e1e0a17b72696203dc83a90
Certificate serial:       61BD41F457176F12FA11D30C245866F0337E3F04
Authority key identifier: 82:A9:16:3A:2E:99:48:4B:AC:A0:78:20:EC:4F:79:C6:86:66:49:8B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86e0b138-bef4-49fe-9dd1-fa51383dbfce/9cb00234359fcb78eee51e200b0e1e0a17b72696203dc83a90.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/0/3137322e3130392e302e302f31382d3138203d3e2035363530.roa
Signing time:             Wed 20 Mar 2024 04:25:21 +0000
ROA not before:           Wed 20 Mar 2024 04:20:21 +0000
ROA not after:            Wed 19 Mar 2025 04:25:21 +0000
asID:                     5650
IP address blocks:        172.109.0.0/18 maxlen: 18

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/0/82A9163A2E99484BACA07820EC4F79C68666498B.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/0/82A9163A2E99484BACA07820EC4F79C68666498B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86e0b138-bef4-49fe-9dd1-fa51383dbfce/9cb00234359fcb78eee51e200b0e1e0a17b72696203dc83a90.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86e0b138-bef4-49fe-9dd1-fa51383dbfce/86e0b138-bef4-49fe-9dd1-fa51383dbfce.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86e0b138-bef4-49fe-9dd1-fa51383dbfce/86e0b138-bef4-49fe-9dd1-fa51383dbfce.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86e0b138-bef4-49fe-9dd1-fa51383dbfce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 May 2024 12:38:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:bd:41:f4:57:17:6f:12:fa:11:d3:0c:24:58:66:f0:33:7e:3f:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9cb00234359fcb78eee51e200b0e1e0a17b72696203dc83a90
        Validity
            Not Before: Mar 20 04:20:21 2024 GMT
            Not After : Mar 19 04:25:21 2025 GMT
        Subject: CN=83E7ECC6B521A1CC069DF481AC9E9BC61B518BD0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:80:15:86:72:27:27:cc:c0:d5:67:c5:e0:e8:
                    55:70:cb:de:4f:e0:5d:df:fa:e7:1b:b1:99:1a:32:
                    d6:ff:1d:bd:e3:79:0e:cb:d5:00:89:91:e7:23:5e:
                    89:7f:72:3c:35:23:9a:d7:87:08:1a:d8:28:6f:5f:
                    4c:a3:4e:20:8b:1d:ad:f4:b9:53:09:7c:bb:51:40:
                    5d:38:3e:f6:08:90:41:46:a5:e0:dc:29:d5:88:c8:
                    54:ab:7d:1d:40:79:ff:0b:e6:7f:03:a3:f6:8c:68:
                    22:98:1e:ad:79:43:4d:87:93:17:c2:7f:28:af:93:
                    1f:62:a1:99:22:6e:73:7e:a6:20:f4:a3:47:fa:d7:
                    0a:26:dc:ea:2d:2c:ee:ac:d7:39:5a:25:e2:0a:1c:
                    f9:ab:77:61:60:74:81:88:73:d5:14:dc:dc:d4:a1:
                    86:d9:c0:96:fe:86:3e:bc:f5:52:f2:df:9d:72:94:
                    25:96:bb:99:ca:4e:02:b4:71:44:8e:ad:65:0d:9a:
                    53:f6:84:99:77:9f:95:fd:80:c8:e7:c9:8e:74:bd:
                    fb:df:cb:0a:bd:cb:cd:61:68:1c:be:de:57:86:d8:
                    1e:18:ba:6a:21:1f:84:e6:8d:22:c7:b8:5c:ee:83:
                    12:b1:1d:98:33:e4:e7:09:42:a7:5b:1b:1b:38:ae:
                    00:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:E7:EC:C6:B5:21:A1:CC:06:9D:F4:81:AC:9E:9B:C6:1B:51:8B:D0
            X509v3 Authority Key Identifier:
