Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/0/3137322e3130392e3132372e302f32342d3234203d3e2035363530.roa
File:                     3137322e3130392e3132372e302f32342d3234203d3e2035363530.roa (raw, json)
Hash identifier:          DHJjzC6I/dGDZAh384O2HhK3K9KOOYdwJRNPx/8RV0M=
Subject key identifier:   35:B5:B0:91:AA:4E:63:D8:7C:39:73:D0:FF:9B:DC:BB:37:96:B2:62
Certificate issuer:       /CN=9cb00234359fcb78eee51e200b0e1e0a17b72696203dc83a90
Certificate serial:       6B04236EBCB8E1D1997574CBC13466C468BFB1A1
Authority key identifier: 82:A9:16:3A:2E:99:48:4B:AC:A0:78:20:EC:4F:79:C6:86:66:49:8B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86e0b138-bef4-49fe-9dd1-fa51383dbfce/9cb00234359fcb78eee51e200b0e1e0a17b72696203dc83a90.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/0/3137322e3130392e3132372e302f32342d3234203d3e2035363530.roa
Signing time:             Thu 03 Oct 2024 11:44:45 +0000
ROA not before:           Thu 03 Oct 2024 11:39:45 +0000
ROA not after:            Thu 02 Oct 2025 11:44:45 +0000
asID:                     5650
IP address blocks:        172.109.127.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/0/82A9163A2E99484BACA07820EC4F79C68666498B.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/0/82A9163A2E99484BACA07820EC4F79C68666498B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86e0b138-bef4-49fe-9dd1-fa51383dbfce/9cb00234359fcb78eee51e200b0e1e0a17b72696203dc83a90.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86e0b138-bef4-49fe-9dd1-fa51383dbfce/86e0b138-bef4-49fe-9dd1-fa51383dbfce.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86e0b138-bef4-49fe-9dd1-fa51383dbfce/86e0b138-bef4-49fe-9dd1-fa51383dbfce.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86e0b138-bef4-49fe-9dd1-fa51383dbfce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:04:23:6e:bc:b8:e1:d1:99:75:74:cb:c1:34:66:c4:68:bf:b1:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9cb00234359fcb78eee51e200b0e1e0a17b72696203dc83a90
        Validity
            Not Before: Oct  3 11:39:45 2024 GMT
            Not After : Oct  2 11:44:45 2025 GMT
        Subject: CN=35B5B091AA4E63D87C3973D0FF9BDCBB3796B262
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:64:64:bd:2e:49:c7:c1:c9:47:1e:17:94:53:
                    32:6c:51:08:78:04:81:32:0e:96:0e:2b:a6:c8:ee:
                    65:63:16:a2:a3:b1:b0:a0:f8:5b:bb:a2:64:87:e4:
                    78:ce:11:d9:f0:a0:3c:2a:dd:23:3f:58:08:a1:bb:
                    8a:90:63:79:3a:84:84:4c:1a:3d:ca:b9:5f:a6:cc:
                    f3:0a:4f:1e:9f:7a:23:99:15:76:b4:9a:d9:23:c0:
                    cb:77:29:ed:48:8e:5c:82:1e:9d:bd:fe:72:34:ac:
                    32:8a:0f:37:02:5d:9a:5c:a2:1e:a1:fa:a3:46:74:
                    29:db:c2:12:38:71:eb:c5:63:24:ea:b2:24:c0:dd:
                    f9:69:cc:7d:af:e1:de:48:47:41:6a:23:f4:04:3f:
                    24:8f:94:6d:d9:16:f5:98:13:e2:4a:6c:75:9d:c2:
                    28:73:bd:36:cf:2c:e9:c3:07:1b:58:85:29:81:c3:
                    8e:b6:d4:b0:ba:c1:f6:9d:ce:6e:5f:6e:f3:f4:a9:
                    e2:34:32:c0:30:4a:28:4e:dc:55:f4:11:35:5a:9d:
                    b8:a0:e4:a6:cc:9c:d8:04:29:62:9c:e5:d6:b5:ae:
                    6f:6a:ac:06:2e:1e:d9:bb:ca:18:12:0d:97:fd:ae:
                    5e:b2:e0:82:f5:50:b1:39:85:b3:5b:01:e3:fd:e6:
                    11:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:B5:B0:91:AA:4E:63:D8:7C:39:73:D0:FF:9B:DC:BB:37:96:B2:62
            X509v3 Authority Key Identifier:
                keyid:82:A9:16:3A:2E:99:48:4B:AC:A0:78:20:EC:4F:79:C6:86:66:49:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/0/82A9163A2E99484BACA07820EC4F79C68666498B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86e0b138-bef4-49fe-9dd1-fa51383dbfce/9cb00234359fcb78eee51e200b0e1e0a17b72696203dc83a90.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/0/3137322e3130392e3132372e302f32342d3234203d3e2035363530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.109.127.0/24

    Signature Algorithm: sha256WithRSAEncryption
         54:bf:00:8c:8b:82:aa:c6:e5:58:6a:83:07:43:a9:64:fd:f1:
         d8:c0:37:a2:5d:a8:be:2f:ed:4c:e7:33:04:c4:ae:2c:cb:fe:
         47:08:0c:d9:c8:a3:7d:0a:89:53:50:24:37:73:67:03:94:ef:
         7d:a4:86:b0:d7:7d:36:41:17:2d:d7:4a:5d:37:a0:c0:1b:e7:
         c8:1d:c6:47:9f:9e:46:2d:46:84:37:cb:0f:46:4c:e1:f4:2e:
         e6:94:92:0d:55:04:0f:a5:9e:4c:5b:6b:a2:ab:cc:f1:2c:3d:
         77:7c:4d:23:47:43:e2:f8:c6:71:6d:8b:18:96:36:d1:2e:f7:
         17:9d:01:7c:29:8f:66:f8:2b:7d:1a:66:2c:ec:03:37:ed:03:
         00:38:8b:a7:ca:20:a1:0a:b5:49:5e:f3:94:4b:34:8f:c5:c0:
         e2:d9:ba:0b:03:88:2a:4b:1f:01:68:c2:b4:a6:50:88:9f:93:
         a0:76:6d:9e:7e:59:ce:e5:9c:de:9b:ae:4f:7e:f1:6b:0e:27:
         18:e5:8d:a9:5b:f6:73:67:73:44:1a:fd:38:4a:ab:cf:35:ae:
         c3:58:4d:19:58:01:ef:ad:92:4c:2d:e1:f3:79:2e:a3:50:d7:
         ae:d5:0e:76:4d:30:4e:ae:a3:6a:63:28:d0:eb:13:60:29:e0:
         7f:53:a7:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 06:35:49 2024 by rpki-client on console-ams.rpki-client.org