Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8e52381d018e8593884d2a30/0/3230392e38372e3137322e302f32322d3234203d3e2031323339.roa
File:                     3230392e38372e3137322e302f32322d3234203d3e2031323339.roa (raw, json)
Hash identifier:          +xxAoBsldr6mZextYWkbjhpVUkvDdsQO74zzMuClMxs=
Subject key identifier:   B2:BA:37:78:45:58:F7:C7:F6:9A:06:77:10:A0:F4:BE:74:B2:CC:F6
Certificate issuer:       /CN=137bca5a0ff837b3808ba493bd14ab78cc4fd6296629253051
Certificate serial:       470BF433C2D78CDF599C66C272B021A90F649B96
Authority key identifier: 4F:44:9F:0C:CB:37:8E:C6:D3:FC:D7:6A:A7:EE:D5:9A:F1:15:93:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/35213db6-703a-4ad8-9450-0a0e1d371cff/137bca5a0ff837b3808ba493bd14ab78cc4fd6296629253051.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8e52381d018e8593884d2a30/0/3230392e38372e3137322e302f32322d3234203d3e2031323339.roa
Signing time:             Thu 04 Apr 2024 15:59:06 +0000
ROA not before:           Thu 04 Apr 2024 15:54:06 +0000
ROA not after:            Thu 03 Apr 2025 15:59:06 +0000
asID:                     1239
IP address blocks:        209.87.172.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8e52381d018e8593884d2a30/0/4F449F0CCB378EC6D3FCD76AA7EED59AF11593BB.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8e52381d018e8593884d2a30/0/4F449F0CCB378EC6D3FCD76AA7EED59AF11593BB.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/35213db6-703a-4ad8-9450-0a0e1d371cff/137bca5a0ff837b3808ba493bd14ab78cc4fd6296629253051.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/35213db6-703a-4ad8-9450-0a0e1d371cff/35213db6-703a-4ad8-9450-0a0e1d371cff.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/35213db6-703a-4ad8-9450-0a0e1d371cff/35213db6-703a-4ad8-9450-0a0e1d371cff.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/35213db6-703a-4ad8-9450-0a0e1d371cff.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 09 May 2024 16:45:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:0b:f4:33:c2:d7:8c:df:59:9c:66:c2:72:b0:21:a9:0f:64:9b:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=137bca5a0ff837b3808ba493bd14ab78cc4fd6296629253051
        Validity
            Not Before: Apr  4 15:54:06 2024 GMT
            Not After : Apr  3 15:59:06 2025 GMT
        Subject: CN=B2BA37784558F7C7F69A067710A0F4BE74B2CCF6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:ea:63:99:12:c4:c0:3e:cd:75:d2:5d:61:52:
                    75:97:8d:30:9f:fa:fb:27:03:86:05:98:9f:84:3d:
                    38:77:32:d7:9f:15:f5:07:a4:70:f3:73:d2:26:da:
                    47:29:b6:34:9a:7c:51:b0:ea:7e:03:be:99:39:22:
                    29:0b:7a:47:bd:82:c4:5c:f3:14:e9:ae:8c:e3:1a:
                    c3:8e:f5:c6:e5:6a:23:65:d6:b5:cc:37:20:96:db:
                    19:f4:36:31:0d:d2:2f:eb:2c:44:0d:d5:3d:5e:1c:
                    d6:19:0f:19:82:c5:d1:a0:72:7c:28:6f:a4:7b:80:
                    94:60:21:ba:27:13:b7:74:53:44:c2:65:ce:40:4d:
                    f8:05:f7:40:85:54:f5:67:c7:ca:26:a4:73:2b:fb:
                    00:82:58:df:e3:30:f8:c5:92:69:52:c2:c4:22:e6:
                    ea:f0:a6:cf:19:00:b4:48:8e:2b:85:ef:7e:f3:c0:
                    40:7a:c5:00:b9:32:13:e7:25:4a:6d:39:43:91:b5:
                    db:1e:c8:c7:db:2b:ea:4f:d8:06:29:ad:c7:0d:57:
                    00:b5:af:f6:53:1f:d3:92:38:f1:c8:2f:b8:24:40:
                    0f:a8:4e:97:81:eb:f5:05:d2:43:b4:b9:cd:06:6a:
                    44:22:19:9c:c0:b0:22:26:08:54:4a:c8:0c:22:fc:
