Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8baa64a8018bae05840d043b/0/3137322e39392e32312e302f32342d3234203d3e20323132323338.roa
File:                     3137322e39392e32312e302f32342d3234203d3e20323132323338.roa (raw, json)
Hash identifier:          ubWE5Yf3YWhn8bf7pQeSVUJZwiYWxXMa7Qa3wIk4V2Y=
Subject key identifier:   39:58:74:5E:DC:B8:0F:25:4D:7F:81:4B:79:55:50:B4:AE:53:83:57
Certificate issuer:       /CN=8aa800a814af0deb066a95f7996f83cd729a48d075b0952fbe
Certificate serial:       438F5E24A08BD23F6F386EA8C8F7EA8DF1A45E14
Authority key identifier: 4A:65:9D:2B:D2:0D:70:6E:89:F0:E9:C8:A1:E8:22:F2:DD:AE:BE:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/946afd34-6971-423f-b22a-575e2c73ab27/8aa800a814af0deb066a95f7996f83cd729a48d075b0952fbe.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8baa64a8018bae05840d043b/0/3137322e39392e32312e302f32342d3234203d3e20323132323338.roa
Signing time:             Wed 08 Nov 2023 08:34:08 +0000
ROA not before:           Wed 08 Nov 2023 08:29:08 +0000
ROA not after:            Wed 06 Nov 2024 08:34:08 +0000
asID:                     212238
IP address blocks:        172.99.21.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8baa64a8018bae05840d043b/0/4A659D2BD20D706E89F0E9C8A1E822F2DDAEBE1F.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8baa64a8018bae05840d043b/0/4A659D2BD20D706E89F0E9C8A1E822F2DDAEBE1F.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/946afd34-6971-423f-b22a-575e2c73ab27/8aa800a814af0deb066a95f7996f83cd729a48d075b0952fbe.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/946afd34-6971-423f-b22a-575e2c73ab27/946afd34-6971-423f-b22a-575e2c73ab27.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/946afd34-6971-423f-b22a-575e2c73ab27/946afd34-6971-423f-b22a-575e2c73ab27.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/946afd34-6971-423f-b22a-575e2c73ab27.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 29 Apr 2024 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:8f:5e:24:a0:8b:d2:3f:6f:38:6e:a8:c8:f7:ea:8d:f1:a4:5e:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8aa800a814af0deb066a95f7996f83cd729a48d075b0952fbe
        Validity
            Not Before: Nov  8 08:29:08 2023 GMT
            Not After : Nov  6 08:34:08 2024 GMT
        Subject: CN=3958745EDCB80F254D7F814B795550B4AE538357
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:12:d0:23:f7:2d:11:7f:35:b2:d5:d3:0b:8a:
                    fc:5c:f3:52:8f:26:2b:8b:08:2a:47:0c:91:5f:58:
                    00:71:12:d7:68:92:98:96:0a:61:1b:da:01:29:22:
                    f0:da:71:12:e1:bf:75:60:0a:ea:50:51:15:27:14:
                    47:d8:3c:c5:6d:df:05:66:04:f8:1d:cf:82:cf:0f:
                    69:0a:b5:64:9b:46:d6:6e:5b:73:ae:b9:e4:69:2f:
                    a0:d6:b6:63:12:8b:11:d5:3c:f1:fd:08:71:d1:dc:
                    a2:cc:d7:7b:0d:a4:aa:7f:9c:6d:d1:72:ef:c4:6a:
                    09:f5:cf:a6:a5:40:bd:70:01:82:77:87:ac:ab:fb:
                    de:ba:2f:cf:d7:9e:0e:a5:e6:cb:ad:58:39:77:71:
                    f1:df:5b:c8:71:40:60:38:62:92:27:f5:2f:57:e7:
                    2e:ca:65:bb:da:f8:ca:d3:20:a3:a4:83:da:b8:24:
                    0d:e8:22:3f:0e:db:ee:45:f2:6a:c3:e1:5c:00:20:
                    d3:90:a3:e8:d4:35:2a:b2:36:4c:80:30:ed:74:b8:
                    59:fd:65:cb:75:1b:27:c9:64:dd:fb:6e:37:2a:26:
                    f2:80:b7:55:25:68:ca:bc:b1:01:7e:a6:12:32:2b:
                    f1:c7:b1:6f:34:94:ee:13:26:b6:04:48:b7:3e:d5:
                    06:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:58:74:5E:DC:B8:0F:25:4D:7F:81:4B:79:55:50:B4:AE:53:83:57
            X509v3 Authority Key Identifier:
                keyid:4A:65:9D:2B:D2:0D:70:6E:89:F0:E9:C8:A1:E8:22:F2:DD:AE:BE:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8baa64a8018bae05840d043b/0/4A659D2BD20D706E89F0E9C8A1E822F2DDAEBE1F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/946afd34-6971-423f-b22a-575e2c73ab27/8aa800a814af0deb066a95f7996f83cd729a48d075b0952fbe.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8baa64a8018bae05840d043b/0/3137322e39392e32312e302f32342d3234203d3e20323132323338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.99.21.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7e:a7:87:07:27:44:9e:99:1d:c6:eb:5a:7f:7e:5d:de:21:db:
         1b:8c:c6:14:31:6d:7c:16:c1:b3:2f:52:95:19:5d:30:d3:e3:
         59:26:c5:db:88:0e:17:02:55:b4:01:04:77:95:9f:fa:9f:90:
         0c:60:d0:08:66:28:41:a8:c0:de:e9:0c:2f:74:37:c2:b5:ac:
         ff:af:75:d6:e3:78:91:8d:7d:b9:25:c5:f4:d7:2f:c8:2b:16:
         93:f4:9f:aa:83:58:df:83:ee:fb:0c:c2:cf:91:e0:36:36:bc:
         26:69:51:9e:5c:2f:85:c4:68:86:79:0c:85:97:85:07:39:67:
         7a:54:6b:3a:81:35:77:67:d8:cc:44:5e:77:3f:83:4e:26:6e:
         3a:d8:10:5c:61:19:28:f6:7d:86:8d:46:df:70:72:42:37:b4:
         75:f3:3b:a8:63:b5:24:eb:3a:57:22:de:1b:83:88:eb:3a:3c:
         08:e8:ae:5d:aa:04:c0:c5:a1:e0:aa:f1:73:3b:d4:74:65:0c:
         f9:6e:a6:86:62:a8:eb:e4:00:1d:ec:85:0d:12:0a:b0:e1:d0:
         6f:de:78:61:ba:d8:74:b4:65:f3:4b:c3:1c:59:6d:e6:76:d8:
         8a:51:51:fb:e5:03:22:9f:c7:cb:92:7b:5c:6d:2a:0d:21:fc:
         5c:1e:64:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 06:31:28 2024 by rpki-client on console-ams.rpki-client.org