Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/3139322e3230382e31332e302f32342d3234203d3e20333937343233.roa
File:                     3139322e3230382e31332e302f32342d3234203d3e20333937343233.roa (raw, json)
Hash identifier:          5/JeXH2U3n+44lp0sea5bpCdJNC1MfWcObSIPmkyCyM=
Subject key identifier:   BF:B7:C7:2D:68:FF:D2:4A:FE:B8:73:82:7C:69:F6:1C:3F:70:BF:D0
Certificate issuer:       /CN=c487e481b4a0d3800626ef058f9b9ae9411745794ebeaa34b7
Certificate serial:       0DAF9E539CBA264E5993A7D9718AFEC96F60E472
Authority key identifier: 66:18:76:BF:25:91:B8:70:21:FA:45:24:F5:40:65:A1:18:C3:15:60
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9612d9a4-803d-4413-aef7-b133b4ff80b7/c487e481b4a0d3800626ef058f9b9ae9411745794ebeaa34b7.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/3139322e3230382e31332e302f32342d3234203d3e20333937343233.roa
Signing time:             Fri 14 Jun 2024 16:14:25 +0000
ROA not before:           Fri 14 Jun 2024 16:09:25 +0000
ROA not after:            Fri 13 Jun 2025 16:14:25 +0000
asID:                     397423
IP address blocks:        192.208.13.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/661876BF2591B87021FA4524F54065A118C31560.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/661876BF2591B87021FA4524F54065A118C31560.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9612d9a4-803d-4413-aef7-b133b4ff80b7/c487e481b4a0d3800626ef058f9b9ae9411745794ebeaa34b7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9612d9a4-803d-4413-aef7-b133b4ff80b7/9612d9a4-803d-4413-aef7-b133b4ff80b7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9612d9a4-803d-4413-aef7-b133b4ff80b7/9612d9a4-803d-4413-aef7-b133b4ff80b7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9612d9a4-803d-4413-aef7-b133b4ff80b7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 03 Jul 2024 23:34:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:af:9e:53:9c:ba:26:4e:59:93:a7:d9:71:8a:fe:c9:6f:60:e4:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c487e481b4a0d3800626ef058f9b9ae9411745794ebeaa34b7
        Validity
            Not Before: Jun 14 16:09:25 2024 GMT
            Not After : Jun 13 16:14:25 2025 GMT
        Subject: CN=BFB7C72D68FFD24AFEB873827C69F61C3F70BFD0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:25:87:2b:f2:8e:c9:43:73:87:8a:b4:58:f0:
                    15:6f:43:c8:78:dd:b4:03:8e:c5:f8:86:fd:06:f1:
                    ab:e2:a5:10:8b:c3:b1:cc:b7:d0:8c:97:60:a2:2b:
                    fd:bd:87:db:b2:7d:84:25:37:e4:03:6d:b3:d4:c1:
                    0f:b7:c5:6e:bd:54:0e:60:90:22:51:2e:3f:84:95:
                    3e:4c:b0:f7:27:fa:fc:6e:1c:54:58:e1:b2:ce:c8:
                    9c:7b:4e:92:dd:8a:9b:0a:ca:66:a5:49:24:1e:e7:
                    e0:19:03:ec:03:4a:5a:8d:b3:8b:05:a4:7c:17:47:
                    e3:31:32:52:9c:16:38:4a:ac:58:34:be:d5:35:89:
                    9f:3e:53:3f:4b:a4:9a:62:ac:cb:9e:ac:93:25:a2:
                    0f:51:39:2f:76:59:ca:08:62:17:d5:b1:62:c4:2e:
                    0e:e7:f2:92:fd:9a:9a:d7:c8:a5:5d:3a:08:b0:15:
                    74:10:ba:58:be:34:10:82:78:91:fa:1f:70:34:b3:
                    a3:1b:0d:38:16:a2:15:3e:80:54:31:53:f3:72:de:
                    17:18:9a:35:3e:0b:7a:f4:2b:bd:37:c7:74:2b:69:
                    78:cf:04:47:46:6b:53:37:fe:71:f1:07:6c:34:13:
                    40:7d:49:9f:60:15:e1:53:33:ac:0e:8a:70:d5:4b:
                    99:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:B7:C7:2D:68:FF:D2:4A:FE:B8:73:82:7C:69:F6:1C:3F:70:BF:D0
            X509v3 Authority Key Identifier:
                keyid:66:18:76:BF:25:91:B8:70:21:FA:45:24:F5:40:65:A1:18:C3:15:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/661876BF2591B87021FA4524F54065A118C31560.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9612d9a4-803d-4413-aef7-b133b4ff80b7/c487e481b4a0d3800626ef058f9b9ae9411745794ebeaa34b7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/3139322e3230382e31332e302f32342d3234203d3e20333937343233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.208.13.0/24

    Signature Algorithm: sha256WithRSAEncryption
         50:e6:e7:e6:6e:26:8b:a3:12:f1:30:ce:9b:a2:9c:2f:b7:50:
         00:6e:a1:a0:fb:5b:73:31:b6:15:f5:a0:e5:95:a8:85:67:79:
         ee:09:01:85:87:0c:df:32:78:dc:b0:cc:11:07:00:86:10:37:
         51:5b:5e:83:db:3c:0a:3d:09:11:6b:ec:c3:a3:5e:66:a7:11:
         98:9b:82:c0:56:43:ec:ec:b3:37:7d:88:54:52:a0:ca:22:c3:
         60:a9:a3:bb:fb:2e:1d:5c:a9:a6:b3:e6:a3:e7:9d:a3:2f:ed:
         95:0c:a0:b2:9e:33:23:d5:74:c3:4b:72:6a:7b:77:e7:4f:c9:
         b5:84:12:cb:72:b1:30:8a:3f:f0:a0:07:34:f3:7b:86:33:35:
         86:15:b5:68:e7:51:f8:98:5e:dd:27:ee:a3:00:33:f8:24:71:
         c1:6e:a3:19:e9:21:68:83:64:18:21:ce:ee:c6:54:1a:5f:31:
         57:02:52:e3:47:8e:e3:11:e1:2c:c3:5b:76:ec:35:b1:cd:b9:
         86:fe:89:ac:0a:d9:7e:a7:91:a0:e0:06:09:7f:a0:53:f1:5a:
         10:d1:11:d0:b7:db:29:b4:21:db:f0:a1:c1:7c:fb:66:12:e3:
         86:1f:7b:9f:fc:47:77:b6:ef:8b:0f:b7:a0:29:ae:a4:52:96:
         90:3c:a5:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 2 22:44:27 2024 by rpki-client on console-ams.rpki-client.org