Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade88e39bfa01892704d5f332eb/0/3139392e39312e39372e302f32342d3234203d3e203233343730.roa
File:                     3139392e39312e39372e302f32342d3234203d3e203233343730.roa (raw, json)
Hash identifier:          fLjJfFrpVXFVuEgbEBcax8soRg3UoXKjq2o2v741Mkw=
Subject key identifier:   35:87:2A:32:A7:BD:B6:16:59:DA:DF:FA:F0:4A:4B:B2:B8:E5:03:EF
Certificate issuer:       /CN=74f7a45a3a510de918f6ddf7cca1df53d32dd9eb0564ed5cfb
Certificate serial:       12FCE52A8EE91BFF9E35FB8687A934C706B749AB
Authority key identifier: ED:23:65:19:8E:BA:74:92:78:14:95:16:E3:C7:6C:50:94:AE:99:3F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e16c2ee6-ee94-4ae3-a6f7-ccb776ef75a2/74f7a45a3a510de918f6ddf7cca1df53d32dd9eb0564ed5cfb.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01892704d5f332eb/0/3139392e39312e39372e302f32342d3234203d3e203233343730.roa
Signing time:             Wed 05 Jul 2023 17:08:18 +0000
ROA not before:           Wed 05 Jul 2023 17:03:18 +0000
ROA not after:            Wed 03 Jul 2024 17:08:18 +0000
asID:                     23470
IP address blocks:        199.91.97.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01892704d5f332eb/0/ED2365198EBA749278149516E3C76C5094AE993F.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01892704d5f332eb/0/ED2365198EBA749278149516E3C76C5094AE993F.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e16c2ee6-ee94-4ae3-a6f7-ccb776ef75a2/74f7a45a3a510de918f6ddf7cca1df53d32dd9eb0564ed5cfb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e16c2ee6-ee94-4ae3-a6f7-ccb776ef75a2/e16c2ee6-ee94-4ae3-a6f7-ccb776ef75a2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e16c2ee6-ee94-4ae3-a6f7-ccb776ef75a2/e16c2ee6-ee94-4ae3-a6f7-ccb776ef75a2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e16c2ee6-ee94-4ae3-a6f7-ccb776ef75a2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 02:23:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:fc:e5:2a:8e:e9:1b:ff:9e:35:fb:86:87:a9:34:c7:06:b7:49:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74f7a45a3a510de918f6ddf7cca1df53d32dd9eb0564ed5cfb
        Validity
            Not Before: Jul  5 17:03:18 2023 GMT
            Not After : Jul  3 17:08:18 2024 GMT
        Subject: CN=35872A32A7BDB61659DADFFAF04A4BB2B8E503EF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:d9:58:e4:97:7d:af:05:2c:6f:8d:2c:4d:93:
                    61:6c:a5:d9:c4:1c:01:1c:81:6c:52:4d:6d:db:07:
                    74:6d:b7:26:1c:14:28:fd:1c:6e:1d:60:68:c0:4a:
                    82:8f:1e:2a:43:32:00:90:db:eb:a7:98:1e:db:a7:
                    50:b9:4d:e9:58:ce:34:1e:14:72:82:07:65:b8:c4:
                    ed:49:f6:5e:b9:70:4c:17:9c:59:94:0e:d7:60:aa:
                    bb:aa:95:a1:ae:23:5b:aa:f3:f8:12:13:1b:1c:4f:
                    eb:9d:84:d2:db:e8:25:06:06:58:d7:f2:06:b1:33:
                    95:78:33:a7:b9:23:62:f6:39:c9:db:86:fd:73:d3:
                    70:0c:59:8c:2c:69:e7:6b:6a:7e:1a:ce:77:6b:81:
                    5e:4b:35:b4:af:f9:99:ec:c3:f9:4d:eb:e7:e1:48:
                    34:b7:42:49:fa:91:5c:a1:6a:82:e9:72:f0:3f:0f:
                    39:72:22:47:c9:ac:b0:bf:98:ca:ae:95:e0:b4:56:
                    71:17:5a:89:fc:7d:ae:2d:ea:f0:5d:c1:27:9c:0c:
                    65:40:f1:35:63:98:1c:dd:7a:e8:28:3f:10:64:42:
                    3d:3f:d8:8b:7b:62:4e:7f:63:af:a9:be:58:27:8d:
                    5a:66:e8:eb:d4:10:46:50:28:a5:3f:e4:c8:6c:52:
                    a3:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:87:2A:32:A7:BD:B6:16:59:DA:DF:FA:F0:4A:4B:B2:B8:E5:03:EF
            X509v3 Authority Key Identifier:
                keyid:ED:23:65:19:8E:BA:74:92:78:14:95:16:E3:C7:6C:50:94:AE:99:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01892704d5f332eb/0/ED2365198EBA749278149516E3C76C5094AE993F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e16c2ee6-ee94-4ae3-a6f7-ccb776ef75a2/74f7a45a3a510de918f6ddf7cca1df53d32dd9eb0564ed5cfb.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01892704d5f332eb/0/3139392e39312e39372e302f32342d3234203d3e203233343730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.91.97.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5e:e3:af:cb:d3:7c:b8:5c:94:9f:30:45:20:61:80:18:f8:31:
         fd:b1:e1:b5:ea:1f:2a:1c:24:d4:7d:51:f9:3d:86:0f:27:13:
         56:14:ea:fe:d1:55:54:33:57:bf:cb:7f:71:d2:26:95:40:d3:
         68:82:c7:14:f1:47:bc:cd:fe:82:f6:16:e1:36:74:d4:45:b9:
         f1:bc:e0:e6:43:6b:a6:c7:b3:51:cf:d6:68:7c:b1:a2:10:e5:
         55:d4:50:a4:36:3b:df:b8:65:1f:f7:b6:44:ac:e8:63:32:f4:
         5a:a3:db:a8:2c:93:9a:b9:b0:4c:82:9e:77:2c:33:f4:b0:65:
         ff:a5:d5:e4:93:32:26:b6:8b:1f:8a:0e:48:84:f9:45:3d:46:
         63:13:b8:0c:36:7b:f6:da:eb:03:5c:61:cd:a3:a3:32:9c:34:
         bf:67:c2:23:ef:09:a1:11:d0:70:94:c5:61:57:25:5b:70:96:
         fc:d8:1d:42:f6:a9:fb:8c:87:4f:ca:31:63:27:14:d4:de:7f:
         20:20:ce:cb:c2:93:b2:23:f6:68:25:29:93:ce:bb:cb:33:0d:
         17:bc:17:c9:e7:ab:5b:c3:fe:c7:51:b0:4a:04:48:ff:56:f0:
         c7:2b:5f:45:a8:b3:94:da:e7:d9:a8:84:9c:84:9b:36:8b:ff:
         20:70:41:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 00:10:05 2024 by rpki-client on console-ams.rpki-client.org