Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade88e39bfa01892704d5f332eb/0/3139392e39312e3130322e302f32342d3234203d3e203139343337.roa
File:                     3139392e39312e3130322e302f32342d3234203d3e203139343337.roa (raw, json)
Hash identifier:          wJdFMIFOS9KhO/Qvq4G0kkozY35uTx3yeCMKuAa30UU=
Subject key identifier:   04:7A:E8:E3:98:B5:C4:54:CA:B2:62:0B:B6:DE:E8:6E:2F:7A:0F:6A
Certificate issuer:       /CN=74f7a45a3a510de918f6ddf7cca1df53d32dd9eb0564ed5cfb
Certificate serial:       15BB4DF80E7E19F9F5E76609666FA1DBEAAFE23F
Authority key identifier: ED:23:65:19:8E:BA:74:92:78:14:95:16:E3:C7:6C:50:94:AE:99:3F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e16c2ee6-ee94-4ae3-a6f7-ccb776ef75a2/74f7a45a3a510de918f6ddf7cca1df53d32dd9eb0564ed5cfb.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01892704d5f332eb/0/3139392e39312e3130322e302f32342d3234203d3e203139343337.roa
Signing time:             Wed 05 Jul 2023 17:09:19 +0000
ROA not before:           Wed 05 Jul 2023 17:04:19 +0000
ROA not after:            Wed 03 Jul 2024 17:09:19 +0000
asID:                     19437
IP address blocks:        199.91.102.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01892704d5f332eb/0/ED2365198EBA749278149516E3C76C5094AE993F.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01892704d5f332eb/0/ED2365198EBA749278149516E3C76C5094AE993F.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e16c2ee6-ee94-4ae3-a6f7-ccb776ef75a2/74f7a45a3a510de918f6ddf7cca1df53d32dd9eb0564ed5cfb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e16c2ee6-ee94-4ae3-a6f7-ccb776ef75a2/e16c2ee6-ee94-4ae3-a6f7-ccb776ef75a2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e16c2ee6-ee94-4ae3-a6f7-ccb776ef75a2/e16c2ee6-ee94-4ae3-a6f7-ccb776ef75a2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e16c2ee6-ee94-4ae3-a6f7-ccb776ef75a2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 May 2024 18:36:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:bb:4d:f8:0e:7e:19:f9:f5:e7:66:09:66:6f:a1:db:ea:af:e2:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74f7a45a3a510de918f6ddf7cca1df53d32dd9eb0564ed5cfb
        Validity
            Not Before: Jul  5 17:04:19 2023 GMT
            Not After : Jul  3 17:09:19 2024 GMT
        Subject: CN=047AE8E398B5C454CAB2620BB6DEE86E2F7A0F6A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:cd:07:a3:33:4b:0c:e3:c1:97:75:b4:87:ba:
                    99:74:d6:88:a1:d2:ec:28:8d:7e:3c:05:c4:b2:79:
                    cb:06:0a:cf:20:f0:17:73:02:a9:b6:1c:22:c8:66:
                    6f:c0:98:fe:b7:1d:38:eb:dc:9c:aa:49:46:c5:c4:
                    52:e1:b5:cb:b9:c1:9c:0f:f9:76:dd:13:bb:06:e6:
                    a5:d3:72:2d:7f:b9:31:9d:98:21:99:07:74:c8:2e:
                    c0:3f:1b:c0:a2:b6:c6:d7:b8:9e:0e:91:6b:d2:28:
                    37:7b:c3:a2:eb:e0:16:1f:16:c1:d8:d9:e1:85:13:
                    a4:36:d1:a6:95:91:d4:d8:d8:44:57:22:7a:ba:b9:
                    e6:f9:42:1e:87:75:ea:cb:d3:93:b6:00:68:90:01:
                    de:ff:9b:43:d3:5c:4b:93:55:27:52:cf:9e:2a:8f:
                    fe:af:c7:92:54:99:10:91:12:47:aa:f1:cf:c2:9a:
                    df:67:16:7a:af:ec:79:6c:f3:40:bd:79:9a:33:72:
                    9a:93:74:e7:30:1a:5f:e6:96:11:a9:78:89:03:af:
                    4a:1c:f6:55:3e:6d:cb:d2:00:5f:b0:a6:7a:1b:51:
                    89:bf:86:14:7b:8c:23:fb:3f:3a:67:87:d7:e6:a3:
                    81:83:1c:32:a6:32:08:0e:05:78:1d:ba:3c:66:49:
