Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8baa64a8018bae05840d043b/0/3137322e39392e32322e302f32342d3234203d3e203634323637.roa
File:                     3137322e39392e32322e302f32342d3234203d3e203634323637.roa (raw, json)
Hash identifier:          tzPDLnPq5yXmk8PxouQRE8ht64uC+eF7ocrVEA3/Fgw=
Subject key identifier:   9A:0B:ED:62:2A:45:F6:8D:E5:2E:F5:37:64:B0:E2:C7:C3:2D:16:31
Certificate issuer:       /CN=8aa800a814af0deb066a95f7996f83cd729a48d075b0952fbe
Certificate serial:       782BBA930768D4590590106D8DBE1B3D11FDB847
Authority key identifier: 4A:65:9D:2B:D2:0D:70:6E:89:F0:E9:C8:A1:E8:22:F2:DD:AE:BE:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/946afd34-6971-423f-b22a-575e2c73ab27/8aa800a814af0deb066a95f7996f83cd729a48d075b0952fbe.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8baa64a8018bae05840d043b/0/3137322e39392e32322e302f32342d3234203d3e203634323637.roa
Signing time:             Fri 06 Sep 2024 16:32:05 +0000
ROA not before:           Fri 06 Sep 2024 16:27:05 +0000
ROA not after:            Fri 05 Sep 2025 16:32:05 +0000
asID:                     64267
IP address blocks:        172.99.22.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8baa64a8018bae05840d043b/0/4A659D2BD20D706E89F0E9C8A1E822F2DDAEBE1F.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8baa64a8018bae05840d043b/0/4A659D2BD20D706E89F0E9C8A1E822F2DDAEBE1F.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/946afd34-6971-423f-b22a-575e2c73ab27/8aa800a814af0deb066a95f7996f83cd729a48d075b0952fbe.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/946afd34-6971-423f-b22a-575e2c73ab27/946afd34-6971-423f-b22a-575e2c73ab27.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/946afd34-6971-423f-b22a-575e2c73ab27/946afd34-6971-423f-b22a-575e2c73ab27.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/946afd34-6971-423f-b22a-575e2c73ab27.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 00:39:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:2b:ba:93:07:68:d4:59:05:90:10:6d:8d:be:1b:3d:11:fd:b8:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8aa800a814af0deb066a95f7996f83cd729a48d075b0952fbe
        Validity
            Not Before: Sep  6 16:27:05 2024 GMT
            Not After : Sep  5 16:32:05 2025 GMT
        Subject: CN=9A0BED622A45F68DE52EF53764B0E2C7C32D1631
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:39:ad:35:23:4c:f8:e8:ee:d4:cf:25:4f:8b:
                    a7:d1:b6:45:32:c0:d8:eb:6a:07:59:52:6d:40:91:
                    7b:f5:44:05:2e:39:5b:03:88:a3:c0:0f:c8:c2:12:
                    a5:9f:3c:f1:81:fc:da:1c:b9:7c:68:87:78:f1:c7:
                    5b:ce:8b:19:61:1e:58:39:09:03:10:04:05:84:3e:
                    b7:ad:81:8a:dc:a8:f0:56:de:a4:1c:da:f9:14:81:
                    3c:05:a1:0d:fe:d7:d8:7e:e8:47:00:75:e8:9c:76:
                    3f:db:89:e0:0a:74:08:fb:84:72:5a:0c:f9:ae:ba:
                    b7:ed:e1:b0:c6:26:e8:46:26:26:17:ab:5c:95:e3:
                    a3:7e:d7:16:96:cb:e8:6f:c6:d5:e0:e6:fb:ab:35:
                    e5:b6:2e:a5:86:2b:bc:c5:ee:01:23:2d:b6:29:e2:
                    2e:81:27:26:11:b7:01:73:ce:f1:0b:50:6f:00:9e:
                    a7:b0:ea:cd:d6:d7:c3:53:0c:82:9f:7b:aa:7c:8a:
                    36:72:a9:50:1e:8e:31:61:a1:2a:e5:68:f5:5f:9f:
                    d6:ca:d0:f5:aa:ca:90:43:fe:4e:94:e5:64:c7:60:
                    f0:00:a3:c3:00:68:a3:9e:c8:4a:da:53:75:0a:c8:
                    16:4f:8d:81:35:b8:dd:b5:42:05:eb:df:ef:3b:1b:
                    c0:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:0B:ED:62:2A:45:F6:8D:E5:2E:F5:37:64:B0:E2:C7:C3:2D:16:31
            X509v3 Authority Key Identifier:
                keyid:4A:65:9D:2B:D2:0D:70:6E:89:F0:E9:C8:A1:E8:22:F2:DD:AE:BE:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8baa64a8018bae05840d043b/0/4A659D2BD20D706E89F0E9C8A1E822F2DDAEBE1F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/946afd34-6971-423f-b22a-575e2c73ab27/8aa800a814af0deb066a95f7996f83cd729a48d075b0952fbe.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8baa64a8018bae05840d043b/0/3137322e39392e32322e302f32342d3234203d3e203634323637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.99.22.0/24

    Signature Algorithm: sha256WithRSAEncryption
         45:0c:cb:fb:a3:0b:7c:75:97:aa:87:7f:6c:40:0a:c4:fe:81:
         67:c0:78:93:26:4e:f9:13:a3:21:2a:ed:f1:48:18:e0:9f:e0:
         61:57:18:1b:59:68:99:76:50:32:b7:8e:23:31:e2:17:d8:37:
         4e:3b:7e:1a:60:5d:fb:0c:3c:ba:54:b7:e2:f1:14:cc:1e:87:
         16:21:18:12:04:cc:c8:01:c7:58:6f:66:62:0d:2a:54:5f:b9:
         5c:8d:ee:02:99:88:43:3b:e9:93:ea:0b:38:46:8d:4f:7c:b2:
         6e:e1:24:a9:e1:fd:a6:6b:0e:f6:76:ce:45:37:c0:52:da:67:
         ac:f6:c7:12:bf:31:9b:49:65:bc:b0:f6:31:59:76:74:86:65:
         65:24:42:09:3c:d8:0e:67:c8:00:42:5e:11:ae:ca:67:7c:d4:
         e5:b5:28:5d:bf:4c:4d:51:d2:9e:3d:a7:7e:1a:20:ca:8c:e0:
         9f:16:db:3e:f9:ad:94:9a:f1:ef:27:12:97:b6:d1:68:64:35:
         fb:4b:ba:98:4b:50:5d:8b:2c:48:06:d4:98:3a:e9:a1:37:c4:
         83:ef:68:0a:8e:b1:97:7a:bd:84:8c:cc:6a:75:80:73:4c:c3:
         72:7f:48:ae:49:a3:bc:ed:91:60:ff:00:e1:32:42:b8:07:53:
         75:ac:ad:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 01:33:37 2024 by rpki-client on console-ams.rpki-client.org