Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade88e39bfa01892704d5f332eb/0/3139392e39312e3130312e302f32342d3234203d3e203231383539.roa
File:                     3139392e39312e3130312e302f32342d3234203d3e203231383539.roa (raw, json)
Hash identifier:          moieBRPaLFyvcrUOtuz2mT+02RYmoEi7mvfSaFmPY5E=
Subject key identifier:   C0:B1:59:CA:D9:53:33:2B:4A:F2:9C:63:56:03:80:25:3D:EA:43:1A
Certificate issuer:       /CN=74f7a45a3a510de918f6ddf7cca1df53d32dd9eb0564ed5cfb
Certificate serial:       78F2FB26B0EEEB87C098E303C631E530E9E8DFEE
Authority key identifier: ED:23:65:19:8E:BA:74:92:78:14:95:16:E3:C7:6C:50:94:AE:99:3F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e16c2ee6-ee94-4ae3-a6f7-ccb776ef75a2/74f7a45a3a510de918f6ddf7cca1df53d32dd9eb0564ed5cfb.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01892704d5f332eb/0/3139392e39312e3130312e302f32342d3234203d3e203231383539.roa
Signing time:             Wed 26 Jun 2024 06:53:12 +0000
ROA not before:           Wed 26 Jun 2024 06:48:12 +0000
ROA not after:            Wed 25 Jun 2025 06:53:12 +0000
asID:                     21859
IP address blocks:        199.91.101.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01892704d5f332eb/0/ED2365198EBA749278149516E3C76C5094AE993F.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01892704d5f332eb/0/ED2365198EBA749278149516E3C76C5094AE993F.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e16c2ee6-ee94-4ae3-a6f7-ccb776ef75a2/74f7a45a3a510de918f6ddf7cca1df53d32dd9eb0564ed5cfb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e16c2ee6-ee94-4ae3-a6f7-ccb776ef75a2/e16c2ee6-ee94-4ae3-a6f7-ccb776ef75a2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e16c2ee6-ee94-4ae3-a6f7-ccb776ef75a2/e16c2ee6-ee94-4ae3-a6f7-ccb776ef75a2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e16c2ee6-ee94-4ae3-a6f7-ccb776ef75a2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 15:59:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:f2:fb:26:b0:ee:eb:87:c0:98:e3:03:c6:31:e5:30:e9:e8:df:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74f7a45a3a510de918f6ddf7cca1df53d32dd9eb0564ed5cfb
        Validity
            Not Before: Jun 26 06:48:12 2024 GMT
            Not After : Jun 25 06:53:12 2025 GMT
        Subject: CN=C0B159CAD953332B4AF29C63560380253DEA431A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:79:b8:2d:43:d4:b1:af:dc:52:10:00:bd:f5:
                    ba:de:ae:e9:c7:64:19:7b:22:db:07:4f:92:c9:d3:
                    32:d5:e2:09:3d:4b:9d:f8:d9:71:2d:dd:6e:fd:98:
                    97:1b:e2:ff:3e:eb:12:7e:db:cd:30:ae:2a:86:81:
                    ce:8b:00:fd:7b:0a:0d:6e:b3:94:b1:c7:a1:69:ad:
                    b4:60:92:1e:cd:fd:f2:e2:bb:8e:a8:ed:76:d9:33:
                    65:8b:b9:5f:26:d3:1c:35:0f:dc:8a:0f:dd:4f:59:
                    33:66:8b:a8:64:44:95:82:40:1c:82:46:68:a9:b4:
                    78:b9:9a:a0:25:6d:6d:c4:8f:52:5e:1b:59:4c:08:
                    eb:5b:b3:a4:5e:06:5a:3c:36:7d:9d:54:94:07:e1:
                    1e:c4:97:e2:fb:af:61:89:84:4a:a8:20:3f:0a:bd:
                    20:e6:05:2b:12:8e:c7:5d:50:5c:71:5c:74:dc:52:
                    2a:57:94:6f:a9:5e:89:64:60:ba:ab:45:96:86:e6:
                    a2:09:38:6a:4a:6b:03:6d:8e:e9:2f:cb:4c:52:15:
                    ea:55:b9:35:4f:bd:6b:8f:0d:7f:cf:5d:93:ef:4e:
                    69:34:e4:42:96:39:34:6b:f6:f2:40:12:26:88:12:
                    3f:34:67:97:b6:c5:f0:9a:69:a2:92:b8:ef:e3:fc:
                    c2:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:B1:59:CA:D9:53:33:2B:4A:F2:9C:63:56:03:80:25:3D:EA:43:1A
