Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/0/3137322e3130392e3137362e302f32312d3231203d3e2035363530.roa
File:                     3137322e3130392e3137362e302f32312d3231203d3e2035363530.roa (raw, json)
Hash identifier:          WVkKR2d+BE4y0RZUexwu6xrAiq85CNx2SCW+DNhUtQQ=
Subject key identifier:   E3:2B:32:AE:14:97:64:19:61:AA:33:50:E6:D4:3B:47:DA:B7:B9:C5
Certificate issuer:       /CN=9cb00234359fcb78eee51e200b0e1e0a17b72696203dc83a90
Certificate serial:       4239F2397F00C4636398CBB5B43776A88812E0A3
Authority key identifier: 82:A9:16:3A:2E:99:48:4B:AC:A0:78:20:EC:4F:79:C6:86:66:49:8B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86e0b138-bef4-49fe-9dd1-fa51383dbfce/9cb00234359fcb78eee51e200b0e1e0a17b72696203dc83a90.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/0/3137322e3130392e3137362e302f32312d3231203d3e2035363530.roa
Signing time:             Tue 04 Feb 2025 06:08:46 +0000
ROA not before:           Tue 04 Feb 2025 06:03:46 +0000
ROA not after:            Tue 03 Feb 2026 06:08:46 +0000
asID:                     5650
IP address blocks:        172.109.176.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/0/82A9163A2E99484BACA07820EC4F79C68666498B.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/0/82A9163A2E99484BACA07820EC4F79C68666498B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86e0b138-bef4-49fe-9dd1-fa51383dbfce/9cb00234359fcb78eee51e200b0e1e0a17b72696203dc83a90.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86e0b138-bef4-49fe-9dd1-fa51383dbfce/86e0b138-bef4-49fe-9dd1-fa51383dbfce.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86e0b138-bef4-49fe-9dd1-fa51383dbfce/86e0b138-bef4-49fe-9dd1-fa51383dbfce.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86e0b138-bef4-49fe-9dd1-fa51383dbfce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Apr 2025 22:41:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:39:f2:39:7f:00:c4:63:63:98:cb:b5:b4:37:76:a8:88:12:e0:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9cb00234359fcb78eee51e200b0e1e0a17b72696203dc83a90
        Validity
            Not Before: Feb  4 06:03:46 2025 GMT
            Not After : Feb  3 06:08:46 2026 GMT
        Subject: CN=E32B32AE1497641961AA3350E6D43B47DAB7B9C5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:bc:1f:dd:e3:4a:a8:ad:e9:0a:cd:cc:27:15:
                    7a:98:c1:45:23:25:e4:8e:a1:fd:08:a2:8c:09:09:
                    b2:4a:cb:3c:86:aa:4b:ee:85:ed:e7:2b:eb:fe:04:
                    96:81:2c:6a:92:bf:cb:5a:38:b8:6e:8f:54:97:4a:
                    51:3b:d1:c3:5e:f1:42:dc:2a:73:42:df:e5:88:cd:
                    b7:c7:48:c3:72:e4:cc:b4:35:11:5b:9c:39:31:1b:
                    3e:c1:a3:c2:f0:cc:23:b1:31:0b:21:7a:d2:f8:70:
                    e3:c2:f2:83:b4:ce:1e:14:3b:5d:b5:49:b2:72:3a:
                    9e:f1:be:11:14:4c:da:f1:7a:b4:d8:99:7c:69:a4:
                    30:b3:b9:00:25:74:d2:3a:e2:37:fb:4a:c5:58:eb:
                    93:83:50:4a:d1:2d:5e:c3:14:36:5e:84:9a:0c:28:
                    ad:d4:df:53:f6:e4:3e:5e:37:ed:d0:16:36:1e:7b:
                    7b:54:28:89:ec:ee:f2:71:fc:7e:87:fe:06:f8:1d:
                    08:df:b7:5e:c7:cf:f3:4e:83:ce:f4:8a:70:64:69:
                    06:72:ff:c5:b8:77:1d:b4:0e:c6:bc:e8:af:79:c7:
                    00:6f:2c:3e:a2:4f:01:8d:b2:0c:8f:bb:e0:9b:26:
                    52:97:ac:1d:85:e5:ed:2e:91:d8:d9:f6:69:ad:fe:
                    79:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:2B:32:AE:14:97:64:19:61:AA:33:50:E6:D4:3B:47:DA:B7:B9:C5
            X509v3 Authority Key Identifier:
                keyid:82:A9:16:3A:2E:99:48:4B:AC:A0:78:20:EC:4F:79:C6:86:66:49:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/0/82A9163A2E99484BACA07820EC4F79C68666498B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86e0b138-bef4-49fe-9dd1-fa51383dbfce/9cb00234359fcb78eee51e200b0e1e0a17b72696203dc83a90.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/0/3137322e3130392e3137362e302f32312d3231203d3e2035363530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.109.176.0/21

    Signature Algorithm: sha256WithRSAEncryption
         66:0f:8a:08:51:cc:7b:db:b8:96:5c:8e:20:6f:c1:46:2c:5b:
         22:d3:a7:1e:8c:c3:68:79:f2:c8:79:88:ae:88:6b:8b:ab:dc:
         52:2f:68:33:6b:8c:92:d1:98:da:99:f2:95:df:8f:ed:74:21:
         8d:d3:dd:86:29:58:33:b7:5e:d8:1e:b4:27:90:be:aa:dc:cd:
         ec:3f:78:77:01:06:d6:39:d7:15:5e:da:66:5b:ba:31:38:14:
         aa:68:df:4c:7e:2e:26:f0:9f:cf:47:5d:17:bf:b1:10:82:03:
         6e:c4:c3:6b:56:3e:33:9d:66:52:b1:8a:94:00:5c:c4:3b:3b:
         c7:21:bc:65:eb:6e:62:98:91:82:ec:81:29:f0:36:a7:5d:5e:
         96:7c:9d:31:2d:8e:9c:b4:4c:ea:6a:5b:1b:58:62:a1:90:c0:
         ba:05:08:23:2c:be:55:7b:6f:95:7c:3d:df:69:0a:a6:f7:5e:
         1c:19:13:09:3d:f0:c3:fd:6d:05:be:7a:1f:10:7a:21:b7:9e:
         ba:35:bc:b1:f3:25:80:13:ec:e0:65:2d:de:1a:48:59:d3:5b:
         c0:82:63:59:8a:5d:8b:09:28:68:66:7b:69:91:f2:83:02:bc:
         54:f5:5d:c2:75:e9:59:d4:18:11:10:23:3d:73:3b:a1:2c:0d:
         40:b1:c7:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 13:06:19 2025 by rpki-client