Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade850cfeb701855aca4b173434/0/3139392e3230342e3136302e302f32342d3234203d3e2036303739.roa
File:                     3139392e3230342e3136302e302f32342d3234203d3e2036303739.roa (raw, json)
Hash identifier:          UxbIpBB/OKVSITuax+zL5+yfMxthMHsW4g68nonhEhI=
Subject key identifier:   07:CC:CF:00:22:C5:2C:93:F8:3C:3B:2E:E3:14:64:86:4C:2E:AB:7A
Certificate issuer:       /CN=be49adab1404487fa9fd5e1f8e6c19c0993610ceaf55638bc7
Certificate serial:       13BEE2AF6E9F7362E44A817EB0C2DBBC1C908F35
Authority key identifier: 9F:7C:EE:6E:63:60:10:F9:3C:03:46:EE:DE:55:65:71:8E:EF:62:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cf3a812c-0f10-45ec-aca3-68a73e99d08f/be49adab1404487fa9fd5e1f8e6c19c0993610ceaf55638bc7.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade850cfeb701855aca4b173434/0/3139392e3230342e3136302e302f32342d3234203d3e2036303739.roa
Signing time:             Wed 14 Feb 2024 13:30:24 +0000
ROA not before:           Wed 14 Feb 2024 13:25:24 +0000
ROA not after:            Wed 12 Feb 2025 13:30:24 +0000
asID:                     6079
IP address blocks:        199.204.160.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade850cfeb701855aca4b173434/0/9F7CEE6E636010F93C0346EEDE5565718EEF62A7.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade850cfeb701855aca4b173434/0/9F7CEE6E636010F93C0346EEDE5565718EEF62A7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cf3a812c-0f10-45ec-aca3-68a73e99d08f/be49adab1404487fa9fd5e1f8e6c19c0993610ceaf55638bc7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cf3a812c-0f10-45ec-aca3-68a73e99d08f/cf3a812c-0f10-45ec-aca3-68a73e99d08f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cf3a812c-0f10-45ec-aca3-68a73e99d08f/cf3a812c-0f10-45ec-aca3-68a73e99d08f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cf3a812c-0f10-45ec-aca3-68a73e99d08f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 03:26:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:be:e2:af:6e:9f:73:62:e4:4a:81:7e:b0:c2:db:bc:1c:90:8f:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=be49adab1404487fa9fd5e1f8e6c19c0993610ceaf55638bc7
        Validity
            Not Before: Feb 14 13:25:24 2024 GMT
            Not After : Feb 12 13:30:24 2025 GMT
        Subject: CN=07CCCF0022C52C93F83C3B2EE31464864C2EAB7A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:83:53:84:ed:9f:d6:10:24:ee:bb:4b:e2:7a:
                    b0:32:58:5a:f9:7c:f1:8a:ee:c7:cf:b1:d4:88:0e:
                    d8:e4:aa:45:bb:b5:5c:1c:87:34:3a:81:88:24:5d:
                    a9:c1:7a:0d:09:47:17:df:d0:6c:36:6c:0e:05:65:
                    d3:69:88:d7:05:e7:87:b8:1e:6a:a8:0a:0d:8c:70:
                    87:c3:6f:76:7d:1a:13:5a:ca:75:12:6e:ad:39:d3:
                    15:ac:88:1c:e8:f2:a0:52:3d:7b:fc:7c:1a:6d:b4:
                    0f:73:dc:b9:e3:e7:e6:d6:a5:a3:66:01:92:7c:ab:
                    57:e7:1d:45:84:c5:db:45:13:c7:13:05:8e:a2:d4:
                    39:dc:3d:d8:74:61:d0:e5:f3:73:da:80:24:77:dd:
                    20:43:32:8d:a0:37:3f:a1:5d:c0:ad:f1:04:2f:da:
                    24:4d:68:ca:62:c7:12:83:ab:41:e5:74:88:ce:c2:
                    4e:d8:70:43:a1:66:7a:93:96:69:89:1d:f0:ea:0a:
                    38:93:db:c2:3d:a7:f4:7a:5f:f3:3b:b1:53:3b:1b:
                    83:a3:39:57:3f:ac:1f:1e:de:c0:c9:a5:d0:6b:7c:
                    7a:43:1b:20:31:b0:90:df:8e:94:e4:82:49:1a:01:
                    47:fb:49:07:79:24:ee:21:dd:f4:ab:77:dc:40:b8:
                    43:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:CC:CF:00:22:C5:2C:93:F8:3C:3B:2E:E3:14:64:86:4C:2E:AB:7A
            X509v3 Authority Key Identifier:
                keyid:9F:7C:EE:6E:63:60:10:F9:3C:03:46:EE:DE:55:65:71:8E:EF:62:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade850cfeb701855aca4b173434/0/9F7CEE6E636010F93C0346EEDE5565718EEF62A7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cf3a812c-0f10-45ec-aca3-68a73e99d08f/be49adab1404487fa9fd5e1f8e6c19c0993610ceaf55638bc7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade850cfeb701855aca4b173434/0/3139392e3230342e3136302e302f32342d3234203d3e2036303739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.204.160.0/24

    Signature Algorithm: sha256WithRSAEncryption
         78:cd:46:cd:3c:00:a4:f5:7e:80:f0:cc:2b:5e:85:e7:ae:fe:
         ca:d6:cc:ce:03:32:4b:ce:70:11:10:7f:b2:22:af:59:db:d0:
         0a:34:c5:58:fe:19:11:aa:99:c0:8e:ef:75:13:f6:9a:91:87:
         e3:43:68:fd:d8:49:b6:36:ae:1e:31:58:5d:25:b6:fa:89:b1:
         b2:d2:dd:d8:d1:d1:6c:43:d1:57:61:3c:39:3a:43:43:93:19:
         ac:2f:ad:ac:c8:d3:1e:4c:0c:0b:23:b6:56:7c:4c:d6:10:ea:
         bb:5f:c1:09:a2:a5:a5:5c:c5:23:ae:37:3a:8e:be:a4:34:9f:
         a5:6f:f3:ad:50:ab:9d:b3:d5:2f:87:3e:6c:fa:7f:9a:ba:0c:
         7c:d5:f3:f1:9a:46:5f:81:63:5e:3b:3e:ab:7d:7b:b9:10:b6:
         f3:f4:db:7c:c7:60:b7:ae:80:4a:58:37:fa:2f:05:01:9e:8c:
         be:46:5f:bc:b5:14:cc:98:1e:48:2d:4f:8f:a4:bb:bf:d2:1d:
         5e:e8:9b:92:cd:94:66:81:62:25:d1:23:76:58:0b:b5:4e:dc:
         07:2d:c2:91:4c:f9:bb:63:50:f3:37:7d:fb:d9:b7:8b:7b:e5:
         eb:6b:68:36:26:37:a1:fd:33:3d:50:f1:37:94:da:81:7b:83:
         98:e7:00:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 03:52:48 2024 by rpki-client on console-fra.rpki-client.org