Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf82d5e52101850b65b10b358b/0/3136372e3235332e34372e302f32342d3234203d3e20313333323130.roa
File:                     3136372e3235332e34372e302f32342d3234203d3e20313333323130.roa (raw, json)
Hash identifier:          uSTnURjVrsDcjed+4deQYz+UcFXCxZTyc8qEmj+RHQY=
Subject key identifier:   A8:91:3F:5C:15:C4:96:33:C2:B9:C4:C3:4E:33:3B:D0:13:20:C3:6D
Certificate issuer:       /CN=ed199e1daadbcd50649091bf3c154099a326233862ce25c671
Certificate serial:       7F5CACAFB6572A146176A92D5646CDCA9A5F4D19
Authority key identifier: B3:2D:01:46:71:A0:8A:F0:A5:5B:31:3E:AB:25:A8:2E:DD:40:2A:98
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c6babe0-c981-4c51-971c-b56bd0722eb1/ed199e1daadbcd50649091bf3c154099a326233862ce25c671.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf82d5e52101850b65b10b358b/0/3136372e3235332e34372e302f32342d3234203d3e20313333323130.roa
Signing time:             Thu 14 Nov 2024 06:31:40 +0000
ROA not before:           Thu 14 Nov 2024 06:26:40 +0000
ROA not after:            Thu 13 Nov 2025 06:31:40 +0000
asID:                     133210
IP address blocks:        167.253.47.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf82d5e52101850b65b10b358b/0/B32D014671A08AF0A55B313EAB25A82EDD402A98.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf82d5e52101850b65b10b358b/0/B32D014671A08AF0A55B313EAB25A82EDD402A98.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c6babe0-c981-4c51-971c-b56bd0722eb1/ed199e1daadbcd50649091bf3c154099a326233862ce25c671.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c6babe0-c981-4c51-971c-b56bd0722eb1/5c6babe0-c981-4c51-971c-b56bd0722eb1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c6babe0-c981-4c51-971c-b56bd0722eb1/5c6babe0-c981-4c51-971c-b56bd0722eb1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c6babe0-c981-4c51-971c-b56bd0722eb1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 17:41:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:5c:ac:af:b6:57:2a:14:61:76:a9:2d:56:46:cd:ca:9a:5f:4d:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed199e1daadbcd50649091bf3c154099a326233862ce25c671
        Validity
            Not Before: Nov 14 06:26:40 2024 GMT
            Not After : Nov 13 06:31:40 2025 GMT
        Subject: CN=A8913F5C15C49633C2B9C4C34E333BD01320C36D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:76:af:78:32:37:a5:1f:cb:8a:37:8b:1e:75:
                    a7:3b:16:2d:5f:e9:d2:29:7b:5c:ce:a4:2b:d6:93:
                    8a:8f:b8:b6:b9:26:2f:f5:7d:2e:62:b6:46:17:76:
                    52:ac:9e:90:a6:72:22:97:69:ef:c7:4e:36:5d:2e:
                    a3:9d:22:11:be:81:4c:e8:20:41:a5:db:8d:48:26:
                    0f:3d:3b:a6:ad:7f:3f:32:39:80:05:e1:af:52:e3:
                    df:df:65:e1:82:66:7f:53:25:9a:cd:1a:7c:10:0a:
                    1f:be:91:f9:98:f4:d3:5b:f8:47:cd:60:2a:31:13:
                    30:5c:ac:b8:04:17:54:9e:3d:03:4e:e8:8d:41:7c:
                    9b:50:ec:fd:07:fc:0d:c4:59:6d:0b:4e:9f:55:68:
                    3d:e5:3d:56:68:31:73:b5:01:17:fd:6f:1a:c6:fb:
                    1f:44:8b:f6:d1:93:61:dd:60:8e:f6:5e:44:c8:1f:
                    bf:c4:ac:c8:06:c1:52:a2:4a:86:73:6c:22:b7:ac:
                    0b:81:65:6a:41:81:d0:ba:0c:d7:e4:7e:dd:6e:02:
                    5a:08:46:14:f2:49:5a:8d:73:65:aa:51:7d:1a:d6:
                    3f:8d:f6:60:dc:55:f7:ee:79:6b:b3:39:15:99:d5:
                    c8:15:c4:29:03:56:de:3c:30:0b:b3:3d:59:13:ab:
