Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8baa579c018bb2c1b19e0c5e/0/3136322e3231372e33302e302f32342d3234203d3e203139303339.roa
File:                     3136322e3231372e33302e302f32342d3234203d3e203139303339.roa (raw, json)
Hash identifier:          ZYMe+0VA07gCdQd9Y3XWOtIMNnsggH+Bt8ZiksFJ+3M=
Subject key identifier:   C3:24:E8:DF:7A:26:BF:1D:9A:53:CD:DA:51:01:F3:EE:4A:5A:85:42
Certificate issuer:       /CN=351eed99ff4398ae146cfa3319c768c0f7700db77f30196f6a
Certificate serial:       07E80812C6FDBEB38D7735F2DC6361EE5CDDB090
Authority key identifier: 10:87:0E:4C:11:D9:CA:AE:10:65:BF:FB:2A:E0:D9:CF:45:5C:1C:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d7058b26-d77c-4005-8cb8-f5876d4c0d15/351eed99ff4398ae146cfa3319c768c0f7700db77f30196f6a.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8baa579c018bb2c1b19e0c5e/0/3136322e3231372e33302e302f32342d3234203d3e203139303339.roa
Signing time:             Thu 09 Nov 2023 06:26:05 +0000
ROA not before:           Thu 09 Nov 2023 06:21:05 +0000
ROA not after:            Thu 07 Nov 2024 06:26:05 +0000
asID:                     19039
IP address blocks:        162.217.30.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade8baa579c018bb2c1b19e0c5e/0/10870E4C11D9CAAE1065BFFB2AE0D9CF455C1CDB.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade8baa579c018bb2c1b19e0c5e/0/10870E4C11D9CAAE1065BFFB2AE0D9CF455C1CDB.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d7058b26-d77c-4005-8cb8-f5876d4c0d15/351eed99ff4398ae146cfa3319c768c0f7700db77f30196f6a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d7058b26-d77c-4005-8cb8-f5876d4c0d15/d7058b26-d77c-4005-8cb8-f5876d4c0d15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d7058b26-d77c-4005-8cb8-f5876d4c0d15/d7058b26-d77c-4005-8cb8-f5876d4c0d15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d7058b26-d77c-4005-8cb8-f5876d4c0d15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 03 Jun 2024 09:01:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:e8:08:12:c6:fd:be:b3:8d:77:35:f2:dc:63:61:ee:5c:dd:b0:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=351eed99ff4398ae146cfa3319c768c0f7700db77f30196f6a
        Validity
            Not Before: Nov  9 06:21:05 2023 GMT
            Not After : Nov  7 06:26:05 2024 GMT
        Subject: CN=C324E8DF7A26BF1D9A53CDDA5101F3EE4A5A8542
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:47:ed:6f:a9:e0:30:e7:97:49:ce:f4:6b:4d:
                    09:73:c9:95:bd:75:e8:38:64:75:f7:3d:19:17:fa:
                    2d:76:8a:8a:e4:8b:9d:64:ea:4a:02:a9:8d:22:76:
                    55:c0:28:7c:dd:86:7b:86:49:9b:b3:ec:75:0b:df:
                    bf:be:04:8c:4a:26:10:9e:81:e4:ac:63:0c:a3:e4:
                    66:ad:40:cb:94:62:00:9b:53:c8:5e:2b:65:94:7c:
                    b3:25:a5:13:1e:c4:21:6f:53:9a:ae:31:11:02:52:
                    41:71:54:e1:04:be:f4:1b:d1:84:df:17:c8:af:a4:
                    27:d2:b6:11:da:32:38:bd:5a:df:04:30:57:7f:d3:
                    1b:24:37:73:a2:00:28:fb:1e:e5:ab:f3:dd:c5:c5:
                    d1:7d:f7:5e:05:63:73:ff:51:6c:4d:63:53:97:94:
                    e0:6e:0f:61:93:61:99:26:2d:f4:0e:06:96:19:35:
                    6e:b8:ac:fb:c7:4e:de:6b:c9:f8:f7:c1:89:d2:88:
                    13:c4:08:8f:7b:f5:16:a7:ec:10:84:bf:62:17:ae:
                    ca:1c:ba:41:e7:a3:f5:f2:3f:ec:98:3d:d2:6e:d8:
                    13:73:34:d9:1c:1b:04:57:e9:b5:a1:a0:fc:6c:05:
                    b2:33:26:59:9f:da:b6:e5:c0:5a:c6:a6:4d:ff:6d:
                    39:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:24:E8:DF:7A:26:BF:1D:9A:53:CD:DA:51:01:F3:EE:4A:5A:85:42
