Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/3139322e3230382e31312e302f32342d3234203d3e20333937343233.roa
File:                     3139322e3230382e31312e302f32342d3234203d3e20333937343233.roa (raw, json)
Hash identifier:          1aYUMq0PRqCyrLVVlntvlY/kKcz5Cx205e7QN0AWBy8=
Subject key identifier:   DA:A1:CD:CB:9D:6D:31:B7:76:4F:26:72:DC:35:CA:76:EB:BE:8E:A3
Certificate issuer:       /CN=c487e481b4a0d3800626ef058f9b9ae9411745794ebeaa34b7
Certificate serial:       2F4E0C37E8924A7F8C070B54EB29049F78CA3821
Authority key identifier: 66:18:76:BF:25:91:B8:70:21:FA:45:24:F5:40:65:A1:18:C3:15:60
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9612d9a4-803d-4413-aef7-b133b4ff80b7/c487e481b4a0d3800626ef058f9b9ae9411745794ebeaa34b7.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/3139322e3230382e31312e302f32342d3234203d3e20333937343233.roa
Signing time:             Fri 14 Jun 2024 16:14:36 +0000
ROA not before:           Fri 14 Jun 2024 16:09:36 +0000
ROA not after:            Fri 13 Jun 2025 16:14:36 +0000
asID:                     397423
IP address blocks:        192.208.11.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/661876BF2591B87021FA4524F54065A118C31560.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/661876BF2591B87021FA4524F54065A118C31560.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9612d9a4-803d-4413-aef7-b133b4ff80b7/c487e481b4a0d3800626ef058f9b9ae9411745794ebeaa34b7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9612d9a4-803d-4413-aef7-b133b4ff80b7/9612d9a4-803d-4413-aef7-b133b4ff80b7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9612d9a4-803d-4413-aef7-b133b4ff80b7/9612d9a4-803d-4413-aef7-b133b4ff80b7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9612d9a4-803d-4413-aef7-b133b4ff80b7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 03 Jul 2024 23:34:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:4e:0c:37:e8:92:4a:7f:8c:07:0b:54:eb:29:04:9f:78:ca:38:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c487e481b4a0d3800626ef058f9b9ae9411745794ebeaa34b7
        Validity
            Not Before: Jun 14 16:09:36 2024 GMT
            Not After : Jun 13 16:14:36 2025 GMT
        Subject: CN=DAA1CDCB9D6D31B7764F2672DC35CA76EBBE8EA3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:d1:a7:ba:63:13:61:c0:2f:a7:cf:3a:15:6a:
                    a0:c1:b9:ae:7b:3f:a1:60:36:65:29:35:1a:4e:66:
                    b2:da:de:9c:ba:5a:2d:cb:4d:9a:53:2f:d1:b3:b4:
                    f0:6d:5d:46:b5:ce:4f:f1:46:1f:c8:14:6d:69:19:
                    6e:87:91:76:0f:1b:a2:fb:0e:66:e3:9f:63:19:01:
                    25:bb:16:11:de:b2:ca:e8:c2:d9:4d:4c:6b:f2:54:
                    38:c4:b8:60:20:1e:64:74:3b:c4:d6:53:43:a4:7a:
                    9d:ed:28:49:28:f5:61:51:f1:14:9a:dd:71:2f:3f:
                    19:b3:38:7c:bf:ca:1e:d8:79:c6:b6:a3:43:3c:a2:
                    1c:77:86:92:58:24:9f:8b:ea:28:6e:57:b6:16:91:
                    88:00:e6:22:1f:6d:fe:52:02:f5:7d:07:8c:64:af:
                    0b:6f:d0:a5:fb:8a:0f:8a:20:c4:e9:4f:28:53:f5:
                    bf:a8:e0:09:53:88:78:62:e3:d0:18:b0:5c:88:51:
                    db:57:93:aa:b7:44:2f:c2:49:60:a8:b9:7c:78:f6:
                    0f:97:a1:ac:fc:76:8d:d5:56:cb:3c:36:97:de:9e:
                    62:e0:43:bc:16:f5:ff:0c:c0:ed:26:87:e2:4b:6d:
                    ff:f5:27:98:15:1a:79:ee:a8:c6:a3:d0:41:76:3c:
                    8a:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:A1:CD:CB:9D:6D:31:B7:76:4F:26:72:DC:35:CA:76:EB:BE:8E:A3
            X509v3 Authority Key Identifier:
                keyid:66:18:76:BF:25:91:B8:70:21:FA:45:24:F5:40:65:A1:18:C3:15:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/661876BF2591B87021FA4524F54065A118C31560.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9612d9a4-803d-4413-aef7-b133b4ff80b7/c487e481b4a0d3800626ef058f9b9ae9411745794ebeaa34b7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/3139322e3230382e31312e302f32342d3234203d3e20333937343233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.208.11.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9b:40:51:cb:df:59:4a:2e:22:3f:91:7c:0a:85:1d:3b:1a:9d:
         83:0f:83:d4:26:82:0f:66:ee:45:ae:7d:94:8d:92:ce:fa:be:
         aa:96:4e:e1:0a:c7:33:27:e5:99:48:40:8a:ea:80:5d:29:ed:
         a1:bb:a9:91:fb:81:79:12:29:70:62:30:58:07:47:44:c1:c1:
         a4:d3:96:e4:25:da:a4:93:26:d7:9d:3a:9c:2f:2f:ec:f9:ab:
         e6:11:30:ca:bf:a8:71:14:52:e2:ee:fc:a3:42:82:a7:8c:b2:
         0b:ff:1f:20:2f:da:48:98:f7:ea:f4:7f:2b:f1:b3:b9:08:e1:
         51:68:f1:c1:75:f0:41:bf:a0:7d:02:6f:a5:6b:9d:d2:57:4c:
         d2:e1:28:55:e1:a2:16:40:8f:4e:bd:95:4a:75:0e:e1:3a:ec:
         ea:6a:a0:a2:02:8a:0b:ac:cd:74:ed:c0:ef:6e:ba:b9:c2:0a:
         59:76:f0:40:71:e9:51:fc:e7:dd:53:72:4c:ab:91:44:1e:df:
         47:b6:9e:aa:9f:6f:f4:59:3e:85:42:9c:2b:55:4b:c9:d6:44:
         9e:7e:8a:66:d1:61:f7:bc:3b:2f:1a:af:4f:43:03:9b:72:e6:
         0e:47:83:65:22:58:42:ad:bb:20:4b:c0:ca:38:ab:06:33:11:
         f2:29:0a:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 2 23:14:13 2024 by rpki-client on console-fra.rpki-client.org