Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/0/3137322e3130392e3235332e302f32342d3234203d3e203633323634.roa
File:                     3137322e3130392e3235332e302f32342d3234203d3e203633323634.roa (raw, json)
Hash identifier:          q2Key3zfom6AsI8AnVTnXEVGotwlGZJ7wD+WBkHHjxA=
Subject key identifier:   1B:67:AE:27:ED:D7:3C:B3:F4:4F:9E:AA:84:B9:33:37:DB:E0:AB:BD
Certificate issuer:       /CN=9cb00234359fcb78eee51e200b0e1e0a17b72696203dc83a90
Certificate serial:       2EE30A78B7556A581A6CB77DED106F5701B528FC
Authority key identifier: 82:A9:16:3A:2E:99:48:4B:AC:A0:78:20:EC:4F:79:C6:86:66:49:8B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86e0b138-bef4-49fe-9dd1-fa51383dbfce/9cb00234359fcb78eee51e200b0e1e0a17b72696203dc83a90.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/0/3137322e3130392e3235332e302f32342d3234203d3e203633323634.roa
Signing time:             Wed 27 Nov 2024 15:30:05 +0000
ROA not before:           Wed 27 Nov 2024 15:25:05 +0000
ROA not after:            Wed 26 Nov 2025 15:30:05 +0000
asID:                     63264
IP address blocks:        172.109.253.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/0/82A9163A2E99484BACA07820EC4F79C68666498B.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/0/82A9163A2E99484BACA07820EC4F79C68666498B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86e0b138-bef4-49fe-9dd1-fa51383dbfce/9cb00234359fcb78eee51e200b0e1e0a17b72696203dc83a90.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86e0b138-bef4-49fe-9dd1-fa51383dbfce/86e0b138-bef4-49fe-9dd1-fa51383dbfce.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86e0b138-bef4-49fe-9dd1-fa51383dbfce/86e0b138-bef4-49fe-9dd1-fa51383dbfce.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86e0b138-bef4-49fe-9dd1-fa51383dbfce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 21 Feb 2025 19:11:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:e3:0a:78:b7:55:6a:58:1a:6c:b7:7d:ed:10:6f:57:01:b5:28:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9cb00234359fcb78eee51e200b0e1e0a17b72696203dc83a90
        Validity
            Not Before: Nov 27 15:25:05 2024 GMT
            Not After : Nov 26 15:30:05 2025 GMT
        Subject: CN=1B67AE27EDD73CB3F44F9EAA84B93337DBE0ABBD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:59:82:7a:b9:69:84:d7:89:b2:ad:8e:f5:59:
                    18:97:bb:b6:27:5f:7f:3a:5c:ec:1c:22:03:15:1a:
                    b9:00:63:c0:28:37:98:15:5d:12:a7:14:31:4d:49:
                    92:14:3a:46:55:89:20:52:ed:15:b5:7a:75:2e:b4:
                    d4:76:5c:0d:1b:9c:61:06:e5:fa:0b:d8:9c:e6:b8:
                    c8:e9:f9:b6:5f:a4:a2:03:dc:e2:0b:c8:13:78:76:
                    0c:9a:7b:8c:96:32:81:03:b3:af:d1:69:e3:38:9a:
                    46:c9:77:49:3f:ce:30:88:75:f5:0a:bb:2d:d1:92:
                    c4:8e:d2:ab:93:92:d4:20:86:b5:66:d7:72:18:cf:
                    7b:4c:a1:a8:c1:21:76:e7:5d:2c:28:45:f4:f7:9f:
                    62:19:c8:f9:53:95:f7:34:f9:a8:16:37:19:3a:ff:
                    5f:33:26:ae:13:7b:c5:63:15:63:5c:c4:a2:bd:c2:
                    4f:5a:8c:67:53:9e:41:25:6a:91:6e:44:ff:68:10:
                    31:f3:77:1e:53:0a:09:9c:7e:de:46:ee:16:f2:49:
                    3c:61:67:db:0a:39:61:f9:dd:6a:be:ea:db:45:84:
                    b8:25:49:58:54:48:c3:71:5f:e0:6f:88:90:1d:d8:
                    5d:af:66:2f:67:2c:53:28:02:f2:4b:6b:f1:2e:1b:
