Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/0/3137322e3130392e3137362e302f32312d3231203d3e2035363530.roa
File:                     3137322e3130392e3137362e302f32312d3231203d3e2035363530.roa (raw, json)
Hash identifier:          InxpT6xebzwFnhAvWAtDP0eEwJj/UeyFCh7Rv6yDNkY=
Subject key identifier:   D8:89:3E:89:CD:66:52:7D:D2:50:8F:FE:6A:5C:F7:F1:8C:45:27:25
Certificate issuer:       /CN=9cb00234359fcb78eee51e200b0e1e0a17b72696203dc83a90
Certificate serial:       4BB35AD226246654FAD3873BA2A01C760BAD24F4
Authority key identifier: 82:A9:16:3A:2E:99:48:4B:AC:A0:78:20:EC:4F:79:C6:86:66:49:8B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86e0b138-bef4-49fe-9dd1-fa51383dbfce/9cb00234359fcb78eee51e200b0e1e0a17b72696203dc83a90.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/0/3137322e3130392e3137362e302f32312d3231203d3e2035363530.roa
Signing time:             Tue 05 Mar 2024 06:05:33 +0000
ROA not before:           Tue 05 Mar 2024 06:00:33 +0000
ROA not after:            Tue 04 Mar 2025 06:05:33 +0000
asID:                     5650
IP address blocks:        172.109.176.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/0/82A9163A2E99484BACA07820EC4F79C68666498B.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/0/82A9163A2E99484BACA07820EC4F79C68666498B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86e0b138-bef4-49fe-9dd1-fa51383dbfce/9cb00234359fcb78eee51e200b0e1e0a17b72696203dc83a90.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86e0b138-bef4-49fe-9dd1-fa51383dbfce/86e0b138-bef4-49fe-9dd1-fa51383dbfce.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86e0b138-bef4-49fe-9dd1-fa51383dbfce/86e0b138-bef4-49fe-9dd1-fa51383dbfce.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86e0b138-bef4-49fe-9dd1-fa51383dbfce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:b3:5a:d2:26:24:66:54:fa:d3:87:3b:a2:a0:1c:76:0b:ad:24:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9cb00234359fcb78eee51e200b0e1e0a17b72696203dc83a90
        Validity
            Not Before: Mar  5 06:00:33 2024 GMT
            Not After : Mar  4 06:05:33 2025 GMT
        Subject: CN=D8893E89CD66527DD2508FFE6A5CF7F18C452725
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:c8:ce:89:dc:58:9f:ae:a3:9d:ac:cb:aa:2c:
                    6a:48:45:86:4e:42:66:71:e4:cd:70:77:d9:c8:c6:
                    1d:77:94:07:35:63:30:75:9e:cf:db:95:c3:a0:24:
                    bd:47:d6:a8:40:cc:37:c6:16:f6:42:82:bb:a4:d4:
                    12:02:84:ce:ef:63:51:fc:2e:cd:85:89:2d:55:14:
                    44:94:10:79:14:95:5f:ab:47:59:29:86:70:91:88:
                    6a:9c:16:10:6e:93:ec:1f:8b:f0:b3:12:3e:b8:16:
                    3c:c3:63:f0:ef:7a:86:8e:7f:b8:56:e1:eb:2e:69:
                    e2:e8:02:71:76:73:7a:ae:f1:e5:a9:5d:90:a3:20:
                    9e:49:1f:77:65:a9:70:01:68:39:c4:bc:55:79:ce:
                    8c:f2:d3:e8:09:17:61:7e:8d:0b:75:1f:44:ca:5c:
                    64:d2:06:ab:47:97:6d:31:15:be:d3:96:d1:49:8c:
                    d7:67:a6:1f:ca:85:82:7a:04:e9:5c:c4:4d:0f:1a:
                    31:b9:14:0f:89:68:78:f2:3b:ba:b6:8d:95:91:3b:
                    fb:20:b2:db:6c:98:9e:4f:d7:20:38:7c:0e:34:43:
                    83:52:f0:51:59:80:f2:6a:fe:dd:fc:14:51:88:ff:
                    82:75:0a:9f:e3:df:5d:4e:e9:a1:f3:f0:dc:f2:76:
                    8c:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:89:3E:89:CD:66:52:7D:D2:50:8F:FE:6A:5C:F7:F1:8C:45:27:25
            X509v3 Authority Key Identifier:
                keyid:82:A9:16:3A:2E:99:48:4B:AC:A0:78:20:EC:4F:79:C6:86:66:49:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/0/82A9163A2E99484BACA07820EC4F79C68666498B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86e0b138-bef4-49fe-9dd1-fa51383dbfce/9cb00234359fcb78eee51e200b0e1e0a17b72696203dc83a90.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/0/3137322e3130392e3137362e302f32312d3231203d3e2035363530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.109.176.0/21

    Signature Algorithm: sha256WithRSAEncryption
         07:b7:65:da:40:46:c6:f0:4a:54:36:10:9a:fe:cb:d5:b8:5d:
         21:4e:ea:3a:cf:fc:86:21:b8:78:97:8e:9d:bd:7d:7c:e3:7c:
         96:93:60:79:39:34:c5:57:0e:72:46:99:e2:11:b3:46:5c:a0:
         b6:86:7a:24:c0:20:bf:1b:bf:0b:71:07:8d:d6:d7:b8:62:3e:
         be:3a:6b:73:2a:7f:66:dc:64:83:af:a6:b7:71:a8:cd:97:6c:
         72:66:8e:ea:99:d5:97:89:36:d9:42:aa:e4:42:bd:86:5d:9a:
         e7:83:cb:aa:56:14:51:55:ea:60:b2:78:e4:a7:0e:40:f5:d2:
         04:d1:3c:54:6f:5e:6c:95:b2:7e:d8:2e:82:c6:88:76:4d:61:
         48:04:d0:29:e7:6a:8c:23:7b:9f:90:9d:dc:90:b6:06:2c:67:
         c4:b8:3b:ae:ef:40:40:61:1c:a7:16:fe:14:40:be:c8:83:4b:
         c0:39:0a:31:83:cf:cf:da:04:2c:4f:a8:d5:47:39:5a:9d:65:
         f6:c6:a2:5c:53:0e:32:01:de:9c:d0:e5:74:12:71:e5:7c:29:
         fa:87:a9:f6:8e:1c:45:04:64:38:a8:77:14:ba:23:86:a1:d6:
         c1:98:84:f7:7f:ec:16:50:ef:69:4b:74:a5:9d:ba:a9:3e:bb:
         e1:0a:38:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 06:35:49 2024 by rpki-client on console-ams.rpki-client.org