Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade850cfeb701855aca4b173434/0/3139392e3230342e3136322e302f32342d3234203d3e20323131333733.roa
File:                     3139392e3230342e3136322e302f32342d3234203d3e20323131333733.roa (raw, json)
Hash identifier:          wy7oNOf0dRb/y/nnulpRIPwGJdFNJosbXRegv109rD0=
Subject key identifier:   51:C2:62:78:55:DE:33:29:08:39:3E:44:DE:54:C7:11:53:C8:03:6F
Certificate issuer:       /CN=be49adab1404487fa9fd5e1f8e6c19c0993610ceaf55638bc7
Certificate serial:       0E9B6B4DB07C5D3AD2C1F3A865B8659C1E33D495
Authority key identifier: 9F:7C:EE:6E:63:60:10:F9:3C:03:46:EE:DE:55:65:71:8E:EF:62:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cf3a812c-0f10-45ec-aca3-68a73e99d08f/be49adab1404487fa9fd5e1f8e6c19c0993610ceaf55638bc7.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade850cfeb701855aca4b173434/0/3139392e3230342e3136322e302f32342d3234203d3e20323131333733.roa
Signing time:             Wed 31 Jan 2024 16:02:50 +0000
ROA not before:           Wed 31 Jan 2024 15:57:50 +0000
ROA not after:            Wed 29 Jan 2025 16:02:50 +0000
asID:                     211373
IP address blocks:        199.204.162.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade850cfeb701855aca4b173434/0/9F7CEE6E636010F93C0346EEDE5565718EEF62A7.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade850cfeb701855aca4b173434/0/9F7CEE6E636010F93C0346EEDE5565718EEF62A7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cf3a812c-0f10-45ec-aca3-68a73e99d08f/be49adab1404487fa9fd5e1f8e6c19c0993610ceaf55638bc7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cf3a812c-0f10-45ec-aca3-68a73e99d08f/cf3a812c-0f10-45ec-aca3-68a73e99d08f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cf3a812c-0f10-45ec-aca3-68a73e99d08f/cf3a812c-0f10-45ec-aca3-68a73e99d08f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cf3a812c-0f10-45ec-aca3-68a73e99d08f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 May 2024 11:03:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:9b:6b:4d:b0:7c:5d:3a:d2:c1:f3:a8:65:b8:65:9c:1e:33:d4:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=be49adab1404487fa9fd5e1f8e6c19c0993610ceaf55638bc7
        Validity
            Not Before: Jan 31 15:57:50 2024 GMT
            Not After : Jan 29 16:02:50 2025 GMT
        Subject: CN=51C2627855DE332908393E44DE54C71153C8036F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:3c:61:cd:56:bc:7d:1a:16:dc:dd:6b:47:a6:
                    34:d4:11:cb:b7:67:1a:1c:a3:8b:4f:62:54:2b:f3:
                    49:d3:a8:b6:f2:ae:bb:23:ff:fd:b4:41:12:5c:8f:
                    c2:4c:66:ad:62:78:fd:e2:e1:25:22:31:3c:32:ee:
                    5b:51:5f:26:3f:84:45:5b:4d:cd:a9:64:27:1c:1a:
                    6d:cb:6f:95:3a:96:3c:21:44:ef:fb:ac:ff:16:10:
                    ba:e3:41:be:79:28:80:85:45:ba:cb:5d:04:fc:41:
                    c9:b1:d1:05:31:af:ff:01:84:a6:aa:d2:a4:bf:d2:
                    cb:61:f5:e6:83:ed:34:7c:14:07:fe:e6:38:af:d2:
                    72:1f:91:cd:30:18:12:5d:46:4c:f0:01:46:1d:8c:
                    7b:72:6a:f4:b6:93:9e:11:67:0a:d9:52:d3:62:2c:
                    9b:0f:e4:d9:1a:14:27:26:e7:99:1f:bf:ed:62:e4:
                    fb:e4:69:cb:69:6a:87:00:e8:fc:29:65:7b:cc:be:
                    7f:0e:99:48:67:63:14:2c:e3:6a:f3:dd:f8:15:bc:
                    ba:24:10:6a:4c:81:de:91:4f:a5:2d:95:6a:da:5d:
                    a1:97:37:cb:fe:64:6c:4f:3d:74:a0:06:d1:64:0b:
                    a6:dc:38:0f:f1:a1:67:9b:32:56:9b:e8:eb:db:f9:
