Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8e52381d018e8593884d2a30/0/3230392e38372e3137302e302f32342d3234203d3e203631333137.roa
File:                     3230392e38372e3137302e302f32342d3234203d3e203631333137.roa (raw, json)
Hash identifier:          PSabH94X5BGRJ+oE2a4Hb0KlfO+jVu77n7xe6+X9xzU=
Subject key identifier:   5C:A5:DB:05:44:1D:90:4C:26:CC:FD:44:0D:F8:A5:04:CD:E2:3D:E9
Certificate issuer:       /CN=137bca5a0ff837b3808ba493bd14ab78cc4fd6296629253051
Certificate serial:       4959D7BB1DBEB0F8737D5FE712DB59EA0DE67D4E
Authority key identifier: 4F:44:9F:0C:CB:37:8E:C6:D3:FC:D7:6A:A7:EE:D5:9A:F1:15:93:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/35213db6-703a-4ad8-9450-0a0e1d371cff/137bca5a0ff837b3808ba493bd14ab78cc4fd6296629253051.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8e52381d018e8593884d2a30/0/3230392e38372e3137302e302f32342d3234203d3e203631333137.roa
Signing time:             Wed 03 Jul 2024 21:10:07 +0000
ROA not before:           Wed 03 Jul 2024 21:05:07 +0000
ROA not after:            Wed 02 Jul 2025 21:10:07 +0000
asID:                     61317
IP address blocks:        209.87.170.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8e52381d018e8593884d2a30/0/4F449F0CCB378EC6D3FCD76AA7EED59AF11593BB.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8e52381d018e8593884d2a30/0/4F449F0CCB378EC6D3FCD76AA7EED59AF11593BB.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/35213db6-703a-4ad8-9450-0a0e1d371cff/137bca5a0ff837b3808ba493bd14ab78cc4fd6296629253051.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/35213db6-703a-4ad8-9450-0a0e1d371cff/35213db6-703a-4ad8-9450-0a0e1d371cff.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/35213db6-703a-4ad8-9450-0a0e1d371cff/35213db6-703a-4ad8-9450-0a0e1d371cff.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/35213db6-703a-4ad8-9450-0a0e1d371cff.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 09:49:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:59:d7:bb:1d:be:b0:f8:73:7d:5f:e7:12:db:59:ea:0d:e6:7d:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=137bca5a0ff837b3808ba493bd14ab78cc4fd6296629253051
        Validity
            Not Before: Jul  3 21:05:07 2024 GMT
            Not After : Jul  2 21:10:07 2025 GMT
        Subject: CN=5CA5DB05441D904C26CCFD440DF8A504CDE23DE9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:f3:85:6a:c3:ae:71:c9:32:02:c9:97:28:7f:
                    b5:50:ac:43:98:1a:32:65:f7:9f:b1:b8:8d:09:3e:
                    06:c8:67:96:07:a6:cb:58:f4:52:80:68:89:e5:a0:
                    58:72:33:39:de:4f:f3:80:6c:6a:76:e1:ad:ac:42:
                    3e:05:41:00:b9:89:ce:de:cc:62:47:cc:6b:cd:19:
                    71:d6:1e:a2:79:2c:7e:d2:a3:7c:e4:b9:7f:61:cd:
                    47:72:a5:f1:c2:ab:02:7a:b3:bc:af:f6:78:6c:ff:
                    8a:eb:9b:e5:3b:5e:c2:50:97:6f:c4:19:e8:c4:f6:
                    3a:26:2c:e7:52:18:13:92:7b:99:ce:51:8c:2a:e0:
                    5c:2c:84:f5:ee:dc:18:4f:ec:21:0e:3c:f6:e2:19:
                    19:b6:4a:d7:ae:cc:7f:06:f7:5e:6a:f2:e9:bb:80:
                    d6:53:b8:c4:a8:13:24:17:2c:e5:93:32:dc:02:f5:
                    b6:80:cd:42:a5:60:e1:2c:cf:88:3e:44:1f:c4:43:
                    15:aa:45:4b:50:e4:42:49:4e:2e:4a:9d:d5:ee:4c:
                    c6:12:29:4a:b7:9b:07:27:b2:0c:c6:50:85:fd:07:
                    0b:6f:22:79:1e:e7:1d:22:2a:c7:1a:f6:d5:34:51:
                    c8:d1:82:82:10:c5:fb:2d:61:ba:e3:22:d7:a1:3b:
