Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/0/3137322e39392e34382e302f32312d3231203d3e2035363530.roa
File:                     3137322e39392e34382e302f32312d3231203d3e2035363530.roa (raw, json)
Hash identifier:          qwYrneoQRqWXCEJWoI1YYs/qwRI7xZL89UCjw4zNHXE=
Subject key identifier:   42:A4:B3:44:27:3F:B3:F4:B2:C5:92:F9:6B:3D:79:E2:B6:A7:23:A7
Certificate issuer:       /CN=9cb00234359fcb78eee51e200b0e1e0a17b72696203dc83a90
Certificate serial:       58E3981257047F7EFE5A10716465DC25DE09F85E
Authority key identifier: 82:A9:16:3A:2E:99:48:4B:AC:A0:78:20:EC:4F:79:C6:86:66:49:8B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86e0b138-bef4-49fe-9dd1-fa51383dbfce/9cb00234359fcb78eee51e200b0e1e0a17b72696203dc83a90.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/0/3137322e39392e34382e302f32312d3231203d3e2035363530.roa
Signing time:             Tue 05 Mar 2024 06:04:37 +0000
ROA not before:           Tue 05 Mar 2024 05:59:37 +0000
ROA not after:            Tue 04 Mar 2025 06:04:37 +0000
asID:                     5650
IP address blocks:        172.99.48.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/0/82A9163A2E99484BACA07820EC4F79C68666498B.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/0/82A9163A2E99484BACA07820EC4F79C68666498B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86e0b138-bef4-49fe-9dd1-fa51383dbfce/9cb00234359fcb78eee51e200b0e1e0a17b72696203dc83a90.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86e0b138-bef4-49fe-9dd1-fa51383dbfce/86e0b138-bef4-49fe-9dd1-fa51383dbfce.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86e0b138-bef4-49fe-9dd1-fa51383dbfce/86e0b138-bef4-49fe-9dd1-fa51383dbfce.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86e0b138-bef4-49fe-9dd1-fa51383dbfce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 May 2024 12:38:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:e3:98:12:57:04:7f:7e:fe:5a:10:71:64:65:dc:25:de:09:f8:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9cb00234359fcb78eee51e200b0e1e0a17b72696203dc83a90
        Validity
            Not Before: Mar  5 05:59:37 2024 GMT
            Not After : Mar  4 06:04:37 2025 GMT
        Subject: CN=42A4B344273FB3F4B2C592F96B3D79E2B6A723A7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:69:c9:c0:69:bd:c2:bb:1c:65:c5:3a:08:73:
                    56:0b:3b:b3:d8:54:88:f5:7a:f9:78:78:f7:b4:5c:
                    b8:08:60:3f:fc:15:46:3b:ba:0e:26:c6:4e:b8:d1:
                    3a:81:c8:3a:ec:c6:0a:28:5f:3b:11:f8:19:a8:0c:
                    21:8a:30:cf:9f:4e:3d:9b:8c:d6:0a:3b:77:6e:63:
                    98:eb:92:85:c8:9f:ac:3e:0a:1d:d4:51:78:30:cf:
                    25:ea:18:5e:5b:a9:7d:a0:ee:ed:89:9d:89:b9:9d:
                    f6:c7:9a:75:aa:bd:c8:12:bf:33:10:40:ca:f9:e5:
                    cd:fb:b1:0b:11:8e:85:25:8b:ba:c4:b9:ee:f3:e3:
                    34:14:5b:a9:55:a9:10:2e:cf:36:ce:9a:38:d1:78:
                    50:ea:15:2c:75:30:f7:fe:d1:87:35:ee:5a:da:e2:
                    ef:a9:dd:6a:97:1f:be:5d:fa:1c:2f:5e:e6:10:c9:
                    8d:1e:f4:50:c1:5d:9f:90:9f:1d:05:f2:18:ae:7c:
                    1b:91:7f:d0:24:92:e1:d7:0b:10:b4:8b:09:9d:6f:
                    0d:13:80:b3:b3:6b:60:ef:7b:4b:91:90:51:45:b5:
                    62:df:2b:e2:5c:15:a1:c7:ba:93:59:b2:e7:8f:1c:
                    a9:56:b8:14:0e:6f:e0:5f:a9:09:ee:1f:7d:41:78:
                    b0:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:A4:B3:44:27:3F:B3:F4:B2:C5:92:F9:6B:3D:79:E2:B6:A7:23:A7
            X509v3 Authority Key Identifier:
                keyid:82:A9:16:3A:2E:99:48:4B:AC:A0:78:20:EC:4F:79:C6:86:66:49:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/0/82A9163A2E99484BACA07820EC4F79C68666498B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86e0b138-bef4-49fe-9dd1-fa51383dbfce/9cb00234359fcb78eee51e200b0e1e0a17b72696203dc83a90.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/0/3137322e39392e34382e302f32312d3231203d3e2035363530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.99.48.0/21

    Signature Algorithm: sha256WithRSAEncryption
         7a:83:9a:07:f9:d4:40:ac:e2:fa:99:26:e0:16:51:45:79:9e:
         db:a1:ad:10:f6:61:3a:1e:8c:8e:c9:8e:e1:64:69:2a:88:59:
         7e:46:91:fc:42:3d:13:5f:db:6d:51:b9:08:fb:67:c2:8c:9b:
         13:c6:30:3d:d2:83:b2:20:1a:24:fa:34:5b:b5:43:32:c7:95:
         c1:04:ab:e5:c3:81:47:3e:95:88:8d:ff:5d:04:6e:61:83:52:
         05:bb:0d:e7:a1:bb:b7:fb:e0:ff:59:b0:99:c6:66:e7:a1:2a:
         1d:70:32:8e:54:7c:77:ed:d3:bb:1f:97:cc:41:70:e4:c6:91:
         bd:6d:a3:c7:28:aa:6e:63:72:de:4a:0d:8d:be:cc:e2:d1:e9:
         56:f8:75:9a:6f:e2:31:67:46:ea:20:d6:bf:ae:a9:e6:52:ed:
         d6:e8:ba:26:67:be:55:96:d6:cb:5c:a7:89:f7:1b:b6:e5:3b:
         7d:73:f7:4e:ec:e8:68:3a:2b:a9:7b:5e:82:2c:f8:fd:66:ed:
         37:65:25:78:28:bc:29:77:8a:77:3e:0e:6f:1e:d5:2c:19:ce:
         6c:f9:0e:c9:34:b1:5e:2c:93:0d:91:85:a3:0c:dd:1e:0e:d6:
         8b:47:0e:fc:c1:f4:42:c0:a5:9d:f6:8c:34:4b:ff:40:87:dc:
         89:ac:37:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 12:37:52 2024 by rpki-client on console-fra.rpki-client.org