Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/0/3137322e3130392e3137392e302f32342d3234203d3e20333938393139.roa
File:                     3137322e3130392e3137392e302f32342d3234203d3e20333938393139.roa (raw, json)
Hash identifier:          kg1lZ8VSmZF9cPSFFvuAVUHCtfaAm4tpr4Ttwlwia2Y=
Subject key identifier:   85:CC:D9:2E:68:23:20:EF:AA:33:C5:DD:4E:A4:87:81:C1:07:81:54
Certificate issuer:       /CN=9cb00234359fcb78eee51e200b0e1e0a17b72696203dc83a90
Certificate serial:       64B7F01F4D3382D186A868E710D86FFB11411B4D
Authority key identifier: 82:A9:16:3A:2E:99:48:4B:AC:A0:78:20:EC:4F:79:C6:86:66:49:8B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86e0b138-bef4-49fe-9dd1-fa51383dbfce/9cb00234359fcb78eee51e200b0e1e0a17b72696203dc83a90.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/0/3137322e3130392e3137392e302f32342d3234203d3e20333938393139.roa
Signing time:             Wed 17 Jan 2024 05:51:11 +0000
ROA not before:           Wed 17 Jan 2024 05:46:11 +0000
ROA not after:            Wed 15 Jan 2025 05:51:11 +0000
asID:                     398919
IP address blocks:        172.109.179.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/0/82A9163A2E99484BACA07820EC4F79C68666498B.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/0/82A9163A2E99484BACA07820EC4F79C68666498B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86e0b138-bef4-49fe-9dd1-fa51383dbfce/9cb00234359fcb78eee51e200b0e1e0a17b72696203dc83a90.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86e0b138-bef4-49fe-9dd1-fa51383dbfce/86e0b138-bef4-49fe-9dd1-fa51383dbfce.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86e0b138-bef4-49fe-9dd1-fa51383dbfce/86e0b138-bef4-49fe-9dd1-fa51383dbfce.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86e0b138-bef4-49fe-9dd1-fa51383dbfce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:b7:f0:1f:4d:33:82:d1:86:a8:68:e7:10:d8:6f:fb:11:41:1b:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9cb00234359fcb78eee51e200b0e1e0a17b72696203dc83a90
        Validity
            Not Before: Jan 17 05:46:11 2024 GMT
            Not After : Jan 15 05:51:11 2025 GMT
        Subject: CN=85CCD92E682320EFAA33C5DD4EA48781C1078154
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:87:b7:6b:7d:64:60:a2:b9:c0:ab:36:8c:91:
                    4b:e4:eb:0a:d5:1a:16:5b:dd:91:c4:ad:c2:a8:ca:
                    f6:5a:31:1a:ca:ac:32:db:a8:a4:43:ef:1a:ab:c9:
                    90:a6:14:b4:76:f5:e6:a6:ef:e1:cb:f8:ef:e3:72:
                    a8:b9:fc:d5:e7:00:0c:aa:80:1f:a3:57:e1:d8:06:
                    71:f6:93:eb:83:19:16:08:9a:07:26:b6:97:ab:c8:
                    d6:3b:09:4c:6e:40:1a:fb:b2:46:f2:ad:0f:a0:bc:
                    64:26:80:5d:8b:0d:e6:7a:f1:5d:86:59:fe:9b:05:
                    dd:b5:db:d1:7d:e3:f6:c8:17:5e:15:45:de:ad:6f:
                    9a:b2:dd:be:b8:19:7c:e0:a1:64:45:35:40:e4:d4:
                    eb:7a:81:d6:25:d0:9f:d6:19:68:43:6b:9e:5e:c0:
                    46:42:c8:53:1a:e2:c7:d5:f7:f9:78:3f:a0:c9:fa:
                    29:d4:cc:22:0c:ec:f5:f8:64:58:cf:f3:17:4b:c8:
                    fc:c7:a9:65:8e:ae:8e:9e:d0:23:5b:09:8f:ca:56:
                    7f:18:bb:2f:93:06:55:17:0d:0e:bd:9c:f7:b3:f1:
                    a0:9a:48:ac:50:72:76:60:24:31:b9:b6:ec:f4:83:
                    c0:56:52:ea:88:bf:4d:0d:fc:aa:18:dc:d8:84:d3:
                    05:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:CC:D9:2E:68:23:20:EF:AA:33:C5:DD:4E:A4:87:81:C1:07:81:54