                keyid:82:A9:16:3A:2E:99:48:4B:AC:A0:78:20:EC:4F:79:C6:86:66:49:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/0/82A9163A2E99484BACA07820EC4F79C68666498B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86e0b138-bef4-49fe-9dd1-fa51383dbfce/9cb00234359fcb78eee51e200b0e1e0a17b72696203dc83a90.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/0/3137322e3130392e302e302f31382d3138203d3e2035363530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.109.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         3f:31:31:16:38:8e:84:5c:76:5c:10:1b:29:c4:38:29:b8:c0:
         23:38:29:c8:af:a1:bf:7d:66:87:1c:67:c9:80:91:15:2f:82:
         b3:b1:13:ee:15:33:64:8f:28:82:90:72:63:36:f6:68:cd:05:
         21:7b:40:9a:d1:ab:f4:9f:09:63:1d:f8:66:0c:c6:5c:1b:27:
         d1:ef:33:9c:59:7b:77:ae:3a:d5:3d:76:e7:e2:4f:f6:81:27:
         4f:52:47:16:04:f0:fd:97:6d:df:52:15:9f:c2:41:32:a6:86:
         f3:83:27:b5:1c:9c:ce:b7:a1:36:e4:15:ee:09:b5:68:50:f6:
         96:88:78:82:89:19:92:03:b2:34:68:6f:2e:6a:ac:5c:9a:60:
         fe:80:58:d7:58:0e:3b:ec:5b:5a:7f:8b:93:8f:ed:99:7f:47:
         c8:f9:4a:d3:77:d8:c4:3c:41:c1:15:8a:ff:52:4f:af:02:04:
         16:03:bd:a9:52:e0:26:ac:a2:ac:df:62:d5:1a:c8:f5:0b:4d:
         26:94:2e:26:d0:31:54:d9:cf:30:2c:b2:31:4d:af:7c:df:14:
         72:26:68:86:a8:bc:da:49:17:6c:b0:ae:bc:8c:d8:5c:91:7f:
         94:22:4f:c4:ce:02:fd:ee:46:0f:42:6f:a4:59:c9:25:58:bd:
         cb:13:97:65
-----BEGIN CERTIFICATE-----
MIIFrTCCBJWgAwIBAgIUYb1B9FcXbxL6EdMMJFhm8DN+PwQwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyOWNiMDAyMzQzNTlmY2I3OGVlZTUxZTIwMGIwZTFlMGEx
N2I3MjY5NjIwM2RjODNhOTAwHhcNMjQwMzIwMDQyMDIxWhcNMjUwMzE5MDQyNTIx
WjAzMTEwLwYDVQQDEyg4M0U3RUNDNkI1MjFBMUNDMDY5REY0ODFBQzlFOUJDNjFC
NTE4QkQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzoAVhnInJ8zA
1WfF4OhVcMveT+Bd3/rnG7GZGjLW/x2943kOy9UAiZHnI16Jf3I8NSOa14cIGtgo
b19Mo04gix2t9LlTCXy7UUBdOD72CJBBRqXg3CnViMhUq30dQHn/C+Z/A6P2jGgi
mB6teUNNh5MXwn8or5MfYqGZIm5zfqYg9KNH+tcKJtzqLSzurNc5WiXiChz5q3dh
YHSBiHPVFNzc1KGG2cCW/oY+vPVS8t+dcpQllruZyk4CtHFEjq1lDZpT9oSZd5+V
/YDI58mOdL3738sKvcvNYWgcvt5XhtgeGLpqIR+E5o0ix7hc7oMSsR2YM+TnCUKn
WxsbOK4AzQIDAQABo4ICrTCCAqkwHQYDVR0OBBYEFIPn7Ma1IaHMBp30gayem8Yb
UYvQMB8GA1UdIwQYMBaAFIKpFjoumUhLrKB4IOxPecaGZkmLMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODcyODk1NzgwMTg3MzJhOTBhMmYwOTdmLzAv
ODJBOTE2M0EyRTk5NDg0QkFDQTA3ODIwRUM0Rjc5QzY4NjY2NDk4Qi5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0
OTMzYWU1Lzg2ZTBiMTM4LWJlZjQtNDlmZS05ZGQxLWZhNTEzODNkYmZjZS85Y2Iw
MDIzNDM1OWZjYjc4ZWVlNTFlMjAwYjBlMWUwYTE3YjcyNjk2MjAzZGM4M2E5MC5j
ZXIwgZ0GCCsGAQUFBwELBIGQMIGNMIGKBggrBgEFBQcwC4Z+cnN5bmM6Ly9ycGtp
LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRlODcyODk1NzgwMTg3MzJh
OTBhMmYwOTdmLzAvMzEzNzMyMmUzMTMwMzkyZTMwMmUzMDJmMzEzODJkMzEzODIw
M2QzZTIwMzUzNjM1MzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAasbQAwDQYJKoZIhvcNAQELBQADggEB
AD8xMRY4joRcdlwQGynEOCm4wCM4Kcivob99ZoccZ8mAkRUvgrOxE+4VM2SPKIKQ
cmM29mjNBSF7QJrRq/SfCWMd+GYMxlwbJ9HvM5xZe3euOtU9dufiT/aBJ09SRxYE
8P2Xbd9SFZ/CQTKmhvODJ7UcnM63oTbkFe4JtWhQ9paIeIKJGZIDsjRoby5qrFya
YP6AWNdYDjvsW1p/i5OP7Zl/R8j5StN32MQ8QcEViv9ST68CBBYDvalS4Casoqzf
YtUayPULTSaULibQMVTZzzAssjFNr3zfFHImaIaovNpJF2ywrryM2FyRf5QiT8TO
Av3uRg9Cb6RZySVYvcsTl2U=
-----END CERTIFICATE-----
Generated at Sun May 19 13:35:10 2024 by rpki-client on console-ams.rpki-client.org