Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/3139322e37302e3137362e302f32342d3234203d3e2037303138.roa
File:                     3139322e37302e3137362e302f32342d3234203d3e2037303138.roa (raw, json)
Hash identifier:          nUitj52/VevZFPDixB6IbolGwY8b+vvSYybUWfA96kk=
Subject key identifier:   80:31:55:F4:F3:2A:16:06:D0:34:76:AA:45:28:6D:46:7F:0C:F9:A8
Certificate issuer:       /CN=c487e481b4a0d3800626ef058f9b9ae9411745794ebeaa34b7
Certificate serial:       56907E5ED4920F2F627335CB5871E7D72B17E633
Authority key identifier: 66:18:76:BF:25:91:B8:70:21:FA:45:24:F5:40:65:A1:18:C3:15:60
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9612d9a4-803d-4413-aef7-b133b4ff80b7/c487e481b4a0d3800626ef058f9b9ae9411745794ebeaa34b7.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/3139322e37302e3137362e302f32342d3234203d3e2037303138.roa
Signing time:             Mon 24 Jun 2024 14:19:03 +0000
ROA not before:           Mon 24 Jun 2024 14:14:03 +0000
ROA not after:            Mon 23 Jun 2025 14:19:03 +0000
asID:                     7018
IP address blocks:        192.70.176.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/661876BF2591B87021FA4524F54065A118C31560.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/661876BF2591B87021FA4524F54065A118C31560.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9612d9a4-803d-4413-aef7-b133b4ff80b7/c487e481b4a0d3800626ef058f9b9ae9411745794ebeaa34b7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9612d9a4-803d-4413-aef7-b133b4ff80b7/9612d9a4-803d-4413-aef7-b133b4ff80b7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9612d9a4-803d-4413-aef7-b133b4ff80b7/9612d9a4-803d-4413-aef7-b133b4ff80b7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9612d9a4-803d-4413-aef7-b133b4ff80b7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 03 Jul 2024 23:34:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:90:7e:5e:d4:92:0f:2f:62:73:35:cb:58:71:e7:d7:2b:17:e6:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c487e481b4a0d3800626ef058f9b9ae9411745794ebeaa34b7
        Validity
            Not Before: Jun 24 14:14:03 2024 GMT
            Not After : Jun 23 14:19:03 2025 GMT
        Subject: CN=803155F4F32A1606D03476AA45286D467F0CF9A8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:94:07:02:75:f6:e5:05:96:8b:18:cd:61:5d:
                    32:e0:37:86:f9:c0:4f:36:7c:b1:8f:96:87:e6:11:
                    0c:10:d1:0b:ca:9c:d9:2e:c6:b7:72:88:d2:37:48:
                    9e:22:97:b3:ff:cb:95:7b:c8:d2:b5:2e:1a:d9:39:
                    81:2c:9f:c4:60:0e:64:55:06:bd:3e:67:84:be:24:
                    b0:b5:0b:4f:04:47:b6:c5:9e:1d:26:6e:5c:10:51:
                    2e:d8:e6:cc:c8:86:82:11:93:bd:72:43:75:a2:e7:
                    3f:7b:12:a8:d5:db:29:64:65:49:c2:ec:cf:61:8a:
                    77:f3:15:07:a9:fb:f4:00:03:9f:3b:4e:f0:43:21:
                    ad:43:19:2a:be:99:83:d8:08:e4:53:99:7d:3e:67:
                    9a:c7:46:18:ee:21:dc:ae:5c:d3:44:2f:b0:6e:8d:
                    a5:9d:e0:3a:b9:7b:06:5e:7e:39:ea:a0:5e:01:fd:
                    75:d6:c2:d5:56:6f:d3:3b:b7:ff:c0:57:17:af:56:
                    ad:af:66:91:13:0a:a2:5c:6e:b9:c8:0b:34:4c:5c:
                    38:aa:a2:04:49:3c:56:1d:32:f3:89:f0:9d:8f:78:
                    0e:a2:cf:09:7e:a2:a8:f6:a2:0c:ed:b4:09:8a:76:
                    e9:cc:0a:5a:73:a7:d5:d9:16:fc:f0:71:fe:38:2c:
                    68:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:31:55:F4:F3:2A:16:06:D0:34:76:AA:45:28:6D:46:7F:0C:F9:A8
