Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade88e39bfa01892704d5f332eb/0/3139392e39312e39362e302f32342d3234203d3e20313336373434.roa
File:                     3139392e39312e39362e302f32342d3234203d3e20313336373434.roa (raw, json)
Hash identifier:          W6dCCskqmmG2/AQ+vpifqTa0+akH+Y0EIh/tdedDQGk=
Subject key identifier:   6D:3E:FE:E9:73:EA:4B:21:63:6F:94:1C:31:AD:BE:0D:47:4F:C4:2E
Certificate issuer:       /CN=74f7a45a3a510de918f6ddf7cca1df53d32dd9eb0564ed5cfb
Certificate serial:       452BD39C96DC1F5B7FA6CF2D0A29EDC19A271EE1
Authority key identifier: ED:23:65:19:8E:BA:74:92:78:14:95:16:E3:C7:6C:50:94:AE:99:3F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e16c2ee6-ee94-4ae3-a6f7-ccb776ef75a2/74f7a45a3a510de918f6ddf7cca1df53d32dd9eb0564ed5cfb.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01892704d5f332eb/0/3139392e39312e39362e302f32342d3234203d3e20313336373434.roa
Signing time:             Wed 05 Jun 2024 17:48:58 +0000
ROA not before:           Wed 05 Jun 2024 17:43:58 +0000
ROA not after:            Wed 04 Jun 2025 17:48:58 +0000
asID:                     136744
IP address blocks:        199.91.96.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01892704d5f332eb/0/ED2365198EBA749278149516E3C76C5094AE993F.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01892704d5f332eb/0/ED2365198EBA749278149516E3C76C5094AE993F.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e16c2ee6-ee94-4ae3-a6f7-ccb776ef75a2/74f7a45a3a510de918f6ddf7cca1df53d32dd9eb0564ed5cfb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e16c2ee6-ee94-4ae3-a6f7-ccb776ef75a2/e16c2ee6-ee94-4ae3-a6f7-ccb776ef75a2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e16c2ee6-ee94-4ae3-a6f7-ccb776ef75a2/e16c2ee6-ee94-4ae3-a6f7-ccb776ef75a2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e16c2ee6-ee94-4ae3-a6f7-ccb776ef75a2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 09 Jun 2024 06:05:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:2b:d3:9c:96:dc:1f:5b:7f:a6:cf:2d:0a:29:ed:c1:9a:27:1e:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74f7a45a3a510de918f6ddf7cca1df53d32dd9eb0564ed5cfb
        Validity
            Not Before: Jun  5 17:43:58 2024 GMT
            Not After : Jun  4 17:48:58 2025 GMT
        Subject: CN=6D3EFEE973EA4B21636F941C31ADBE0D474FC42E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:b1:32:df:ef:86:4c:83:8b:c7:cc:e0:74:f4:
                    48:70:90:ac:e8:02:0c:10:58:19:de:4d:03:3e:0b:
                    02:5d:bc:22:c1:50:83:78:59:dc:37:6f:7e:b6:25:
                    d9:f1:89:ff:6c:db:d0:48:93:b2:43:83:12:d0:a1:
                    c1:d9:89:02:ff:45:78:3f:46:bc:80:d4:15:5e:03:
                    b3:5e:ae:c9:fd:4f:98:80:09:3b:28:68:05:72:47:
                    0d:54:95:ec:96:79:c2:1c:8b:b1:29:61:a0:45:32:
                    14:f0:52:1a:4b:ee:55:95:94:a6:be:67:e7:1b:55:
                    64:3b:35:58:a7:d7:59:d3:97:2e:11:fc:eb:a3:80:
                    32:39:07:f6:98:6a:fe:35:32:ad:c6:49:e2:17:11:
                    3a:4e:6e:63:02:ce:16:50:dd:0f:da:c3:fe:cc:05:
                    29:86:2c:2a:07:04:87:5a:c5:26:52:78:bf:f8:96:
                    23:d0:62:ab:bf:eb:fc:fb:c5:fa:b7:e6:fe:27:b7:
                    d5:4f:08:dc:35:2d:fc:c7:47:96:c0:74:25:24:79:
                    52:23:d5:82:15:aa:d0:3b:d7:40:66:07:93:e4:76:
                    4d:65:35:1c:8d:e1:5f:e8:ef:ea:c9:07:d5:5c:91:
                    84:b6:8a:c7:d0:f9:b4:ba:72:07:d4:d4:03:0f:91:
                    89:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:3E:FE:E9:73:EA:4B:21:63:6F:94:1C:31:AD:BE:0D:47:4F:C4:2E
            X509v3 Authority Key Identifier:
                keyid:ED:23:65:19:8E:BA:74:92:78:14:95:16:E3:C7:6C:50:94:AE:99:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01892704d5f332eb/0/ED2365198EBA749278149516E3C76C5094AE993F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e16c2ee6-ee94-4ae3-a6f7-ccb776ef75a2/74f7a45a3a510de918f6ddf7cca1df53d32dd9eb0564ed5cfb.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01892704d5f332eb/0/3139392e39312e39362e302f32342d3234203d3e20313336373434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.91.96.0/24

    Signature Algorithm: sha256WithRSAEncryption
         44:32:25:1c:26:b6:83:7e:63:78:f0:4c:ca:f9:cf:a6:70:88:
         84:f3:6b:81:1f:3b:c5:a6:79:25:92:ca:02:79:ab:b2:12:ae:
         82:09:56:a0:73:1f:3d:6d:67:5c:c9:b9:19:6b:c1:18:76:bb:
         57:93:e7:28:be:a2:13:ae:bf:81:bd:4d:27:e0:42:87:8e:86:
         fa:c4:d2:e1:e5:d4:10:b8:f3:ea:b1:f2:38:3f:5f:c4:08:99:
         5b:d8:22:96:96:be:47:2f:0e:05:d0:c9:c5:92:9e:09:3e:99:
         50:37:8e:a2:bc:4d:be:5f:11:7d:94:07:21:09:f2:00:1c:44:
         9c:1b:1d:e3:0f:1c:46:67:9b:74:65:7a:f2:b9:6a:39:7e:08:
         e5:8c:c2:8e:a4:8e:71:4f:74:03:09:0f:3b:89:73:44:fb:db:
         e2:cb:87:a7:42:d9:37:6f:6b:41:60:ca:2b:98:3f:c1:45:45:
         e1:bd:c8:34:b3:d7:26:70:7f:7b:98:ef:15:70:be:7c:7f:a7:
         b3:f5:7f:6d:5e:b9:17:3e:b5:c0:9b:2d:22:bb:58:8b:da:5e:
         81:81:fe:21:1c:92:80:72:52:5b:1b:8f:19:2a:b9:1c:9e:d4:
         bd:76:3f:6c:24:0e:a6:5b:56:88:21:36:ac:07:61:1d:14:e2:
         da:63:56:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 05:56:10 2024 by rpki-client on console-ams.rpki-client.org