Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/0/3137322e39392e33322e302f31392d3139203d3e2035363530.roa
File:                     3137322e39392e33322e302f31392d3139203d3e2035363530.roa (raw, json)
Hash identifier:          R3brfbqKVmXJYyTeADz0UtuWHCOz3A3xHlrKOMK5XVE=
Subject key identifier:   A2:05:B5:EC:19:26:E9:CD:B1:33:34:D6:9A:83:67:C3:84:A3:76:16
Certificate issuer:       /CN=9cb00234359fcb78eee51e200b0e1e0a17b72696203dc83a90
Certificate serial:       7F061393D0F4BD22CF0CB63738E16F992C8ECE0A
Authority key identifier: 82:A9:16:3A:2E:99:48:4B:AC:A0:78:20:EC:4F:79:C6:86:66:49:8B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86e0b138-bef4-49fe-9dd1-fa51383dbfce/9cb00234359fcb78eee51e200b0e1e0a17b72696203dc83a90.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/0/3137322e39392e33322e302f31392d3139203d3e2035363530.roa
Signing time:             Wed 20 Mar 2024 04:12:57 +0000
ROA not before:           Wed 20 Mar 2024 04:07:57 +0000
ROA not after:            Wed 19 Mar 2025 04:12:57 +0000
asID:                     5650
IP address blocks:        172.99.32.0/19 maxlen: 19

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/0/82A9163A2E99484BACA07820EC4F79C68666498B.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/0/82A9163A2E99484BACA07820EC4F79C68666498B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86e0b138-bef4-49fe-9dd1-fa51383dbfce/9cb00234359fcb78eee51e200b0e1e0a17b72696203dc83a90.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86e0b138-bef4-49fe-9dd1-fa51383dbfce/86e0b138-bef4-49fe-9dd1-fa51383dbfce.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86e0b138-bef4-49fe-9dd1-fa51383dbfce/86e0b138-bef4-49fe-9dd1-fa51383dbfce.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86e0b138-bef4-49fe-9dd1-fa51383dbfce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 27 Jun 2024 00:54:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:06:13:93:d0:f4:bd:22:cf:0c:b6:37:38:e1:6f:99:2c:8e:ce:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9cb00234359fcb78eee51e200b0e1e0a17b72696203dc83a90
        Validity
            Not Before: Mar 20 04:07:57 2024 GMT
            Not After : Mar 19 04:12:57 2025 GMT
        Subject: CN=A205B5EC1926E9CDB13334D69A8367C384A37616
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:8c:1e:c5:dc:67:80:4b:49:16:1f:1d:20:f5:
                    0e:01:76:c6:c4:e7:10:04:a4:5c:d0:6e:49:d2:ce:
                    a9:84:40:96:ee:90:8c:ad:a9:3e:61:91:24:e8:60:
                    84:4b:3c:b9:9c:8e:85:a4:3f:a7:0c:07:91:48:e1:
                    4e:52:6a:a3:2c:65:1b:e0:7e:9e:4c:8b:f5:db:01:
                    25:b3:f6:3d:5f:6a:94:67:89:d9:72:30:a1:df:8f:
                    ca:a7:3d:85:d1:e0:d0:3d:29:c3:47:40:96:19:fd:
                    27:34:e0:00:ff:87:78:28:77:d6:f0:5a:3e:32:2b:
                    40:3b:16:48:3b:54:a1:0a:bb:1f:ff:58:65:0b:46:
                    50:82:e3:bb:ca:ef:63:5a:84:aa:62:43:58:38:4e:
                    d7:a0:f3:05:15:65:c2:1c:ef:26:ef:84:5e:6f:ba:
                    37:17:77:2c:2b:ff:bf:19:99:9e:bc:af:d4:ca:a5:
                    6b:79:ea:f0:7e:64:65:a9:e2:60:fe:bf:10:2a:a1:
                    1d:21:0c:11:9a:9a:b5:e6:a1:83:4c:99:e6:63:9f:
                    03:ac:8f:fc:b9:fe:4c:22:cd:3b:e0:1d:be:89:80:
                    49:c9:78:ae:07:da:8d:ce:59:bf:e9:e9:5d:ef:c3:
                    3b:0b:72:39:81:7d:d4:ba:8a:b9:9a:2c:e3:e5:e5:
                    94:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:05:B5:EC:19:26:E9:CD:B1:33:34:D6:9A:83:67:C3:84:A3:76:16
            X509v3 Authority Key Identifier:
                keyid:82:A9:16:3A:2E:99:48:4B:AC:A0:78:20:EC:4F:79:C6:86:66:49:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/0/82A9163A2E99484BACA07820EC4F79C68666498B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86e0b138-bef4-49fe-9dd1-fa51383dbfce/9cb00234359fcb78eee51e200b0e1e0a17b72696203dc83a90.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/0/3137322e39392e33322e302f31392d3139203d3e2035363530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.99.32.0/19

    Signature Algorithm: sha256WithRSAEncryption
         6e:73:8a:18:29:f8:bd:40:f7:17:05:c5:50:8f:45:75:df:6d:
         f8:c4:fc:2b:6d:30:6a:1f:b3:c1:76:47:68:d3:4d:8b:7f:14:
         1f:3c:a3:c4:4d:b2:22:09:c2:36:50:85:54:56:d6:96:0a:77:
         d8:74:a2:4d:7a:6b:88:07:63:2b:fd:f8:ae:23:91:81:bc:bd:
         b0:e2:e3:9d:b3:72:ae:3e:eb:fb:36:d8:8b:59:c2:05:46:1a:
         49:ad:9d:34:d3:35:ec:95:df:08:22:29:32:cf:b9:48:69:75:
         aa:b6:09:46:f8:cc:ac:c6:1a:d2:ac:fd:f7:21:93:9e:a5:8a:
         ea:af:da:19:52:2b:ec:ac:ae:92:8a:1b:17:5b:df:0e:56:91:
         6d:34:06:6e:83:4c:ad:db:74:0c:be:7f:37:48:64:4c:51:f3:
         b9:47:de:92:36:7a:64:28:8a:fe:a5:34:78:7d:33:56:34:14:
         e8:32:73:14:2a:d6:a7:48:c3:61:bc:d7:5a:94:d7:24:14:cf:
         39:f7:e2:9a:33:97:d3:ac:58:66:ae:f6:9f:e2:9e:b5:57:12:
         9f:f2:de:f1:04:5e:46:ba:7f:26:db:25:25:d3:ce:6a:43:71:
         2c:39:bb:c4:91:3c:7f:85:80:1f:3f:54:ba:24:59:c6:76:ac:
         6e:37:ce:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 02:09:02 2024 by rpki-client on console-ams.rpki-client.org