Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8cea2ac6018dcc61b42651d6/0/3137332e3234392e3138382e302f32322d3234203d3e203230343733.roa
File:                     3137332e3234392e3138382e302f32322d3234203d3e203230343733.roa (raw, json)
Hash identifier:          i+LxgGU6yWS5y6LDIToSHMt8FTKrj5aKjv+4bMZfYhE=
Subject key identifier:   B2:84:C6:2A:91:B4:66:1F:ED:F7:D5:79:E1:B7:EA:63:91:7B:EF:4B
Certificate issuer:       /CN=d585ddc72480f69736d0dbfb4fb7bbbbea3025977ba96c315b
Certificate serial:       4748BFCD4083034F7F9449861F99B6235EC0CC59
Authority key identifier: 1E:92:70:97:F9:61:CD:62:C6:84:22:11:20:67:91:58:56:88:EA:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4016a9a5-6e7c-4633-a4c3-24ad1b7f0785/d585ddc72480f69736d0dbfb4fb7bbbbea3025977ba96c315b.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8cea2ac6018dcc61b42651d6/0/3137332e3234392e3138382e302f32322d3234203d3e203230343733.roa
Signing time:             Wed 21 Feb 2024 15:57:21 +0000
ROA not before:           Wed 21 Feb 2024 15:52:21 +0000
ROA not after:            Wed 19 Feb 2025 15:57:21 +0000
asID:                     20473
IP address blocks:        173.249.188.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8cea2ac6018dcc61b42651d6/0/1E927097F961CD62C6842211206791585688EA6B.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8cea2ac6018dcc61b42651d6/0/1E927097F961CD62C6842211206791585688EA6B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4016a9a5-6e7c-4633-a4c3-24ad1b7f0785/d585ddc72480f69736d0dbfb4fb7bbbbea3025977ba96c315b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4016a9a5-6e7c-4633-a4c3-24ad1b7f0785/4016a9a5-6e7c-4633-a4c3-24ad1b7f0785.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4016a9a5-6e7c-4633-a4c3-24ad1b7f0785/4016a9a5-6e7c-4633-a4c3-24ad1b7f0785.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4016a9a5-6e7c-4633-a4c3-24ad1b7f0785.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 04:13:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:48:bf:cd:40:83:03:4f:7f:94:49:86:1f:99:b6:23:5e:c0:cc:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d585ddc72480f69736d0dbfb4fb7bbbbea3025977ba96c315b
        Validity
            Not Before: Feb 21 15:52:21 2024 GMT
            Not After : Feb 19 15:57:21 2025 GMT
        Subject: CN=B284C62A91B4661FEDF7D579E1B7EA63917BEF4B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:3e:48:01:fd:dd:2e:e8:4c:fb:11:26:9f:02:
                    a2:a5:8d:2a:3d:41:8b:2f:d4:64:65:4d:e8:a2:6a:
                    0e:75:da:3f:da:19:09:51:59:c7:b0:07:8b:23:9f:
                    74:57:df:58:ce:37:87:30:08:2e:66:7f:e0:3d:6b:
                    c2:c6:b9:d4:04:04:95:7e:cc:41:56:0c:f5:27:89:
                    0d:ee:80:7e:98:0f:c0:d7:b6:bb:ad:15:56:00:a5:
                    3d:67:62:53:b7:9f:68:6d:2f:de:c6:68:8f:ff:79:
                    7b:d3:2b:bd:0c:34:6c:3e:aa:09:d2:63:56:ce:e8:
                    36:12:94:42:88:3f:da:72:5a:d4:cc:35:2a:77:0c:
                    67:b5:60:04:fc:51:75:3e:3c:c1:a1:f4:69:d7:31:
                    61:eb:95:9d:58:b4:07:f5:f9:1f:71:41:98:86:45:
                    a9:eb:7a:96:80:4a:8d:42:2b:12:7c:07:05:71:78:
                    fc:4a:92:c3:14:8d:3f:6e:21:65:e7:3a:ef:45:18:
                    6d:72:fd:88:cc:1b:4e:14:71:5f:09:cd:a6:b2:dc:
                    f3:06:2a:f4:33:ac:63:53:c3:a5:74:40:70:1c:d1:
                    3d:4d:69:00:d8:61:3b:1f:f1:80:84:22:24:00:a2:
                    a9:6b:f2:9b:e0:65:35:cb:a7:45:f7:a8:ab:79:fa:
                    70:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:84:C6:2A:91:B4:66:1F:ED:F7:D5:79:E1:B7:EA:63:91:7B:EF:4B
            X509v3 Authority Key Identifier:
                keyid:1E:92:70:97:F9:61:CD:62:C6:84:22:11:20:67:91:58:56:88:EA:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8cea2ac6018dcc61b42651d6/0/1E927097F961CD62C6842211206791585688EA6B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4016a9a5-6e7c-4633-a4c3-24ad1b7f0785/d585ddc72480f69736d0dbfb4fb7bbbbea3025977ba96c315b.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8cea2ac6018dcc61b42651d6/0/3137332e3234392e3138382e302f32322d3234203d3e203230343733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.249.188.0/22

    Signature Algorithm: sha256WithRSAEncryption
         94:5d:b2:b7:c3:c6:c9:3f:64:83:92:54:3a:99:f0:52:4c:04:
         37:53:3c:05:2f:6c:ca:8b:27:a3:e0:e1:74:fa:2c:3e:85:a3:
         28:02:5b:f3:93:a7:fc:6e:85:35:91:c2:4c:0c:a8:5e:ff:91:
         89:a7:97:dc:5d:9e:c8:37:28:0a:dc:28:ab:f1:fe:ef:7f:b0:
         ae:88:b9:6f:f5:de:98:e6:f5:74:58:5c:d4:9b:11:ac:c2:b7:
         e4:e3:3a:11:17:32:08:a4:27:bf:07:58:da:ad:21:15:cc:29:
         01:94:4c:f1:26:a1:c0:2c:b0:00:5c:f9:a6:68:af:47:fc:9e:
         9c:fd:4e:bb:34:e9:ae:82:84:2f:a0:7d:6b:77:94:a2:48:af:
         79:fa:aa:75:6f:2b:8e:49:b1:86:21:66:5e:1c:7c:4b:1b:1c:
         1d:1b:8c:99:1f:bb:fe:87:28:bd:d1:20:5b:41:9d:92:31:cf:
         28:0f:63:b9:61:7f:60:a1:0a:68:20:68:ef:f9:35:ae:47:ea:
         c1:8b:fd:43:fd:76:34:3f:e8:69:4a:94:23:ab:72:98:1d:11:
         49:3a:f7:cb:72:18:ad:78:78:ac:ad:82:84:09:e8:4f:30:4a:
         49:06:b8:0a:57:60:f8:a8:51:d6:c4:e4:bf:08:1d:46:72:06:
         d5:bb:93:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 01:47:29 2024 by rpki-client on console-fra.rpki-client.org