                    ed:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:67:AE:27:ED:D7:3C:B3:F4:4F:9E:AA:84:B9:33:37:DB:E0:AB:BD
            X509v3 Authority Key Identifier:
                keyid:82:A9:16:3A:2E:99:48:4B:AC:A0:78:20:EC:4F:79:C6:86:66:49:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/0/82A9163A2E99484BACA07820EC4F79C68666498B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86e0b138-bef4-49fe-9dd1-fa51383dbfce/9cb00234359fcb78eee51e200b0e1e0a17b72696203dc83a90.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/0/3137322e3130392e3235332e302f32342d3234203d3e203633323634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.109.253.0/24

    Signature Algorithm: sha256WithRSAEncryption
         43:3f:a0:02:92:6c:68:03:9d:ac:44:b4:42:e9:f9:6d:38:e2:
         f1:1c:af:f2:6f:20:13:32:97:0c:c0:b0:9a:97:34:fe:bd:88:
         81:a8:76:89:83:a9:ff:f0:e2:26:48:0e:7b:93:ef:52:f1:57:
         94:37:e2:54:cc:8b:a7:93:23:0f:fd:8e:f9:04:93:46:9f:6a:
         34:c6:ae:ed:b6:b9:23:2c:8e:6d:76:83:e5:97:a9:dd:4d:14:
         f0:d4:15:2a:24:08:4a:ce:12:1e:26:ac:57:3c:59:a0:96:c8:
         a6:e1:37:63:a5:79:08:e8:8d:ab:e6:86:cf:29:6a:38:8f:9a:
         92:e8:8e:3f:34:e2:7c:81:5b:47:87:67:7a:01:a9:08:96:6d:
         4e:54:3d:91:80:23:84:ea:c1:b0:7e:7f:7e:7e:fb:ec:3b:3a:
         8a:ab:81:94:dd:79:be:d0:7c:d8:6a:13:e8:6e:43:3f:9a:e7:
         63:99:4c:c2:8d:bc:d1:20:e6:fe:c7:2b:d9:5b:cf:38:c7:56:
         c0:31:13:eb:ea:09:4a:6b:8d:09:9b:e2:ae:5b:ff:e3:aa:3a:
         0a:c7:86:5f:dd:c9:de:ab:22:8e:02:04:b0:bb:15:c4:30:03:
         ac:91:67:61:54:7c:dd:72:af:43:b0:91:8a:78:8a:d2:c2:29:
         84:e2:74:c7
-----BEGIN CERTIFICATE-----
MIIFtDCCBJygAwIBAgIULuMKeLdValgabLd97RBvVwG1KPwwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyOWNiMDAyMzQzNTlmY2I3OGVlZTUxZTIwMGIwZTFlMGEx
N2I3MjY5NjIwM2RjODNhOTAwHhcNMjQxMTI3MTUyNTA1WhcNMjUxMTI2MTUzMDA1
WjAzMTEwLwYDVQQDEygxQjY3QUUyN0VERDczQ0IzRjQ0RjlFQUE4NEI5MzMzN0RC
RTBBQkJEMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtlmCerlphNeJ
sq2O9VkYl7u2J19/OlzsHCIDFRq5AGPAKDeYFV0SpxQxTUmSFDpGVYkgUu0VtXp1
LrTUdlwNG5xhBuX6C9ic5rjI6fm2X6SiA9ziC8gTeHYMmnuMljKBA7Ov0WnjOJpG
yXdJP84wiHX1Crst0ZLEjtKrk5LUIIa1ZtdyGM97TKGowSF2510sKEX0959iGcj5
U5X3NPmoFjcZOv9fMyauE3vFYxVjXMSivcJPWoxnU55BJWqRbkT/aBAx83ceUwoJ
nH7eRu4W8kk8YWfbCjlh+d1qvurbRYS4JUlYVEjDcV/gb4iQHdhdr2YvZyxTKALy
S2vxLhvt8QIDAQABo4ICtDCCArAwHQYDVR0OBBYEFBtnrift1zyz9E+eqoS5Mzfb
4Ku9MB8GA1UdIwQYMBaAFIKpFjoumUhLrKB4IOxPecaGZkmLMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODcyODk1NzgwMTg3MzJhOTBhMmYwOTdmLzAv
ODJBOTE2M0EyRTk5NDg0QkFDQTA3ODIwRUM0Rjc5QzY4NjY2NDk4Qi5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0
OTMzYWU1Lzg2ZTBiMTM4LWJlZjQtNDlmZS05ZGQxLWZhNTEzODNkYmZjZS85Y2Iw
MDIzNDM1OWZjYjc4ZWVlNTFlMjAwYjBlMWUwYTE3YjcyNjk2MjAzZGM4M2E5MC5j
ZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZTg3Mjg5NTc4MDE4NzMy
YTkwYTJmMDk3Zi8wLzMxMzczMjJlMzEzMDM5MmUzMjM1MzMyZTMwMmYzMjM0MmQz
MjM0MjAzZDNlMjAzNjMzMzIzNjM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArG39MA0GCSqGSIb3DQEB
CwUAA4IBAQBDP6ACkmxoA52sRLRC6fltOOLxHK/ybyATMpcMwLCalzT+vYiBqHaJ
g6n/8OImSA57k+9S8VeUN+JUzIunkyMP/Y75BJNGn2o0xq7ttrkjLI5tdoPll6nd
TRTw1BUqJAhKzhIeJqxXPFmglsim4TdjpXkI6I2r5obPKWo4j5qS6I4/NOJ8gVtH
h2d6AakIlm1OVD2RgCOE6sGwfn9+fvvsOzqKq4GU3Xm+0HzYahPobkM/mudjmUzC
jbzRIOb+xyvZW884x1bAMRPr6glKa40Jm+KuW//jqjoKx4Zf3cneqyKOAgSwuxXE
MAOskWdhVHzdcq9DsJGKeIrSwimE4nTH
-----END CERTIFICATE-----
Generated at Fri Feb 21 11:07:52 2025 by rpki-client