Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/0/3137322e3130392e3137392e302f32342d3234203d3e20333938393139.roa
File:                     3137322e3130392e3137392e302f32342d3234203d3e20333938393139.roa (raw, json)
Hash identifier:          e3557s6EWSXkSTOyfvgssoFTXW3q0ec7aAKtZGBz8s8=
Subject key identifier:   20:1F:0D:9D:77:64:24:4B:71:5B:33:2E:66:ED:B7:DE:4A:6A:C9:34
Certificate issuer:       /CN=9cb00234359fcb78eee51e200b0e1e0a17b72696203dc83a90
Certificate serial:       026D1FD0FBB00BCFD967E5DC7101616E65E8BFDF
Authority key identifier: 82:A9:16:3A:2E:99:48:4B:AC:A0:78:20:EC:4F:79:C6:86:66:49:8B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86e0b138-bef4-49fe-9dd1-fa51383dbfce/9cb00234359fcb78eee51e200b0e1e0a17b72696203dc83a90.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/0/3137322e3130392e3137392e302f32342d3234203d3e20333938393139.roa
Signing time:             Wed 18 Dec 2024 05:55:08 +0000
ROA not before:           Wed 18 Dec 2024 05:50:08 +0000
ROA not after:            Wed 17 Dec 2025 05:55:08 +0000
asID:                     398919
IP address blocks:        172.109.179.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/0/82A9163A2E99484BACA07820EC4F79C68666498B.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/0/82A9163A2E99484BACA07820EC4F79C68666498B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86e0b138-bef4-49fe-9dd1-fa51383dbfce/9cb00234359fcb78eee51e200b0e1e0a17b72696203dc83a90.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86e0b138-bef4-49fe-9dd1-fa51383dbfce/86e0b138-bef4-49fe-9dd1-fa51383dbfce.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86e0b138-bef4-49fe-9dd1-fa51383dbfce/86e0b138-bef4-49fe-9dd1-fa51383dbfce.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86e0b138-bef4-49fe-9dd1-fa51383dbfce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 14:44:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:6d:1f:d0:fb:b0:0b:cf:d9:67:e5:dc:71:01:61:6e:65:e8:bf:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9cb00234359fcb78eee51e200b0e1e0a17b72696203dc83a90
        Validity
            Not Before: Dec 18 05:50:08 2024 GMT
            Not After : Dec 17 05:55:08 2025 GMT
        Subject: CN=201F0D9D7764244B715B332E66EDB7DE4A6AC934
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:cc:c0:90:d1:ac:a8:d3:0d:52:13:ef:3e:19:
                    6c:12:a3:4a:05:47:71:44:81:c5:dd:52:9e:c5:6a:
                    bc:6d:a4:75:a0:8d:0b:74:38:7f:50:c2:c2:dd:32:
                    31:66:9c:e0:c2:76:68:c7:34:d7:1f:60:cf:7a:9e:
                    7a:bb:62:c5:fe:05:76:2d:43:51:42:72:2a:8c:58:
                    43:94:8d:3d:f5:cf:8e:02:20:52:70:c0:62:4d:18:
                    4b:05:83:0b:3e:74:34:95:a6:4b:56:66:60:b5:b6:
                    38:c8:6f:3c:80:6e:ed:89:f1:76:92:04:8a:e2:1c:
                    75:c1:d5:7b:b6:ff:a4:d2:93:7e:91:8a:06:4d:63:
                    b1:45:bb:60:aa:84:7f:fe:2d:00:da:f8:d3:d1:f8:
                    2d:06:ab:10:34:ac:bc:49:af:29:5e:5b:c0:1c:e2:
                    e4:af:3a:97:74:7d:93:51:b7:f9:8b:0c:00:1a:38:
                    84:18:67:ce:34:fc:d9:d5:ba:e2:89:d5:0f:ec:49:
                    d6:2c:0e:e1:1c:cc:ce:ee:4e:06:08:56:9f:6c:8a:
                    be:f6:a2:3f:fb:53:22:b0:ba:55:5b:90:09:98:db:
                    99:b3:e1:33:12:7e:69:df:1f:40:ec:e8:62:4c:85:
                    37:c2:0a:d1:47:e3:52:36:12:3a:43:b6:1a:fd:9c:
                    fb:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:1F:0D:9D:77:64:24:4B:71:5B:33:2E:66:ED:B7:DE:4A:6A:C9:34
            X509v3 Authority Key Identifier:
                keyid:82:A9:16:3A:2E:99:48:4B:AC:A0:78:20:EC:4F:79:C6:86:66:49:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/0/82A9163A2E99484BACA07820EC4F79C68666498B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86e0b138-bef4-49fe-9dd1-fa51383dbfce/9cb00234359fcb78eee51e200b0e1e0a17b72696203dc83a90.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/0/3137322e3130392e3137392e302f32342d3234203d3e20333938393139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.109.179.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a0:f3:4c:69:0d:21:4b:e3:a1:40:9f:21:47:7f:7b:b5:05:13:
         d4:d3:fc:23:55:b6:7f:73:d1:ff:41:57:e2:6a:33:60:a7:58:
         7f:c5:00:52:e6:c9:ac:c6:49:1f:bd:28:21:43:a5:1a:f7:ea:
         ba:d9:77:2b:13:ca:f8:2c:b5:db:d3:dd:41:3e:ad:b0:f2:80:
         06:d5:16:59:e4:99:c8:e0:98:da:11:e1:ad:f3:3f:cc:ee:00:
         ab:be:03:30:8e:2a:00:c8:2a:f5:bd:16:f7:7c:8c:42:43:7d:
         b3:e5:02:5b:b7:b6:e4:9d:eb:96:ed:04:51:82:17:aa:cd:c5:
         30:bb:f0:8d:2a:f0:bf:a9:a7:d5:5a:5a:4b:10:e6:14:cc:ab:
         20:c1:b9:a4:f2:b7:fb:9c:a1:1a:37:7d:3a:a7:ed:39:9c:84:
         ed:f1:44:44:e0:a3:3d:66:f4:27:c7:44:22:08:5c:58:a0:24:
         f5:bc:a3:37:8e:fe:ff:12:cd:3d:80:1f:0e:e5:00:14:6f:f2:
         d4:b1:0c:d0:fa:53:2b:83:90:47:c1:54:8e:39:65:47:6d:e0:
         b6:71:8c:09:78:cf:e2:65:35:f0:f3:c5:cf:dd:df:a0:2d:79:
         cc:58:f1:29:71:db:f0:d2:41:04:d5:a7:97:c0:90:d1:09:c4:
         68:ab:7e:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:19:04 2025 by rpki-client