Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8588029e0185d07c5f6044eb/0/37342e3132302e3132332e302f32342d3234203d3e203534323532.roa
File:                     37342e3132302e3132332e302f32342d3234203d3e203534323532.roa (raw, json)
Hash identifier:          H/6exyBUJR3iUazpTAYmaSv5zMKoFG9GGjcSDJ7cXFQ=
Subject key identifier:   01:87:51:3F:51:75:F8:39:A2:D5:A2:9E:81:62:13:59:43:38:88:43
Certificate issuer:       /CN=9995ba05e90aa3951d9ab39d9355b6b683e32e6a19adf153f2
Certificate serial:       288ACA55FF4796E62189D1CEC521113241D272D8
Authority key identifier: 35:14:EE:D0:EE:5C:55:34:23:A2:5F:1D:7D:56:FC:26:13:11:A1:EB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/907e0105-3516-47a0-a9c2-5f0b77661cb1/9995ba05e90aa3951d9ab39d9355b6b683e32e6a19adf153f2.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8588029e0185d07c5f6044eb/0/37342e3132302e3132332e302f32342d3234203d3e203534323532.roa
Signing time:             Wed 06 Nov 2024 19:54:23 +0000
ROA not before:           Wed 06 Nov 2024 19:49:23 +0000
ROA not after:            Wed 05 Nov 2025 19:54:23 +0000
asID:                     54252
IP address blocks:        74.120.123.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8588029e0185d07c5f6044eb/0/3514EED0EE5C553423A25F1D7D56FC261311A1EB.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8588029e0185d07c5f6044eb/0/3514EED0EE5C553423A25F1D7D56FC261311A1EB.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/907e0105-3516-47a0-a9c2-5f0b77661cb1/9995ba05e90aa3951d9ab39d9355b6b683e32e6a19adf153f2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/907e0105-3516-47a0-a9c2-5f0b77661cb1/907e0105-3516-47a0-a9c2-5f0b77661cb1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/907e0105-3516-47a0-a9c2-5f0b77661cb1/907e0105-3516-47a0-a9c2-5f0b77661cb1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/907e0105-3516-47a0-a9c2-5f0b77661cb1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 00:26:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:8a:ca:55:ff:47:96:e6:21:89:d1:ce:c5:21:11:32:41:d2:72:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9995ba05e90aa3951d9ab39d9355b6b683e32e6a19adf153f2
        Validity
            Not Before: Nov  6 19:49:23 2024 GMT
            Not After : Nov  5 19:54:23 2025 GMT
        Subject: CN=0187513F5175F839A2D5A29E8162135943388843
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:54:e7:98:40:63:db:8e:fd:ff:89:10:54:f9:
                    76:48:d2:87:6e:3c:92:41:8e:80:53:a4:a6:6a:f3:
                    21:0c:20:b1:51:f2:ee:df:1e:81:61:80:f1:8d:bd:
                    54:c2:77:e1:3b:44:79:7d:c6:36:47:90:dd:78:fd:
                    64:f8:be:d7:1f:20:d8:01:76:66:17:4a:88:1a:1d:
                    7e:dd:ac:98:66:8c:97:e8:eb:79:01:f5:8d:67:34:
                    ac:84:15:c2:c5:1c:cb:00:d7:4b:1d:ad:f0:ba:8c:
                    cc:97:2d:b1:36:f4:71:8f:3c:44:8e:4d:54:f1:1b:
                    49:9d:d8:c3:d3:e4:9c:ea:9f:6d:24:83:cf:ba:71:
                    77:1d:f8:a4:4a:ec:27:78:f9:d1:ac:0d:ab:63:4c:
                    20:74:b9:99:bd:5b:e7:a1:95:79:45:34:e6:37:33:
                    f3:c9:72:37:df:25:63:ae:68:5c:73:af:4b:f8:45:
                    b7:1e:8c:d5:f8:b2:dc:ec:15:8e:0b:cf:59:dd:47:
                    36:87:14:98:e6:2a:51:98:76:ea:9b:94:91:24:2c:
                    55:d3:4c:34:cc:66:1c:b6:42:10:9d:a6:c8:42:52:
                    37:7a:04:b8:06:c2:6f:2a:c4:04:1a:7b:a7:e0:e7:
                    e5:eb:ce:8c:45:c4:cb:9b:e0:a2:17:e3:f3:09:7e:
