Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8e52381d018e8593884d2a30/0/3230392e38372e3137302e302f32342d3234203d3e20383334.roa
File:                     3230392e38372e3137302e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier:          W+X7FtI9W9XlU0hYP2Zz7qo27kOQeIJHvSZQTijrUek=
Subject key identifier:   BD:B5:E9:E3:4C:08:E3:CA:3B:3F:3D:17:BB:F5:4E:C3:FD:C4:76:1B
Certificate issuer:       /CN=137bca5a0ff837b3808ba493bd14ab78cc4fd6296629253051
Certificate serial:       132EE3B004CD54C2B5EA10AED7BEB74448E68F95
Authority key identifier: 4F:44:9F:0C:CB:37:8E:C6:D3:FC:D7:6A:A7:EE:D5:9A:F1:15:93:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/35213db6-703a-4ad8-9450-0a0e1d371cff/137bca5a0ff837b3808ba493bd14ab78cc4fd6296629253051.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8e52381d018e8593884d2a30/0/3230392e38372e3137302e302f32342d3234203d3e20383334.roa
Signing time:             Wed 03 Jul 2024 00:01:32 +0000
ROA not before:           Tue 02 Jul 2024 23:56:32 +0000
ROA not after:            Wed 02 Jul 2025 00:01:32 +0000
asID:                     834
IP address blocks:        209.87.170.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8e52381d018e8593884d2a30/0/4F449F0CCB378EC6D3FCD76AA7EED59AF11593BB.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8e52381d018e8593884d2a30/0/4F449F0CCB378EC6D3FCD76AA7EED59AF11593BB.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/35213db6-703a-4ad8-9450-0a0e1d371cff/137bca5a0ff837b3808ba493bd14ab78cc4fd6296629253051.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/35213db6-703a-4ad8-9450-0a0e1d371cff/35213db6-703a-4ad8-9450-0a0e1d371cff.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/35213db6-703a-4ad8-9450-0a0e1d371cff/35213db6-703a-4ad8-9450-0a0e1d371cff.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/35213db6-703a-4ad8-9450-0a0e1d371cff.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 04 Jul 2024 02:47:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:2e:e3:b0:04:cd:54:c2:b5:ea:10:ae:d7:be:b7:44:48:e6:8f:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=137bca5a0ff837b3808ba493bd14ab78cc4fd6296629253051
        Validity
            Not Before: Jul  2 23:56:32 2024 GMT
            Not After : Jul  2 00:01:32 2025 GMT
        Subject: CN=BDB5E9E34C08E3CA3B3F3D17BBF54EC3FDC4761B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:b0:0f:ef:08:93:f8:3d:f0:dc:67:a2:12:0c:
                    7e:89:41:05:f1:4a:e0:f1:79:41:85:8d:35:44:01:
                    a2:ea:97:56:3c:52:a7:8b:34:1d:d1:a2:a0:2a:88:
                    6a:46:08:a4:6e:c3:31:9a:f8:49:0c:84:0e:df:6b:
                    bc:d3:b0:44:b1:31:32:7d:14:f5:69:2b:65:09:9d:
                    6e:04:02:8c:a1:b2:1d:47:fd:af:01:b6:e0:7f:3e:
                    45:23:d3:fe:a6:a2:ad:84:a8:4f:47:48:36:69:63:
                    0f:77:3e:91:f2:9c:df:ab:d2:e4:13:bc:a0:e9:2e:
                    09:ae:d4:21:37:97:55:8c:d6:90:67:e3:9f:0c:02:
                    18:f1:67:ae:9e:6b:53:15:a6:3c:d4:5f:59:2a:71:
                    04:2b:0e:3f:63:ca:04:38:28:69:71:a4:9a:74:08:
                    f5:76:b8:9e:b0:aa:ca:97:b5:93:65:d6:54:d2:b8:
                    34:69:21:41:21:ff:c7:54:7f:ce:90:21:98:77:f1:
                    99:64:bd:a0:f2:f8:67:a6:31:8b:8a:bc:71:80:c6:
                    14:cb:1a:13:a9:98:08:5d:f3:ad:db:b0:6f:52:e9:
                    b6:36:e0:80:2e:be:87:cf:ca:96:c0:9a:18:ec:4f:
                    90:cc:b6:49:90:38:41:88:bd:b6:a3:08:36:8f:05:
                    c0:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:B5:E9:E3:4C:08:E3:CA:3B:3F:3D:17:BB:F5:4E:C3:FD:C4:76:1B
            X509v3 Authority Key Identifier:
                keyid:4F:44:9F:0C:CB:37:8E:C6:D3:FC:D7:6A:A7:EE:D5:9A:F1:15:93:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8e52381d018e8593884d2a30/0/4F449F0CCB378EC6D3FCD76AA7EED59AF11593BB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/35213db6-703a-4ad8-9450-0a0e1d371cff/137bca5a0ff837b3808ba493bd14ab78cc4fd6296629253051.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8e52381d018e8593884d2a30/0/3230392e38372e3137302e302f32342d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.87.170.0/24

    Signature Algorithm: sha256WithRSAEncryption
         69:d5:74:e3:c4:88:d1:00:58:01:e7:19:f2:d4:fc:d4:7e:ae:
         e8:20:5a:69:39:88:7f:f4:70:1a:16:11:ba:11:72:6b:0f:82:
         df:9c:fb:f3:27:a9:d7:21:c9:25:59:05:35:ef:e4:9d:8c:16:
         e6:fd:95:0c:9f:fd:8b:10:db:99:3f:78:de:89:35:ff:c7:03:
         be:b6:79:8c:c8:23:ea:5d:dd:a3:16:ec:84:1f:72:b3:5a:66:
         c0:8b:be:74:fb:4e:7e:6d:bd:94:97:58:b8:d3:8c:15:f9:28:
         bf:dc:06:51:05:b4:7b:64:3a:65:d7:ef:6d:6a:56:57:0c:5d:
         60:79:fd:1d:72:f1:18:e4:a0:80:3a:38:9a:c6:6e:cd:02:b1:
         1b:55:73:5d:a5:74:3b:96:bd:41:6b:af:cb:50:4c:93:2a:32:
         75:17:a6:b3:a5:78:4e:7b:cd:87:bf:08:fc:a5:44:47:bd:80:
         bd:b5:61:34:a7:70:bb:9c:c4:c3:bf:19:04:7d:1a:fe:19:dd:
         19:ce:99:60:c9:74:87:5c:d1:07:f5:c4:a9:8e:63:36:86:c3:
         58:12:1d:0b:ba:9c:ab:5a:c3:08:07:93:44:7c:31:92:20:3d:
         80:13:7e:b6:67:f9:3e:0d:b1:9c:ee:19:c4:a3:a7:bc:b3:2b:
         82:3e:f2:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 3 05:13:09 2024 by rpki-client on console.sobornost.net