Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade850cfeb701855aca4b173434/0/3139392e3230342e3136302e302f32342d3234203d3e20323131333733.roa
File:                     3139392e3230342e3136302e302f32342d3234203d3e20323131333733.roa (raw, json)
Hash identifier:          Snq0kGcDrdx4Cl31+i2CxICumxOC3KjeylFf2n1Buoo=
Subject key identifier:   41:69:E9:E0:5C:BC:9B:6F:CF:F1:28:B9:64:D7:DD:E0:33:BD:04:A6
Certificate issuer:       /CN=be49adab1404487fa9fd5e1f8e6c19c0993610ceaf55638bc7
Certificate serial:       4CB0206934BD4E1265F1CB9282E332F50EC3D82A
Authority key identifier: 9F:7C:EE:6E:63:60:10:F9:3C:03:46:EE:DE:55:65:71:8E:EF:62:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cf3a812c-0f10-45ec-aca3-68a73e99d08f/be49adab1404487fa9fd5e1f8e6c19c0993610ceaf55638bc7.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade850cfeb701855aca4b173434/0/3139392e3230342e3136302e302f32342d3234203d3e20323131333733.roa
Signing time:             Mon 13 Jan 2025 13:40:12 +0000
ROA not before:           Mon 13 Jan 2025 13:35:12 +0000
ROA not after:            Mon 12 Jan 2026 13:40:12 +0000
asID:                     211373
IP address blocks:        199.204.160.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade850cfeb701855aca4b173434/0/9F7CEE6E636010F93C0346EEDE5565718EEF62A7.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade850cfeb701855aca4b173434/0/9F7CEE6E636010F93C0346EEDE5565718EEF62A7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cf3a812c-0f10-45ec-aca3-68a73e99d08f/be49adab1404487fa9fd5e1f8e6c19c0993610ceaf55638bc7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cf3a812c-0f10-45ec-aca3-68a73e99d08f/cf3a812c-0f10-45ec-aca3-68a73e99d08f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cf3a812c-0f10-45ec-aca3-68a73e99d08f/cf3a812c-0f10-45ec-aca3-68a73e99d08f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cf3a812c-0f10-45ec-aca3-68a73e99d08f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Feb 2025 09:47:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:b0:20:69:34:bd:4e:12:65:f1:cb:92:82:e3:32:f5:0e:c3:d8:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=be49adab1404487fa9fd5e1f8e6c19c0993610ceaf55638bc7
        Validity
            Not Before: Jan 13 13:35:12 2025 GMT
            Not After : Jan 12 13:40:12 2026 GMT
        Subject: CN=4169E9E05CBC9B6FCFF128B964D7DDE033BD04A6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:53:9f:60:c1:13:c7:79:3a:4c:53:c3:1b:92:
                    c1:d5:8a:b0:29:01:2e:cb:4b:ef:08:35:63:67:e3:
                    92:37:b1:6e:97:a8:54:bd:64:d9:7f:7c:5e:56:e9:
                    d1:f1:de:65:1b:31:1c:64:92:ab:57:f9:95:f4:f3:
                    af:20:c2:0d:db:16:1e:9b:d5:53:5b:2e:db:e7:d9:
                    3d:ed:ca:12:1e:c8:c3:bc:39:fd:d2:be:ee:84:76:
                    66:43:a0:78:3b:40:83:29:a7:08:e1:7f:6b:c2:eb:
                    7f:90:1e:28:ef:67:b0:63:30:97:0e:16:22:e5:f7:
                    6c:1a:25:f6:b2:1a:80:ae:80:0f:e2:70:4b:ae:12:
                    60:1f:4e:ed:56:6c:ca:5e:32:13:49:0f:a1:78:b7:
                    39:ba:a6:e5:d4:23:db:5d:fc:40:d1:a7:01:59:92:
                    e8:cb:21:75:86:4d:fd:e2:17:fa:5a:a8:60:f7:f7:
                    95:c8:d5:20:f8:c7:28:88:90:94:29:15:09:a5:b6:
                    71:59:c5:51:8e:79:18:9d:61:64:79:dd:0b:42:e0:
                    de:3d:10:85:4f:2f:c8:9a:aa:76:93:ac:ed:c7:d1:
                    6a:96:60:45:ae:7a:ea:88:8e:16:3f:1e:c8:38:76:
                    f3:34:9e:47:1d:43:6a:c0:fa:81:53:7a:cc:8a:85:
