Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8e52381d018e8593884d2a30/0/3230392e38372e3136302e302f32322d3234203d3e20333937343233.roa
File:                     3230392e38372e3136302e302f32322d3234203d3e20333937343233.roa (raw, json)
Hash identifier:          US5Lbbz/OP1sszkI/BA8EjoprKj30eam8EUpUXLL2OI=
Subject key identifier:   8B:20:1D:87:7E:9D:05:D8:DD:86:F0:71:1E:A6:FE:B7:5C:FF:00:CA
Certificate issuer:       /CN=137bca5a0ff837b3808ba493bd14ab78cc4fd6296629253051
Certificate serial:       2A643EEC09FC12A14FF928A142979BDD5F2FDAAA
Authority key identifier: 4F:44:9F:0C:CB:37:8E:C6:D3:FC:D7:6A:A7:EE:D5:9A:F1:15:93:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/35213db6-703a-4ad8-9450-0a0e1d371cff/137bca5a0ff837b3808ba493bd14ab78cc4fd6296629253051.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8e52381d018e8593884d2a30/0/3230392e38372e3136302e302f32322d3234203d3e20333937343233.roa
Signing time:             Thu 07 Nov 2024 10:51:41 +0000
ROA not before:           Thu 07 Nov 2024 10:46:41 +0000
ROA not after:            Thu 06 Nov 2025 10:51:41 +0000
asID:                     397423
IP address blocks:        209.87.160.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8e52381d018e8593884d2a30/0/4F449F0CCB378EC6D3FCD76AA7EED59AF11593BB.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8e52381d018e8593884d2a30/0/4F449F0CCB378EC6D3FCD76AA7EED59AF11593BB.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/35213db6-703a-4ad8-9450-0a0e1d371cff/137bca5a0ff837b3808ba493bd14ab78cc4fd6296629253051.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/35213db6-703a-4ad8-9450-0a0e1d371cff/35213db6-703a-4ad8-9450-0a0e1d371cff.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/35213db6-703a-4ad8-9450-0a0e1d371cff/35213db6-703a-4ad8-9450-0a0e1d371cff.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/35213db6-703a-4ad8-9450-0a0e1d371cff.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 13:59:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:64:3e:ec:09:fc:12:a1:4f:f9:28:a1:42:97:9b:dd:5f:2f:da:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=137bca5a0ff837b3808ba493bd14ab78cc4fd6296629253051
        Validity
            Not Before: Nov  7 10:46:41 2024 GMT
            Not After : Nov  6 10:51:41 2025 GMT
        Subject: CN=8B201D877E9D05D8DD86F0711EA6FEB75CFF00CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:65:9e:ae:2c:31:f0:74:42:82:69:47:fb:1d:
                    11:9c:a8:1a:46:df:2e:69:8c:45:6d:37:c9:ca:1a:
                    cd:18:ee:27:b4:20:cd:8b:d0:ff:f1:e4:41:3f:ba:
                    cb:c9:c8:32:9e:87:16:d4:13:30:e1:82:b2:5c:bd:
                    5c:6a:bf:73:93:a4:ae:48:83:ef:f5:f9:cc:b4:21:
                    b5:af:7b:b9:f8:00:a4:d6:c8:be:42:f1:01:29:69:
                    ea:21:40:0d:6d:28:85:fa:50:5c:be:2d:15:01:5a:
                    ed:6b:3d:21:ed:6f:c1:6f:94:7a:e1:e2:34:69:0a:
                    f4:1b:e5:0b:43:3d:1d:84:fe:db:57:39:1a:4b:e7:
                    8b:74:99:02:31:9e:a5:3a:e1:37:40:9e:a0:09:d6:
                    fb:84:23:95:51:14:61:b4:3a:45:18:6b:33:85:ea:
                    64:fe:96:53:64:c2:23:b1:b5:e3:f1:06:24:e6:26:
                    27:8d:3d:23:ec:9a:fe:10:39:af:eb:27:48:99:3d:
                    17:85:2e:7b:10:72:bd:4b:a2:6b:6a:8f:cf:f7:f2:
                    82:4e:46:ef:15:5e:28:05:83:7f:b0:ba:b8:42:d6:
                    d3:47:51:0a:08:77:b9:29:2a:9a:9c:5d:f2:7e:7f:
                    87:ec:2e:7c:31:ff:74:f3:0b:cc:bf:b8:89:4f:bb:
                    9e:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:20:1D:87:7E:9D:05:D8:DD:86:F0:71:1E:A6:FE:B7:5C:FF:00:CA
            X509v3 Authority Key Identifier:
                keyid:4F:44:9F:0C:CB:37:8E:C6:D3:FC:D7:6A:A7:EE:D5:9A:F1:15:93:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8e52381d018e8593884d2a30/0/4F449F0CCB378EC6D3FCD76AA7EED59AF11593BB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/35213db6-703a-4ad8-9450-0a0e1d371cff/137bca5a0ff837b3808ba493bd14ab78cc4fd6296629253051.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8e52381d018e8593884d2a30/0/3230392e38372e3136302e302f32322d3234203d3e20333937343233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.87.160.0/22

    Signature Algorithm: sha256WithRSAEncryption
         98:54:4a:f7:f0:e4:cf:9f:03:4d:5e:2e:91:e2:61:9e:b2:cb:
         43:49:77:bc:8c:e4:91:8c:7d:26:ab:8a:42:d4:7b:bd:fb:71:
         b3:50:f5:28:29:69:69:a6:b1:0a:3d:7f:3c:c9:3d:e4:d0:73:
         13:8e:d3:36:41:8f:86:e0:88:c5:ac:13:ce:29:c6:3a:48:d9:
         f6:4b:f7:39:94:4c:0b:86:a0:a4:84:16:f0:99:fc:26:f1:00:
         b1:7e:c3:12:45:6e:ff:05:ce:68:02:9e:c3:18:80:9d:86:fa:
         50:72:96:d6:e4:73:62:8b:e3:30:3c:25:f7:36:f1:a8:6e:15:
         ec:65:b5:e9:04:3b:5e:dd:de:74:b2:10:d5:5d:89:c3:18:1e:
         25:8d:8b:38:9a:05:06:c3:0d:91:58:68:48:49:b4:e9:8a:fe:
         be:34:9c:b3:c2:91:e7:0c:23:9c:43:d3:f8:a6:cf:34:ee:d5:
         2e:f3:26:65:90:a0:b9:e6:70:4c:b7:fa:44:a5:73:55:53:03:
         22:8e:80:70:11:f0:1a:2d:5c:f6:2a:9d:74:7d:84:f0:93:d8:
         99:d0:5f:16:5b:40:c7:7b:17:53:94:8e:26:6a:c2:d6:2c:f0:
         d3:4d:dd:46:23:92:91:01:7d:d6:a1:67:d8:a3:36:f4:5c:48:
         d7:d0:52:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 13:18:46 2024 by rpki-client on console-fra.rpki-client.org