Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/AS399047.roa
File:                     AS399047.roa (raw, json)
Hash identifier:          jfR6Fy0tnH/mj+TnJexWkZIDrLy1Ot7fJMkIciUNu3o=
Subject key identifier:   FE:B1:F5:A8:7D:66:B5:91:C3:B5:B2:C2:09:10:D3:35:F4:09:3C:D4
Certificate issuer:       /CN=dfe09c2077886b104a9de53bf61bcb90616abe755c93385775
Certificate serial:       01FFF1F9859A33FB9FA76B3053DC3BD6DD5F0315
Authority key identifier: CA:C1:1D:8E:79:F4:4C:E3:F2:E8:0B:14:69:DD:B1:93:55:8B:D2:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/06af24e7-1c13-4430-bd79-db05f6dc0643/dfe09c2077886b104a9de53bf61bcb90616abe755c93385775.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/AS399047.roa
Signing time:             Tue 30 Jan 2024 05:24:57 +0000
ROA not before:           Tue 30 Jan 2024 05:19:57 +0000
ROA not after:            Tue 28 Jan 2025 05:24:57 +0000
asID:                     399047
IP address blocks:        50.102.253.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/CAC11D8E79F44CE3F2E80B1469DDB193558BD2F9.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/CAC11D8E79F44CE3F2E80B1469DDB193558BD2F9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/06af24e7-1c13-4430-bd79-db05f6dc0643/dfe09c2077886b104a9de53bf61bcb90616abe755c93385775.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/06af24e7-1c13-4430-bd79-db05f6dc0643/06af24e7-1c13-4430-bd79-db05f6dc0643.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/06af24e7-1c13-4430-bd79-db05f6dc0643/06af24e7-1c13-4430-bd79-db05f6dc0643.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/06af24e7-1c13-4430-bd79-db05f6dc0643.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:ff:f1:f9:85:9a:33:fb:9f:a7:6b:30:53:dc:3b:d6:dd:5f:03:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dfe09c2077886b104a9de53bf61bcb90616abe755c93385775
        Validity
            Not Before: Jan 30 05:19:57 2024 GMT
            Not After : Jan 28 05:24:57 2025 GMT
        Subject: CN=FEB1F5A87D66B591C3B5B2C20910D335F4093CD4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:df:18:54:4a:18:3a:d3:76:e0:64:8d:7b:b2:
                    20:09:0d:d5:da:93:c0:52:a7:2e:ae:bd:49:9d:d6:
                    a5:5b:b7:89:00:d5:b2:48:14:c6:e8:1a:bb:6e:0a:
                    a5:b6:f9:15:d1:4f:a8:7f:46:61:ba:6e:c4:78:a3:
                    f3:9e:12:5e:f6:5c:76:05:ed:2c:72:cb:c1:7f:e4:
                    65:57:1a:fb:6d:ed:d2:ad:fa:b9:dc:55:c3:e2:ad:
                    9c:db:a9:ab:db:70:16:75:db:46:b4:2c:87:26:84:
                    89:b0:88:1a:f7:48:3c:e2:9a:b2:e0:b3:43:86:ea:
                    34:09:67:4b:f6:af:89:da:47:29:42:b8:83:a9:6b:
                    eb:11:55:0b:6d:9a:e7:91:1e:35:d6:10:bb:7c:4e:
                    e5:96:22:0f:7d:79:8f:17:a5:fd:52:3d:f3:8d:e2:
                    13:7b:94:3a:3c:44:58:f9:a1:4a:46:73:ee:d1:5f:
                    aa:bf:19:97:df:c6:03:0a:08:59:6c:49:a3:86:2c:
                    25:1c:47:3a:55:b8:53:79:00:a2:6d:87:8b:ec:ed:
                    6c:83:71:25:d0:0e:82:b4:83:f5:58:26:b0:9a:d0:
                    a1:f7:64:e4:86:54:8b:5e:3e:2b:74:c6:87:41:f0:
                    59:be:aa:92:0c:f3:2d:26:d3:ec:87:41:7b:8a:f9:
                    f3:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:B1:F5:A8:7D:66:B5:91:C3:B5:B2:C2:09:10:D3:35:F4:09:3C:D4