            X509v3 Authority Key Identifier:
                keyid:66:18:76:BF:25:91:B8:70:21:FA:45:24:F5:40:65:A1:18:C3:15:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/661876BF2591B87021FA4524F54065A118C31560.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9612d9a4-803d-4413-aef7-b133b4ff80b7/c487e481b4a0d3800626ef058f9b9ae9411745794ebeaa34b7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/3139322e37302e3137362e302f32342d3234203d3e2037303138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.70.176.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0e:b2:12:c5:e4:2e:25:72:87:b3:e9:f6:2d:a2:96:9b:13:dc:
         44:ab:0f:00:aa:97:91:cc:70:71:2c:04:30:2b:45:67:9a:be:
         86:4f:28:4a:92:02:46:1a:92:b6:fa:c1:31:4e:cf:a3:06:a4:
         e5:fd:1a:55:89:ec:75:35:73:5d:da:43:9e:23:66:6e:e4:4d:
         42:7c:d2:e0:34:27:ba:2e:84:f4:55:e3:39:65:b2:42:62:d0:
         bf:cb:1f:d3:93:dc:71:da:9e:fa:45:1a:63:14:4e:d1:44:f7:
         d5:d8:b0:12:cb:7b:bc:97:b1:c8:e1:6a:f7:c3:fb:b3:03:cf:
         99:5b:29:93:f3:00:ce:70:22:13:de:0b:72:b4:b1:86:6e:b7:
         79:0b:6a:63:a7:09:2d:e7:18:8b:04:63:3b:95:e4:34:97:d5:
         a8:7e:0f:08:95:26:20:9e:43:33:be:3b:b0:46:69:01:56:83:
         94:ca:5b:96:92:5c:7e:ff:da:cd:58:74:7b:1f:2d:63:d7:04:
         ae:4c:f4:1c:60:39:1f:f6:c3:e1:f5:52:5d:6b:b8:eb:40:6c:
         a6:01:c0:c8:47:b5:8c:c3:a7:2b:bc:53:8e:8d:83:ea:44:e5:
         98:69:33:b5:43:9b:f2:18:24:a2:77:4f:0b:dd:da:3d:90:67:
         91:10:48:51
-----BEGIN CERTIFICATE-----
MIIFsDCCBJigAwIBAgIUVpB+XtSSDy9iczXLWHHn1ysX5jMwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyYzQ4N2U0ODFiNGEwZDM4MDA2MjZlZjA1OGY5YjlhZTk0
MTE3NDU3OTRlYmVhYTM0YjcwHhcNMjQwNjI0MTQxNDAzWhcNMjUwNjIzMTQxOTAz
WjAzMTEwLwYDVQQDEyg4MDMxNTVGNEYzMkExNjA2RDAzNDc2QUE0NTI4NkQ0NjdG
MENGOUE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAupQHAnX25QWW
ixjNYV0y4DeG+cBPNnyxj5aH5hEMENELypzZLsa3cojSN0ieIpez/8uVe8jStS4a
2TmBLJ/EYA5kVQa9PmeEviSwtQtPBEe2xZ4dJm5cEFEu2ObMyIaCEZO9ckN1ouc/
exKo1dspZGVJwuzPYYp38xUHqfv0AAOfO07wQyGtQxkqvpmD2AjkU5l9Pmeax0YY
7iHcrlzTRC+wbo2lneA6uXsGXn456qBeAf111sLVVm/TO7f/wFcXr1atr2aREwqi
XG65yAs0TFw4qqIESTxWHTLzifCdj3gOos8JfqKo9qIM7bQJinbpzApac6fV2Rb8
8HH+OCxoKQIDAQABo4ICsDCCAqwwHQYDVR0OBBYEFIAxVfTzKhYG0DR2qkUobUZ/
DPmoMB8GA1UdIwQYMBaAFGYYdr8lkbhwIfpFJPVAZaEYwxVgMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmOGZkZWVjMGMwMTkwMTc4MzYxMTczOGZmLzAv
NjYxODc2QkYyNTkxQjg3MDIxRkE0NTI0RjU0MDY1QTExOEMzMTU2MC5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNmVhZDA3M2MtYjlmMC00NTIzLWIzOWUtYTNjN2Rh
Yjk3YzI1Lzk2MTJkOWE0LTgwM2QtNDQxMy1hZWY3LWIxMzNiNGZmODBiNy9jNDg3
ZTQ4MWI0YTBkMzgwMDYyNmVmMDU4ZjliOWFlOTQxMTc0NTc5NGViZWFhMzRiNy5j
ZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjhmZGVlYzBjMDE5MDE3
ODM2MTE3MzhmZi8wLzMxMzkzMjJlMzczMDJlMzEzNzM2MmUzMDJmMzIzNDJkMzIz
NDIwM2QzZTIwMzczMDMxMzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADARrAwDQYJKoZIhvcNAQELBQAD
ggEBAA6yEsXkLiVyh7Pp9i2ilpsT3ESrDwCql5HMcHEsBDArRWeavoZPKEqSAkYa
krb6wTFOz6MGpOX9GlWJ7HU1c13aQ54jZm7kTUJ80uA0J7ouhPRV4zllskJi0L/L
H9OT3HHanvpFGmMUTtFE99XYsBLLe7yXscjhavfD+7MDz5lbKZPzAM5wIhPeC3K0
sYZut3kLamOnCS3nGIsEYzuV5DSX1ah+DwiVJiCeQzO+O7BGaQFWg5TKW5aSXH7/
2s1YdHsfLWPXBK5M9BxgOR/2w+H1Ul1ruOtAbKYBwMhHtYzDpyu8U46Ng+pE5Zhp
M7VDm/IYJKJ3Twvd2j2QZ5EQSFE=
-----END CERTIFICATE-----
Generated at Tue Jul 2 23:14:13 2024 by rpki-client on console-fra.rpki-client.org