                    f3:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:BA:37:78:45:58:F7:C7:F6:9A:06:77:10:A0:F4:BE:74:B2:CC:F6
            X509v3 Authority Key Identifier:
                keyid:4F:44:9F:0C:CB:37:8E:C6:D3:FC:D7:6A:A7:EE:D5:9A:F1:15:93:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8e52381d018e8593884d2a30/0/4F449F0CCB378EC6D3FCD76AA7EED59AF11593BB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/35213db6-703a-4ad8-9450-0a0e1d371cff/137bca5a0ff837b3808ba493bd14ab78cc4fd6296629253051.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8e52381d018e8593884d2a30/0/3230392e38372e3137322e302f32322d3234203d3e2031323339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.87.172.0/22

    Signature Algorithm: sha256WithRSAEncryption
         43:26:57:01:81:f9:2d:63:96:4c:66:91:2f:db:e4:67:49:b0:
         8e:8f:eb:31:07:ed:af:04:b3:29:13:a9:ed:da:47:f8:bd:b4:
         49:25:7e:9a:52:a5:42:74:ed:70:62:f5:ab:7c:52:85:30:da:
         66:e7:e1:b6:55:6e:73:d0:f6:de:79:0c:32:02:ed:a3:2e:38:
         f9:20:06:4c:1d:9f:97:98:dd:1f:8e:47:27:d2:d1:0a:8b:7e:
         16:22:ff:60:a5:36:62:66:a5:62:ac:cb:bf:d3:32:f4:81:45:
         35:d9:3a:af:2c:1e:96:c1:3d:d9:11:2b:b2:14:32:e4:00:cd:
         f0:e9:0e:4c:af:16:a9:8c:5c:81:5b:92:af:c2:8c:df:b8:a9:
         19:3e:7b:b9:ba:40:5b:74:b2:dc:7c:d2:3c:a7:57:87:29:87:
         c4:1b:28:c1:53:1c:59:bd:ff:5c:4f:8a:fb:f7:6b:c3:1d:3e:
         a1:1e:c3:9b:ef:61:68:60:f5:9d:67:20:e9:a9:2f:18:7f:d6:
         6b:03:7a:8c:51:b4:7f:28:cc:cf:fe:24:b1:9e:1c:82:d3:02:
         e6:54:6f:c4:f0:f7:59:e8:d6:0c:bb:30:6c:12:36:50:09:03:
         c7:61:29:df:bf:fd:76:97:22:5f:55:16:66:0e:c7:e7:86:d9:
         ec:b6:1e:b3
-----BEGIN CERTIFICATE-----
MIIFsDCCBJigAwIBAgIURwv0M8LXjN9ZnGbCcrAhqQ9km5YwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMTM3YmNhNWEwZmY4MzdiMzgwOGJhNDkzYmQxNGFiNzhj
YzRmZDYyOTY2MjkyNTMwNTEwHhcNMjQwNDA0MTU1NDA2WhcNMjUwNDAzMTU1OTA2
WjAzMTEwLwYDVQQDEyhCMkJBMzc3ODQ1NThGN0M3RjY5QTA2NzcxMEEwRjRCRTc0
QjJDQ0Y2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo+pjmRLEwD7N
ddJdYVJ1l40wn/r7JwOGBZifhD04dzLXnxX1B6Rw83PSJtpHKbY0mnxRsOp+A76Z
OSIpC3pHvYLEXPMU6a6M4xrDjvXG5WojZda1zDcgltsZ9DYxDdIv6yxEDdU9XhzW
GQ8ZgsXRoHJ8KG+ke4CUYCG6JxO3dFNEwmXOQE34BfdAhVT1Z8fKJqRzK/sAgljf
4zD4xZJpUsLEIubq8KbPGQC0SI4rhe9+88BAesUAuTIT5yVKbTlDkbXbHsjH2yvq
T9gGKa3HDVcAta/2Ux/TkjjxyC+4JEAPqE6Xgev1BdJDtLnNBmpEIhmcwLAiJghU
SsgMIvzzUQIDAQABo4ICsDCCAqwwHQYDVR0OBBYEFLK6N3hFWPfH9poGdxCg9L50
ssz2MB8GA1UdIwQYMBaAFE9EnwzLN47G0/zXaqfu1ZrxFZO7MA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmOGU1MjM4MWQwMThlODU5Mzg4NGQyYTMwLzAv
NEY0NDlGMENDQjM3OEVDNkQzRkNENzZBQTdFRUQ1OUFGMTE1OTNCQi5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNGFiN2FlNGQtYmQ3Yi00YjMzLTlhODgtNWIyMmQy
YTgzMzdkLzM1MjEzZGI2LTcwM2EtNGFkOC05NDUwLTBhMGUxZDM3MWNmZi8xMzdi
Y2E1YTBmZjgzN2IzODA4YmE0OTNiZDE0YWI3OGNjNGZkNjI5NjYyOTI1MzA1MS5j
ZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjhlNTIzODFkMDE4ZTg1
OTM4ODRkMmEzMC8wLzMyMzAzOTJlMzgzNzJlMzEzNzMyMmUzMDJmMzIzMjJkMzIz
NDIwM2QzZTIwMzEzMjMzMzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBALRV6wwDQYJKoZIhvcNAQELBQAD
ggEBAEMmVwGB+S1jlkxmkS/b5GdJsI6P6zEH7a8EsykTqe3aR/i9tEklfppSpUJ0
7XBi9at8UoUw2mbn4bZVbnPQ9t55DDIC7aMuOPkgBkwdn5eY3R+ORyfS0QqLfhYi
/2ClNmJmpWKsy7/TMvSBRTXZOq8sHpbBPdkRK7IUMuQAzfDpDkyvFqmMXIFbkq/C
jN+4qRk+e7m6QFt0stx80jynV4cph8QbKMFTHFm9/1xPivv3a8MdPqEew5vvYWhg
9Z1nIOmpLxh/1msDeoxRtH8ozM/+JLGeHILTAuZUb8Tw91no1gy7MGwSNlAJA8dh
Kd+//XaXIl9VFmYOx+eG2ey2HrM=
-----END CERTIFICATE-----
Generated at Wed May 8 17:46:24 2024 by rpki-client on console-ams.rpki-client.org