Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8e52381d018e8593884d2a30/0/3230392e38372e3136302e302f32312d3234203d3e2031323339.roa
File:                     3230392e38372e3136302e302f32312d3234203d3e2031323339.roa (raw, json)
Hash identifier:          Qa0L+wM6KBHv3jtZqXOObsKYGMyRcNx6rYy+dGR6fiw=
Subject key identifier:   76:7B:0F:69:FC:0C:91:03:FB:61:9A:96:0F:73:B8:0C:BC:03:7E:0E
Certificate issuer:       /CN=137bca5a0ff837b3808ba493bd14ab78cc4fd6296629253051
Certificate serial:       2C685DE196758E639779F40D09E7CCFF8708B3B0
Authority key identifier: 4F:44:9F:0C:CB:37:8E:C6:D3:FC:D7:6A:A7:EE:D5:9A:F1:15:93:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/35213db6-703a-4ad8-9450-0a0e1d371cff/137bca5a0ff837b3808ba493bd14ab78cc4fd6296629253051.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8e52381d018e8593884d2a30/0/3230392e38372e3136302e302f32312d3234203d3e2031323339.roa
Signing time:             Thu 04 Apr 2024 15:59:05 +0000
ROA not before:           Thu 04 Apr 2024 15:54:05 +0000
ROA not after:            Thu 03 Apr 2025 15:59:05 +0000
asID:                     1239
IP address blocks:        209.87.160.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8e52381d018e8593884d2a30/0/4F449F0CCB378EC6D3FCD76AA7EED59AF11593BB.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8e52381d018e8593884d2a30/0/4F449F0CCB378EC6D3FCD76AA7EED59AF11593BB.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/35213db6-703a-4ad8-9450-0a0e1d371cff/137bca5a0ff837b3808ba493bd14ab78cc4fd6296629253051.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/35213db6-703a-4ad8-9450-0a0e1d371cff/35213db6-703a-4ad8-9450-0a0e1d371cff.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/35213db6-703a-4ad8-9450-0a0e1d371cff/35213db6-703a-4ad8-9450-0a0e1d371cff.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/35213db6-703a-4ad8-9450-0a0e1d371cff.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 09 May 2024 16:45:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:68:5d:e1:96:75:8e:63:97:79:f4:0d:09:e7:cc:ff:87:08:b3:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=137bca5a0ff837b3808ba493bd14ab78cc4fd6296629253051
        Validity
            Not Before: Apr  4 15:54:05 2024 GMT
            Not After : Apr  3 15:59:05 2025 GMT
        Subject: CN=767B0F69FC0C9103FB619A960F73B80CBC037E0E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:42:56:72:35:59:24:57:51:6e:fb:c2:29:c1:
                    91:fc:04:b1:c6:4e:db:e6:15:30:12:02:a3:63:41:
                    8c:33:c1:60:48:88:8e:92:0f:e6:0c:e9:c6:2e:d3:
                    26:87:99:83:e6:ae:f1:95:34:bf:d4:86:67:a5:bc:
                    69:5e:49:4e:b7:ab:92:e3:0d:2c:7b:43:13:cb:3e:
                    b5:ee:48:99:6a:17:33:1e:97:21:6b:69:cf:b4:48:
                    8a:d0:a5:11:c9:b4:7c:21:b1:29:ba:65:7e:6c:5d:
                    5c:39:86:12:e5:4b:81:49:c0:a2:ae:e8:b7:03:97:
                    2a:8a:8b:d6:37:82:a4:ba:b1:6e:ad:d2:12:eb:c6:
                    4c:5c:e6:20:97:74:ec:e9:c3:8a:a6:23:15:4f:ae:
                    39:0c:45:b7:b2:55:a0:fa:21:51:0c:9d:84:94:3f:
                    6d:14:4a:40:68:b9:60:ed:53:0c:2d:f4:19:20:f2:
                    79:6e:03:8b:49:bc:fd:83:76:90:18:56:79:e3:1c:
                    66:3f:f2:21:c0:f7:d0:07:88:49:42:4c:d5:ca:bd:
                    12:51:db:21:10:ad:94:0a:b4:7e:ac:9c:0f:b0:9a:
                    78:d0:0b:e8:5b:b3:21:44:a2:dd:27:87:59:e5:4c:
                    d0:19:eb:fb:d2:05:17:60:c6:af:20:65:32:4f:87:
                    95:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:7B:0F:69:FC:0C:91:03:FB:61:9A:96:0F:73:B8:0C:BC:03:7E:0E
            X509v3 Authority Key Identifier:
                keyid:4F:44:9F:0C:CB:37:8E:C6:D3:FC:D7:6A:A7:EE:D5:9A:F1:15:93:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8e52381d018e8593884d2a30/0/4F449F0CCB378EC6D3FCD76AA7EED59AF11593BB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/35213db6-703a-4ad8-9450-0a0e1d371cff/137bca5a0ff837b3808ba493bd14ab78cc4fd6296629253051.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8e52381d018e8593884d2a30/0/3230392e38372e3136302e302f32312d3234203d3e2031323339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.87.160.0/21

    Signature Algorithm: sha256WithRSAEncryption
         72:fc:ed:4f:e4:2d:bc:08:3a:4a:09:ed:33:b1:7b:0f:6d:5a:
         78:f6:e8:3b:ce:58:7f:2f:b8:e0:1a:34:51:4a:c0:23:8e:9b:
         72:e8:92:7a:62:dc:91:bb:a2:4b:dc:ee:96:48:db:c6:85:ab:
         24:bb:69:1b:37:79:9e:16:68:c7:2e:51:31:f9:ef:bb:61:30:
         ad:4f:24:4a:98:7d:6b:32:19:ed:ac:ce:f2:7b:d4:c9:73:fc:
         17:d7:3b:78:1b:43:ab:89:42:4b:8f:ef:d5:f5:63:fc:5d:8f:
         eb:d0:cf:2b:34:57:2c:e6:4b:77:87:27:58:2c:96:b4:75:5b:
         d0:81:2e:6e:74:1b:aa:3b:10:c4:0a:28:a5:58:29:9f:be:d2:
         8c:1f:b3:b2:2b:94:55:a7:b7:0e:ac:13:4c:df:68:9f:6d:78:
         57:ac:01:58:84:07:9b:3d:84:b9:70:f7:15:6b:3d:92:e6:a4:
         9d:86:9c:7a:dd:f2:55:ab:d0:58:48:a2:aa:1a:7d:b7:49:cf:
         75:5d:f0:3a:92:32:af:1d:52:9b:ce:92:da:59:43:64:ad:b8:
         0e:06:db:43:b1:cb:cb:a5:65:32:3a:79:5a:05:bf:be:0c:ad:
         e9:c9:5a:a3:0e:f2:8c:a8:c8:94:70:18:38:9e:4f:1a:4b:ef:
         e4:50:9a:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 8 17:46:24 2024 by rpki-client on console-ams.rpki-client.org