Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade88e39bfa01892704d5f332eb/0/3139392e39312e39382e302f32342d3234203d3e203631333137.roa
File:                     3139392e39312e39382e302f32342d3234203d3e203631333137.roa (raw, json)
Hash identifier:          Dd1lADlXnWkJHXbFv5VvJC8ulfavHNgVLBjgheb0D6A=
Subject key identifier:   7A:BD:B0:B0:AF:80:80:E1:BB:8F:F8:E3:9F:E9:98:53:10:7C:7B:24
Certificate issuer:       /CN=74f7a45a3a510de918f6ddf7cca1df53d32dd9eb0564ed5cfb
Certificate serial:       0DA72F5C8532542908A1C110C1EE3F069D9EFEAA
Authority key identifier: ED:23:65:19:8E:BA:74:92:78:14:95:16:E3:C7:6C:50:94:AE:99:3F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e16c2ee6-ee94-4ae3-a6f7-ccb776ef75a2/74f7a45a3a510de918f6ddf7cca1df53d32dd9eb0564ed5cfb.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01892704d5f332eb/0/3139392e39312e39382e302f32342d3234203d3e203631333137.roa
Signing time:             Wed 05 Jul 2023 17:08:32 +0000
ROA not before:           Wed 05 Jul 2023 17:03:32 +0000
ROA not after:            Wed 03 Jul 2024 17:08:32 +0000
asID:                     61317
IP address blocks:        199.91.98.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01892704d5f332eb/0/ED2365198EBA749278149516E3C76C5094AE993F.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01892704d5f332eb/0/ED2365198EBA749278149516E3C76C5094AE993F.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e16c2ee6-ee94-4ae3-a6f7-ccb776ef75a2/74f7a45a3a510de918f6ddf7cca1df53d32dd9eb0564ed5cfb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e16c2ee6-ee94-4ae3-a6f7-ccb776ef75a2/e16c2ee6-ee94-4ae3-a6f7-ccb776ef75a2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e16c2ee6-ee94-4ae3-a6f7-ccb776ef75a2/e16c2ee6-ee94-4ae3-a6f7-ccb776ef75a2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e16c2ee6-ee94-4ae3-a6f7-ccb776ef75a2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 05 May 2024 08:56:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:a7:2f:5c:85:32:54:29:08:a1:c1:10:c1:ee:3f:06:9d:9e:fe:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74f7a45a3a510de918f6ddf7cca1df53d32dd9eb0564ed5cfb
        Validity
            Not Before: Jul  5 17:03:32 2023 GMT
            Not After : Jul  3 17:08:32 2024 GMT
        Subject: CN=7ABDB0B0AF8080E1BB8FF8E39FE99853107C7B24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:4a:9b:96:9f:2f:a6:b1:b7:6c:ff:63:77:59:
                    4a:c8:b6:2a:84:74:2d:2f:9c:a4:66:bd:b8:6c:38:
                    7f:2c:71:0f:20:0b:5f:83:de:56:e3:54:cf:8f:91:
                    57:af:af:08:13:60:f4:63:30:0b:b1:b0:c5:b9:b2:
                    2f:5a:a3:1f:17:96:81:9d:d5:fb:75:97:c6:96:a3:
                    ff:76:b6:59:51:71:9f:a2:2b:b5:c2:0a:ee:b4:b7:
                    ac:43:f8:ef:11:c4:b8:f5:d0:8c:43:a3:ee:f0:60:
                    4b:c3:1c:bc:96:a4:40:13:74:1a:8a:ed:76:a9:d9:
                    4d:b2:80:c1:00:af:f1:b9:a3:c4:fd:32:e5:28:f2:
                    dd:30:5d:60:11:46:52:73:db:1c:2f:d6:c7:65:47:
                    5f:66:4f:36:4a:83:c2:64:63:aa:36:db:b9:2d:9c:
                    b2:60:e7:24:4c:43:88:01:f3:ae:ff:5f:38:bf:cb:
                    e5:a1:b6:cb:81:67:7a:c4:8b:de:f4:54:6f:96:ed:
                    c6:ee:2f:5d:e1:3c:fe:5c:3e:2a:6e:a7:55:77:66:
                    77:03:f5:4e:dc:38:af:60:73:6f:46:84:dc:d4:2c:
                    df:32:72:98:8b:f7:d0:e7:55:92:14:57:ab:b0:c3:
                    e5:43:17:1e:09:b7:ef:7e:3c:aa:47:aa:5f:a2:db:
                    d4:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:BD:B0:B0:AF:80:80:E1:BB:8F:F8:E3:9F:E9:98:53:10:7C:7B:24
            X509v3 Authority Key Identifier:
                keyid:ED:23:65:19:8E:BA:74:92:78:14:95:16:E3:C7:6C:50:94:AE:99:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01892704d5f332eb/0/ED2365198EBA749278149516E3C76C5094AE993F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e16c2ee6-ee94-4ae3-a6f7-ccb776ef75a2/74f7a45a3a510de918f6ddf7cca1df53d32dd9eb0564ed5cfb.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01892704d5f332eb/0/3139392e39312e39382e302f32342d3234203d3e203631333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.91.98.0/24

    Signature Algorithm: sha256WithRSAEncryption
         14:3b:95:f3:d7:1a:e2:7a:ee:22:15:dc:86:33:a6:68:0a:e6:
         dd:d8:10:35:cb:78:36:b5:f3:9e:f7:93:fe:5e:bd:8c:f9:ec:
         25:22:41:66:b3:09:1f:d8:35:df:25:83:c9:57:25:bd:3b:4d:
         4d:9d:5b:0b:11:50:c6:c9:63:39:5e:ec:be:1e:9e:64:36:72:
         e1:6d:86:88:c6:fd:69:84:b5:b8:01:f6:97:20:b8:5c:e4:ad:
         ed:bb:0f:55:65:ea:02:63:62:ab:5b:62:93:74:c3:61:26:67:
         01:88:21:c5:d1:e6:c5:c0:15:38:9a:fd:d9:3c:d1:54:01:ca:
         52:3b:6c:cd:fd:ba:54:c6:59:3d:d4:33:34:c7:c3:45:5c:2c:
         af:c7:fd:62:8c:f1:4c:9f:30:ac:ca:00:95:75:d0:4b:e6:ab:
         48:da:a4:8d:b9:90:23:84:0a:3b:a8:10:95:b8:7f:dd:67:32:
         bc:60:45:b5:38:38:b5:78:10:d5:38:c5:4a:ee:96:a0:74:18:
         c0:ea:ca:59:4f:c4:32:b7:6a:2f:19:82:c3:3d:c0:f8:00:9d:
         ce:53:40:a4:83:93:4e:33:4d:f2:06:68:e0:a0:87:e0:dd:1d:
         e4:46:f2:c7:01:e7:a4:a4:88:e2:9b:84:74:05:ff:01:37:51:
         33:8f:97:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 07:03:37 2024 by rpki-client on console-ams.rpki-client.org