Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/3139322e3230382e31352e302f32342d3234203d3e20333937343233.roa
File:                     3139322e3230382e31352e302f32342d3234203d3e20333937343233.roa (raw, json)
Hash identifier:          JqcM8dY8TyY9yUKRAZyMLkF0wtNrpxp7ZTZqRiwstf0=
Subject key identifier:   F0:8E:06:CE:21:10:70:EC:41:E1:89:32:B7:E9:17:28:75:88:3F:AD
Certificate issuer:       /CN=c487e481b4a0d3800626ef058f9b9ae9411745794ebeaa34b7
Certificate serial:       41DA60CC8EE82CC67B2EFB77EEBBCEEFED9638A7
Authority key identifier: 66:18:76:BF:25:91:B8:70:21:FA:45:24:F5:40:65:A1:18:C3:15:60
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9612d9a4-803d-4413-aef7-b133b4ff80b7/c487e481b4a0d3800626ef058f9b9ae9411745794ebeaa34b7.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/3139322e3230382e31352e302f32342d3234203d3e20333937343233.roa
Signing time:             Fri 14 Jun 2024 16:14:46 +0000
ROA not before:           Fri 14 Jun 2024 16:09:46 +0000
ROA not after:            Fri 13 Jun 2025 16:14:46 +0000
asID:                     397423
IP address blocks:        192.208.15.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/661876BF2591B87021FA4524F54065A118C31560.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/661876BF2591B87021FA4524F54065A118C31560.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9612d9a4-803d-4413-aef7-b133b4ff80b7/c487e481b4a0d3800626ef058f9b9ae9411745794ebeaa34b7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9612d9a4-803d-4413-aef7-b133b4ff80b7/9612d9a4-803d-4413-aef7-b133b4ff80b7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9612d9a4-803d-4413-aef7-b133b4ff80b7/9612d9a4-803d-4413-aef7-b133b4ff80b7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9612d9a4-803d-4413-aef7-b133b4ff80b7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 03 Jul 2024 23:34:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:da:60:cc:8e:e8:2c:c6:7b:2e:fb:77:ee:bb:ce:ef:ed:96:38:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c487e481b4a0d3800626ef058f9b9ae9411745794ebeaa34b7
        Validity
            Not Before: Jun 14 16:09:46 2024 GMT
            Not After : Jun 13 16:14:46 2025 GMT
        Subject: CN=F08E06CE211070EC41E18932B7E9172875883FAD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:40:77:18:db:fc:76:a8:79:87:7c:66:c4:65:
                    de:9f:97:98:65:66:1a:27:ef:e3:7d:89:7a:f5:c2:
                    98:b2:15:ec:17:34:f5:8f:62:98:44:0e:f4:89:7b:
                    f5:0d:94:5e:00:2f:e0:81:48:1b:06:de:4b:7e:ea:
                    22:55:d0:1c:5b:d9:44:bd:78:04:1a:eb:17:90:c6:
                    bc:80:f5:18:35:57:5f:a1:c4:33:35:43:fb:54:67:
                    f2:dd:a8:ac:36:6d:70:11:22:43:ca:da:32:51:22:
                    aa:4b:69:ea:9a:4c:57:0e:45:78:68:d3:2a:78:08:
                    a9:37:2a:c9:8b:78:d6:8e:77:c0:4d:56:4b:90:fe:
                    64:c6:3a:6e:92:a9:61:b2:4e:d6:19:84:d0:01:8d:
                    dc:b3:bc:cf:70:c8:d1:51:de:73:00:18:c4:41:5d:
                    b5:42:7e:1b:9d:ae:cd:bd:2e:3b:2b:9a:cb:74:4b:
                    a0:01:35:aa:de:31:38:f5:60:15:f6:a4:03:07:55:
                    3b:ef:c9:88:72:cf:a6:37:fe:dc:da:8c:f9:bc:b6:
                    42:1b:0f:cf:2c:9f:e9:af:eb:f2:13:df:fe:95:63:
                    1e:7c:7a:5f:6b:6e:bf:30:09:9a:cb:65:c6:45:0f:
                    87:ac:fa:c9:4d:6e:6c:24:c2:2b:1e:e8:bb:5f:d3:
                    49:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:8E:06:CE:21:10:70:EC:41:E1:89:32:B7:E9:17:28:75:88:3F:AD
            X509v3 Authority Key Identifier:
                keyid:66:18:76:BF:25:91:B8:70:21:FA:45:24:F5:40:65:A1:18:C3:15:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/661876BF2591B87021FA4524F54065A118C31560.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9612d9a4-803d-4413-aef7-b133b4ff80b7/c487e481b4a0d3800626ef058f9b9ae9411745794ebeaa34b7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/3139322e3230382e31352e302f32342d3234203d3e20333937343233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.208.15.0/24

    Signature Algorithm: sha256WithRSAEncryption
         90:5c:69:66:13:e6:a5:15:24:ac:1f:70:08:b2:b4:c1:2e:08:
         34:33:0f:38:4f:f3:0d:7d:0e:86:e3:06:c1:5b:a6:98:1c:bd:
         c5:34:55:5a:8d:6c:56:22:96:cc:1d:32:e8:ec:3a:22:96:b8:
         f9:19:4a:ca:36:d9:b3:c3:b2:59:78:85:7c:95:5b:60:a0:df:
         50:e4:54:83:c0:87:d7:ff:78:b5:11:1b:5f:3b:60:f8:1c:31:
         b8:c1:7a:39:dd:fa:d2:e2:ff:dc:b3:66:2e:86:64:63:fb:b0:
         ab:32:5f:37:3d:14:79:a5:b5:0a:2c:74:39:d0:f1:9f:05:9e:
         e1:0f:8d:38:79:fe:38:96:30:20:b2:fd:b1:38:4c:e7:30:f1:
         88:dc:89:e7:e2:d3:5f:08:c8:dd:e5:5c:77:4c:71:f8:5e:37:
         0d:17:97:34:90:d4:59:b7:74:a0:2f:12:72:64:93:37:1d:ef:
         f1:05:6c:f3:59:d8:d2:74:78:f3:2b:c0:ab:ee:6c:91:65:80:
         2f:a4:5a:e6:65:fa:94:e9:d2:f6:36:e8:66:c7:9c:42:82:54:
         c4:76:29:46:ac:1d:d3:ff:db:e0:ec:dd:d6:7d:e6:e0:b3:5a:
         f0:3c:c9:e9:e3:7c:07:c1:ba:03:83:7f:c6:83:43:78:75:7a:
         c5:b3:cf:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 2 23:14:13 2024 by rpki-client on console-fra.rpki-client.org