Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8baa579c018bb2c1b19e0c5e/0/3136322e3231372e33302e302f32342d3234203d3e203139303339.roa
File:                     3136322e3231372e33302e302f32342d3234203d3e203139303339.roa (raw, json)
Hash identifier:          nQ0wMY6KgJ+ELIeLvbaawi3ls8OvxVW1WSbJCQCdz+o=
Subject key identifier:   80:D2:67:12:8D:8B:92:23:3F:DC:43:E2:8A:F1:40:E6:C5:C8:3A:08
Certificate issuer:       /CN=351eed99ff4398ae146cfa3319c768c0f7700db77f30196f6a
Certificate serial:       7E31D6BDB6D6F2B26349CAD953DA14135CA10D10
Authority key identifier: 10:87:0E:4C:11:D9:CA:AE:10:65:BF:FB:2A:E0:D9:CF:45:5C:1C:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d7058b26-d77c-4005-8cb8-f5876d4c0d15/351eed99ff4398ae146cfa3319c768c0f7700db77f30196f6a.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8baa579c018bb2c1b19e0c5e/0/3136322e3231372e33302e302f32342d3234203d3e203139303339.roa
Signing time:             Thu 10 Oct 2024 06:49:02 +0000
ROA not before:           Thu 10 Oct 2024 06:44:02 +0000
ROA not after:            Thu 09 Oct 2025 06:49:02 +0000
asID:                     19039
IP address blocks:        162.217.30.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade8baa579c018bb2c1b19e0c5e/0/10870E4C11D9CAAE1065BFFB2AE0D9CF455C1CDB.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade8baa579c018bb2c1b19e0c5e/0/10870E4C11D9CAAE1065BFFB2AE0D9CF455C1CDB.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d7058b26-d77c-4005-8cb8-f5876d4c0d15/351eed99ff4398ae146cfa3319c768c0f7700db77f30196f6a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d7058b26-d77c-4005-8cb8-f5876d4c0d15/d7058b26-d77c-4005-8cb8-f5876d4c0d15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d7058b26-d77c-4005-8cb8-f5876d4c0d15/d7058b26-d77c-4005-8cb8-f5876d4c0d15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d7058b26-d77c-4005-8cb8-f5876d4c0d15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 04:29:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:31:d6:bd:b6:d6:f2:b2:63:49:ca:d9:53:da:14:13:5c:a1:0d:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=351eed99ff4398ae146cfa3319c768c0f7700db77f30196f6a
        Validity
            Not Before: Oct 10 06:44:02 2024 GMT
            Not After : Oct  9 06:49:02 2025 GMT
        Subject: CN=80D267128D8B92233FDC43E28AF140E6C5C83A08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:3d:26:84:99:f3:e4:c5:7e:5f:fe:8f:98:28:
                    37:78:df:96:a7:2a:72:b1:7f:11:8f:7c:bf:2c:ae:
                    5c:62:a9:76:35:b6:dd:0a:d6:1f:99:a3:67:93:72:
                    4b:45:ad:5e:e0:59:a4:fe:9a:9f:fa:89:68:46:95:
                    30:2d:40:e3:f4:4f:2b:d0:df:9d:ac:b5:3c:e9:e7:
                    30:27:a7:5c:2b:54:f5:11:25:e8:9d:3c:87:9d:86:
                    df:b4:a9:60:cc:97:e7:77:c7:1a:de:7f:33:45:7d:
                    7e:4e:76:13:86:bf:f4:07:f9:13:31:e0:68:79:f5:
                    57:fa:64:d2:79:73:b1:a1:95:9a:cf:7a:1a:0d:9c:
                    e7:bd:37:f2:73:cb:48:8d:6e:80:f2:8e:50:25:52:
                    42:af:9f:f2:8b:ca:ff:90:56:0b:9c:b1:b7:70:59:
                    f3:3f:fb:b7:b1:79:4a:36:28:ab:49:6f:21:8f:b9:
                    a5:5d:f2:41:17:1e:4b:8b:78:72:01:28:21:1a:ae:
                    00:a6:68:02:95:77:b5:84:e4:55:40:08:90:ca:40:
                    3f:59:de:47:b5:7f:ae:15:d6:87:da:3f:9a:73:23:
                    7a:9d:3d:4b:33:4e:95:60:eb:8a:b1:60:7b:87:36:
                    1b:32:52:39:7a:87:75:78:51:e8:a8:32:93:42:b3:
                    79:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:D2:67:12:8D:8B:92:23:3F:DC:43:E2:8A:F1:40:E6:C5:C8:3A:08
            X509v3 Authority Key Identifier:
                keyid:10:87:0E:4C:11:D9:CA:AE:10:65:BF:FB:2A:E0:D9:CF:45:5C:1C:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8baa579c018bb2c1b19e0c5e/0/10870E4C11D9CAAE1065BFFB2AE0D9CF455C1CDB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d7058b26-d77c-4005-8cb8-f5876d4c0d15/351eed99ff4398ae146cfa3319c768c0f7700db77f30196f6a.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8baa579c018bb2c1b19e0c5e/0/3136322e3231372e33302e302f32342d3234203d3e203139303339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.217.30.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3d:d3:8d:5c:e5:ee:06:a5:af:92:e0:bd:2e:ea:ab:45:94:62:
         d3:37:e1:6b:17:fc:14:c0:f5:23:93:69:94:5b:7f:7d:87:af:
         13:b8:22:37:d4:e2:ed:5e:8b:c6:e3:68:33:6b:da:27:7b:1c:
         7f:fd:ce:34:d7:f1:90:52:31:07:61:cd:2c:dc:e8:d1:71:32:
         ee:5a:2f:8d:1f:11:b9:0c:d3:c9:6e:23:3b:3a:1e:98:41:6d:
         53:dc:2c:00:38:75:9a:82:d0:5c:67:ce:f3:50:63:b7:50:eb:
         a8:b2:d1:b5:8f:7e:14:bd:4e:93:2e:55:50:6a:96:1c:87:57:
         22:0d:c3:a8:4a:d6:71:e2:6f:93:53:64:1d:4e:82:f9:68:a0:
         7a:bd:7f:f1:91:cd:f9:3c:33:12:bb:2e:53:27:47:ca:32:52:
         5e:dd:a0:ab:4b:e5:1e:50:b4:b5:cf:bd:7e:71:cb:a7:ce:ec:
         f7:e7:cb:2f:f0:85:7e:b4:63:f9:00:e5:73:b0:62:88:13:bf:
         5c:a7:9d:ca:31:89:15:f7:83:f8:73:1b:cc:d6:69:ec:12:fb:
         3c:36:74:1a:dc:93:0a:78:66:70:3e:a3:b8:32:40:4f:7d:d9:
         ed:70:7e:b5:55:ad:ac:b4:3c:08:8d:cb:65:df:f8:ba:c6:81:
         9f:de:5f:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:02:14 2024 by rpki-client on console-ams.rpki-client.org