Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/1/3130372e3139312e3132382e302f32332d3233203d3e203236313237.roa
File:                     3130372e3139312e3132382e302f32332d3233203d3e203236313237.roa (raw, json)
Hash identifier:          GMQ56Og20xEjHEoiWwPqdfn6udDIfnL1COvTWiB8/6s=
Subject key identifier:   A7:52:01:5E:9E:39:BA:5F:08:77:64:2B:2D:6C:44:46:78:89:81:FD
Certificate issuer:       /CN=1bf739f63c6943535cfe4ed2813f838ed560b7076f3a452eb8
Certificate serial:       3572572A6AA5F1B0D687A2FBAAFC39F0968607A7
Authority key identifier: E2:0C:23:2F:52:49:CB:6D:81:8D:89:F7:B2:BD:9A:E3:A3:69:75:7C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/87fd9355-ffdc-4986-9329-4d1909e01a2f/1bf739f63c6943535cfe4ed2813f838ed560b7076f3a452eb8.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/1/3130372e3139312e3132382e302f32332d3233203d3e203236313237.roa
Signing time:             Wed 12 Jun 2024 13:43:55 +0000
ROA not before:           Wed 12 Jun 2024 13:38:55 +0000
ROA not after:            Wed 11 Jun 2025 13:43:55 +0000
asID:                     26127
IP address blocks:        107.191.128.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/1/E20C232F5249CB6D818D89F7B2BD9AE3A369757C.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/1/E20C232F5249CB6D818D89F7B2BD9AE3A369757C.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/87fd9355-ffdc-4986-9329-4d1909e01a2f/1bf739f63c6943535cfe4ed2813f838ed560b7076f3a452eb8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/87fd9355-ffdc-4986-9329-4d1909e01a2f/87fd9355-ffdc-4986-9329-4d1909e01a2f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/87fd9355-ffdc-4986-9329-4d1909e01a2f/87fd9355-ffdc-4986-9329-4d1909e01a2f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/87fd9355-ffdc-4986-9329-4d1909e01a2f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:22:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:72:57:2a:6a:a5:f1:b0:d6:87:a2:fb:aa:fc:39:f0:96:86:07:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1bf739f63c6943535cfe4ed2813f838ed560b7076f3a452eb8
        Validity
            Not Before: Jun 12 13:38:55 2024 GMT
            Not After : Jun 11 13:43:55 2025 GMT
        Subject: CN=A752015E9E39BA5F0877642B2D6C4446788981FD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:f1:eb:70:5f:56:c6:b2:0d:5c:08:70:4b:cd:
                    c3:cb:91:f6:00:32:45:47:7a:61:0e:90:60:8f:bf:
                    20:3e:68:36:0b:f3:d1:e3:df:63:61:1e:5d:52:14:
                    97:d4:fd:ab:85:75:56:3a:d2:4f:06:d1:64:5d:3d:
                    5a:17:3a:2f:4a:14:b9:90:98:12:94:76:92:d4:14:
                    1a:94:2e:cd:c0:1d:43:48:75:17:12:72:99:f7:26:
                    a1:42:bb:d6:fc:39:71:99:60:27:60:5c:30:bc:0d:
                    fd:f2:c1:76:8d:b2:4f:d5:e1:75:8b:b4:04:07:f7:
                    80:ee:61:3f:62:1c:b9:96:96:c2:68:e5:3a:9d:59:
                    5e:db:10:a6:1d:1e:5c:48:59:5e:90:7d:31:70:4d:
                    9f:74:b2:b3:01:14:db:89:48:6c:65:8c:f1:ae:c7:
                    89:44:45:e4:7c:35:d1:91:bb:bf:a2:3e:c6:7f:9c:
                    5a:98:83:48:23:3c:ec:3e:1a:e6:24:8e:76:70:b1:
                    9d:12:e0:8b:f4:9f:61:4a:9f:09:ba:30:79:bb:cc:
                    f6:5e:f7:28:e0:08:16:9c:81:4c:56:08:68:5c:65:
                    e4:df:04:50:f9:42:07:62:2f:11:06:10:56:85:d9:
                    93:ce:a4:14:85:26:62:58:cc:b8:7e:7e:4c:93:c7:
                    a7:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:52:01:5E:9E:39:BA:5F:08:77:64:2B:2D:6C:44:46:78:89:81:FD
            X509v3 Authority Key Identifier:
                keyid:E2:0C:23:2F:52:49:CB:6D:81:8D:89:F7:B2:BD:9A:E3:A3:69:75:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/1/E20C232F5249CB6D818D89F7B2BD9AE3A369757C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/87fd9355-ffdc-4986-9329-4d1909e01a2f/1bf739f63c6943535cfe4ed2813f838ed560b7076f3a452eb8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/1/3130372e3139312e3132382e302f32332d3233203d3e203236313237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.191.128.0/23

    Signature Algorithm: sha256WithRSAEncryption
         64:65:7b:66:54:71:b6:5d:9f:0b:1c:6d:72:6c:37:9e:b9:c5:
         a6:53:7e:1e:c5:e1:84:7b:c6:4d:77:31:10:b6:88:31:b3:9f:
         2c:18:c6:e6:3a:c8:c4:91:4d:da:c0:b0:95:f5:3c:2b:86:6d:
         7b:dc:f0:12:e0:73:10:71:8b:0c:35:7d:c3:7c:55:0c:8a:cb:
         2a:a3:52:05:a7:e4:c7:e1:79:c7:12:7e:53:12:f1:5b:4d:c0:
         89:65:81:93:3f:2f:bb:0a:96:e8:88:78:f4:73:3d:f5:90:ed:
         45:08:2a:30:d3:a6:77:0a:ad:d3:2e:7f:c8:12:fc:eb:57:9b:
         e1:7e:3f:59:43:ae:c3:7d:15:93:09:95:90:62:68:1e:5c:4a:
         a3:a5:33:f5:31:9c:f6:69:99:16:8c:fb:f8:f5:dc:6c:11:13:
         1d:07:d6:b6:dc:44:f8:15:e2:2a:c0:49:9c:4a:2c:3b:1a:d9:
         b6:d7:a0:e8:17:7f:84:0f:36:47:5e:7e:77:9a:4d:1f:b8:d6:
         8c:ee:a5:72:e8:d6:c0:dc:aa:31:02:27:2a:f5:ac:86:7d:be:
         12:f5:06:7f:32:73:d6:25:be:ba:ee:88:6b:64:91:75:c5:53:
         9a:45:d9:8d:68:1c:68:9c:ed:c3:81:e7:ae:ea:f8:50:54:f6:
         f1:60:a5:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 08:13:34 2024 by rpki-client on console-fra.rpki-client.org