Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/0/3137322e3130392e39362e302f32312d3231203d3e2035363530.roa
File:                     3137322e3130392e39362e302f32312d3231203d3e2035363530.roa (raw, json)
Hash identifier:          /yUv90liD2RuajaXCM08wvdEWh/NCpBn7nsUfFSkpdQ=
Subject key identifier:   50:6F:10:26:F0:EF:60:C5:01:C4:F5:47:E6:E0:82:B1:26:12:BE:A5
Certificate issuer:       /CN=9cb00234359fcb78eee51e200b0e1e0a17b72696203dc83a90
Certificate serial:       45CC488E454D4292C5B05522BD3BFA573D9AF886
Authority key identifier: 82:A9:16:3A:2E:99:48:4B:AC:A0:78:20:EC:4F:79:C6:86:66:49:8B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86e0b138-bef4-49fe-9dd1-fa51383dbfce/9cb00234359fcb78eee51e200b0e1e0a17b72696203dc83a90.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/0/3137322e3130392e39362e302f32312d3231203d3e2035363530.roa
Signing time:             Tue 04 Feb 2025 06:08:46 +0000
ROA not before:           Tue 04 Feb 2025 06:03:46 +0000
ROA not after:            Tue 03 Feb 2026 06:08:46 +0000
asID:                     5650
IP address blocks:        172.109.96.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/0/82A9163A2E99484BACA07820EC4F79C68666498B.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/0/82A9163A2E99484BACA07820EC4F79C68666498B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86e0b138-bef4-49fe-9dd1-fa51383dbfce/9cb00234359fcb78eee51e200b0e1e0a17b72696203dc83a90.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86e0b138-bef4-49fe-9dd1-fa51383dbfce/86e0b138-bef4-49fe-9dd1-fa51383dbfce.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86e0b138-bef4-49fe-9dd1-fa51383dbfce/86e0b138-bef4-49fe-9dd1-fa51383dbfce.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86e0b138-bef4-49fe-9dd1-fa51383dbfce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Apr 2025 22:41:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:cc:48:8e:45:4d:42:92:c5:b0:55:22:bd:3b:fa:57:3d:9a:f8:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9cb00234359fcb78eee51e200b0e1e0a17b72696203dc83a90
        Validity
            Not Before: Feb  4 06:03:46 2025 GMT
            Not After : Feb  3 06:08:46 2026 GMT
        Subject: CN=506F1026F0EF60C501C4F547E6E082B12612BEA5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:1e:6f:50:3e:da:8b:ae:56:b7:db:c4:6e:22:
                    4f:94:2a:d1:a1:6d:62:1b:9a:b8:d7:83:a0:32:81:
                    26:ab:f9:6e:25:7c:96:17:80:04:3b:36:8c:ab:98:
                    0a:ab:14:de:de:3d:8c:63:e2:48:6c:24:bf:20:28:
                    0c:cb:2d:2f:58:28:a2:89:a3:79:e8:52:bc:4d:e3:
                    03:cb:aa:0b:6f:88:02:9f:68:63:3f:66:c0:85:5e:
                    50:cc:19:dd:9e:8d:51:7e:23:9b:4c:e0:f9:d0:d3:
                    92:5a:ce:b5:4d:90:72:b1:8f:d8:ae:5d:bd:7d:a9:
                    bb:c3:5d:66:fb:67:37:99:8b:3e:e2:5f:9f:d6:c0:
                    57:4a:aa:50:31:53:8d:14:f9:87:98:a9:f0:af:48:
                    e6:ab:5f:77:04:d9:12:26:c5:15:9c:1a:c1:ff:7a:
                    6c:e8:82:24:b2:26:82:48:d8:f3:e4:89:c5:6d:3c:
                    10:b4:f9:4d:57:91:f3:06:66:5d:25:93:1b:20:30:
                    f8:66:1a:3c:ec:d3:20:85:8b:37:61:f8:1d:87:d9:
                    e5:c5:64:a7:59:86:05:61:f0:54:4d:14:30:a3:df:
                    ab:c2:bb:c2:65:6a:b8:d4:4f:9e:c9:cd:53:39:9a:
                    4d:a8:b2:e5:d0:a3:bc:bd:b7:71:cf:96:16:9e:7a:
