Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8baa579c018bb2c1b19e0c5e/0/3136322e3231372e33312e302f32342d3234203d3e203139303339.roa
File:                     3136322e3231372e33312e302f32342d3234203d3e203139303339.roa (raw, json)
Hash identifier:          YaRBr1xr/cQ1vpOPbOgZaReGZZTGKq2Ki7L2rz/RTRg=
Subject key identifier:   73:0E:0D:CC:C5:CE:45:20:89:94:26:9A:23:74:EB:C5:4C:11:35:D7
Certificate issuer:       /CN=351eed99ff4398ae146cfa3319c768c0f7700db77f30196f6a
Certificate serial:       174BB9264B8D1B57FBDE189D8A5397D8080FE64E
Authority key identifier: 10:87:0E:4C:11:D9:CA:AE:10:65:BF:FB:2A:E0:D9:CF:45:5C:1C:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d7058b26-d77c-4005-8cb8-f5876d4c0d15/351eed99ff4398ae146cfa3319c768c0f7700db77f30196f6a.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8baa579c018bb2c1b19e0c5e/0/3136322e3231372e33312e302f32342d3234203d3e203139303339.roa
Signing time:             Thu 10 Oct 2024 06:49:01 +0000
ROA not before:           Thu 10 Oct 2024 06:44:01 +0000
ROA not after:            Thu 09 Oct 2025 06:49:01 +0000
asID:                     19039
IP address blocks:        162.217.31.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade8baa579c018bb2c1b19e0c5e/0/10870E4C11D9CAAE1065BFFB2AE0D9CF455C1CDB.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade8baa579c018bb2c1b19e0c5e/0/10870E4C11D9CAAE1065BFFB2AE0D9CF455C1CDB.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d7058b26-d77c-4005-8cb8-f5876d4c0d15/351eed99ff4398ae146cfa3319c768c0f7700db77f30196f6a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d7058b26-d77c-4005-8cb8-f5876d4c0d15/d7058b26-d77c-4005-8cb8-f5876d4c0d15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d7058b26-d77c-4005-8cb8-f5876d4c0d15/d7058b26-d77c-4005-8cb8-f5876d4c0d15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d7058b26-d77c-4005-8cb8-f5876d4c0d15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 04:29:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:4b:b9:26:4b:8d:1b:57:fb:de:18:9d:8a:53:97:d8:08:0f:e6:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=351eed99ff4398ae146cfa3319c768c0f7700db77f30196f6a
        Validity
            Not Before: Oct 10 06:44:01 2024 GMT
            Not After : Oct  9 06:49:01 2025 GMT
        Subject: CN=730E0DCCC5CE45208994269A2374EBC54C1135D7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:c1:20:a1:ae:6e:7d:3f:a5:3b:63:76:6f:dd:
                    f4:fb:a0:66:be:bc:4b:75:d3:e3:b9:7d:c6:05:ce:
                    f6:93:ac:77:3c:2d:cb:cf:b3:b0:a8:52:ff:72:c5:
                    bf:ea:ff:cf:eb:80:8f:7e:48:79:32:b7:b5:3d:ef:
                    e6:6b:24:21:53:7d:b5:9f:af:ac:b6:72:c7:83:4e:
                    19:00:c6:19:da:8e:94:af:cd:0f:6e:28:48:83:4c:
                    7d:c0:c2:5e:41:7f:d8:dd:46:02:00:63:0a:e8:3b:
                    05:09:dc:fa:72:d0:e5:78:85:5e:82:13:55:73:0b:
                    e3:69:62:a0:8d:a7:11:9c:49:b7:5a:3f:44:e1:b3:
                    a0:ae:e3:a5:a9:7b:9f:e6:cb:d7:f0:f8:51:44:60:
                    dd:fa:d2:d2:ab:46:6a:c5:7c:11:aa:e8:c9:17:70:
                    ac:84:27:95:72:f8:39:7f:8a:e6:29:01:26:90:1d:
                    08:cb:61:71:ca:51:95:42:85:75:1a:18:4a:90:06:
                    72:07:fc:9d:8a:11:23:8d:79:7e:c3:7b:fe:ad:bb:
                    47:65:ed:f1:58:9d:f9:61:01:e7:78:8c:f6:c0:4f:
                    0c:5f:7b:eb:88:3e:08:30:0b:f3:9a:f4:fb:ee:c8:
                    b0:9f:c9:a7:99:5a:db:2e:88:ce:33:52:86:91:d2:
                    97:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:0E:0D:CC:C5:CE:45:20:89:94:26:9A:23:74:EB:C5:4C:11:35:D7