            X509v3 Authority Key Identifier:
                keyid:CA:C1:1D:8E:79:F4:4C:E3:F2:E8:0B:14:69:DD:B1:93:55:8B:D2:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/CAC11D8E79F44CE3F2E80B1469DDB193558BD2F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/06af24e7-1c13-4430-bd79-db05f6dc0643/dfe09c2077886b104a9de53bf61bcb90616abe755c93385775.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/AS399047.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.102.253.0/24

    Signature Algorithm: sha256WithRSAEncryption
         49:dd:94:ce:0e:4b:a5:77:25:ce:2b:2c:d7:06:04:d6:53:28:
         38:ba:2c:8a:67:27:9c:a6:2c:f8:a9:e9:c9:14:6a:9c:c7:72:
         36:77:26:81:ee:3c:79:e1:1b:c7:ec:6f:38:f1:3d:1f:70:c5:
         1f:4b:11:63:a8:57:d6:08:c8:8c:68:8b:89:24:6e:bc:77:37:
         91:84:8c:e5:88:38:96:d5:e3:e8:1e:4f:6c:58:75:7d:67:74:
         7c:49:83:cc:20:83:3c:6d:3d:26:45:2f:db:16:55:0a:e5:4b:
         5a:45:3d:66:79:89:00:89:14:e0:6c:63:21:55:99:fc:f8:d3:
         6b:37:f0:f8:e4:e3:1e:a4:ab:bc:d4:e1:db:6c:c5:01:94:cb:
         69:57:66:92:e5:20:4a:da:0a:44:2d:01:58:25:8b:f1:0c:4e:
         0c:b4:06:26:af:a9:7c:b3:c6:d6:5d:67:4a:38:68:6a:a5:8e:
         ce:00:bd:d5:9a:42:57:87:f3:ad:89:66:79:ca:1c:36:b8:8d:
         31:db:e5:75:4f:71:61:21:97:5a:3c:44:6a:44:68:8c:8e:cf:
         32:ab:29:93:57:9a:d8:71:0b:f8:88:be:00:ba:83:66:41:b4:
         c9:ee:98:c4:ec:75:2e:7f:ec:91:99:17:91:a4:f3:ed:cf:30:
         ea:7f:b7:22
-----BEGIN CERTIFICATE-----
MIIFfzCCBGegAwIBAgIUAf/x+YWaM/ufp2swU9w71t1fAxUwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZGZlMDljMjA3Nzg4NmIxMDRhOWRlNTNiZjYxYmNiOTA2
MTZhYmU3NTVjOTMzODU3NzUwHhcNMjQwMTMwMDUxOTU3WhcNMjUwMTI4MDUyNDU3
WjAzMTEwLwYDVQQDEyhGRUIxRjVBODdENjZCNTkxQzNCNUIyQzIwOTEwRDMzNUY0
MDkzQ0Q0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtt8YVEoYOtN2
4GSNe7IgCQ3V2pPAUqcurr1JndalW7eJANWySBTG6Bq7bgqltvkV0U+of0Zhum7E
eKPznhJe9lx2Be0scsvBf+RlVxr7be3Srfq53FXD4q2c26mr23AWddtGtCyHJoSJ
sIga90g84pqy4LNDhuo0CWdL9q+J2kcpQriDqWvrEVULbZrnkR411hC7fE7lliIP
fXmPF6X9Uj3zjeITe5Q6PERY+aFKRnPu0V+qvxmX38YDCghZbEmjhiwlHEc6VbhT
eQCibYeL7O1sg3El0A6CtIP1WCawmtCh92TkhlSLXj4rdMaHQfBZvqqSDPMtJtPs
h0F7ivnzwQIDAQABo4ICfzCCAnswHQYDVR0OBBYEFP6x9ah9ZrWRw7WywgkQ0zX0
CTzUMB8GA1UdIwQYMBaAFMrBHY559Ezj8ugLFGndsZNVi9L5MA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODcyODk1NzgwMTg3MzJhOTBhMmYwOTdmLzQv
Q0FDMTFEOEU3OUY0NENFM0YyRTgwQjE0NjlEREIxOTM1NThCRDJGOS5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0
OTMzYWU1LzA2YWYyNGU3LTFjMTMtNDQzMC1iZDc5LWRiMDVmNmRjMDY0My9kZmUw
OWMyMDc3ODg2YjEwNGE5ZGU1M2JmNjFiY2I5MDYxNmFiZTc1NWM5MzM4NTc3NS5j
ZXIwcAYIKwYBBQUHAQsEZDBiMGAGCCsGAQUFBzALhlRyc3luYzovL3Jwa2ktcnBz
LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4NzI4OTU3ODAxODczMmE5MGEy
ZjA5N2YvNC9BUzM5OTA0Ny5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEADJm/TANBgkqhkiG9w0BAQsFAAOC
AQEASd2Uzg5LpXclziss1wYE1lMoOLosimcnnKYs+KnpyRRqnMdyNncmge48eeEb
x+xvOPE9H3DFH0sRY6hX1gjIjGiLiSRuvHc3kYSM5Yg4ltXj6B5PbFh1fWd0fEmD
zCCDPG09JkUv2xZVCuVLWkU9ZnmJAIkU4GxjIVWZ/PjTazfw+OTjHqSrvNTh22zF
AZTLaVdmkuUgStoKRC0BWCWL8QxODLQGJq+pfLPG1l1nSjhoaqWOzgC91ZpCV4fz
rYlmecocNriNMdvldU9xYSGXWjxEakRojI7PMqspk1ea2HEL+Ii+ALqDZkG0ye6Y
xOx1Ln/skZkXkaTz7c8w6n+3Ig==
-----END CERTIFICATE-----
Generated at Fri Nov 22 05:50:08 2024 by rpki-client on console-fra.rpki-client.org