                    eb:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:6F:10:26:F0:EF:60:C5:01:C4:F5:47:E6:E0:82:B1:26:12:BE:A5
            X509v3 Authority Key Identifier:
                keyid:82:A9:16:3A:2E:99:48:4B:AC:A0:78:20:EC:4F:79:C6:86:66:49:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/0/82A9163A2E99484BACA07820EC4F79C68666498B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86e0b138-bef4-49fe-9dd1-fa51383dbfce/9cb00234359fcb78eee51e200b0e1e0a17b72696203dc83a90.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/0/3137322e3130392e39362e302f32312d3231203d3e2035363530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.109.96.0/21

    Signature Algorithm: sha256WithRSAEncryption
         cb:3b:bc:1a:ed:16:a9:20:6f:a7:f3:cb:d6:7e:a0:cd:c7:27:
         a9:b9:57:27:c8:e8:57:c8:c9:d9:d4:a2:fb:40:dc:54:7e:26:
         3f:bd:71:17:53:41:f6:14:ca:fc:ba:6a:0c:ba:59:6f:b9:0b:
         7c:3a:8a:88:93:9c:14:f2:bd:25:42:fc:46:1c:e1:a2:22:d4:
         bb:3c:ea:b3:06:77:e1:c6:e3:4d:87:1d:e9:8e:4f:23:60:44:
         a3:59:f9:0e:6d:56:53:d9:14:af:b2:b1:70:f1:06:38:89:4d:
         7f:df:77:7d:95:06:f3:7b:95:5e:c6:2a:fe:14:24:1e:22:f8:
         b0:c7:8a:88:f9:43:ad:2b:fe:f0:10:ec:69:39:52:d2:32:13:
         93:09:29:53:1d:77:4e:5b:94:19:63:2f:a4:c9:5b:97:5a:4a:
         8f:38:4d:8b:3b:f9:b3:ed:7b:85:62:26:aa:67:cc:84:ef:5f:
         a9:49:aa:b5:01:ce:33:0a:8d:e3:1a:a4:dc:43:06:3c:a9:4b:
         85:a0:bb:ca:6a:d8:bf:31:0a:b8:bb:15:b7:03:81:9e:1d:80:
         6f:f8:d9:83:87:e6:38:71:c0:d2:00:e9:cc:35:61:d9:7f:b8:
         f4:34:16:26:78:81:99:b6:d0:9f:86:b5:84:0f:4b:a3:59:94:
         ed:73:6b:9f
-----BEGIN CERTIFICATE-----
MIIFsDCCBJigAwIBAgIURcxIjkVNQpLFsFUivTv6Vz2a+IYwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyOWNiMDAyMzQzNTlmY2I3OGVlZTUxZTIwMGIwZTFlMGEx
N2I3MjY5NjIwM2RjODNhOTAwHhcNMjUwMjA0MDYwMzQ2WhcNMjYwMjAzMDYwODQ2
WjAzMTEwLwYDVQQDEyg1MDZGMTAyNkYwRUY2MEM1MDFDNEY1NDdFNkUwODJCMTI2
MTJCRUE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArB5vUD7ai65W
t9vEbiJPlCrRoW1iG5q414OgMoEmq/luJXyWF4AEOzaMq5gKqxTe3j2MY+JIbCS/
ICgMyy0vWCiiiaN56FK8TeMDy6oLb4gCn2hjP2bAhV5QzBndno1RfiObTOD50NOS
Ws61TZBysY/Yrl29fam7w11m+2c3mYs+4l+f1sBXSqpQMVONFPmHmKnwr0jmq193
BNkSJsUVnBrB/3ps6IIksiaCSNjz5InFbTwQtPlNV5HzBmZdJZMbIDD4Zho87NMg
hYs3Yfgdh9nlxWSnWYYFYfBUTRQwo9+rwrvCZWq41E+eyc1TOZpNqLLl0KO8vbdx
z5YWnnrrwQIDAQABo4ICsDCCAqwwHQYDVR0OBBYEFFBvECbw72DFAcT1R+bggrEm
Er6lMB8GA1UdIwQYMBaAFIKpFjoumUhLrKB4IOxPecaGZkmLMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODcyODk1NzgwMTg3MzJhOTBhMmYwOTdmLzAv
ODJBOTE2M0EyRTk5NDg0QkFDQTA3ODIwRUM0Rjc5QzY4NjY2NDk4Qi5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0
OTMzYWU1Lzg2ZTBiMTM4LWJlZjQtNDlmZS05ZGQxLWZhNTEzODNkYmZjZS85Y2Iw
MDIzNDM1OWZjYjc4ZWVlNTFlMjAwYjBlMWUwYTE3YjcyNjk2MjAzZGM4M2E5MC5j
ZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZTg3Mjg5NTc4MDE4NzMy
YTkwYTJmMDk3Zi8wLzMxMzczMjJlMzEzMDM5MmUzOTM2MmUzMDJmMzIzMTJkMzIz
MTIwM2QzZTIwMzUzNjM1MzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAOsbWAwDQYJKoZIhvcNAQELBQAD
ggEBAMs7vBrtFqkgb6fzy9Z+oM3HJ6m5VyfI6FfIydnUovtA3FR+Jj+9cRdTQfYU
yvy6agy6WW+5C3w6ioiTnBTyvSVC/EYc4aIi1Ls86rMGd+HG402HHemOTyNgRKNZ
+Q5tVlPZFK+ysXDxBjiJTX/fd32VBvN7lV7GKv4UJB4i+LDHioj5Q60r/vAQ7Gk5
UtIyE5MJKVMdd05blBljL6TJW5daSo84TYs7+bPte4ViJqpnzITvX6lJqrUBzjMK
jeMapNxDBjypS4Wgu8pq2L8xCri7FbcDgZ4dgG/42YOH5jhxwNIA6cw1Ydl/uPQ0
FiZ4gZm20J+GtYQPS6NZlO1za58=
-----END CERTIFICATE-----
Generated at Sat Apr 5 15:56:02 2025 by rpki-client