            X509v3 Authority Key Identifier:
                keyid:10:87:0E:4C:11:D9:CA:AE:10:65:BF:FB:2A:E0:D9:CF:45:5C:1C:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8baa579c018bb2c1b19e0c5e/0/10870E4C11D9CAAE1065BFFB2AE0D9CF455C1CDB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d7058b26-d77c-4005-8cb8-f5876d4c0d15/351eed99ff4398ae146cfa3319c768c0f7700db77f30196f6a.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8baa579c018bb2c1b19e0c5e/0/3136322e3231372e33312e302f32342d3234203d3e203139303339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.217.31.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a6:a9:43:d1:a7:8c:a6:87:5b:5c:c0:90:1e:05:0c:0e:50:35:
         84:26:5b:91:ea:f2:1a:1b:70:24:ea:d1:4c:29:b5:a7:7a:92:
         b8:c5:4b:bc:a5:25:f7:64:f4:46:c3:8d:05:d1:c8:a5:83:d9:
         74:5a:1b:24:1d:81:35:9b:fd:d4:1c:57:cc:53:c3:5f:83:3e:
         bd:8c:2d:86:58:7f:41:09:9b:a1:79:94:84:64:ff:2b:94:c5:
         20:d2:78:ee:1a:c5:4f:35:41:2b:f5:bd:af:68:11:9d:67:75:
         fa:e4:f0:b5:fe:d3:ee:41:cd:ac:79:bf:cd:c0:38:a1:ca:f6:
         48:ef:fb:ef:2e:c4:95:58:32:24:94:15:19:25:35:35:cc:26:
         79:a4:ec:e5:bc:59:80:a9:17:32:d6:88:10:5c:0d:a4:a6:bd:
         5b:2a:1d:a6:7a:6a:98:dd:ad:8c:30:52:d5:4a:af:94:a8:ac:
         0c:c9:40:ba:ad:de:b7:e6:87:b1:d9:de:e3:1e:2f:f5:ad:23:
         68:4c:86:7c:33:83:c5:96:fd:2a:6e:4c:97:89:d0:19:60:cb:
         df:ad:a4:57:64:03:3a:d8:14:a4:25:d9:89:5f:6c:ef:70:17:
         6f:27:eb:2e:2e:17:59:ed:77:7d:9f:d5:a7:1a:d5:1b:26:56:
         f7:a2:0c:a3
-----BEGIN CERTIFICATE-----
MIIFsjCCBJqgAwIBAgIUF0u5JkuNG1f73hidilOX2AgP5k4wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMzUxZWVkOTlmZjQzOThhZTE0NmNmYTMzMTljNzY4YzBm
NzcwMGRiNzdmMzAxOTZmNmEwHhcNMjQxMDEwMDY0NDAxWhcNMjUxMDA5MDY0OTAx
WjAzMTEwLwYDVQQDEyg3MzBFMERDQ0M1Q0U0NTIwODk5NDI2OUEyMzc0RUJDNTRD
MTEzNUQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvcEgoa5ufT+l
O2N2b930+6BmvrxLddPjuX3GBc72k6x3PC3Lz7OwqFL/csW/6v/P64CPfkh5Mre1
Pe/mayQhU321n6+stnLHg04ZAMYZ2o6Ur80PbihIg0x9wMJeQX/Y3UYCAGMK6DsF
Cdz6ctDleIVeghNVcwvjaWKgjacRnEm3Wj9E4bOgruOlqXuf5svX8PhRRGDd+tLS
q0ZqxXwRqujJF3CshCeVcvg5f4rmKQEmkB0Iy2FxylGVQoV1GhhKkAZyB/ydihEj
jXl+w3v+rbtHZe3xWJ35YQHneIz2wE8MX3vriD4IMAvzmvT77siwn8mnmVrbLojO
M1KGkdKXbQIDAQABo4ICsjCCAq4wHQYDVR0OBBYEFHMODczFzkUgiZQmmiN068VM
ETXXMB8GA1UdIwQYMBaAFBCHDkwR2cquEGW/+yrg2c9FXBzbMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlOGJhYTU3OWMwMThiYjJjMWIxOWUwYzVlLzAv
MTA4NzBFNEMxMUQ5Q0FBRTEwNjVCRkZCMkFFMEQ5Q0Y0NTVDMUNEQi5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvODcxZGE0MGYtNzkzYS00YTQ1LWEwYTktOTc4MTQ4
MzIxYTA3L2Q3MDU4YjI2LWQ3N2MtNDAwNS04Y2I4LWY1ODc2ZDRjMGQxNS8zNTFl
ZWQ5OWZmNDM5OGFlMTQ2Y2ZhMzMxOWM3NjhjMGY3NzAwZGI3N2YzMDE5NmY2YS5j
ZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZThiYWE1NzljMDE4YmIy
YzFiMTllMGM1ZS8wLzMxMzYzMjJlMzIzMTM3MmUzMzMxMmUzMDJmMzIzNDJkMzIz
NDIwM2QzZTIwMzEzOTMwMzMzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO
AjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAKLZHzANBgkqhkiG9w0BAQsF
AAOCAQEApqlD0aeMpodbXMCQHgUMDlA1hCZbkeryGhtwJOrRTCm1p3qSuMVLvKUl
92T0RsONBdHIpYPZdFobJB2BNZv91BxXzFPDX4M+vYwthlh/QQmboXmUhGT/K5TF
INJ47hrFTzVBK/W9r2gRnWd1+uTwtf7T7kHNrHm/zcA4ocr2SO/77y7ElVgyJJQV
GSU1NcwmeaTs5bxZgKkXMtaIEFwNpKa9WyodpnpqmN2tjDBS1UqvlKisDMlAuq3e
t+aHsdne4x4v9a0jaEyGfDODxZb9Km5Ml4nQGWDL362kV2QDOtgUpCXZiV9s73AX
byfrLi4XWe13fZ/VpxrVGyZW96IMow==
-----END CERTIFICATE-----
Generated at Fri Nov 22 02:07:33 2024 by rpki-client on console-fra.rpki-client.org