Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/3139322e3230392e36332e302f32342d3234203d3e20343030323938.roa
File:                     3139322e3230392e36332e302f32342d3234203d3e20343030323938.roa (raw, json)
Hash identifier:          HveYOaFV1GUX3OsA2dm/0MyyiVOTlRp7JZIVd3fErEo=
Subject key identifier:   DE:8C:81:3B:A4:51:5E:55:80:E4:1E:AA:14:00:EB:2D:7C:2C:E2:02
Certificate issuer:       /CN=eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96
Certificate serial:       514EFE2236AAA62A412832BDD85C36C0AE659D0E
Authority key identifier: 0F:03:31:2E:E5:9E:3D:E8:27:35:F6:6B:54:94:15:DE:44:64:78:75
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/3139322e3230392e36332e302f32342d3234203d3e20343030323938.roa
Signing time:             Thu 02 May 2024 20:44:24 +0000
ROA not before:           Thu 02 May 2024 20:39:24 +0000
ROA not after:            Thu 01 May 2025 20:44:24 +0000
asID:                     400298
IP address blocks:        192.209.63.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/0F03312EE59E3DE82735F66B549415DE44647875.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/0F03312EE59E3DE82735F66B549415DE44647875.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/a01e997c-b89e-47c2-8d79-d31e58bc3ca4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/a01e997c-b89e-47c2-8d79-d31e58bc3ca4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 12 Jun 2024 01:48:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:4e:fe:22:36:aa:a6:2a:41:28:32:bd:d8:5c:36:c0:ae:65:9d:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96
        Validity
            Not Before: May  2 20:39:24 2024 GMT
            Not After : May  1 20:44:24 2025 GMT
        Subject: CN=DE8C813BA4515E5580E41EAA1400EB2D7C2CE202
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:2e:57:62:b5:6d:33:1e:1f:36:95:85:6f:ac:
                    af:e3:c5:1c:48:de:79:28:c8:3d:83:b7:0d:8e:09:
                    9e:91:50:ae:a4:75:cb:fa:31:9b:8b:4d:81:03:72:
                    a7:68:d9:c6:0d:5d:19:ae:f6:78:c0:44:4b:80:23:
                    b5:43:57:09:db:91:cb:90:ea:94:71:b7:97:de:a7:
                    0f:f5:e1:0e:32:b2:cb:e5:cb:f2:2b:e5:1b:ee:f7:
                    b4:40:7c:1c:20:10:03:62:38:8a:ca:86:9c:9a:83:
                    49:76:4d:40:7f:0e:ab:cb:44:4e:2e:30:dd:12:3f:
                    61:52:6d:75:be:7c:e6:b8:63:6b:5a:12:a0:48:d2:
                    69:a2:c7:46:ba:4c:94:b3:01:4a:29:16:16:38:89:
                    4e:56:57:12:9d:f7:6d:5b:95:89:04:75:14:2c:86:
                    16:eb:78:d5:e6:da:2a:6f:33:be:6a:34:e9:31:35:
                    ea:5a:f0:f3:52:d7:1a:bf:16:5c:5e:5d:ab:05:d6:
                    2e:9d:05:06:33:43:a3:12:a5:0e:43:dc:59:b9:21:
                    b3:e2:62:b4:70:78:8d:8b:87:54:2d:d7:31:3f:ab:
                    32:0a:61:ab:16:36:d2:e3:24:b6:95:5e:9c:f7:1e:
                    39:1c:32:61:00:81:d9:53:55:80:af:3e:87:05:bf:
                    61:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:8C:81:3B:A4:51:5E:55:80:E4:1E:AA:14:00:EB:2D:7C:2C:E2:02
            X509v3 Authority Key Identifier:
                keyid:0F:03:31:2E:E5:9E:3D:E8:27:35:F6:6B:54:94:15:DE:44:64:78:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/0F03312EE59E3DE82735F66B549415DE44647875.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/3139322e3230392e36332e302f32342d3234203d3e20343030323938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.209.63.0/24

    Signature Algorithm: sha256WithRSAEncryption
         71:dc:ab:5a:08:9c:e4:f4:a2:38:26:1d:f4:83:24:7f:99:0c:
         d7:0d:56:3b:4e:f0:41:53:3e:7d:4c:4f:01:fa:33:2e:c9:5b:
         a0:01:3e:be:a9:1a:54:0c:66:c0:60:ca:f4:3a:14:62:07:52:
         6f:ef:72:05:b4:eb:27:fd:38:bc:69:6e:17:5b:bb:e0:a7:c1:
         bb:e6:4d:3d:5d:91:0e:ee:d9:d0:2c:e3:16:ce:22:87:22:de:
         db:45:b0:c0:c9:01:84:19:d6:40:69:b7:fe:83:49:65:89:11:
         1c:1c:04:80:d7:dd:70:ba:fb:ac:a4:84:8a:96:6a:3e:1c:3a:
         a0:e8:f8:2e:a3:c4:8f:d9:64:0e:c6:ae:d6:b6:8d:4d:a3:e9:
         5c:b9:37:2b:52:33:8f:b1:cd:9f:df:2e:02:57:39:41:c9:e8:
         37:6d:da:8f:d7:f7:09:d8:14:6f:4e:c8:a6:65:1d:44:f1:8d:
         df:b9:c7:77:e6:84:f1:ed:42:12:04:d5:3c:01:03:03:ff:3f:
         d8:9a:22:8e:55:c2:ff:c7:04:3c:30:b2:7f:e5:f1:45:e3:2e:
         59:8b:d6:32:7d:01:25:06:47:ed:f5:73:92:0a:d5:ed:9a:d8:
         7f:bc:23:1b:bb:70:58:74:ad:16:b8:3f:08:34:30:82:c0:84:
         03:d5:00:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 10 23:22:19 2024 by rpki-client on console-ams.rpki-client.org