Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8cea2ac6018cfa0a16bf19f4/0/3139392e3138382e3233392e302f32342d3234203d3e203631333137.roa
File:                     3139392e3138382e3233392e302f32342d3234203d3e203631333137.roa (raw, json)
Hash identifier:          QxTwHpR5KqwLgdR2lgQHBc43L12oyEHopNuflvvDwzk=
Subject key identifier:   10:04:B8:0A:F4:FD:BD:B0:7B:CA:30:DB:6E:85:45:66:C9:75:4B:7E
Certificate issuer:       /CN=c3a7a2fa9fdf7a6f5087b840b66c4fc34120d5ce7114b878d0
Certificate serial:       1588F0C9E6FF0D636B64CCF35DECF621EB874F16
Authority key identifier: CB:A7:78:B7:41:5B:D4:D1:E6:EF:0E:80:0E:25:8B:46:DF:A5:4D:8A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cbfc84cd-39fb-4efb-a65d-dca73adfa9ac/c3a7a2fa9fdf7a6f5087b840b66c4fc34120d5ce7114b878d0.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8cea2ac6018cfa0a16bf19f4/0/3139392e3138382e3233392e302f32342d3234203d3e203631333137.roa
Signing time:             Thu 11 Jan 2024 19:41:27 +0000
ROA not before:           Thu 11 Jan 2024 19:36:27 +0000
ROA not after:            Thu 09 Jan 2025 19:41:27 +0000
asID:                     61317
IP address blocks:        199.188.239.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8cea2ac6018cfa0a16bf19f4/0/CBA778B7415BD4D1E6EF0E800E258B46DFA54D8A.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8cea2ac6018cfa0a16bf19f4/0/CBA778B7415BD4D1E6EF0E800E258B46DFA54D8A.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cbfc84cd-39fb-4efb-a65d-dca73adfa9ac/c3a7a2fa9fdf7a6f5087b840b66c4fc34120d5ce7114b878d0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cbfc84cd-39fb-4efb-a65d-dca73adfa9ac/cbfc84cd-39fb-4efb-a65d-dca73adfa9ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cbfc84cd-39fb-4efb-a65d-dca73adfa9ac/cbfc84cd-39fb-4efb-a65d-dca73adfa9ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cbfc84cd-39fb-4efb-a65d-dca73adfa9ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 05 May 2024 11:04:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:88:f0:c9:e6:ff:0d:63:6b:64:cc:f3:5d:ec:f6:21:eb:87:4f:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c3a7a2fa9fdf7a6f5087b840b66c4fc34120d5ce7114b878d0
        Validity
            Not Before: Jan 11 19:36:27 2024 GMT
            Not After : Jan  9 19:41:27 2025 GMT
        Subject: CN=1004B80AF4FDBDB07BCA30DB6E854566C9754B7E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:bf:4e:07:8c:13:07:11:e0:87:0a:81:d2:e3:
                    75:30:c9:40:85:44:8e:06:cc:f9:df:f2:44:e1:f8:
                    21:e9:ae:82:69:aa:93:ad:b0:bd:9d:72:f4:79:45:
                    c3:9c:68:f5:4b:17:e7:5b:fe:9e:1b:94:88:e2:83:
                    a7:f0:6d:4f:49:e0:a9:61:4f:eb:f3:d1:a3:7a:90:
                    12:6f:64:eb:17:91:e6:93:8e:43:62:58:dc:48:c4:
                    2d:cf:21:f6:a7:f3:be:a5:a3:c6:97:b8:f7:b9:94:
                    ba:17:55:c6:c5:36:34:1e:d0:04:e1:99:50:0c:a5:
                    c6:13:66:6c:3f:0f:6b:32:8c:a5:11:44:9d:a9:66:
                    7e:e1:4b:c8:17:44:9e:cf:90:6e:9a:8a:33:bf:14:
                    8b:6a:ca:6c:3e:5a:8b:6c:2d:10:85:49:6a:90:cc:
                    43:aa:6c:29:d6:4d:43:44:b9:94:46:64:91:66:03:
                    ed:d6:ce:06:f9:ab:ab:11:0d:41:6f:fe:47:c3:2b:
                    fd:5a:ba:6d:de:d9:9d:31:d4:b6:be:00:f2:bd:e5:
                    7f:df:6b:19:07:7b:6b:95:6c:bf:5e:59:22:64:2d:
                    47:5d:90:48:d1:27:1e:28:08:bf:1b:b2:62:f8:1e:
                    a2:53:00:e6:b5:61:32:ca:a7:59:e5:5a:4e:73:fa:
                    6e:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:04:B8:0A:F4:FD:BD:B0:7B:CA:30:DB:6E:85:45:66:C9:75:4B:7E
            X509v3 Authority Key Identifier:
                keyid:CB:A7:78:B7:41:5B:D4:D1:E6:EF:0E:80:0E:25:8B:46:DF:A5:4D:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8cea2ac6018cfa0a16bf19f4/0/CBA778B7415BD4D1E6EF0E800E258B46DFA54D8A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cbfc84cd-39fb-4efb-a65d-dca73adfa9ac/c3a7a2fa9fdf7a6f5087b840b66c4fc34120d5ce7114b878d0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8cea2ac6018cfa0a16bf19f4/0/3139392e3138382e3233392e302f32342d3234203d3e203631333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.188.239.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1f:5b:30:07:4c:4b:fd:9b:9f:aa:c1:9f:e3:52:a9:f1:5d:b3:
         cd:a8:ab:65:be:f0:af:4a:34:f5:7e:85:aa:8b:4f:ae:2c:6d:
         6c:b3:85:b9:2b:0f:b9:15:bf:0d:c5:f5:5c:63:8d:ce:81:23:
         a6:ac:fe:77:4f:ae:14:f7:65:87:45:0e:c0:c8:60:29:6a:89:
         05:19:8f:f5:06:4d:d6:dc:fa:a4:c5:a6:49:87:00:31:6a:ac:
         ff:da:52:9c:18:74:ba:5e:61:a6:c7:e9:42:6a:4a:16:71:90:
         13:55:d5:98:1c:f5:87:81:88:18:a2:51:65:ff:89:f0:0e:28:
         10:6a:ff:19:30:47:6f:57:4f:46:6c:af:b8:e6:5a:d2:1a:db:
         ed:f3:68:61:47:f4:d3:7c:d0:69:e5:27:45:86:d2:f6:4d:7f:
         d0:cb:32:eb:8c:4c:7b:cd:11:9a:12:ff:95:23:fc:20:4d:6c:
         c6:ff:e1:fb:21:04:07:6e:f5:b4:50:03:9b:0b:b9:1f:54:97:
         2b:5f:ec:35:e7:40:e0:af:7b:b8:e6:bd:6f:83:11:c2:f4:36:
         20:92:ce:55:cc:e8:09:6f:2a:fc:cb:c8:b1:43:1e:f3:33:fa:
         cd:4a:2f:3e:81:7c:c0:8d:07:ae:72:5d:d6:cd:0b:20:b5:ed:
         64:58:a4:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 11:06:33 2024 by rpki-client on console-fra.rpki-client.org