                    83:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:91:3F:5C:15:C4:96:33:C2:B9:C4:C3:4E:33:3B:D0:13:20:C3:6D
            X509v3 Authority Key Identifier:
                keyid:B3:2D:01:46:71:A0:8A:F0:A5:5B:31:3E:AB:25:A8:2E:DD:40:2A:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf82d5e52101850b65b10b358b/0/B32D014671A08AF0A55B313EAB25A82EDD402A98.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c6babe0-c981-4c51-971c-b56bd0722eb1/ed199e1daadbcd50649091bf3c154099a326233862ce25c671.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf82d5e52101850b65b10b358b/0/3136372e3235332e34372e302f32342d3234203d3e20313333323130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.253.47.0/24

    Signature Algorithm: sha256WithRSAEncryption
         24:e0:77:2a:66:d9:8f:c8:85:38:f5:64:eb:1b:4a:63:01:c0:
         d6:83:28:cd:9d:09:da:04:a0:bf:db:72:f7:b8:37:d5:39:fb:
         c5:05:9f:4d:7a:75:9c:08:0c:cc:f0:79:84:e0:07:50:bc:27:
         0e:b6:bb:14:df:4f:94:30:25:59:a9:3f:b0:0d:23:78:a8:a7:
         13:fc:06:5d:be:2f:21:c9:16:bd:c1:5a:a9:45:75:3d:49:ad:
         7f:c2:c4:fe:88:d2:4f:5d:a6:04:11:bf:08:56:63:1d:d0:5f:
         ef:9f:40:ff:b9:42:b8:b4:ef:53:e0:0f:5a:4b:6e:71:19:be:
         d3:b6:e1:12:a7:af:80:ee:18:5d:2d:0f:89:02:8a:5e:82:0b:
         d2:1e:57:ef:29:3d:67:f6:cf:b2:9a:c0:7e:57:4d:fa:81:25:
         d1:ed:18:ac:46:7e:8d:c5:64:bd:8d:25:d9:58:e0:8b:11:83:
         9f:22:28:3a:4b:bb:17:80:a0:3f:60:f2:46:1e:9d:2e:25:40:
         91:5f:c7:29:98:8f:90:45:db:3b:f1:7f:4c:55:4d:79:ae:e2:
         41:f4:6a:7c:1a:82:32:f1:71:c0:da:98:66:e9:b9:c6:7b:ce:
         7f:d0:e7:ef:cf:84:27:b9:5b:5c:88:10:0e:99:d0:67:1a:38:
         20:04:3e:3c
-----BEGIN CERTIFICATE-----
MIIFtDCCBJygAwIBAgIUf1ysr7ZXKhRhdqktVkbNyppfTRkwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZWQxOTllMWRhYWRiY2Q1MDY0OTA5MWJmM2MxNTQwOTlh
MzI2MjMzODYyY2UyNWM2NzEwHhcNMjQxMTE0MDYyNjQwWhcNMjUxMTEzMDYzMTQw
WjAzMTEwLwYDVQQDEyhBODkxM0Y1QzE1QzQ5NjMzQzJCOUM0QzM0RTMzM0JEMDEz
MjBDMzZEMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA13aveDI3pR/L
ijeLHnWnOxYtX+nSKXtczqQr1pOKj7i2uSYv9X0uYrZGF3ZSrJ6QpnIil2nvx042
XS6jnSIRvoFM6CBBpduNSCYPPTumrX8/MjmABeGvUuPf32XhgmZ/UyWazRp8EAof
vpH5mPTTW/hHzWAqMRMwXKy4BBdUnj0DTuiNQXybUOz9B/wNxFltC06fVWg95T1W
aDFztQEX/W8axvsfRIv20ZNh3WCO9l5EyB+/xKzIBsFSokqGc2wit6wLgWVqQYHQ
ugzX5H7dbgJaCEYU8klajXNlqlF9GtY/jfZg3FX37nlrszkVmdXIFcQpA1bePDAL
sz1ZE6uDnwIDAQABo4ICtDCCArAwHQYDVR0OBBYEFKiRP1wVxJYzwrnEw04zO9AT
IMNtMB8GA1UdIwQYMBaAFLMtAUZxoIrwpVsxPqslqC7dQCqYMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmODJkNWU1MjEwMTg1MGI2NWIxMGIzNThiLzAv
QjMyRDAxNDY3MUEwOEFGMEE1NUIzMTNFQUIyNUE4MkVERDQwMkE5OC5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0
OTMzYWU1LzVjNmJhYmUwLWM5ODEtNGM1MS05NzFjLWI1NmJkMDcyMmViMS9lZDE5
OWUxZGFhZGJjZDUwNjQ5MDkxYmYzYzE1NDA5OWEzMjYyMzM4NjJjZTI1YzY3MS5j
ZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjgyZDVlNTIxMDE4NTBi
NjViMTBiMzU4Yi8wLzMxMzYzNzJlMzIzNTMzMmUzNDM3MmUzMDJmMzIzNDJkMzIz
NDIwM2QzZTIwMzEzMzMzMzIzMTMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAp/0vMA0GCSqGSIb3DQEB
CwUAA4IBAQAk4HcqZtmPyIU49WTrG0pjAcDWgyjNnQnaBKC/23L3uDfVOfvFBZ9N
enWcCAzM8HmE4AdQvCcOtrsU30+UMCVZqT+wDSN4qKcT/AZdvi8hyRa9wVqpRXU9
Sa1/wsT+iNJPXaYEEb8IVmMd0F/vn0D/uUK4tO9T4A9aS25xGb7TtuESp6+A7hhd
LQ+JAopeggvSHlfvKT1n9s+ymsB+V036gSXR7RisRn6NxWS9jSXZWOCLEYOfIig6
S7sXgKA/YPJGHp0uJUCRX8cpmI+QRds78X9MVU15ruJB9Gp8GoIy8XHA2phm6bnG
e85/0Ofvz4QnuVtciBAOmdBnGjggBD48
-----END CERTIFICATE-----
Generated at Thu Nov 21 18:49:11 2024 by rpki-client on console-ams.rpki-client.org