                    6f:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:69:E9:E0:5C:BC:9B:6F:CF:F1:28:B9:64:D7:DD:E0:33:BD:04:A6
            X509v3 Authority Key Identifier:
                keyid:9F:7C:EE:6E:63:60:10:F9:3C:03:46:EE:DE:55:65:71:8E:EF:62:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade850cfeb701855aca4b173434/0/9F7CEE6E636010F93C0346EEDE5565718EEF62A7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cf3a812c-0f10-45ec-aca3-68a73e99d08f/be49adab1404487fa9fd5e1f8e6c19c0993610ceaf55638bc7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade850cfeb701855aca4b173434/0/3139392e3230342e3136302e302f32342d3234203d3e20323131333733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.204.160.0/24

    Signature Algorithm: sha256WithRSAEncryption
         19:7a:cb:84:61:fb:ed:f9:53:46:55:26:4e:90:c4:fc:40:67:
         50:39:3b:aa:91:cb:58:c5:38:7d:63:16:cb:68:74:d2:95:e3:
         29:fd:ef:42:64:10:e3:17:5c:19:56:bc:31:b9:33:03:95:3c:
         cb:9c:cf:6f:05:66:80:86:a3:e6:2a:b2:96:26:ee:d6:55:cf:
         e8:d7:65:cd:d0:f4:b4:a7:a6:e6:8e:eb:45:ce:5b:bf:b6:6c:
         ab:84:28:93:28:24:d2:72:fa:9c:90:44:b7:9b:fe:d6:ff:4f:
         de:64:a4:99:5c:48:a0:d9:b2:95:1a:b6:d3:cf:8a:36:a6:72:
         47:b7:47:ed:c1:80:7a:d9:88:48:71:35:17:2b:06:a4:e5:90:
         55:78:fc:03:40:9c:8e:aa:d1:df:c4:5f:2f:ae:45:3c:87:45:
         ce:5f:17:19:6f:90:ff:0a:3b:28:22:c3:b1:4e:2e:7a:4b:bf:
         a3:75:10:35:f2:27:b5:0e:cf:d4:fa:d5:67:bd:ee:5c:66:54:
         f8:3a:ca:f7:ef:ea:66:24:40:d1:91:96:f4:b3:df:eb:75:80:
         d1:6a:1c:86:8a:92:04:4d:8c:14:94:8d:a8:7c:52:27:ae:1d:
         90:20:36:0a:7b:6e:27:39:6c:50:c0:a8:f7:25:bd:b8:89:31:
         e4:d9:e6:16
-----BEGIN CERTIFICATE-----
MIIFtjCCBJ6gAwIBAgIUTLAgaTS9ThJl8cuSguMy9Q7D2CowDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyYmU0OWFkYWIxNDA0NDg3ZmE5ZmQ1ZTFmOGU2YzE5YzA5
OTM2MTBjZWFmNTU2MzhiYzcwHhcNMjUwMTEzMTMzNTEyWhcNMjYwMTEyMTM0MDEy
WjAzMTEwLwYDVQQDEyg0MTY5RTlFMDVDQkM5QjZGQ0ZGMTI4Qjk2NEQ3RERFMDMz
QkQwNEE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr1OfYMETx3k6
TFPDG5LB1YqwKQEuy0vvCDVjZ+OSN7Ful6hUvWTZf3xeVunR8d5lGzEcZJKrV/mV
9POvIMIN2xYem9VTWy7b59k97coSHsjDvDn90r7uhHZmQ6B4O0CDKacI4X9rwut/
kB4o72ewYzCXDhYi5fdsGiX2shqAroAP4nBLrhJgH07tVmzKXjITSQ+heLc5uqbl
1CPbXfxA0acBWZLoyyF1hk394hf6Wqhg9/eVyNUg+McoiJCUKRUJpbZxWcVRjnkY
nWFked0LQuDePRCFTy/Imqp2k6ztx9FqlmBFrnrqiI4WPx7IOHbzNJ5HHUNqwPqB
U3rMioVv4QIDAQABo4ICtjCCArIwHQYDVR0OBBYEFEFp6eBcvJtvz/EouWTX3eAz
vQSmMB8GA1UdIwQYMBaAFJ987m5jYBD5PANG7t5VZXGO72KnMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODUwY2ZlYjcwMTg1NWFjYTRiMTczNDM0LzAv
OUY3Q0VFNkU2MzYwMTBGOTNDMDM0NkVFREU1NTY1NzE4RUVGNjJBNy5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0
OTMzYWU1L2NmM2E4MTJjLTBmMTAtNDVlYy1hY2EzLTY4YTczZTk5ZDA4Zi9iZTQ5
YWRhYjE0MDQ0ODdmYTlmZDVlMWY4ZTZjMTljMDk5MzYxMGNlYWY1NTYzOGJjNy5j
ZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZTg1MGNmZWI3MDE4NTVh
Y2E0YjE3MzQzNC8wLzMxMzkzOTJlMzIzMDM0MmUzMTM2MzAyZTMwMmYzMjM0MmQz
MjM0MjAzZDNlMjAzMjMxMzEzMzM3MzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADHzKAwDQYJKoZIhvcN
AQELBQADggEBABl6y4Rh++35U0ZVJk6QxPxAZ1A5O6qRy1jFOH1jFstodNKV4yn9
70JkEOMXXBlWvDG5MwOVPMucz28FZoCGo+YqspYm7tZVz+jXZc3Q9LSnpuaO60XO
W7+2bKuEKJMoJNJy+pyQRLeb/tb/T95kpJlcSKDZspUattPPijamcke3R+3BgHrZ
iEhxNRcrBqTlkFV4/ANAnI6q0d/EXy+uRTyHRc5fFxlvkP8KOygiw7FOLnpLv6N1
EDXyJ7UOz9T61We97lxmVPg6yvfv6mYkQNGRlvSz3+t1gNFqHIaKkgRNjBSUjah8
UieuHZAgNgp7bic5bFDAqPclvbiJMeTZ5hY=
-----END CERTIFICATE-----
Generated at Wed Feb 5 12:59:57 2025 by rpki-client