Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8baa579c018bb2c1b19e0c5e/0/3136322e3231372e32342e302f32342d3234203d3e2037303239.roa
File:                     3136322e3231372e32342e302f32342d3234203d3e2037303239.roa (raw, json)
Hash identifier:          tVlk1ZkguI0z2sz2Z4AATbG7IQ6GeNdi7PKQC8DTUE8=
Subject key identifier:   DB:D0:96:5A:E2:9F:9C:24:33:D8:7E:1B:9A:8D:6A:95:4C:88:49:EC
Certificate issuer:       /CN=351eed99ff4398ae146cfa3319c768c0f7700db77f30196f6a
Certificate serial:       122FCDDF582525281E221D7656D1DEAD53593FF3
Authority key identifier: 10:87:0E:4C:11:D9:CA:AE:10:65:BF:FB:2A:E0:D9:CF:45:5C:1C:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d7058b26-d77c-4005-8cb8-f5876d4c0d15/351eed99ff4398ae146cfa3319c768c0f7700db77f30196f6a.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8baa579c018bb2c1b19e0c5e/0/3136322e3231372e32342e302f32342d3234203d3e2037303239.roa
Signing time:             Thu 10 Oct 2024 06:49:01 +0000
ROA not before:           Thu 10 Oct 2024 06:44:01 +0000
ROA not after:            Thu 09 Oct 2025 06:49:01 +0000
asID:                     7029
IP address blocks:        162.217.24.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade8baa579c018bb2c1b19e0c5e/0/10870E4C11D9CAAE1065BFFB2AE0D9CF455C1CDB.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade8baa579c018bb2c1b19e0c5e/0/10870E4C11D9CAAE1065BFFB2AE0D9CF455C1CDB.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d7058b26-d77c-4005-8cb8-f5876d4c0d15/351eed99ff4398ae146cfa3319c768c0f7700db77f30196f6a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d7058b26-d77c-4005-8cb8-f5876d4c0d15/d7058b26-d77c-4005-8cb8-f5876d4c0d15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d7058b26-d77c-4005-8cb8-f5876d4c0d15/d7058b26-d77c-4005-8cb8-f5876d4c0d15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d7058b26-d77c-4005-8cb8-f5876d4c0d15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 09:09:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:2f:cd:df:58:25:25:28:1e:22:1d:76:56:d1:de:ad:53:59:3f:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=351eed99ff4398ae146cfa3319c768c0f7700db77f30196f6a
        Validity
            Not Before: Oct 10 06:44:01 2024 GMT
            Not After : Oct  9 06:49:01 2025 GMT
        Subject: CN=DBD0965AE29F9C2433D87E1B9A8D6A954C8849EC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:95:d1:4b:10:fd:bb:83:60:80:a4:9e:4e:c8:
                    5a:63:9e:77:26:3b:89:d0:77:ae:45:48:58:fd:81:
                    54:e6:e5:4a:ce:81:5e:8f:10:33:17:aa:7b:e0:54:
                    3a:03:31:4c:89:75:8e:69:88:37:a0:59:7c:d5:ad:
                    61:94:34:0f:bb:7d:cf:bf:4e:b5:27:44:e7:a3:2f:
                    55:33:22:3e:c3:6f:6c:40:9d:f0:68:4e:5d:47:74:
                    ce:36:3a:3f:3f:ff:cd:65:a1:92:d6:ef:02:6e:b6:
                    31:4c:ec:46:31:44:7e:9d:1a:b8:a5:af:d7:4a:7f:
                    10:4c:c5:64:f6:3d:3c:1f:03:e5:47:14:de:87:d3:
                    5d:68:93:53:6e:1a:c5:71:d2:fd:a5:64:e4:f3:a7:
                    55:38:f5:a0:ae:00:12:ad:4c:a3:ce:19:f5:0c:6b:
                    17:9a:8c:36:02:fe:fa:a1:a5:43:51:17:fb:d9:e6:
                    ba:70:be:5e:6f:05:23:1a:58:4e:2d:01:99:ce:ea:
                    bf:dd:fe:7d:b6:e5:d9:fe:c4:ac:fd:f0:4d:bc:c8:
                    40:76:7b:8d:8d:ec:81:35:ec:64:53:77:52:54:13:
                    1b:57:f3:40:93:7e:63:c0:4a:00:13:45:ba:ae:a7:
                    e2:e1:d9:55:f3:8f:3b:26:0a:6d:cf:7c:46:6e:65:
                    cd:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:D0:96:5A:E2:9F:9C:24:33:D8:7E:1B:9A:8D:6A:95:4C:88:49:EC
            X509v3 Authority Key Identifier:
                keyid:10:87:0E:4C:11:D9:CA:AE:10:65:BF:FB:2A:E0:D9:CF:45:5C:1C:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8baa579c018bb2c1b19e0c5e/0/10870E4C11D9CAAE1065BFFB2AE0D9CF455C1CDB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d7058b26-d77c-4005-8cb8-f5876d4c0d15/351eed99ff4398ae146cfa3319c768c0f7700db77f30196f6a.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8baa579c018bb2c1b19e0c5e/0/3136322e3231372e32342e302f32342d3234203d3e2037303239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.217.24.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ac:e4:41:d1:bf:f3:2c:d1:c7:d1:15:4f:31:d1:d0:5c:89:63:
         16:19:6a:29:20:ac:86:cc:78:62:47:b1:26:7f:c5:65:ad:3b:
         5d:24:4a:75:60:67:c0:aa:0b:26:44:3f:4a:76:ef:a0:f2:62:
         7f:08:d5:46:5b:7b:24:ed:9a:03:be:af:89:63:48:1d:ad:b9:
         e0:18:62:69:9d:ee:c4:6a:a4:24:ee:92:e9:5f:a4:b4:bb:41:
         59:40:46:c2:17:87:0e:bf:01:3b:6b:2e:67:72:e8:ce:03:15:
         8f:37:27:97:8e:b9:f5:39:9d:23:ef:b2:d6:3e:57:4c:9b:4e:
         80:1a:a6:de:dc:2a:5f:40:71:71:11:7e:a7:7e:af:62:76:3d:
         0e:07:c0:c1:09:e3:d7:7d:7f:1f:60:07:93:ce:a8:df:3f:7d:
         bc:e9:0c:28:21:6f:4c:82:dc:26:0f:41:86:7d:4a:93:3e:8b:
         21:43:c0:be:d4:9f:66:cf:cf:20:bc:2e:db:d5:57:fd:a7:a9:
         43:e9:77:f8:c2:11:31:78:3a:61:45:39:41:81:78:9d:e8:8f:
         c3:37:01:81:eb:b4:5c:21:77:83:62:c2:86:a8:73:1f:4b:e9:
         70:4d:af:1a:21:a2:15:49:17:43:26:4d:73:b1:08:f6:aa:af:
         78:82:ab:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 07:39:56 2024 by rpki-client on console-ams.rpki-client.org