Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade88e39bfa01892704d5f332eb/0/3139392e39312e3130332e302f32342d3234203d3e20313430393032.roa
File:                     3139392e39312e3130332e302f32342d3234203d3e20313430393032.roa (raw, json)
Hash identifier:          jvx5S52nKZJeQnxiMuC6PhpSbDxcxTL2vm0j3CY0qIg=
Subject key identifier:   24:F5:9B:89:C3:55:25:11:28:66:14:99:E9:F1:9F:76:2C:37:9D:2B
Certificate issuer:       /CN=74f7a45a3a510de918f6ddf7cca1df53d32dd9eb0564ed5cfb
Certificate serial:       4549A3B0F6766B3F73DF8A2ED7C2A379A66D1363
Authority key identifier: ED:23:65:19:8E:BA:74:92:78:14:95:16:E3:C7:6C:50:94:AE:99:3F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e16c2ee6-ee94-4ae3-a6f7-ccb776ef75a2/74f7a45a3a510de918f6ddf7cca1df53d32dd9eb0564ed5cfb.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01892704d5f332eb/0/3139392e39312e3130332e302f32342d3234203d3e20313430393032.roa
Signing time:             Thu 26 Oct 2023 08:26:05 +0000
ROA not before:           Thu 26 Oct 2023 08:21:05 +0000
ROA not after:            Thu 24 Oct 2024 08:26:05 +0000
asID:                     140902
IP address blocks:        199.91.103.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01892704d5f332eb/0/ED2365198EBA749278149516E3C76C5094AE993F.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01892704d5f332eb/0/ED2365198EBA749278149516E3C76C5094AE993F.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e16c2ee6-ee94-4ae3-a6f7-ccb776ef75a2/74f7a45a3a510de918f6ddf7cca1df53d32dd9eb0564ed5cfb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e16c2ee6-ee94-4ae3-a6f7-ccb776ef75a2/e16c2ee6-ee94-4ae3-a6f7-ccb776ef75a2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e16c2ee6-ee94-4ae3-a6f7-ccb776ef75a2/e16c2ee6-ee94-4ae3-a6f7-ccb776ef75a2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e16c2ee6-ee94-4ae3-a6f7-ccb776ef75a2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 09 Jun 2024 06:05:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:49:a3:b0:f6:76:6b:3f:73:df:8a:2e:d7:c2:a3:79:a6:6d:13:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74f7a45a3a510de918f6ddf7cca1df53d32dd9eb0564ed5cfb
        Validity
            Not Before: Oct 26 08:21:05 2023 GMT
            Not After : Oct 24 08:26:05 2024 GMT
        Subject: CN=24F59B89C355251128661499E9F19F762C379D2B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:09:c5:25:b8:23:4f:fe:b8:1f:15:c7:45:a5:
                    c0:a2:c4:da:ae:d3:e5:f3:21:07:40:f0:38:09:16:
                    53:37:e0:07:3a:b9:54:c1:49:14:d5:38:68:f5:46:
                    4d:1c:2d:e9:56:bc:2c:f2:18:3a:ef:0f:b0:09:c8:
                    83:b5:c9:9b:ac:7a:5a:6f:0e:b0:ca:3e:55:2b:15:
                    8a:30:f5:4d:54:a4:7c:d8:bd:7d:54:58:5e:13:fa:
                    83:15:02:20:25:bb:3a:8a:b2:99:5f:05:d1:07:60:
                    06:b0:9c:05:eb:44:ac:98:c9:bc:64:11:11:e3:ef:
                    da:7b:6c:ae:d0:d0:d9:6e:b3:0f:04:0d:d5:32:23:
                    65:69:f7:01:fc:e4:71:7e:a9:9d:d7:9a:de:22:0c:
                    f2:1d:f1:ce:9c:e9:3c:02:17:82:4b:db:9b:e2:44:
                    45:64:53:9c:38:77:03:15:a8:f3:e7:e7:88:02:3e:
                    b7:f7:77:e5:3d:ce:49:a0:8b:02:9f:7f:e6:e0:09:
                    46:ad:ca:b6:95:82:ab:8f:8b:f0:19:9e:6b:00:11:
                    5b:90:50:66:b4:16:34:4a:b6:d6:f0:45:6e:a7:03:
                    d1:f6:33:93:7a:d0:e5:3f:64:b7:9d:d0:a0:ad:6c:
                    d3:13:e0:2f:9d:d8:a1:03:8c:29:7c:4c:21:bd:c9:
                    1d:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:F5:9B:89:C3:55:25:11:28:66:14:99:E9:F1:9F:76:2C:37:9D:2B
            X509v3 Authority Key Identifier:
                keyid:ED:23:65:19:8E:BA:74:92:78:14:95:16:E3:C7:6C:50:94:AE:99:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01892704d5f332eb/0/ED2365198EBA749278149516E3C76C5094AE993F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e16c2ee6-ee94-4ae3-a6f7-ccb776ef75a2/74f7a45a3a510de918f6ddf7cca1df53d32dd9eb0564ed5cfb.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01892704d5f332eb/0/3139392e39312e3130332e302f32342d3234203d3e20313430393032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.91.103.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1d:c6:d5:a8:62:b4:57:e0:12:c2:b5:bb:3f:40:d0:d9:1c:59:
         2d:81:4b:7b:0a:b5:1e:32:8e:6b:71:35:d3:7c:3a:b8:9b:62:
         3f:18:88:d4:30:4f:bf:f7:22:3f:87:43:07:36:8b:c2:90:0a:
         0f:5a:9f:e9:2c:6c:70:7b:cb:14:3e:a0:de:1e:79:ac:b9:17:
         5a:cb:55:75:7e:9c:1d:4b:f4:c2:a6:0f:06:a3:25:19:db:14:
         97:0b:68:0d:02:16:af:2c:e9:3a:b2:45:cb:d0:a4:c7:7a:33:
         ff:41:9f:07:29:c7:5b:a5:c3:db:28:8c:8e:c5:77:cb:c6:51:
         64:ab:70:52:e7:67:bf:88:81:e3:09:a3:3a:d5:89:95:08:7d:
         a8:12:5f:8f:b4:6a:42:3d:c8:9f:d0:8c:f1:d6:90:a4:c8:be:
         14:e6:3b:63:19:07:f0:7b:02:7d:48:eb:8a:15:38:ff:31:90:
         e3:ea:2c:13:00:2f:f3:cf:54:b5:36:83:37:c6:7f:43:79:49:
         d4:89:28:3c:24:a3:c1:a7:62:80:1d:94:ed:e4:7f:a9:a9:81:
         6b:13:40:ac:a4:71:fd:d0:a5:73:aa:b0:11:61:8b:a4:0f:b5:
         67:9d:48:2d:70:9d:e8:88:1e:bf:66:70:bd:75:63:8b:37:a0:
         94:ea:02:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 05:56:10 2024 by rpki-client on console-ams.rpki-client.org