                    57:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:7A:E8:E3:98:B5:C4:54:CA:B2:62:0B:B6:DE:E8:6E:2F:7A:0F:6A
            X509v3 Authority Key Identifier:
                keyid:ED:23:65:19:8E:BA:74:92:78:14:95:16:E3:C7:6C:50:94:AE:99:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01892704d5f332eb/0/ED2365198EBA749278149516E3C76C5094AE993F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e16c2ee6-ee94-4ae3-a6f7-ccb776ef75a2/74f7a45a3a510de918f6ddf7cca1df53d32dd9eb0564ed5cfb.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01892704d5f332eb/0/3139392e39312e3130322e302f32342d3234203d3e203139343337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.91.102.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4e:36:15:bf:43:4c:1d:7a:38:f6:c7:a8:cc:f3:fb:a4:d8:eb:
         41:0c:27:cb:e2:31:8e:99:c5:65:9c:cc:e0:8a:86:4f:48:26:
         5b:43:74:3d:19:8f:62:e8:47:10:5e:14:35:89:e2:a9:27:02:
         7d:cf:bf:39:38:2e:2a:79:f1:59:a8:38:c1:34:30:e9:53:6c:
         d9:62:6a:74:20:f1:70:d0:30:bf:72:d1:96:de:f6:3b:c8:dc:
         74:a4:61:a6:ce:85:c8:68:fd:65:3d:43:a8:c9:e2:44:d6:96:
         0b:50:30:ad:01:3c:83:2b:1b:c3:d0:e4:13:fc:03:5f:9f:54:
         78:29:10:6e:30:a0:1e:73:40:6e:90:b5:9d:27:cb:a6:35:ac:
         d2:0c:65:10:b6:e2:02:10:c3:be:79:46:ac:29:e5:02:8b:0d:
         3a:06:f1:b0:3a:2b:17:07:a7:04:bb:62:05:c4:4f:bc:da:af:
         ce:ac:58:ac:4f:2d:47:e5:a6:9e:e4:66:af:9a:7d:10:98:f9:
         f7:ff:b9:32:13:ba:e0:cd:cc:5b:27:ff:60:e1:bd:b5:e4:40:
         6a:ab:66:c2:5c:1c:76:f1:fa:91:b4:53:18:b0:66:d8:b0:1b:
         8f:f3:c4:33:6d:26:ec:32:19:e3:ee:d5:a6:dc:a1:e4:46:ae:
         56:c0:37:e2
-----BEGIN CERTIFICATE-----
MIIFsjCCBJqgAwIBAgIUFbtN+A5+Gfn152YJZm+h2+qv4j8wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNzRmN2E0NWEzYTUxMGRlOTE4ZjZkZGY3Y2NhMWRmNTNk
MzJkZDllYjA1NjRlZDVjZmIwHhcNMjMwNzA1MTcwNDE5WhcNMjQwNzAzMTcwOTE5
WjAzMTEwLwYDVQQDEygwNDdBRThFMzk4QjVDNDU0Q0FCMjYyMEJCNkRFRTg2RTJG
N0EwRjZBMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqs0HozNLDOPB
l3W0h7qZdNaIodLsKI1+PAXEsnnLBgrPIPAXcwKpthwiyGZvwJj+tx0469ycqklG
xcRS4bXLucGcD/l23RO7Bual03Itf7kxnZghmQd0yC7APxvAorbG17ieDpFr0ig3
e8Oi6+AWHxbB2NnhhROkNtGmlZHU2NhEVyJ6urnm+UIeh3Xqy9OTtgBokAHe/5tD
01xLk1UnUs+eKo/+r8eSVJkQkRJHqvHPwprfZxZ6r+x5bPNAvXmaM3Kak3TnMBpf
5pYRqXiJA69KHPZVPm3L0gBfsKZ6G1GJv4YUe4wj+z86Z4fX5qOBgxwypjIIDgV4
Hbo8ZklX5wIDAQABo4ICsjCCAq4wHQYDVR0OBBYEFAR66OOYtcRUyrJiC7be6G4v
eg9qMB8GA1UdIwQYMBaAFO0jZRmOunSSeBSVFuPHbFCUrpk/MA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODhlMzliZmEwMTg5MjcwNGQ1ZjMzMmViLzAv
RUQyMzY1MTk4RUJBNzQ5Mjc4MTQ5NTE2RTNDNzZDNTA5NEFFOTkzRi5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3
ZTk3MWFjL2UxNmMyZWU2LWVlOTQtNGFlMy1hNmY3LWNjYjc3NmVmNzVhMi83NGY3
YTQ1YTNhNTEwZGU5MThmNmRkZjdjY2ExZGY1M2QzMmRkOWViMDU2NGVkNWNmYi5j
ZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZTg4ZTM5YmZhMDE4OTI3
MDRkNWYzMzJlYi8wLzMxMzkzOTJlMzkzMTJlMzEzMDMyMmUzMDJmMzIzNDJkMzIz
NDIwM2QzZTIwMzEzOTM0MzMzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO
AjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMdbZjANBgkqhkiG9w0BAQsF
AAOCAQEATjYVv0NMHXo49seozPP7pNjrQQwny+IxjpnFZZzM4IqGT0gmW0N0PRmP
YuhHEF4UNYniqScCfc+/OTguKnnxWag4wTQw6VNs2WJqdCDxcNAwv3LRlt72O8jc
dKRhps6FyGj9ZT1DqMniRNaWC1AwrQE8gysbw9DkE/wDX59UeCkQbjCgHnNAbpC1
nSfLpjWs0gxlELbiAhDDvnlGrCnlAosNOgbxsDorFwenBLtiBcRPvNqvzqxYrE8t
R+WmnuRmr5p9EJj59/+5MhO64M3MWyf/YOG9teRAaqtmwlwcdvH6kbRTGLBm2LAb
j/PEM20m7DIZ4+7Vptyh5EauVsA34g==
-----END CERTIFICATE-----
Generated at Sat May 11 18:13:35 2024 by rpki-client on console-fra.rpki-client.org