                    97:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:87:51:3F:51:75:F8:39:A2:D5:A2:9E:81:62:13:59:43:38:88:43
            X509v3 Authority Key Identifier:
                keyid:35:14:EE:D0:EE:5C:55:34:23:A2:5F:1D:7D:56:FC:26:13:11:A1:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8588029e0185d07c5f6044eb/0/3514EED0EE5C553423A25F1D7D56FC261311A1EB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/907e0105-3516-47a0-a9c2-5f0b77661cb1/9995ba05e90aa3951d9ab39d9355b6b683e32e6a19adf153f2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8588029e0185d07c5f6044eb/0/37342e3132302e3132332e302f32342d3234203d3e203534323532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.120.123.0/24

    Signature Algorithm: sha256WithRSAEncryption
         af:ff:f2:a9:63:fb:20:46:ed:67:de:79:e6:6a:b0:4a:b3:9a:
         e5:ea:b7:97:e5:89:10:ac:db:19:89:83:0f:e7:b4:38:3b:48:
         95:34:39:85:75:fc:b4:09:7f:32:5d:15:d0:f3:45:cc:37:07:
         59:f8:e5:0b:28:a9:03:93:99:c8:d6:ba:1a:73:34:4a:f5:12:
         7f:2d:c8:97:4f:a6:d6:bb:68:2f:55:08:e3:04:f8:95:16:4b:
         10:db:12:4f:b8:2b:4e:c4:a4:1b:66:62:54:ee:de:9e:e1:b9:
         2d:db:e1:47:3c:cd:72:03:4f:d4:f6:fe:9f:76:6a:31:dc:01:
         e8:0d:a3:99:3b:86:28:87:41:d1:09:9d:e3:4b:9e:99:04:82:
         96:a2:d0:84:4e:3b:7e:be:a0:14:f6:eb:8e:9b:80:23:01:e7:
         f1:11:4e:d2:5b:3a:77:3b:a3:f6:35:ac:49:90:96:ac:e1:7f:
         77:2c:94:be:4c:27:f8:63:40:c1:71:0d:5b:2c:d8:02:c6:a2:
         2e:8f:10:f6:be:27:25:1d:c1:81:f1:0d:d9:f9:a9:8b:59:a9:
         0e:4f:d5:56:36:8b:e1:d3:be:01:24:84:09:62:91:e5:84:ad:
         58:f2:e2:a3:54:83:d2:f8:5a:a0:7d:ff:fa:44:51:aa:b3:e7:
         11:fa:5e:c6
-----BEGIN CERTIFICATE-----
MIIFsjCCBJqgAwIBAgIUKIrKVf9HluYhidHOxSERMkHSctgwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyOTk5NWJhMDVlOTBhYTM5NTFkOWFiMzlkOTM1NWI2YjY4
M2UzMmU2YTE5YWRmMTUzZjIwHhcNMjQxMTA2MTk0OTIzWhcNMjUxMTA1MTk1NDIz
WjAzMTEwLwYDVQQDEygwMTg3NTEzRjUxNzVGODM5QTJENUEyOUU4MTYyMTM1OTQz
Mzg4ODQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr1TnmEBj2479
/4kQVPl2SNKHbjySQY6AU6SmavMhDCCxUfLu3x6BYYDxjb1UwnfhO0R5fcY2R5Dd
eP1k+L7XHyDYAXZmF0qIGh1+3ayYZoyX6Ot5AfWNZzSshBXCxRzLANdLHa3wuozM
ly2xNvRxjzxEjk1U8RtJndjD0+Sc6p9tJIPPunF3HfikSuwnePnRrA2rY0wgdLmZ
vVvnoZV5RTTmNzPzyXI33yVjrmhcc69L+EW3HozV+LLc7BWOC89Z3Uc2hxSY5ipR
mHbqm5SRJCxV00w0zGYctkIQnabIQlI3egS4BsJvKsQEGnun4Ofl686MRcTLm+Ci
F+PzCX6XmQIDAQABo4ICsjCCAq4wHQYDVR0OBBYEFAGHUT9Rdfg5otWinoFiE1lD
OIhDMB8GA1UdIwQYMBaAFDUU7tDuXFU0I6JfHX1W/CYTEaHrMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmODU4ODAyOWUwMTg1ZDA3YzVmNjA0NGViLzAv
MzUxNEVFRDBFRTVDNTUzNDIzQTI1RjFEN0Q1NkZDMjYxMzExQTFFQi5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi
MGI4NDE1LzkwN2UwMTA1LTM1MTYtNDdhMC1hOWMyLTVmMGI3NzY2MWNiMS85OTk1
YmEwNWU5MGFhMzk1MWQ5YWIzOWQ5MzU1YjZiNjgzZTMyZTZhMTlhZGYxNTNmMi5j
ZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1ODgwMjllMDE4NWQw
N2M1ZjYwNDRlYi8wLzM3MzQyZTMxMzIzMDJlMzEzMjMzMmUzMDJmMzIzNDJkMzIz
NDIwM2QzZTIwMzUzNDMyMzUzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO
AjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAEp4ezANBgkqhkiG9w0BAQsF
AAOCAQEAr//yqWP7IEbtZ9555mqwSrOa5eq3l+WJEKzbGYmDD+e0ODtIlTQ5hXX8
tAl/Ml0V0PNFzDcHWfjlCyipA5OZyNa6GnM0SvUSfy3Il0+m1rtoL1UI4wT4lRZL
ENsST7grTsSkG2ZiVO7enuG5LdvhRzzNcgNP1Pb+n3ZqMdwB6A2jmTuGKIdB0Qmd
40uemQSClqLQhE47fr6gFPbrjpuAIwHn8RFO0ls6dzuj9jWsSZCWrOF/dyyUvkwn
+GNAwXENWyzYAsaiLo8Q9r4nJR3BgfEN2fmpi1mpDk/VVjaL4dO+ASSECWKR5YSt
WPLio1SD0vhaoH3/+kRRqrPnEfpexg==
-----END CERTIFICATE-----
Generated at Fri Nov 22 00:23:28 2024 by rpki-client on console-fra.rpki-client.org