Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/1/3130372e3139312e3133362e302f32332d3233203d3e203436363930.roa
File:                     3130372e3139312e3133362e302f32332d3233203d3e203436363930.roa (raw, json)
Hash identifier:          1B2eAbWv55JFQ/g6g3QPdtE+eTQ7FRWHBYlT+6XFzwQ=
Subject key identifier:   34:97:72:AB:24:D0:1B:96:C5:41:0D:0E:E8:9D:85:CD:3B:97:9B:65
Certificate issuer:       /CN=1bf739f63c6943535cfe4ed2813f838ed560b7076f3a452eb8
Certificate serial:       04516CE0B3942CC06C0905FD15C8F97593AE6DF2
Authority key identifier: E2:0C:23:2F:52:49:CB:6D:81:8D:89:F7:B2:BD:9A:E3:A3:69:75:7C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/87fd9355-ffdc-4986-9329-4d1909e01a2f/1bf739f63c6943535cfe4ed2813f838ed560b7076f3a452eb8.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/1/3130372e3139312e3133362e302f32332d3233203d3e203436363930.roa
Signing time:             Tue 13 Feb 2024 06:27:38 +0000
ROA not before:           Tue 13 Feb 2024 06:22:38 +0000
ROA not after:            Tue 11 Feb 2025 06:27:38 +0000
asID:                     46690
IP address blocks:        107.191.136.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/1/E20C232F5249CB6D818D89F7B2BD9AE3A369757C.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/1/E20C232F5249CB6D818D89F7B2BD9AE3A369757C.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/87fd9355-ffdc-4986-9329-4d1909e01a2f/1bf739f63c6943535cfe4ed2813f838ed560b7076f3a452eb8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/87fd9355-ffdc-4986-9329-4d1909e01a2f/87fd9355-ffdc-4986-9329-4d1909e01a2f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/87fd9355-ffdc-4986-9329-4d1909e01a2f/87fd9355-ffdc-4986-9329-4d1909e01a2f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/87fd9355-ffdc-4986-9329-4d1909e01a2f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:22:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:51:6c:e0:b3:94:2c:c0:6c:09:05:fd:15:c8:f9:75:93:ae:6d:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1bf739f63c6943535cfe4ed2813f838ed560b7076f3a452eb8
        Validity
            Not Before: Feb 13 06:22:38 2024 GMT
            Not After : Feb 11 06:27:38 2025 GMT
        Subject: CN=349772AB24D01B96C5410D0EE89D85CD3B979B65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:e8:33:bb:d3:7d:42:92:e8:9e:d4:46:35:a7:
                    0b:fc:7f:97:ab:cf:03:b2:72:37:28:d4:98:e4:a6:
                    1d:0c:32:49:cf:40:16:47:18:40:a5:c7:56:95:0b:
                    77:8b:00:56:4f:ac:e6:3d:e7:03:c4:ec:d0:56:d4:
                    f3:8f:08:7c:fa:a9:fe:6e:ae:59:76:08:87:8e:38:
                    c0:c9:b4:a3:b8:c3:43:c3:4f:36:ea:6a:0d:95:95:
                    ca:ed:9f:ba:22:10:17:ee:6f:eb:9b:1c:e3:0e:23:
                    db:f8:fb:ba:87:cd:0e:57:8e:95:4c:a2:b4:3c:b8:
                    88:5e:53:b3:6f:4c:61:85:39:64:cb:21:b5:b8:ab:
                    98:df:50:46:49:76:75:d0:60:b0:6d:59:8a:4d:f4:
                    2d:88:05:1a:0d:f4:5b:b5:5a:c7:cf:b6:3e:c4:82:
                    ab:ab:92:10:d9:c6:85:a8:55:25:2f:59:49:6d:c6:
                    7a:32:85:58:61:30:22:50:aa:78:56:d3:ce:a3:cc:
                    6c:0b:8f:e8:f4:67:35:dc:24:c6:7d:b7:a9:a6:f0:
                    c1:86:9b:be:85:55:29:94:9c:3d:53:c1:de:e7:57:
                    0c:4e:54:38:1e:56:ea:26:d8:02:3d:e7:69:71:8d:
                    03:e3:04:57:bd:d0:97:99:d2:f3:f6:c2:4a:61:76:
                    24:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:97:72:AB:24:D0:1B:96:C5:41:0D:0E:E8:9D:85:CD:3B:97:9B:65
            X509v3 Authority Key Identifier:
                keyid:E2:0C:23:2F:52:49:CB:6D:81:8D:89:F7:B2:BD:9A:E3:A3:69:75:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/1/E20C232F5249CB6D818D89F7B2BD9AE3A369757C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/87fd9355-ffdc-4986-9329-4d1909e01a2f/1bf739f63c6943535cfe4ed2813f838ed560b7076f3a452eb8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/1/3130372e3139312e3133362e302f32332d3233203d3e203436363930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.191.136.0/23

    Signature Algorithm: sha256WithRSAEncryption
         bd:b2:f8:25:0f:dd:c9:c9:ba:85:a0:56:dd:c5:33:52:f2:bd:
         33:4b:19:cd:4d:a4:d2:0a:4d:48:5a:8f:a4:ca:c9:48:b8:de:
         ae:d7:4c:47:9d:56:93:92:fd:db:5e:6e:24:ca:81:4c:07:78:
         9b:ab:f8:c7:23:be:1e:9a:7b:41:6b:7e:77:0b:06:5f:89:60:
         1b:9d:e0:c9:f8:a3:44:40:da:49:f0:c7:4b:b2:fd:6b:8a:5f:
         fe:2b:e4:13:31:11:78:a4:e4:01:f8:e8:44:0c:e0:70:5a:fa:
         ce:21:c5:ec:be:30:5d:68:37:79:eb:af:35:67:e9:1f:2d:e0:
         86:26:26:6d:95:1b:2f:f2:7a:91:e2:93:3a:75:ff:fa:5c:6f:
         2b:9f:a4:68:5c:f7:04:33:de:d0:43:50:42:56:5d:8d:43:ab:
         cf:bc:c9:db:75:44:fa:f6:8f:49:5c:b9:ad:14:1b:f4:b0:50:
         e4:17:9f:11:87:a1:16:e7:3a:8f:57:a0:4e:28:05:93:67:77:
         07:91:84:4e:5c:b3:6f:d2:06:42:19:5e:3b:27:2e:06:ba:d3:
         d1:a5:1f:20:b7:93:56:a9:43:da:2b:59:ed:a0:29:80:30:98:
         4f:35:ee:18:22:76:ed:27:92:d8:82:fa:9f:8d:82:11:f6:84:
         f8:90:5b:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 08:13:34 2024 by rpki-client on console-fra.rpki-client.org