Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8baa579c018bb2c1b19e0c5e/0/3136322e3231372e32362e302f32342d3234203d3e2037303239.roa
File:                     3136322e3231372e32362e302f32342d3234203d3e2037303239.roa (raw, json)
Hash identifier:          +kk62h5PfDn/TD/YNyONyO5r8QN4T36TlA1k3qGAxf4=
Subject key identifier:   BC:B0:4E:A5:26:D0:D8:DD:05:A6:36:32:E0:45:4F:D0:E2:8E:4F:BE
Certificate issuer:       /CN=351eed99ff4398ae146cfa3319c768c0f7700db77f30196f6a
Certificate serial:       02A8E7F1D21FA9E02D4786FB1D458923E9B79BA4
Authority key identifier: 10:87:0E:4C:11:D9:CA:AE:10:65:BF:FB:2A:E0:D9:CF:45:5C:1C:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d7058b26-d77c-4005-8cb8-f5876d4c0d15/351eed99ff4398ae146cfa3319c768c0f7700db77f30196f6a.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8baa579c018bb2c1b19e0c5e/0/3136322e3231372e32362e302f32342d3234203d3e2037303239.roa
Signing time:             Thu 10 Oct 2024 06:49:01 +0000
ROA not before:           Thu 10 Oct 2024 06:44:01 +0000
ROA not after:            Thu 09 Oct 2025 06:49:01 +0000
asID:                     7029
IP address blocks:        162.217.26.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade8baa579c018bb2c1b19e0c5e/0/10870E4C11D9CAAE1065BFFB2AE0D9CF455C1CDB.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade8baa579c018bb2c1b19e0c5e/0/10870E4C11D9CAAE1065BFFB2AE0D9CF455C1CDB.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d7058b26-d77c-4005-8cb8-f5876d4c0d15/351eed99ff4398ae146cfa3319c768c0f7700db77f30196f6a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d7058b26-d77c-4005-8cb8-f5876d4c0d15/d7058b26-d77c-4005-8cb8-f5876d4c0d15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d7058b26-d77c-4005-8cb8-f5876d4c0d15/d7058b26-d77c-4005-8cb8-f5876d4c0d15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d7058b26-d77c-4005-8cb8-f5876d4c0d15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 14 Mar 2025 16:14:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:a8:e7:f1:d2:1f:a9:e0:2d:47:86:fb:1d:45:89:23:e9:b7:9b:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=351eed99ff4398ae146cfa3319c768c0f7700db77f30196f6a
        Validity
            Not Before: Oct 10 06:44:01 2024 GMT
            Not After : Oct  9 06:49:01 2025 GMT
        Subject: CN=BCB04EA526D0D8DD05A63632E0454FD0E28E4FBE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:d6:1d:ab:86:d6:26:29:66:f8:d0:8c:49:ce:
                    00:a6:27:94:71:a8:73:76:ea:b9:70:55:51:4e:44:
                    ac:28:10:fa:5b:ef:75:60:d0:6a:27:62:94:f8:1a:
                    85:48:b2:63:8a:a9:35:3b:c4:1b:48:7b:83:46:b0:
                    c9:68:e1:79:ce:a1:8f:34:d5:be:be:f6:ce:ed:2d:
                    22:10:41:0a:d2:b9:c1:28:a2:f4:74:d3:6d:a2:34:
                    23:0e:9d:7d:bc:c4:fb:e1:fe:aa:de:69:f2:e3:7a:
                    26:bd:dc:95:d8:41:ce:8c:3d:85:7c:6e:f1:0a:03:
                    92:ac:7b:0a:93:2b:9b:93:78:a4:f3:a8:67:89:b2:
                    aa:1c:91:af:a3:8b:4d:ed:6b:69:6d:0e:f0:f4:fd:
                    05:87:1c:f0:fd:ee:d9:7f:8a:b2:a4:ee:d7:71:be:
                    eb:9e:5f:03:bf:08:e1:b0:33:d0:d9:5c:17:2b:0d:
                    30:83:10:d0:2f:d5:c8:a6:05:55:9a:08:03:db:29:
                    1a:bc:69:0e:36:08:e5:03:59:86:65:5f:b6:3d:db:
                    c0:2a:7b:18:9e:fb:4e:85:ca:5c:61:0c:a3:62:69:
                    18:49:4b:bf:50:d6:4c:0d:0b:db:37:ac:dc:b5:76:
                    19:6c:ba:1d:31:98:8d:f3:9b:1f:d9:bf:d7:6a:d5:
                    77:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:B0:4E:A5:26:D0:D8:DD:05:A6:36:32:E0:45:4F:D0:E2:8E:4F:BE
            X509v3 Authority Key Identifier:
                keyid:10:87:0E:4C:11:D9:CA:AE:10:65:BF:FB:2A:E0:D9:CF:45:5C:1C:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8baa579c018bb2c1b19e0c5e/0/10870E4C11D9CAAE1065BFFB2AE0D9CF455C1CDB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d7058b26-d77c-4005-8cb8-f5876d4c0d15/351eed99ff4398ae146cfa3319c768c0f7700db77f30196f6a.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8baa579c018bb2c1b19e0c5e/0/3136322e3231372e32362e302f32342d3234203d3e2037303239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.217.26.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1b:bd:e1:bb:46:3c:9c:18:61:09:f4:b4:fb:35:bd:d5:52:b1:
         bc:a1:f5:bf:42:71:d5:93:38:c5:08:72:2d:c0:a9:35:a8:b8:
         b9:02:f7:18:57:da:95:4b:99:b2:70:12:4b:9d:62:82:25:2a:
         92:b6:77:a7:8d:e6:3e:eb:85:93:53:9a:9f:8e:0f:23:00:c6:
         e0:bf:02:41:30:cd:c3:d9:f8:ba:01:e0:5e:ad:b0:58:1d:1a:
         c4:70:d5:42:3c:28:d8:3b:51:45:13:32:2f:38:32:65:92:26:
         50:86:8d:e6:7e:58:31:d4:5e:65:cb:df:f6:ba:42:e2:76:3d:
         63:e8:79:27:b3:82:4d:89:7a:31:c5:94:04:73:c8:c9:14:3f:
         8d:df:95:a6:21:aa:cd:58:ac:27:04:c2:09:ea:57:f6:1c:89:
         c6:c6:31:06:7f:2d:42:65:a5:55:37:1e:e7:40:63:65:f6:c5:
         ef:48:c4:85:e9:cb:a1:08:1a:5e:88:f8:c7:7a:77:1c:3b:5c:
         a0:c3:12:76:8b:ca:d8:33:84:91:29:eb:bd:61:7c:1f:b5:99:
         ad:0a:28:bd:d3:11:4c:03:fe:39:d6:ac:34:2f:c3:54:a3:b2:
         2d:b4:a1:c8:26:e3:e1:88:5c:92:53:c3:6e:5d:f8:af:21:19:
         8f:37:91:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 23:56:36 2025 by rpki-client