            X509v3 Authority Key Identifier:
                keyid:10:87:0E:4C:11:D9:CA:AE:10:65:BF:FB:2A:E0:D9:CF:45:5C:1C:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8baa579c018bb2c1b19e0c5e/0/10870E4C11D9CAAE1065BFFB2AE0D9CF455C1CDB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d7058b26-d77c-4005-8cb8-f5876d4c0d15/351eed99ff4398ae146cfa3319c768c0f7700db77f30196f6a.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8baa579c018bb2c1b19e0c5e/0/3136322e3231372e33302e302f32342d3234203d3e203139303339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.217.30.0/24

    Signature Algorithm: sha256WithRSAEncryption
         34:c3:d1:06:3b:39:ae:56:02:ea:6e:a8:9b:7a:b5:b8:85:92:
         f4:8b:76:73:3a:9e:37:07:a2:21:ae:87:0c:a5:6f:e8:01:c1:
         06:5b:7b:a8:87:93:27:ef:d7:64:2b:37:24:50:c3:7c:06:0b:
         e4:55:d1:e8:c4:33:fa:03:96:eb:48:d0:6f:be:e8:4e:b0:ba:
         10:02:5f:df:a4:0d:bb:07:f5:30:bc:9c:ff:ef:f9:20:6f:8c:
         b8:e1:0e:91:ad:06:29:7a:45:16:60:58:41:bc:2b:7a:b6:81:
         39:76:4b:ef:28:1f:4a:4d:f9:a1:e8:df:85:ce:10:a7:28:66:
         38:b9:72:5b:ea:78:b7:23:9a:ad:3d:e0:ae:ba:d9:33:aa:31:
         00:f9:44:06:f5:77:8a:48:5f:85:1c:4c:83:0c:01:cb:a0:11:
         d1:83:59:ec:fe:e7:92:11:58:af:08:5e:a3:4f:7c:68:40:86:
         46:33:88:ac:d5:91:af:3a:ab:e7:0a:c1:b7:0a:dd:2e:bb:76:
         3e:3e:5b:91:0b:a7:22:ac:9c:e3:e5:e9:3c:13:22:f6:73:8c:
         f7:a4:e5:2b:c9:ed:3f:8b:47:f2:f5:b7:fb:3b:fc:e6:18:82:
         32:68:34:0f:b2:94:e0:fc:b9:55:13:2e:82:6e:e6:3d:6b:74:
         fb:e6:38:8f
-----BEGIN CERTIFICATE-----
MIIFsjCCBJqgAwIBAgIUB+gIEsb9vrONdzXy3GNh7lzdsJAwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMzUxZWVkOTlmZjQzOThhZTE0NmNmYTMzMTljNzY4YzBm
NzcwMGRiNzdmMzAxOTZmNmEwHhcNMjMxMTA5MDYyMTA1WhcNMjQxMTA3MDYyNjA1
WjAzMTEwLwYDVQQDEyhDMzI0RThERjdBMjZCRjFEOUE1M0NEREE1MTAxRjNFRTRB
NUE4NTQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmkftb6ngMOeX
Sc70a00Jc8mVvXXoOGR19z0ZF/otdoqK5IudZOpKAqmNInZVwCh83YZ7hkmbs+x1
C9+/vgSMSiYQnoHkrGMMo+RmrUDLlGIAm1PIXitllHyzJaUTHsQhb1OarjERAlJB
cVThBL70G9GE3xfIr6Qn0rYR2jI4vVrfBDBXf9MbJDdzogAo+x7lq/PdxcXRffde
BWNz/1FsTWNTl5Tgbg9hk2GZJi30DgaWGTVuuKz7x07ea8n498GJ0ogTxAiPe/UW
p+wQhL9iF67KHLpB56P18j/smD3SbtgTczTZHBsEV+m1oaD8bAWyMyZZn9q25cBa
xqZN/205uwIDAQABo4ICsjCCAq4wHQYDVR0OBBYEFMMk6N96Jr8dmlPN2lEB8+5K
WoVCMB8GA1UdIwQYMBaAFBCHDkwR2cquEGW/+yrg2c9FXBzbMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlOGJhYTU3OWMwMThiYjJjMWIxOWUwYzVlLzAv
MTA4NzBFNEMxMUQ5Q0FBRTEwNjVCRkZCMkFFMEQ5Q0Y0NTVDMUNEQi5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvODcxZGE0MGYtNzkzYS00YTQ1LWEwYTktOTc4MTQ4
MzIxYTA3L2Q3MDU4YjI2LWQ3N2MtNDAwNS04Y2I4LWY1ODc2ZDRjMGQxNS8zNTFl
ZWQ5OWZmNDM5OGFlMTQ2Y2ZhMzMxOWM3NjhjMGY3NzAwZGI3N2YzMDE5NmY2YS5j
ZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZThiYWE1NzljMDE4YmIy
YzFiMTllMGM1ZS8wLzMxMzYzMjJlMzIzMTM3MmUzMzMwMmUzMDJmMzIzNDJkMzIz
NDIwM2QzZTIwMzEzOTMwMzMzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO
AjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAKLZHjANBgkqhkiG9w0BAQsF
AAOCAQEANMPRBjs5rlYC6m6om3q1uIWS9It2czqeNweiIa6HDKVv6AHBBlt7qIeT
J+/XZCs3JFDDfAYL5FXR6MQz+gOW60jQb77oTrC6EAJf36QNuwf1MLyc/+/5IG+M
uOEOka0GKXpFFmBYQbwreraBOXZL7ygfSk35oejfhc4QpyhmOLlyW+p4tyOarT3g
rrrZM6oxAPlEBvV3ikhfhRxMgwwBy6AR0YNZ7P7nkhFYrwheo098aECGRjOIrNWR
rzqr5wrBtwrdLrt2Pj5bkQunIqyc4+XpPBMi9nOM96TlK8ntP4tH8vW3+zv85hiC
Mmg0D7KU4Py5VRMugm7mPWt0++Y4jw==
-----END CERTIFICATE-----
Generated at Sun Jun 2 07:03:21 2024 by rpki-client on console-fra.rpki-client.org