Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/0/3137322e3130392e3230372e302f32342d3234203d3e203237313632.roa
File:                     3137322e3130392e3230372e302f32342d3234203d3e203237313632.roa (raw, json)
Hash identifier:          CqUA8MvMsx1bc1ZCRXC+5EBrtQrTCQ6CJhvg5TUfCF8=
Subject key identifier:   01:5F:18:ED:6F:EE:96:57:2D:ED:2F:1D:76:8D:42:E0:80:57:16:36
Certificate issuer:       /CN=9cb00234359fcb78eee51e200b0e1e0a17b72696203dc83a90
Certificate serial:       1FDA26B6CE5CA2A5315A92190CF17AA74CE1EF1A
Authority key identifier: 82:A9:16:3A:2E:99:48:4B:AC:A0:78:20:EC:4F:79:C6:86:66:49:8B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86e0b138-bef4-49fe-9dd1-fa51383dbfce/9cb00234359fcb78eee51e200b0e1e0a17b72696203dc83a90.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/0/3137322e3130392e3230372e302f32342d3234203d3e203237313632.roa
Signing time:             Wed 17 Jan 2024 05:51:01 +0000
ROA not before:           Wed 17 Jan 2024 05:46:01 +0000
ROA not after:            Wed 15 Jan 2025 05:51:01 +0000
asID:                     27162
IP address blocks:        172.109.207.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/0/82A9163A2E99484BACA07820EC4F79C68666498B.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/0/82A9163A2E99484BACA07820EC4F79C68666498B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86e0b138-bef4-49fe-9dd1-fa51383dbfce/9cb00234359fcb78eee51e200b0e1e0a17b72696203dc83a90.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86e0b138-bef4-49fe-9dd1-fa51383dbfce/86e0b138-bef4-49fe-9dd1-fa51383dbfce.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86e0b138-bef4-49fe-9dd1-fa51383dbfce/86e0b138-bef4-49fe-9dd1-fa51383dbfce.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86e0b138-bef4-49fe-9dd1-fa51383dbfce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 08:43:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:da:26:b6:ce:5c:a2:a5:31:5a:92:19:0c:f1:7a:a7:4c:e1:ef:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9cb00234359fcb78eee51e200b0e1e0a17b72696203dc83a90
        Validity
            Not Before: Jan 17 05:46:01 2024 GMT
            Not After : Jan 15 05:51:01 2025 GMT
        Subject: CN=015F18ED6FEE96572DED2F1D768D42E080571636
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:ef:4e:c3:f6:ae:f4:fc:1c:0d:d7:39:58:0f:
                    27:69:b6:c9:32:b7:b8:05:06:ae:9e:5f:ab:30:44:
                    42:c9:76:80:49:e0:50:d4:a7:98:96:35:8a:22:e1:
                    87:08:53:f3:d7:63:12:eb:75:87:95:c7:dc:68:31:
                    f0:e2:95:04:e8:d1:03:18:36:e8:de:63:6c:6d:ac:
                    1c:a3:ce:dd:39:9e:61:4c:2b:25:eb:f7:78:16:d1:
                    10:33:f0:6a:14:38:36:ad:ae:14:88:7b:c6:6e:b0:
                    a4:da:64:aa:ca:9c:07:ea:56:3d:7b:cd:d9:96:45:
                    d8:fa:af:61:ac:2f:04:bb:3b:e8:74:aa:38:a4:6a:
                    36:b7:83:7f:a6:c1:70:b4:2f:33:b9:00:c6:d2:cb:
                    01:c7:47:e2:0b:7a:7c:a2:8f:31:2b:83:d8:d9:90:
                    2c:71:28:a2:7b:18:c3:3e:b1:a5:09:68:66:e5:a1:
                    b9:9e:4a:17:b0:17:f8:0d:fb:b7:0c:30:e2:8e:24:
                    f1:c0:7e:f5:58:35:ab:a9:e8:fd:f8:1c:42:6e:b0:
                    2c:c8:2c:39:ef:60:e0:84:4a:8d:6e:64:e7:f4:d6:
                    b5:6a:98:e2:c3:fa:68:dc:75:e3:2b:f0:39:cd:dc:
                    2a:ee:d5:36:f4:b1:d4:27:32:6c:c0:c0:1b:b7:6b:
                    3e:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:5F:18:ED:6F:EE:96:57:2D:ED:2F:1D:76:8D:42:E0:80:57:16:36
            X509v3 Authority Key Identifier:
                keyid:82:A9:16:3A:2E:99:48:4B:AC:A0:78:20:EC:4F:79:C6:86:66:49:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/0/82A9163A2E99484BACA07820EC4F79C68666498B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86e0b138-bef4-49fe-9dd1-fa51383dbfce/9cb00234359fcb78eee51e200b0e1e0a17b72696203dc83a90.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/0/3137322e3130392e3230372e302f32342d3234203d3e203237313632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.109.207.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3f:7d:34:0c:46:de:33:ed:6f:3f:c6:f8:f1:e9:54:78:3b:36:
         ae:1b:59:63:6d:1e:96:f0:63:0e:c7:65:54:b4:7c:b5:c3:ff:
         a2:4b:a0:fb:17:c8:8a:8c:7c:c9:f5:f6:38:3f:6f:35:98:f2:
         18:a5:0e:f2:36:d6:dc:2b:75:74:24:0e:da:b2:55:23:cd:c0:
         d3:91:1d:7d:c7:dc:a6:42:fb:55:3d:a4:ff:e0:86:be:15:8d:
         78:1b:86:6b:8a:6a:4e:f0:d6:1d:a6:74:b4:e5:c7:f9:2d:02:
         ec:b9:58:a0:37:b3:51:7a:00:30:46:8e:3f:ac:23:3d:96:6d:
         e1:06:2c:0a:99:c6:08:8c:42:db:94:fe:f4:f1:b6:89:2c:53:
         55:d3:ee:c4:19:77:37:7c:33:dd:6c:75:56:21:d4:5e:6b:51:
         19:8a:9d:78:fa:fe:66:d7:00:8c:f1:15:fa:9d:41:7a:4f:3c:
         ac:8e:c1:0d:bd:35:44:0f:a3:66:1d:cd:e8:df:ed:80:ea:1c:
         7b:64:32:83:63:94:b0:99:f1:ad:ac:63:28:25:8c:c0:bd:95:
         05:9c:ae:83:a1:0b:ff:16:bf:29:84:c8:c9:61:1d:57:79:0e:
         82:52:6e:62:db:ee:68:16:6c:48:2e:aa:37:27:e1:ed:9a:9f:
         fc:cc:eb:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 09:03:52 2024 by rpki-client on console-ams.rpki-client.org