            X509v3 Authority Key Identifier:
                keyid:ED:23:65:19:8E:BA:74:92:78:14:95:16:E3:C7:6C:50:94:AE:99:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01892704d5f332eb/0/ED2365198EBA749278149516E3C76C5094AE993F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e16c2ee6-ee94-4ae3-a6f7-ccb776ef75a2/74f7a45a3a510de918f6ddf7cca1df53d32dd9eb0564ed5cfb.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01892704d5f332eb/0/3139392e39312e3130312e302f32342d3234203d3e203231383539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.91.101.0/24

    Signature Algorithm: sha256WithRSAEncryption
         94:e4:df:62:3a:33:17:b6:bf:04:bc:89:12:52:0d:9e:56:32:
         37:72:0f:79:83:57:3b:f1:08:00:52:88:66:76:33:47:96:e6:
         69:a9:36:53:89:76:d0:fe:77:ac:ae:6b:d5:98:e5:bf:03:db:
         7b:07:d7:fb:d6:78:75:fa:e3:e3:e2:9d:05:5c:63:bd:07:0b:
         a6:ee:b8:bd:f0:03:4c:af:c8:d1:ca:40:7c:9f:db:7b:48:12:
         5d:38:87:9b:a0:37:f7:bd:14:07:ed:29:3d:19:aa:47:03:46:
         d1:d5:a3:1d:b8:3f:9b:28:01:c3:75:f4:ad:cc:60:e3:c5:39:
         b4:bd:7f:5a:42:77:65:ba:97:8c:f2:e4:ea:85:f7:30:ce:2f:
         fd:df:10:3b:9e:b5:0b:10:40:db:b5:4f:1d:8b:dd:1f:50:19:
         87:d0:21:c6:c6:28:10:71:37:49:0a:aa:4f:03:77:30:30:a1:
         c4:61:a5:f4:8a:28:e7:47:cf:b4:c7:27:89:eb:d2:6d:2f:cc:
         74:4e:59:06:b8:e2:5d:3c:c9:57:78:3e:49:e0:4f:b4:e0:02:
         76:37:6e:8e:91:87:eb:24:e1:1e:66:09:ce:ca:e1:af:bf:2f:
         e0:e9:f1:73:25:8b:7d:52:51:35:1f:a1:cf:08:99:0a:1a:ef:
         3e:22:de:22
-----BEGIN CERTIFICATE-----
MIIFsjCCBJqgAwIBAgIUePL7JrDu64fAmOMDxjHlMOno3+4wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNzRmN2E0NWEzYTUxMGRlOTE4ZjZkZGY3Y2NhMWRmNTNk
MzJkZDllYjA1NjRlZDVjZmIwHhcNMjQwNjI2MDY0ODEyWhcNMjUwNjI1MDY1MzEy
WjAzMTEwLwYDVQQDEyhDMEIxNTlDQUQ5NTMzMzJCNEFGMjlDNjM1NjAzODAyNTNE
RUE0MzFBMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtXm4LUPUsa/c
UhAAvfW63q7px2QZeyLbB0+SydMy1eIJPUud+NlxLd1u/ZiXG+L/PusSftvNMK4q
hoHOiwD9ewoNbrOUscehaa20YJIezf3y4ruOqO122TNli7lfJtMcNQ/cig/dT1kz
ZouoZESVgkAcgkZoqbR4uZqgJW1txI9SXhtZTAjrW7OkXgZaPDZ9nVSUB+EexJfi
+69hiYRKqCA/Cr0g5gUrEo7HXVBccVx03FIqV5RvqV6JZGC6q0WWhuaiCThqSmsD
bY7pL8tMUhXqVbk1T71rjw1/z12T705pNORCljk0a/byQBImiBI/NGeXtsXwmmmi
krjv4/zCIwIDAQABo4ICsjCCAq4wHQYDVR0OBBYEFMCxWcrZUzMrSvKcY1YDgCU9
6kMaMB8GA1UdIwQYMBaAFO0jZRmOunSSeBSVFuPHbFCUrpk/MA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODhlMzliZmEwMTg5MjcwNGQ1ZjMzMmViLzAv
RUQyMzY1MTk4RUJBNzQ5Mjc4MTQ5NTE2RTNDNzZDNTA5NEFFOTkzRi5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3
ZTk3MWFjL2UxNmMyZWU2LWVlOTQtNGFlMy1hNmY3LWNjYjc3NmVmNzVhMi83NGY3
YTQ1YTNhNTEwZGU5MThmNmRkZjdjY2ExZGY1M2QzMmRkOWViMDU2NGVkNWNmYi5j
ZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZTg4ZTM5YmZhMDE4OTI3
MDRkNWYzMzJlYi8wLzMxMzkzOTJlMzkzMTJlMzEzMDMxMmUzMDJmMzIzNDJkMzIz
NDIwM2QzZTIwMzIzMTM4MzUzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO
AjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMdbZTANBgkqhkiG9w0BAQsF
AAOCAQEAlOTfYjozF7a/BLyJElINnlYyN3IPeYNXO/EIAFKIZnYzR5bmaak2U4l2
0P53rK5r1ZjlvwPbewfX+9Z4dfrj4+KdBVxjvQcLpu64vfADTK/I0cpAfJ/be0gS
XTiHm6A3970UB+0pPRmqRwNG0dWjHbg/mygBw3X0rcxg48U5tL1/WkJ3ZbqXjPLk
6oX3MM4v/d8QO561CxBA27VPHYvdH1AZh9AhxsYoEHE3SQqqTwN3MDChxGGl9Ioo
50fPtMcnievSbS/MdE5ZBrjiXTzJV3g+SeBPtOACdjdujpGH6yThHmYJzsrhr78v
4OnxcyWLfVJRNR+hzwiZChrvPiLeIg==
-----END CERTIFICATE-----
Generated at Thu Nov 21 18:49:10 2024 by rpki-client on console-ams.rpki-client.org