                    c0:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:C2:62:78:55:DE:33:29:08:39:3E:44:DE:54:C7:11:53:C8:03:6F
            X509v3 Authority Key Identifier:
                keyid:9F:7C:EE:6E:63:60:10:F9:3C:03:46:EE:DE:55:65:71:8E:EF:62:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade850cfeb701855aca4b173434/0/9F7CEE6E636010F93C0346EEDE5565718EEF62A7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cf3a812c-0f10-45ec-aca3-68a73e99d08f/be49adab1404487fa9fd5e1f8e6c19c0993610ceaf55638bc7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade850cfeb701855aca4b173434/0/3139392e3230342e3136322e302f32342d3234203d3e20323131333733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.204.162.0/24

    Signature Algorithm: sha256WithRSAEncryption
         52:3f:d4:d1:45:4f:a4:a0:de:c8:9d:9a:7b:12:c2:e2:51:78:
         ea:af:0b:df:29:79:4b:68:93:c3:44:86:31:66:47:4f:f8:85:
         75:d7:68:a5:d5:ba:6f:30:cb:2b:e8:cf:01:ae:09:f0:42:db:
         6b:b8:e5:87:9b:3e:7e:45:32:86:9e:f9:15:6e:65:ab:a1:ea:
         46:fa:cf:ea:8e:9d:25:f1:2e:d6:df:00:17:70:a5:79:4d:3c:
         7b:dc:57:de:08:5c:1f:06:7d:24:30:76:bc:3b:1f:15:46:68:
         58:ea:b1:b4:08:fe:7f:b6:4b:af:47:4a:ab:8e:d7:f4:69:e5:
         2d:09:93:2e:67:03:b2:b8:13:40:c3:f1:96:74:e4:03:4a:09:
         c4:dc:eb:e1:4b:f0:a8:66:05:25:a0:65:32:09:44:09:8a:b7:
         b6:ad:56:38:04:b7:29:2b:c5:81:dd:1f:83:04:c9:98:99:07:
         7e:77:da:7f:3d:2e:63:bc:2b:ba:aa:fd:56:96:59:1a:20:64:
         cf:65:f9:13:ea:78:e3:ce:24:a7:6c:61:ec:a1:84:d4:56:60:
         40:3d:f6:2d:c4:61:61:a7:24:53:ef:93:c7:3e:a6:d9:df:c7:
         d5:71:5a:b6:86:0b:66:c5:c1:c9:c8:0c:67:ac:6f:8e:6b:03:
         10:7c:77:57
-----BEGIN CERTIFICATE-----
MIIFtjCCBJ6gAwIBAgIUDptrTbB8XTrSwfOoZbhlnB4z1JUwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyYmU0OWFkYWIxNDA0NDg3ZmE5ZmQ1ZTFmOGU2YzE5YzA5
OTM2MTBjZWFmNTU2MzhiYzcwHhcNMjQwMTMxMTU1NzUwWhcNMjUwMTI5MTYwMjUw
WjAzMTEwLwYDVQQDEyg1MUMyNjI3ODU1REUzMzI5MDgzOTNFNDRERTU0QzcxMTUz
QzgwMzZGMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqTxhzVa8fRoW
3N1rR6Y01BHLt2caHKOLT2JUK/NJ06i28q67I//9tEESXI/CTGatYnj94uElIjE8
Mu5bUV8mP4RFW03NqWQnHBpty2+VOpY8IUTv+6z/FhC640G+eSiAhUW6y10E/EHJ
sdEFMa//AYSmqtKkv9LLYfXmg+00fBQH/uY4r9JyH5HNMBgSXUZM8AFGHYx7cmr0
tpOeEWcK2VLTYiybD+TZGhQnJueZH7/tYuT75GnLaWqHAOj8KWV7zL5/DplIZ2MU
LONq8934Fby6JBBqTIHekU+lLZVq2l2hlzfL/mRsTz10oAbRZAum3DgP8aFnmzJW
m+jr2/nAfQIDAQABo4ICtjCCArIwHQYDVR0OBBYEFFHCYnhV3jMpCDk+RN5UxxFT
yANvMB8GA1UdIwQYMBaAFJ987m5jYBD5PANG7t5VZXGO72KnMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODUwY2ZlYjcwMTg1NWFjYTRiMTczNDM0LzAv
OUY3Q0VFNkU2MzYwMTBGOTNDMDM0NkVFREU1NTY1NzE4RUVGNjJBNy5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0
OTMzYWU1L2NmM2E4MTJjLTBmMTAtNDVlYy1hY2EzLTY4YTczZTk5ZDA4Zi9iZTQ5
YWRhYjE0MDQ0ODdmYTlmZDVlMWY4ZTZjMTljMDk5MzYxMGNlYWY1NTYzOGJjNy5j
ZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZTg1MGNmZWI3MDE4NTVh
Y2E0YjE3MzQzNC8wLzMxMzkzOTJlMzIzMDM0MmUzMTM2MzIyZTMwMmYzMjM0MmQz
MjM0MjAzZDNlMjAzMjMxMzEzMzM3MzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADHzKIwDQYJKoZIhvcN
AQELBQADggEBAFI/1NFFT6Sg3sidmnsSwuJReOqvC98peUtok8NEhjFmR0/4hXXX
aKXVum8wyyvozwGuCfBC22u45YebPn5FMoae+RVuZauh6kb6z+qOnSXxLtbfABdw
pXlNPHvcV94IXB8GfSQwdrw7HxVGaFjqsbQI/n+2S69HSquO1/Rp5S0Jky5nA7K4
E0DD8ZZ05ANKCcTc6+FL8KhmBSWgZTIJRAmKt7atVjgEtykrxYHdH4MEyZiZB353
2n89LmO8K7qq/VaWWRogZM9l+RPqeOPOJKdsYeyhhNRWYEA99i3EYWGnJFPvk8c+
ptnfx9VxWraGC2bFwcnIDGesb45rAxB8d1c=
-----END CERTIFICATE-----
Generated at Sun May 19 08:24:37 2024 by rpki-client on console-ams.rpki-client.org