            X509v3 Authority Key Identifier:
                keyid:82:A9:16:3A:2E:99:48:4B:AC:A0:78:20:EC:4F:79:C6:86:66:49:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/0/82A9163A2E99484BACA07820EC4F79C68666498B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86e0b138-bef4-49fe-9dd1-fa51383dbfce/9cb00234359fcb78eee51e200b0e1e0a17b72696203dc83a90.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/0/3137322e3130392e3137392e302f32342d3234203d3e20333938393139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.109.179.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c5:a6:ca:20:8f:53:9d:d1:16:89:33:df:15:5b:95:a8:b9:0d:
         38:65:4a:dd:73:2d:40:88:a1:b2:2c:7a:e5:1a:eb:cb:cc:49:
         b7:b4:67:f6:3c:e8:21:03:99:37:1e:48:87:38:fd:10:f1:30:
         9b:f7:ca:3b:57:ce:19:b1:25:52:fb:80:20:ff:49:ac:d8:c7:
         7e:e2:bc:37:bd:42:51:6f:1e:91:00:77:70:92:cd:d7:ed:f9:
         40:be:03:4d:92:bb:50:e3:f8:26:f0:d9:5b:11:4c:7d:49:a8:
         f9:e0:aa:8e:1a:01:15:b0:d3:3a:68:a8:8a:fc:e0:0f:c5:7f:
         cb:e8:52:56:65:46:4f:cc:e3:ca:21:ad:63:de:02:67:54:d7:
         3e:5f:ec:78:b1:10:a9:76:2b:18:45:3e:a2:75:c6:0e:58:f5:
         3c:9a:10:b9:43:5f:41:b3:0a:51:4c:e1:c1:4d:8a:78:f6:14:
         34:2f:74:d6:1a:82:5f:ea:f4:3e:7c:28:65:65:93:fd:a3:66:
         46:3b:bd:e7:97:09:af:24:96:b3:71:fb:11:10:82:31:1d:a4:
         ba:a5:02:76:7a:75:31:e2:36:6a:15:49:d0:aa:cb:1f:c3:89:
         a2:fb:07:fd:08:df:72:da:7a:e6:3d:67:93:07:e7:ae:79:8b:
         77:84:d7:fe
-----BEGIN CERTIFICATE-----
MIIFtjCCBJ6gAwIBAgIUZLfwH00zgtGGqGjnENhv+xFBG00wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyOWNiMDAyMzQzNTlmY2I3OGVlZTUxZTIwMGIwZTFlMGEx
N2I3MjY5NjIwM2RjODNhOTAwHhcNMjQwMTE3MDU0NjExWhcNMjUwMTE1MDU1MTEx
WjAzMTEwLwYDVQQDEyg4NUNDRDkyRTY4MjMyMEVGQUEzM0M1REQ0RUE0ODc4MUMx
MDc4MTU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8oe3a31kYKK5
wKs2jJFL5OsK1RoWW92RxK3CqMr2WjEayqwy26ikQ+8aq8mQphS0dvXmpu/hy/jv
43KoufzV5wAMqoAfo1fh2AZx9pPrgxkWCJoHJraXq8jWOwlMbkAa+7JG8q0PoLxk
JoBdiw3mevFdhln+mwXdtdvRfeP2yBdeFUXerW+ast2+uBl84KFkRTVA5NTreoHW
JdCf1hloQ2ueXsBGQshTGuLH1ff5eD+gyfop1MwiDOz1+GRYz/MXS8j8x6lljq6O
ntAjWwmPylZ/GLsvkwZVFw0OvZz3s/GgmkisUHJ2YCQxubbs9IPAVlLqiL9NDfyq
GNzYhNMFSwIDAQABo4ICtjCCArIwHQYDVR0OBBYEFIXM2S5oIyDvqjPF3U6kh4HB
B4FUMB8GA1UdIwQYMBaAFIKpFjoumUhLrKB4IOxPecaGZkmLMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODcyODk1NzgwMTg3MzJhOTBhMmYwOTdmLzAv
ODJBOTE2M0EyRTk5NDg0QkFDQTA3ODIwRUM0Rjc5QzY4NjY2NDk4Qi5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0
OTMzYWU1Lzg2ZTBiMTM4LWJlZjQtNDlmZS05ZGQxLWZhNTEzODNkYmZjZS85Y2Iw
MDIzNDM1OWZjYjc4ZWVlNTFlMjAwYjBlMWUwYTE3YjcyNjk2MjAzZGM4M2E5MC5j
ZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZTg3Mjg5NTc4MDE4NzMy
YTkwYTJmMDk3Zi8wLzMxMzczMjJlMzEzMDM5MmUzMTM3MzkyZTMwMmYzMjM0MmQz
MjM0MjAzZDNlMjAzMzM5MzgzOTMxMzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACsbbMwDQYJKoZIhvcN
AQELBQADggEBAMWmyiCPU53RFokz3xVblai5DThlSt1zLUCIobIseuUa68vMSbe0
Z/Y86CEDmTceSIc4/RDxMJv3yjtXzhmxJVL7gCD/SazYx37ivDe9QlFvHpEAd3CS
zdft+UC+A02Su1Dj+Cbw2VsRTH1JqPngqo4aARWw0zpoqIr84A/Ff8voUlZlRk/M
48ohrWPeAmdU1z5f7HixEKl2KxhFPqJ1xg5Y9TyaELlDX0GzClFM4cFNinj2FDQv
dNYagl/q9D58KGVlk/2jZkY7veeXCa8klrNx+xEQgjEdpLqlAnZ6dTHiNmoVSdCq
yx/DiaL7B/0I33LaeuY9Z5MH5655i3eE1/4=
-----END CERTIFICATE-----
Generated at Fri Nov 22 05:50:08 2024 by rpki-client on console-fra.rpki-client.org