Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8baa64a8018bae05840d043b/0/3137322e39392e32332e302f32342d3234203d3e20333938393632.roa
File:                     3137322e39392e32332e302f32342d3234203d3e20333938393632.roa (raw, json)
Hash identifier:          XhU7zeL8Ak1sCKa4D9V/awpSG7HpVrFlnjYtaxei47U=
Subject key identifier:   12:CA:70:75:6D:10:85:0E:E5:78:B8:34:F8:C8:B5:56:2F:44:FC:DF
Certificate issuer:       /CN=8aa800a814af0deb066a95f7996f83cd729a48d075b0952fbe
Certificate serial:       35E0F8CDC8B12B6EB00B7C41DC8B1AFB0B4915E9
Authority key identifier: 4A:65:9D:2B:D2:0D:70:6E:89:F0:E9:C8:A1:E8:22:F2:DD:AE:BE:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/946afd34-6971-423f-b22a-575e2c73ab27/8aa800a814af0deb066a95f7996f83cd729a48d075b0952fbe.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8baa64a8018bae05840d043b/0/3137322e39392e32332e302f32342d3234203d3e20333938393632.roa
Signing time:             Wed 09 Oct 2024 08:49:01 +0000
ROA not before:           Wed 09 Oct 2024 08:44:01 +0000
ROA not after:            Wed 08 Oct 2025 08:49:01 +0000
asID:                     398962
IP address blocks:        172.99.23.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8baa64a8018bae05840d043b/0/4A659D2BD20D706E89F0E9C8A1E822F2DDAEBE1F.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8baa64a8018bae05840d043b/0/4A659D2BD20D706E89F0E9C8A1E822F2DDAEBE1F.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/946afd34-6971-423f-b22a-575e2c73ab27/8aa800a814af0deb066a95f7996f83cd729a48d075b0952fbe.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/946afd34-6971-423f-b22a-575e2c73ab27/946afd34-6971-423f-b22a-575e2c73ab27.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/946afd34-6971-423f-b22a-575e2c73ab27/946afd34-6971-423f-b22a-575e2c73ab27.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/946afd34-6971-423f-b22a-575e2c73ab27.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 05:08:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:e0:f8:cd:c8:b1:2b:6e:b0:0b:7c:41:dc:8b:1a:fb:0b:49:15:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8aa800a814af0deb066a95f7996f83cd729a48d075b0952fbe
        Validity
            Not Before: Oct  9 08:44:01 2024 GMT
            Not After : Oct  8 08:49:01 2025 GMT
        Subject: CN=12CA70756D10850EE578B834F8C8B5562F44FCDF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:e1:9f:61:b3:ec:94:32:36:45:5e:e8:3f:aa:
                    ab:02:05:87:b4:12:05:9c:d0:ad:d4:12:cd:cb:88:
                    d8:be:0b:89:c3:a3:35:a2:1e:aa:6d:cb:fc:e0:bb:
                    18:35:55:08:14:fe:c6:b1:e0:8e:e5:4b:ff:f6:a6:
                    fa:a4:1c:bc:46:17:59:cd:86:a6:fa:33:0b:fb:ac:
                    43:de:b4:d5:c1:26:de:60:1b:ed:82:e4:1d:96:27:
                    38:25:61:14:16:4e:c5:ba:7f:b8:3c:3a:06:73:b4:
                    cd:39:18:5a:8e:70:31:83:80:b4:16:b3:aa:ca:31:
                    7c:6b:36:6b:73:08:c4:35:cd:5a:dc:3a:e3:4a:3c:
                    f1:91:17:20:a8:b1:81:5f:3f:67:08:a6:01:72:62:
                    6a:65:04:8d:ff:ea:d1:67:31:7c:33:5f:c2:ac:28:
                    fc:38:7b:be:a4:5e:2c:2f:80:fb:d8:7c:1b:6e:97:
                    4a:fb:e6:d3:20:71:86:4a:19:11:75:02:fb:36:46:
                    a8:58:bf:b2:f1:b4:4c:d1:89:9e:d5:2b:cd:05:97:
                    8c:2a:12:db:bf:e9:62:85:b5:e8:f7:dc:f8:af:1e:
                    87:73:9a:64:7c:c1:ac:17:e2:fe:fe:d5:62:5f:27:
                    d5:f7:74:1f:ec:73:3a:5a:4d:8a:17:0c:20:4c:da:
                    a5:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:CA:70:75:6D:10:85:0E:E5:78:B8:34:F8:C8:B5:56:2F:44:FC:DF
            X509v3 Authority Key Identifier:
                keyid:4A:65:9D:2B:D2:0D:70:6E:89:F0:E9:C8:A1:E8:22:F2:DD:AE:BE:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8baa64a8018bae05840d043b/0/4A659D2BD20D706E89F0E9C8A1E822F2DDAEBE1F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/946afd34-6971-423f-b22a-575e2c73ab27/8aa800a814af0deb066a95f7996f83cd729a48d075b0952fbe.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8baa64a8018bae05840d043b/0/3137322e39392e32332e302f32342d3234203d3e20333938393632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.99.23.0/24

    Signature Algorithm: sha256WithRSAEncryption
         10:08:53:68:64:c3:5e:d0:0b:28:48:e6:c6:63:cb:ff:77:5a:
         30:3a:86:1c:75:2e:ad:77:57:91:97:50:0a:b7:05:3d:37:2b:
         62:40:b9:54:4f:21:1f:a4:ca:9b:00:f3:57:55:31:09:4c:e1:
         27:d4:10:b7:f1:a7:44:41:68:83:c4:de:7f:28:56:86:a4:bb:
         4e:ab:98:79:47:c7:a9:2b:2a:0d:44:71:0b:6b:b1:68:71:a6:
         f1:fa:55:b9:03:1e:e0:f9:c1:0e:d9:a2:73:d1:2a:c5:f0:8e:
         ca:b8:1d:fd:94:65:23:60:4d:e6:d6:22:40:8f:7d:77:88:3b:
         e6:f9:3e:68:2e:93:aa:49:62:98:bc:db:25:ba:e4:d3:42:48:
         60:0d:96:ea:db:9a:a9:7f:4d:e8:37:75:af:97:c0:38:23:87:
         f2:fc:fa:0d:7b:f5:b1:bb:7e:2b:d3:42:c4:dc:64:34:93:fb:
         ca:f8:40:61:98:d9:6c:45:cf:e8:e3:65:7c:b7:1a:71:10:be:
         de:e4:14:72:02:29:e8:8a:4b:77:dd:ef:58:b7:6b:9f:5a:44:
         33:8e:fb:34:da:2b:94:c8:b2:af:e4:9e:d7:71:6c:c2:63:a7:
         f3:06:e8:70:4b:3c:6f:2a:fe:d9:dc:50:a7:31:7d:b1:55:8f:
         ce:8b:83:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 02:46:10 2024 by rpki-client on console-ams.rpki-client.org