                    1a:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:A5:DB:05:44:1D:90:4C:26:CC:FD:44:0D:F8:A5:04:CD:E2:3D:E9
            X509v3 Authority Key Identifier:
                keyid:4F:44:9F:0C:CB:37:8E:C6:D3:FC:D7:6A:A7:EE:D5:9A:F1:15:93:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8e52381d018e8593884d2a30/0/4F449F0CCB378EC6D3FCD76AA7EED59AF11593BB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/35213db6-703a-4ad8-9450-0a0e1d371cff/137bca5a0ff837b3808ba493bd14ab78cc4fd6296629253051.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8e52381d018e8593884d2a30/0/3230392e38372e3137302e302f32342d3234203d3e203631333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.87.170.0/24

    Signature Algorithm: sha256WithRSAEncryption
         61:67:fb:e6:19:56:1b:95:74:58:36:a1:92:48:dd:2e:75:49:
         e7:f2:9e:4f:3a:17:37:fb:b1:a9:45:3f:d7:37:03:62:fc:48:
         d5:52:72:9f:39:a9:0a:68:33:4d:de:74:79:11:0f:86:e5:33:
         1b:d9:97:97:2f:75:e5:f1:60:45:78:7e:3e:dc:23:a1:da:cd:
         dc:5b:00:58:1e:58:3c:19:b8:88:2e:a5:10:f3:77:dd:a8:62:
         30:6b:55:19:7f:49:d1:43:4d:65:59:35:8e:fd:c7:92:aa:73:
         56:f9:19:c5:2c:24:fb:b8:d2:c7:57:5e:3d:c4:3a:84:a1:09:
         60:7d:96:e3:f0:21:96:f1:41:fc:88:6c:af:31:55:ca:de:79:
         e7:07:65:6a:29:6c:2b:cd:11:58:5b:a6:a9:69:b2:64:c6:3b:
         f7:9f:ae:c9:a2:fb:a9:e8:ea:38:b1:06:35:b7:bb:db:a6:48:
         9d:48:78:e5:49:fd:6c:f6:78:23:7f:9d:4c:66:a0:87:58:07:
         38:b7:fd:94:33:90:f5:5f:47:b4:7a:7b:7c:85:d7:fc:7d:5f:
         d0:94:07:67:da:38:49:2c:7d:2e:e4:22:12:88:3a:83:87:0d:
         45:d4:d4:d0:09:1a:fb:82:a1:c4:23:7f:de:af:ad:36:0c:37:
         34:f2:45:45
-----BEGIN CERTIFICATE-----
MIIFsjCCBJqgAwIBAgIUSVnXux2+sPhzfV/nEttZ6g3mfU4wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMTM3YmNhNWEwZmY4MzdiMzgwOGJhNDkzYmQxNGFiNzhj
YzRmZDYyOTY2MjkyNTMwNTEwHhcNMjQwNzAzMjEwNTA3WhcNMjUwNzAyMjExMDA3
WjAzMTEwLwYDVQQDEyg1Q0E1REIwNTQ0MUQ5MDRDMjZDQ0ZENDQwREY4QTUwNENE
RTIzREU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7/OFasOuccky
AsmXKH+1UKxDmBoyZfefsbiNCT4GyGeWB6bLWPRSgGiJ5aBYcjM53k/zgGxqduGt
rEI+BUEAuYnO3sxiR8xrzRlx1h6ieSx+0qN85Ll/Yc1HcqXxwqsCerO8r/Z4bP+K
65vlO17CUJdvxBnoxPY6JiznUhgTknuZzlGMKuBcLIT17twYT+whDjz24hkZtkrX
rsx/BvdeavLpu4DWU7jEqBMkFyzlkzLcAvW2gM1CpWDhLM+IPkQfxEMVqkVLUORC
SU4uSp3V7kzGEilKt5sHJ7IMxlCF/QcLbyJ5HucdIirHGvbVNFHI0YKCEMX7LWG6
4yLXoTsaVQIDAQABo4ICsjCCAq4wHQYDVR0OBBYEFFyl2wVEHZBMJsz9RA34pQTN
4j3pMB8GA1UdIwQYMBaAFE9EnwzLN47G0/zXaqfu1ZrxFZO7MA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmOGU1MjM4MWQwMThlODU5Mzg4NGQyYTMwLzAv
NEY0NDlGMENDQjM3OEVDNkQzRkNENzZBQTdFRUQ1OUFGMTE1OTNCQi5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNGFiN2FlNGQtYmQ3Yi00YjMzLTlhODgtNWIyMmQy
YTgzMzdkLzM1MjEzZGI2LTcwM2EtNGFkOC05NDUwLTBhMGUxZDM3MWNmZi8xMzdi
Y2E1YTBmZjgzN2IzODA4YmE0OTNiZDE0YWI3OGNjNGZkNjI5NjYyOTI1MzA1MS5j
ZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjhlNTIzODFkMDE4ZTg1
OTM4ODRkMmEzMC8wLzMyMzAzOTJlMzgzNzJlMzEzNzMwMmUzMDJmMzIzNDJkMzIz
NDIwM2QzZTIwMzYzMTMzMzEzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO
AjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEANFXqjANBgkqhkiG9w0BAQsF
AAOCAQEAYWf75hlWG5V0WDahkkjdLnVJ5/KeTzoXN/uxqUU/1zcDYvxI1VJynzmp
CmgzTd50eREPhuUzG9mXly915fFgRXh+PtwjodrN3FsAWB5YPBm4iC6lEPN33ahi
MGtVGX9J0UNNZVk1jv3HkqpzVvkZxSwk+7jSx1dePcQ6hKEJYH2W4/AhlvFB/Ihs
rzFVyt555wdlailsK80RWFumqWmyZMY795+uyaL7qejqOLEGNbe726ZInUh45Un9
bPZ4I3+dTGagh1gHOLf9lDOQ9V9HtHp7fIXX/H1f0JQHZ9o4SSx9LuQiEog6g4cN
RdTU0Aka+4KhxCN/3q+tNgw3NPJFRQ==
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:23:06 2025 by rpki-client