Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/0/3137322e3130392e3230372e302f32342d3234203d3e203237313632.roa
File:                     3137322e3130392e3230372e302f32342d3234203d3e203237313632.roa (raw, json)
Hash identifier:          M4oV7WlGDzfnEPcXQaFkTxL7anK8B24mJ1C8OvJF/0w=
Subject key identifier:   22:80:B5:92:C2:69:76:9C:C1:6F:E6:0A:3F:E1:7D:96:6A:B6:42:08
Certificate issuer:       /CN=9cb00234359fcb78eee51e200b0e1e0a17b72696203dc83a90
Certificate serial:       07F14D377C7CBC797D98CAA6EA72E4A174838107
Authority key identifier: 82:A9:16:3A:2E:99:48:4B:AC:A0:78:20:EC:4F:79:C6:86:66:49:8B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86e0b138-bef4-49fe-9dd1-fa51383dbfce/9cb00234359fcb78eee51e200b0e1e0a17b72696203dc83a90.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/0/3137322e3130392e3230372e302f32342d3234203d3e203237313632.roa
Signing time:             Wed 18 Dec 2024 05:55:08 +0000
ROA not before:           Wed 18 Dec 2024 05:50:08 +0000
ROA not after:            Wed 17 Dec 2025 05:55:08 +0000
asID:                     27162
IP address blocks:        172.109.207.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/0/82A9163A2E99484BACA07820EC4F79C68666498B.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/0/82A9163A2E99484BACA07820EC4F79C68666498B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86e0b138-bef4-49fe-9dd1-fa51383dbfce/9cb00234359fcb78eee51e200b0e1e0a17b72696203dc83a90.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86e0b138-bef4-49fe-9dd1-fa51383dbfce/86e0b138-bef4-49fe-9dd1-fa51383dbfce.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86e0b138-bef4-49fe-9dd1-fa51383dbfce/86e0b138-bef4-49fe-9dd1-fa51383dbfce.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86e0b138-bef4-49fe-9dd1-fa51383dbfce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 07:38:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:f1:4d:37:7c:7c:bc:79:7d:98:ca:a6:ea:72:e4:a1:74:83:81:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9cb00234359fcb78eee51e200b0e1e0a17b72696203dc83a90
        Validity
            Not Before: Dec 18 05:50:08 2024 GMT
            Not After : Dec 17 05:55:08 2025 GMT
        Subject: CN=2280B592C269769CC16FE60A3FE17D966AB64208
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:75:54:54:73:c2:6e:6b:92:48:f5:43:35:2e:
                    64:cb:d4:31:fa:e8:ab:d1:b3:e9:21:9b:cf:d1:f9:
                    d7:3e:37:24:26:cf:1e:19:6c:c7:be:e5:51:36:c1:
                    c5:cb:23:4d:9d:aa:59:d3:13:2d:94:8b:2b:77:11:
                    ae:b6:60:ba:ed:f7:da:75:e0:10:e5:0e:16:79:ed:
                    05:d2:d6:0e:6a:63:4b:d4:e0:87:b5:77:33:d1:c6:
                    54:9d:a7:56:cf:fd:6b:bf:fb:d5:e8:58:5e:af:b4:
                    f1:71:f0:2c:04:d2:f8:2f:00:63:7b:85:c8:f7:e3:
                    02:0b:3a:5d:fb:20:aa:cf:21:e0:be:59:34:36:a8:
                    0c:79:09:1f:3f:7e:70:2e:68:a1:dd:82:f2:2e:68:
                    e8:16:d6:56:b3:1d:12:3f:a1:3c:f4:ab:a1:f3:b2:
                    56:90:a0:cf:49:70:30:c1:85:c4:0b:7b:2f:00:b7:
                    63:ca:23:67:f4:f6:5d:86:00:5a:30:13:9e:f1:0c:
                    5f:d2:c0:b4:6c:a9:ad:f5:b0:48:f5:61:9f:b0:c2:
                    e7:d3:22:02:f1:04:75:b6:10:7f:3b:80:d7:c3:68:
                    99:fd:bf:28:65:63:93:70:72:98:b5:87:c2:18:b4:
                    a1:d2:f0:24:93:c3:be:f8:a9:0e:99:17:9d:27:6f:
                    5a:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:80:B5:92:C2:69:76:9C:C1:6F:E6:0A:3F:E1:7D:96:6A:B6:42:08
            X509v3 Authority Key Identifier:
                keyid:82:A9:16:3A:2E:99:48:4B:AC:A0:78:20:EC:4F:79:C6:86:66:49:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/0/82A9163A2E99484BACA07820EC4F79C68666498B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86e0b138-bef4-49fe-9dd1-fa51383dbfce/9cb00234359fcb78eee51e200b0e1e0a17b72696203dc83a90.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/0/3137322e3130392e3230372e302f32342d3234203d3e203237313632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.109.207.0/24

    Signature Algorithm: sha256WithRSAEncryption
         96:fb:81:20:46:20:aa:6a:67:a3:09:e2:a4:0c:49:a4:38:2d:
         20:32:8b:ff:0f:09:65:a1:4b:9c:fa:fb:3e:d0:15:b7:a6:f1:
         4a:a9:c7:44:47:ff:54:21:4e:f7:6b:dc:ac:7d:c1:71:6b:6c:
         21:c7:da:55:ba:39:8b:20:b5:f9:96:5a:ff:02:d0:09:c5:0f:
         73:96:bd:cd:6e:14:bd:9b:a3:25:35:e3:23:73:84:7e:b4:3f:
         67:ee:c3:9e:58:53:2c:f4:8c:86:0d:e1:37:5f:fa:fe:43:08:
         9e:a5:a9:23:83:15:55:ed:ef:a2:ae:21:5a:6a:e6:e7:98:fa:
         b7:95:fa:10:85:4c:29:b2:15:3d:a8:a2:ff:95:48:02:74:db:
         73:99:58:23:25:24:dc:7b:86:c0:4d:24:12:ef:2f:2e:49:9f:
         b9:b8:6b:cd:b2:3e:3c:6f:88:97:a7:17:60:bc:01:1f:46:75:
         27:77:9d:6e:84:62:a4:6c:a2:39:55:7a:b9:87:f2:49:59:82:
         13:3f:ed:76:e8:24:84:48:06:00:94:bc:b4:b7:31:9c:3f:2e:
         68:e4:ed:13:28:38:c7:73:4d:84:96:88:32:15:82:ed:ec:e1:
         0e:e3:fd:50:82:b9:83:85:29:37:44:80:da:6c:b1:88:6d:ac:
         e6:5f:a5:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 20:49:28 2025 by rpki-client