Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8baa579c018bb2c1b19e0c5e/0/3136322e3231372e32372e302f32342d3234203d3e2037303239.roa
File:                     3136322e3231372e32372e302f32342d3234203d3e2037303239.roa (raw, json)
Hash identifier:          hhB2cD5ICxJz2UuEULLsoLo44Wjm2jlYXNsD6gK14fQ=
Subject key identifier:   06:64:53:27:7D:4C:31:CF:D1:C5:B4:7E:6C:64:9C:BE:18:11:55:CD
Certificate issuer:       /CN=351eed99ff4398ae146cfa3319c768c0f7700db77f30196f6a
Certificate serial:       402083CB66B535A81E6F574894F8799DC4A7210A
Authority key identifier: 10:87:0E:4C:11:D9:CA:AE:10:65:BF:FB:2A:E0:D9:CF:45:5C:1C:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d7058b26-d77c-4005-8cb8-f5876d4c0d15/351eed99ff4398ae146cfa3319c768c0f7700db77f30196f6a.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8baa579c018bb2c1b19e0c5e/0/3136322e3231372e32372e302f32342d3234203d3e2037303239.roa
Signing time:             Thu 10 Oct 2024 06:49:02 +0000
ROA not before:           Thu 10 Oct 2024 06:44:02 +0000
ROA not after:            Thu 09 Oct 2025 06:49:02 +0000
asID:                     7029
IP address blocks:        162.217.27.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade8baa579c018bb2c1b19e0c5e/0/10870E4C11D9CAAE1065BFFB2AE0D9CF455C1CDB.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade8baa579c018bb2c1b19e0c5e/0/10870E4C11D9CAAE1065BFFB2AE0D9CF455C1CDB.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d7058b26-d77c-4005-8cb8-f5876d4c0d15/351eed99ff4398ae146cfa3319c768c0f7700db77f30196f6a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d7058b26-d77c-4005-8cb8-f5876d4c0d15/d7058b26-d77c-4005-8cb8-f5876d4c0d15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d7058b26-d77c-4005-8cb8-f5876d4c0d15/d7058b26-d77c-4005-8cb8-f5876d4c0d15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d7058b26-d77c-4005-8cb8-f5876d4c0d15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 04:29:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:20:83:cb:66:b5:35:a8:1e:6f:57:48:94:f8:79:9d:c4:a7:21:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=351eed99ff4398ae146cfa3319c768c0f7700db77f30196f6a
        Validity
            Not Before: Oct 10 06:44:02 2024 GMT
            Not After : Oct  9 06:49:02 2025 GMT
        Subject: CN=066453277D4C31CFD1C5B47E6C649CBE181155CD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:5c:73:03:c8:73:78:16:97:ca:7a:cf:53:75:
                    5f:0c:13:8c:69:ab:29:17:2d:bb:4b:fa:58:92:38:
                    8f:cc:d1:f8:e5:f0:af:61:ed:f0:58:66:9c:72:d6:
                    ea:3b:1e:b3:b8:dd:c0:db:c8:5f:6c:5c:57:a7:da:
                    6a:e4:3e:e4:30:f1:bd:ac:51:bb:a6:49:30:1b:32:
                    df:7f:80:40:b6:9a:c9:78:80:4f:39:8b:ed:e1:c7:
                    1c:7f:63:9a:b5:8c:17:2d:6e:f7:30:97:1e:ef:31:
                    82:cf:bb:bd:85:a1:cc:eb:5a:47:3f:ac:ca:62:e2:
                    ba:c1:0d:e7:63:b1:b1:b7:79:a7:c6:1c:2e:b9:a2:
                    8b:9f:e0:50:c5:d0:ac:0e:16:2a:8f:32:bb:80:46:
                    72:96:b7:f2:8c:33:66:cf:3b:2d:90:af:78:d3:79:
                    08:be:76:8d:4d:4f:ec:2f:2c:e2:2c:09:7e:69:70:
                    96:74:4a:e3:85:0c:74:10:c2:86:52:15:d9:10:eb:
                    5f:5d:f4:e4:1a:82:91:fd:33:dd:29:b5:d8:e7:84:
                    53:db:77:b0:45:28:d5:65:f5:90:f5:ce:1e:62:dd:
                    5f:07:ad:62:9f:04:48:47:06:56:c0:6e:3c:cf:5e:
                    08:84:97:d8:89:4b:bf:30:82:26:08:cf:7e:ac:99:
                    55:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:64:53:27:7D:4C:31:CF:D1:C5:B4:7E:6C:64:9C:BE:18:11:55:CD
            X509v3 Authority Key Identifier:
                keyid:10:87:0E:4C:11:D9:CA:AE:10:65:BF:FB:2A:E0:D9:CF:45:5C:1C:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8baa579c018bb2c1b19e0c5e/0/10870E4C11D9CAAE1065BFFB2AE0D9CF455C1CDB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d7058b26-d77c-4005-8cb8-f5876d4c0d15/351eed99ff4398ae146cfa3319c768c0f7700db77f30196f6a.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8baa579c018bb2c1b19e0c5e/0/3136322e3231372e32372e302f32342d3234203d3e2037303239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.217.27.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9f:83:e1:f3:da:de:aa:21:c8:b3:48:74:f4:b9:32:d7:0f:1f:
         2e:49:58:70:5b:2d:6a:50:4b:fa:81:58:23:53:99:c8:09:00:
         70:e5:ba:c0:4c:55:0b:05:67:ff:78:a7:8a:5e:e9:e8:84:6c:
         b9:07:29:31:b4:8d:51:6f:66:fc:5d:31:03:53:e3:30:91:6c:
         25:99:a3:3a:a4:06:95:3d:85:bd:14:0a:90:2d:26:60:34:b0:
         57:c9:9a:47:66:af:20:f4:35:4d:3b:f5:7a:e0:bf:3c:a0:57:
         40:72:3f:2c:12:ff:61:15:b1:95:df:7a:f5:d9:5a:d3:c5:07:
         9f:a4:9d:3a:dc:96:01:b6:c0:d4:d4:95:3e:5a:c5:32:27:45:
         d2:d7:ca:b5:aa:b1:46:48:39:22:9f:e7:5e:00:f1:f0:79:8f:
         b9:56:9d:62:35:6a:c1:d2:c8:07:e5:72:06:f0:44:a4:aa:9e:
         1f:5a:b8:be:31:aa:a7:92:8f:f7:47:5f:85:50:1a:4e:ec:4a:
         ed:48:04:37:ea:d7:72:4c:66:7c:50:99:6f:ed:cb:13:e2:eb:
         c6:e0:b2:99:87:aa:fe:a1:83:34:9f:51:26:a4:bd:75:6b:e2:
         38:25:ad:d8:c2:26:3c:83:e9:e5:47:8f:d1:3b:fd:b4:8f:e2:
         2d:57:b2:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:07:33 2024 by rpki-client on console-fra.rpki-client.org