Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8e52381d018e8593884d2a30/0/3230392e38372e3136382e302f32342d3234203d3e20323035323230.roa
File:                     3230392e38372e3136382e302f32342d3234203d3e20323035323230.roa (raw, json)
Hash identifier:          NKEt52U0q8SG5h9tRzgFRuMDF7Q6MwEKMDYEdl9tZTg=
Subject key identifier:   31:34:DA:CC:B4:12:BF:80:67:10:E6:26:FB:52:C9:37:7D:06:7E:F4
Certificate issuer:       /CN=137bca5a0ff837b3808ba493bd14ab78cc4fd6296629253051
Certificate serial:       55E18E99910C67904EA4B262ABB492C8DA3BEBBF
Authority key identifier: 4F:44:9F:0C:CB:37:8E:C6:D3:FC:D7:6A:A7:EE:D5:9A:F1:15:93:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/35213db6-703a-4ad8-9450-0a0e1d371cff/137bca5a0ff837b3808ba493bd14ab78cc4fd6296629253051.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8e52381d018e8593884d2a30/0/3230392e38372e3136382e302f32342d3234203d3e20323035323230.roa
Signing time:             Thu 06 Jun 2024 15:43:28 +0000
ROA not before:           Thu 06 Jun 2024 15:38:28 +0000
ROA not after:            Thu 05 Jun 2025 15:43:28 +0000
asID:                     205220
IP address blocks:        209.87.168.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8e52381d018e8593884d2a30/0/4F449F0CCB378EC6D3FCD76AA7EED59AF11593BB.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8e52381d018e8593884d2a30/0/4F449F0CCB378EC6D3FCD76AA7EED59AF11593BB.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/35213db6-703a-4ad8-9450-0a0e1d371cff/137bca5a0ff837b3808ba493bd14ab78cc4fd6296629253051.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/35213db6-703a-4ad8-9450-0a0e1d371cff/35213db6-703a-4ad8-9450-0a0e1d371cff.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/35213db6-703a-4ad8-9450-0a0e1d371cff/35213db6-703a-4ad8-9450-0a0e1d371cff.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/35213db6-703a-4ad8-9450-0a0e1d371cff.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 11 Dec 2024 22:26:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:e1:8e:99:91:0c:67:90:4e:a4:b2:62:ab:b4:92:c8:da:3b:eb:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=137bca5a0ff837b3808ba493bd14ab78cc4fd6296629253051
        Validity
            Not Before: Jun  6 15:38:28 2024 GMT
            Not After : Jun  5 15:43:28 2025 GMT
        Subject: CN=3134DACCB412BF806710E626FB52C9377D067EF4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:6f:c7:9f:95:53:25:17:7c:be:6a:5d:c1:cc:
                    50:a9:f1:50:b6:70:b8:69:05:bf:cb:f3:c8:dc:bc:
                    b6:9e:6e:94:a6:97:b4:21:1b:69:c5:59:27:7c:58:
                    37:0b:98:a8:49:17:1a:f7:be:dc:81:dc:b6:cb:c8:
                    92:99:7a:ae:f0:ac:11:06:a7:7d:e5:91:55:3e:d5:
                    c6:66:5c:50:28:22:f7:5a:53:96:55:f0:d0:a0:53:
                    6a:91:c5:cc:da:5b:34:58:9a:0c:7f:1c:57:c3:0c:
                    8f:41:52:fe:03:7f:de:bb:ff:9a:cd:06:62:09:5d:
                    7d:d3:e1:5e:97:40:5f:43:bb:ef:90:8e:e9:b8:4e:
                    80:06:92:bc:74:4e:1b:37:b6:e9:81:f1:c5:d0:f5:
                    5b:01:16:82:71:3d:3f:7d:cb:48:7d:89:50:69:46:
                    a8:fe:ff:11:fb:bc:81:d8:ec:39:d0:59:a1:4e:a3:
                    a8:9f:16:68:6f:00:af:a6:17:4f:9f:1a:fb:bd:a4:
                    f7:9b:7c:2a:49:f6:3c:c1:71:7d:5d:ec:5b:bb:56:
                    9b:57:e5:b3:2f:f5:79:e2:e4:09:ec:07:53:58:38:
                    fc:3f:99:f4:8e:62:27:f4:94:c5:c3:91:39:69:27:
                    16:ad:0b:fa:68:02:6d:44:e0:50:67:f3:de:10:aa:
                    75:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:34:DA:CC:B4:12:BF:80:67:10:E6:26:FB:52:C9:37:7D:06:7E:F4
            X509v3 Authority Key Identifier:
                keyid:4F:44:9F:0C:CB:37:8E:C6:D3:FC:D7:6A:A7:EE:D5:9A:F1:15:93:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8e52381d018e8593884d2a30/0/4F449F0CCB378EC6D3FCD76AA7EED59AF11593BB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/35213db6-703a-4ad8-9450-0a0e1d371cff/137bca5a0ff837b3808ba493bd14ab78cc4fd6296629253051.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8e52381d018e8593884d2a30/0/3230392e38372e3136382e302f32342d3234203d3e20323035323230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.87.168.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3d:b0:52:ab:b5:32:7b:7f:37:02:ca:dd:16:35:19:5f:42:06:
         30:2b:fb:aa:4f:d9:d2:5c:61:dd:30:11:c3:5c:4b:be:ab:b4:
         dd:20:4f:8c:72:bf:1c:5f:54:26:f2:bf:4e:56:7a:3d:49:8a:
         20:41:75:74:fc:c3:09:f4:03:69:64:ef:6a:83:88:75:27:03:
         76:04:df:33:46:db:02:13:dd:7c:6b:28:69:c2:40:90:92:77:
         50:0c:ff:ce:4b:53:b6:3a:c8:4b:6d:27:b0:0a:1e:b7:f7:2d:
         c2:25:de:b5:06:e9:eb:7e:06:16:65:63:91:f5:b2:88:5b:e1:
         c8:c6:6f:cf:4b:89:84:78:ea:12:60:ef:df:8f:58:82:ef:e2:
         f6:99:a0:39:8e:1f:cc:c5:ca:33:b9:93:4e:3a:17:a7:a4:c6:
         4e:08:3b:8c:73:02:2a:0f:e0:e0:a0:bb:c8:6f:08:c5:ad:9b:
         17:45:92:5c:7c:f3:8c:dc:04:30:62:ab:f9:e7:64:52:7a:1d:
         13:f3:6b:f6:50:01:13:3a:c9:d4:38:80:0f:b4:a4:94:bc:90:
         01:f7:63:7e:db:1f:93:f7:de:9c:14:bf:7a:61:44:76:88:a8:
         5c:75:17:f3:e4:91:37:eb:16:55:6d:91:5f:d4:ee:7d:96:05:
         e0:e8:35:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 10 20:59:40 2024 by rpki-client on console-fra.rpki-client.org