Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8baa579c018bb2c1b19e0c5e/0/3136322e3231372e32352e302f32342d3234203d3e2037303239.roa
File:                     3136322e3231372e32352e302f32342d3234203d3e2037303239.roa (raw, json)
Hash identifier:          9lJqWkPDd1E0irhOYNDBurRBO0q1TWIgTv+VrGiVG2Q=
Subject key identifier:   B7:8D:3C:33:6E:DA:BA:63:64:D5:1B:0B:84:61:99:50:4E:37:89:73
Certificate issuer:       /CN=351eed99ff4398ae146cfa3319c768c0f7700db77f30196f6a
Certificate serial:       2242FCAF1B514D563570BBB9F5B2E69F034EE41D
Authority key identifier: 10:87:0E:4C:11:D9:CA:AE:10:65:BF:FB:2A:E0:D9:CF:45:5C:1C:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d7058b26-d77c-4005-8cb8-f5876d4c0d15/351eed99ff4398ae146cfa3319c768c0f7700db77f30196f6a.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8baa579c018bb2c1b19e0c5e/0/3136322e3231372e32352e302f32342d3234203d3e2037303239.roa
Signing time:             Thu 10 Oct 2024 06:49:01 +0000
ROA not before:           Thu 10 Oct 2024 06:44:01 +0000
ROA not after:            Thu 09 Oct 2025 06:49:01 +0000
asID:                     7029
IP address blocks:        162.217.25.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade8baa579c018bb2c1b19e0c5e/0/10870E4C11D9CAAE1065BFFB2AE0D9CF455C1CDB.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade8baa579c018bb2c1b19e0c5e/0/10870E4C11D9CAAE1065BFFB2AE0D9CF455C1CDB.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d7058b26-d77c-4005-8cb8-f5876d4c0d15/351eed99ff4398ae146cfa3319c768c0f7700db77f30196f6a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d7058b26-d77c-4005-8cb8-f5876d4c0d15/d7058b26-d77c-4005-8cb8-f5876d4c0d15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d7058b26-d77c-4005-8cb8-f5876d4c0d15/d7058b26-d77c-4005-8cb8-f5876d4c0d15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d7058b26-d77c-4005-8cb8-f5876d4c0d15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 12:36:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:42:fc:af:1b:51:4d:56:35:70:bb:b9:f5:b2:e6:9f:03:4e:e4:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=351eed99ff4398ae146cfa3319c768c0f7700db77f30196f6a
        Validity
            Not Before: Oct 10 06:44:01 2024 GMT
            Not After : Oct  9 06:49:01 2025 GMT
        Subject: CN=B78D3C336EDABA6364D51B0B846199504E378973
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:47:26:ba:e5:3d:48:c8:83:93:4c:13:b2:0d:
                    42:93:cd:da:83:6d:51:6b:19:30:ee:e8:64:3d:ff:
                    9a:6c:f0:fc:e2:68:86:aa:d0:8a:d5:35:15:5d:db:
                    f1:2f:1e:8f:e6:56:e9:5f:49:c8:05:c9:89:db:32:
                    7a:7b:05:fd:8b:4d:7d:2f:d5:ab:80:6c:bf:82:6d:
                    b1:90:3f:da:fe:9f:a2:19:da:7b:38:3d:fe:8c:de:
                    52:9e:4c:67:2a:c6:a7:5b:3a:ce:54:90:b8:6d:9e:
                    bd:0c:6f:13:7e:17:83:d9:ad:44:35:4a:0a:a1:9e:
                    af:a3:94:24:a0:ba:91:e0:b1:52:cb:9f:21:22:36:
                    6b:ae:83:69:d8:ce:15:3f:9f:9a:c0:07:6e:d4:6c:
                    a7:85:95:12:ca:37:19:1d:52:77:80:6a:5a:9a:bd:
                    b8:c7:2c:e8:74:df:36:e7:92:a8:67:82:22:ba:f7:
                    2f:02:5f:09:14:d1:6f:34:88:16:85:27:8d:51:fd:
                    26:37:1e:97:18:97:b1:da:ba:5f:a5:24:34:84:fa:
                    f9:51:98:7d:0a:f6:d7:7f:55:1e:1f:4c:40:01:9e:
                    49:6f:26:14:b2:3e:1f:db:b4:f0:c0:a3:50:cf:66:
                    a5:18:29:c3:d0:d9:e5:d8:de:57:12:1f:47:19:39:
                    29:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:8D:3C:33:6E:DA:BA:63:64:D5:1B:0B:84:61:99:50:4E:37:89:73
            X509v3 Authority Key Identifier:
                keyid:10:87:0E:4C:11:D9:CA:AE:10:65:BF:FB:2A:E0:D9:CF:45:5C:1C:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8baa579c018bb2c1b19e0c5e/0/10870E4C11D9CAAE1065BFFB2AE0D9CF455C1CDB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d7058b26-d77c-4005-8cb8-f5876d4c0d15/351eed99ff4398ae146cfa3319c768c0f7700db77f30196f6a.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8baa579c018bb2c1b19e0c5e/0/3136322e3231372e32352e302f32342d3234203d3e2037303239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.217.25.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5f:a3:f4:fd:fc:b0:ce:fc:d1:2f:ea:8d:75:f3:31:f8:27:4e:
         25:23:6a:ad:d6:a3:e5:85:ff:6d:12:a8:6e:a8:d8:ce:1e:e3:
         cf:71:37:2a:06:a0:88:2c:61:ed:02:9e:3a:9c:dc:90:37:32:
         61:2c:4b:ae:88:f4:01:de:ec:93:a5:b1:6e:19:53:69:bf:d7:
         63:f1:82:23:35:b1:97:22:d8:a0:c7:db:83:e0:42:02:f3:3c:
         08:1a:2e:cb:86:30:9d:da:85:b2:0b:e2:e6:5d:81:62:20:5b:
         6b:83:9e:58:c3:f6:aa:e8:a7:df:9a:bc:68:46:34:3c:b3:e1:
         18:27:f5:bf:55:c2:bc:38:ce:58:6c:15:f1:64:32:42:77:75:
         20:12:af:48:be:70:41:2d:4a:45:08:6f:e4:5a:a1:88:12:a6:
         81:2f:1b:05:c2:cd:72:03:ca:84:3e:ed:49:2f:fd:a6:ce:7d:
         42:6d:69:0c:4b:dd:87:ca:3d:c5:97:e8:c5:c7:85:1b:41:e0:
         53:34:70:5b:11:29:cb:9c:99:41:1d:20:04:05:ad:34:56:26:
         1f:92:a5:4b:18:f2:80:73:a3:ea:01:b3:8e:94:2a:0d:13:b4:
         c7:12:7e:fc:ec:53:27:48:4e:3e:8c:99:7d:c1:ac:1f:9d:79:
         ab:bb:59:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:24:18 2025 by rpki-client