Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade88e39bfa01892704d5f332eb/0/3139392e39312e3130302e302f32342d3234203d3e203432373038.roa
File:                     3139392e39312e3130302e302f32342d3234203d3e203432373038.roa (raw, json)
Hash identifier:          fK+n/PADc+HWwkbsvfRWVr+Gxf7o/XP9e5EMvfGbn98=
Subject key identifier:   DE:66:07:74:52:6F:47:97:4A:F5:62:EA:B2:C6:92:F7:77:8B:CF:A0
Certificate issuer:       /CN=74f7a45a3a510de918f6ddf7cca1df53d32dd9eb0564ed5cfb
Certificate serial:       7C705D4F9450EDCC878ECBBB2DEB6445F717630A
Authority key identifier: ED:23:65:19:8E:BA:74:92:78:14:95:16:E3:C7:6C:50:94:AE:99:3F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e16c2ee6-ee94-4ae3-a6f7-ccb776ef75a2/74f7a45a3a510de918f6ddf7cca1df53d32dd9eb0564ed5cfb.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01892704d5f332eb/0/3139392e39312e3130302e302f32342d3234203d3e203432373038.roa
Signing time:             Sun 27 Oct 2024 14:46:24 +0000
ROA not before:           Sun 27 Oct 2024 14:41:24 +0000
ROA not after:            Sun 26 Oct 2025 14:46:24 +0000
asID:                     42708
IP address blocks:        199.91.100.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01892704d5f332eb/0/ED2365198EBA749278149516E3C76C5094AE993F.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01892704d5f332eb/0/ED2365198EBA749278149516E3C76C5094AE993F.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e16c2ee6-ee94-4ae3-a6f7-ccb776ef75a2/74f7a45a3a510de918f6ddf7cca1df53d32dd9eb0564ed5cfb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e16c2ee6-ee94-4ae3-a6f7-ccb776ef75a2/e16c2ee6-ee94-4ae3-a6f7-ccb776ef75a2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e16c2ee6-ee94-4ae3-a6f7-ccb776ef75a2/e16c2ee6-ee94-4ae3-a6f7-ccb776ef75a2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e16c2ee6-ee94-4ae3-a6f7-ccb776ef75a2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:02:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:70:5d:4f:94:50:ed:cc:87:8e:cb:bb:2d:eb:64:45:f7:17:63:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74f7a45a3a510de918f6ddf7cca1df53d32dd9eb0564ed5cfb
        Validity
            Not Before: Oct 27 14:41:24 2024 GMT
            Not After : Oct 26 14:46:24 2025 GMT
        Subject: CN=DE660774526F47974AF562EAB2C692F7778BCFA0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:6a:c2:8b:96:c3:60:f1:6f:35:9f:42:01:e4:
                    f7:f0:41:cc:4c:08:7b:06:3f:b0:18:84:86:6f:ca:
                    63:ec:8c:cf:0a:bb:ca:77:db:cf:00:95:03:8e:b1:
                    45:ed:a0:f9:1c:32:84:f0:71:2b:98:b7:af:19:0c:
                    86:e6:89:c7:5b:dc:e0:ec:71:d5:da:6c:70:f2:08:
                    a5:50:6e:b5:0b:28:bc:18:ea:fd:58:75:34:1c:16:
                    63:06:a7:37:4e:aa:10:42:03:82:20:3f:20:f0:50:
                    7b:2e:e7:ff:9a:2d:00:d5:dd:0e:4d:52:7c:d2:14:
                    18:6d:cf:93:e9:09:17:99:23:9e:51:d3:4f:92:a0:
                    8e:05:b0:9d:95:00:42:d1:76:e7:0c:ef:3e:d6:b4:
                    41:ce:3a:0d:ba:db:86:5a:c2:7e:f1:76:2b:dc:34:
                    8d:ca:af:d8:2f:4a:3b:0d:5a:77:5d:12:df:90:cc:
                    85:bd:3d:0d:1e:d5:3e:58:5c:51:88:65:95:8a:83:
                    51:52:34:85:16:5a:b5:84:16:9e:da:0d:71:ba:63:
                    36:f7:5a:ae:a6:dc:d6:15:22:b9:84:2a:40:a5:7a:
                    60:eb:13:ed:12:29:be:f6:fa:c4:09:6e:71:a6:87:
                    3d:1c:ab:20:5e:26:d6:91:83:f5:49:6e:f5:b9:cd:
                    52:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:66:07:74:52:6F:47:97:4A:F5:62:EA:B2:C6:92:F7:77:8B:CF:A0
            X509v3 Authority Key Identifier:
                keyid:ED:23:65:19:8E:BA:74:92:78:14:95:16:E3:C7:6C:50:94:AE:99:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01892704d5f332eb/0/ED2365198EBA749278149516E3C76C5094AE993F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e16c2ee6-ee94-4ae3-a6f7-ccb776ef75a2/74f7a45a3a510de918f6ddf7cca1df53d32dd9eb0564ed5cfb.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01892704d5f332eb/0/3139392e39312e3130302e302f32342d3234203d3e203432373038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.91.100.0/24

    Signature Algorithm: sha256WithRSAEncryption
         06:7e:32:e8:a2:e3:90:a4:e9:39:48:26:f9:c1:cd:97:d1:15:
         7e:82:7f:d2:c1:09:80:dd:25:c5:76:b7:62:7b:30:2c:b4:a9:
         3c:26:17:92:48:d0:f8:dd:38:23:18:62:10:ea:12:3c:56:ba:
         be:0a:c8:fd:c0:f1:8f:9a:9a:43:f3:f4:ac:a9:0a:c9:31:93:
         66:20:a9:57:d8:70:cf:4a:a6:56:92:ee:1b:b7:b4:34:23:fb:
         55:4b:26:09:37:c0:af:5e:9e:76:d5:53:8a:48:20:d5:d8:ab:
         05:72:4b:e2:42:be:df:d9:a3:db:52:af:25:4d:05:30:9b:82:
         62:0f:f5:18:b4:f9:e8:28:a4:98:06:ec:d9:a4:49:e7:57:44:
         71:96:c6:9b:00:0b:66:90:01:1d:81:ee:aa:b0:6d:5a:7b:d1:
         e0:d9:35:eb:1a:a9:67:44:c4:3e:c5:aa:15:1c:ea:fb:67:25:
         02:67:18:bc:28:d0:8c:15:f0:67:03:14:49:9a:da:6f:00:e7:
         ea:69:48:8c:7b:8f:09:ef:80:88:02:ed:5a:0d:53:da:25:e7:
         0f:49:70:88:e4:68:0e:35:6a:0e:c5:86:e6:93:79:66:0d:2c:
         c1:34:05:a4:59:aa:16:81:2a:96:65:fd:36:aa:19:ab:5a:33:
         b4:e7:07:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:31:37 2024 by rpki-client on console-fra.rpki-client.org