Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8baa579c018bb2c1b19e0c5e/0/3136322e3231372e33312e302f32342d3234203d3e203139303339.roa
File:                     3136322e3231372e33312e302f32342d3234203d3e203139303339.roa (raw, json)
Hash identifier:          iO8E4gBeHwfC13pPUTrU5oldpcAPDjCS0FU4JGHRTA0=
Subject key identifier:   34:37:7E:F2:B1:F9:D3:9F:5B:79:33:79:F4:C1:CF:CB:C1:DF:69:95
Certificate issuer:       /CN=351eed99ff4398ae146cfa3319c768c0f7700db77f30196f6a
Certificate serial:       42672C031D358A2C9884192D7EFDBB536C2D22E0
Authority key identifier: 10:87:0E:4C:11:D9:CA:AE:10:65:BF:FB:2A:E0:D9:CF:45:5C:1C:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d7058b26-d77c-4005-8cb8-f5876d4c0d15/351eed99ff4398ae146cfa3319c768c0f7700db77f30196f6a.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8baa579c018bb2c1b19e0c5e/0/3136322e3231372e33312e302f32342d3234203d3e203139303339.roa
Signing time:             Thu 09 Nov 2023 06:26:07 +0000
ROA not before:           Thu 09 Nov 2023 06:21:07 +0000
ROA not after:            Thu 07 Nov 2024 06:26:07 +0000
asID:                     19039
IP address blocks:        162.217.31.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade8baa579c018bb2c1b19e0c5e/0/10870E4C11D9CAAE1065BFFB2AE0D9CF455C1CDB.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade8baa579c018bb2c1b19e0c5e/0/10870E4C11D9CAAE1065BFFB2AE0D9CF455C1CDB.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d7058b26-d77c-4005-8cb8-f5876d4c0d15/351eed99ff4398ae146cfa3319c768c0f7700db77f30196f6a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d7058b26-d77c-4005-8cb8-f5876d4c0d15/d7058b26-d77c-4005-8cb8-f5876d4c0d15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d7058b26-d77c-4005-8cb8-f5876d4c0d15/d7058b26-d77c-4005-8cb8-f5876d4c0d15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d7058b26-d77c-4005-8cb8-f5876d4c0d15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 03 Jun 2024 09:01:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:67:2c:03:1d:35:8a:2c:98:84:19:2d:7e:fd:bb:53:6c:2d:22:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=351eed99ff4398ae146cfa3319c768c0f7700db77f30196f6a
        Validity
            Not Before: Nov  9 06:21:07 2023 GMT
            Not After : Nov  7 06:26:07 2024 GMT
        Subject: CN=34377EF2B1F9D39F5B793379F4C1CFCBC1DF6995
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:13:24:91:31:e9:4f:d8:4f:c0:aa:fe:46:ae:
                    0f:0e:96:7d:67:ec:e7:dc:39:0b:af:bb:2e:0f:6c:
                    21:46:1c:d9:f0:52:e9:7d:5c:74:8d:3a:e6:f4:6b:
                    26:26:d1:45:0d:a0:ab:74:b5:49:27:95:14:70:34:
                    7c:c9:20:0b:63:ef:4c:f7:a6:b2:27:f2:1b:fe:5e:
                    46:00:af:a8:f3:4d:56:d0:5c:da:61:cf:53:88:6c:
                    eb:79:94:8c:c3:bf:2c:8d:4d:a2:f3:82:8b:ef:b6:
                    32:6e:70:b6:87:57:a7:be:60:b6:5c:35:79:ec:14:
                    cd:7b:b1:2d:fd:d6:f1:f4:35:94:78:3c:71:d1:13:
                    85:7b:af:6a:79:78:f4:83:9d:ac:a7:2e:35:88:2f:
                    e0:e8:78:2d:3a:53:5f:5e:0a:b2:65:15:01:03:a8:
                    6a:92:24:41:ef:ca:ba:f7:7f:e7:d9:14:63:b0:bf:
                    24:31:29:5b:e8:2f:d7:e3:a4:8f:b1:f2:86:f1:65:
                    ad:e1:fb:0f:81:30:9d:a1:16:2e:b0:cc:cd:f9:56:
                    71:0d:7b:8a:5f:d0:1a:bf:99:5f:b5:86:55:a5:51:
                    d7:f3:2c:83:d9:11:e8:97:b0:af:6f:f5:90:79:c2:
                    63:82:73:f7:db:17:74:38:91:db:fb:96:b5:bd:58:
                    bc:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:37:7E:F2:B1:F9:D3:9F:5B:79:33:79:F4:C1:CF:CB:C1:DF:69:95
            X509v3 Authority Key Identifier:
                keyid:10:87:0E:4C:11:D9:CA:AE:10:65:BF:FB:2A:E0:D9:CF:45:5C:1C:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8baa579c018bb2c1b19e0c5e/0/10870E4C11D9CAAE1065BFFB2AE0D9CF455C1CDB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d7058b26-d77c-4005-8cb8-f5876d4c0d15/351eed99ff4398ae146cfa3319c768c0f7700db77f30196f6a.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8baa579c018bb2c1b19e0c5e/0/3136322e3231372e33312e302f32342d3234203d3e203139303339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.217.31.0/24

    Signature Algorithm: sha256WithRSAEncryption
         34:65:f6:43:c6:1c:a1:e2:fd:37:3d:e2:b1:48:c8:ea:71:62:
         0d:9e:ad:4c:1a:29:e4:70:ad:d1:00:fb:fc:35:a2:a1:cb:5b:
         c5:d8:e3:1c:e9:07:b0:18:87:1f:ed:fc:19:dc:02:f8:c6:51:
         9c:26:b5:67:f8:10:1c:7e:c7:cc:7d:5d:c3:86:f1:71:31:40:
         59:c3:9f:ba:eb:48:7a:1d:ab:eb:62:37:c7:bf:60:79:3d:2a:
         e0:c8:d5:85:c4:d2:d6:65:8b:3c:de:f0:92:fb:5c:e9:75:c1:
         03:df:ac:9d:dd:db:04:10:67:72:62:c2:93:e7:d4:ba:71:a9:
         1c:58:47:a7:14:0f:aa:16:65:e8:84:6c:67:9a:3a:46:3d:d3:
         73:0f:5a:5f:2b:04:0e:de:43:35:8e:de:48:ce:6b:6b:3b:3f:
         b0:cf:f7:ce:65:0f:f4:f2:fb:5d:00:9f:87:ee:64:23:9a:49:
         19:b5:01:52:10:1e:2a:4f:5e:31:ac:c8:cb:c8:6d:2a:34:49:
         84:95:20:57:32:bb:a7:0c:c8:dc:bc:aa:7b:02:af:a3:df:f6:
         37:63:dc:38:7f:4a:00:88:45:57:03:82:04:b0:25:1e:da:84:
         55:1b:b7:13:0f:26:2d:5c:85:5b:22:08:d0:16:0c:92:48:44:
         30:40:41:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 09:14:51 2024 by rpki-client on console-ams.rpki-client.org