Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade88e39bfa01892704d5f332eb/0/3139392e39312e3130332e302f32342d3234203d3e20313430393032.roa
File:                     3139392e39312e3130332e302f32342d3234203d3e20313430393032.roa (raw, json)
Hash identifier:          tvBRni8FseV4rQqH6xuOTbzJsqwlybIF/pt3e1WxRV8=
Subject key identifier:   37:88:A1:3C:AE:08:46:C2:80:FB:30:B2:BA:47:EA:60:D9:77:D0:9F
Certificate issuer:       /CN=74f7a45a3a510de918f6ddf7cca1df53d32dd9eb0564ed5cfb
Certificate serial:       606273BE0F13EFC369D87F4CC10975E425107E68
Authority key identifier: ED:23:65:19:8E:BA:74:92:78:14:95:16:E3:C7:6C:50:94:AE:99:3F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e16c2ee6-ee94-4ae3-a6f7-ccb776ef75a2/74f7a45a3a510de918f6ddf7cca1df53d32dd9eb0564ed5cfb.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01892704d5f332eb/0/3139392e39312e3130332e302f32342d3234203d3e20313430393032.roa
Signing time:             Thu 26 Sep 2024 08:48:59 +0000
ROA not before:           Thu 26 Sep 2024 08:43:59 +0000
ROA not after:            Thu 25 Sep 2025 08:48:59 +0000
asID:                     140902
IP address blocks:        199.91.103.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01892704d5f332eb/0/ED2365198EBA749278149516E3C76C5094AE993F.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01892704d5f332eb/0/ED2365198EBA749278149516E3C76C5094AE993F.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e16c2ee6-ee94-4ae3-a6f7-ccb776ef75a2/74f7a45a3a510de918f6ddf7cca1df53d32dd9eb0564ed5cfb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e16c2ee6-ee94-4ae3-a6f7-ccb776ef75a2/e16c2ee6-ee94-4ae3-a6f7-ccb776ef75a2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e16c2ee6-ee94-4ae3-a6f7-ccb776ef75a2/e16c2ee6-ee94-4ae3-a6f7-ccb776ef75a2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e16c2ee6-ee94-4ae3-a6f7-ccb776ef75a2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 11:17:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:62:73:be:0f:13:ef:c3:69:d8:7f:4c:c1:09:75:e4:25:10:7e:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74f7a45a3a510de918f6ddf7cca1df53d32dd9eb0564ed5cfb
        Validity
            Not Before: Sep 26 08:43:59 2024 GMT
            Not After : Sep 25 08:48:59 2025 GMT
        Subject: CN=3788A13CAE0846C280FB30B2BA47EA60D977D09F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:91:bb:59:79:49:8a:7a:40:11:47:f7:2f:7f:
                    91:11:5c:1d:73:63:c3:80:27:02:68:51:77:67:ed:
                    f0:36:81:5a:16:9b:f9:5b:94:20:60:3f:5a:77:3a:
                    fa:ac:db:17:64:ba:cd:ac:b1:cb:76:d0:9c:91:cc:
                    81:9d:3b:cd:60:23:d9:97:96:28:03:98:bf:fb:fb:
                    39:51:75:cf:81:e2:64:41:da:6f:dc:ac:d3:1e:62:
                    ec:cd:99:29:a2:e1:28:4b:84:e3:57:4a:1d:49:57:
                    b1:32:c2:63:7f:62:d2:90:3f:58:da:b9:de:79:f0:
                    25:a7:43:83:49:16:0c:cc:60:c6:77:b8:05:21:62:
                    ea:75:67:c6:8e:f4:ac:7c:4c:62:42:7e:24:62:4d:
                    34:9d:01:f0:db:41:56:8e:3c:92:93:2c:29:a1:88:
                    ec:ee:79:0c:56:0e:55:3d:33:83:f9:fe:fc:4e:05:
                    e6:70:c0:e6:2c:61:71:96:2e:57:99:f0:0e:09:2e:
                    c3:37:11:bf:e3:f1:8c:6f:0b:de:ed:67:5d:ca:4f:
                    d1:1d:03:27:52:51:19:2e:4c:d8:90:e3:45:81:8f:
                    bd:4f:5d:d5:6d:da:13:ad:93:01:bb:e4:81:21:4e:
                    b2:21:90:84:80:9f:98:62:ca:00:e2:25:9c:3f:a7:
                    a2:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:88:A1:3C:AE:08:46:C2:80:FB:30:B2:BA:47:EA:60:D9:77:D0:9F
            X509v3 Authority Key Identifier:
                keyid:ED:23:65:19:8E:BA:74:92:78:14:95:16:E3:C7:6C:50:94:AE:99:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01892704d5f332eb/0/ED2365198EBA749278149516E3C76C5094AE993F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e16c2ee6-ee94-4ae3-a6f7-ccb776ef75a2/74f7a45a3a510de918f6ddf7cca1df53d32dd9eb0564ed5cfb.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01892704d5f332eb/0/3139392e39312e3130332e302f32342d3234203d3e20313430393032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.91.103.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5b:d4:df:76:ef:41:1b:58:63:d0:be:e4:82:60:f0:08:a3:50:
         6b:4e:d1:12:bd:df:6a:61:52:56:b3:79:c1:f2:0a:8c:a7:36:
         15:ad:31:2f:10:f2:72:2b:fd:67:55:4d:29:18:23:b2:08:d5:
         6e:1c:a8:ca:2a:1a:b6:2c:55:3d:2d:68:c8:ed:e3:df:c0:b5:
         55:09:02:5e:4a:62:d3:51:a5:9c:72:a0:7c:fc:22:95:da:6b:
         2b:77:80:ec:22:30:94:41:8b:0f:8d:ac:2d:83:3b:a6:46:51:
         12:0e:af:d0:a2:c1:1c:84:93:30:18:4f:b2:2e:2d:90:6c:b5:
         44:8c:e1:be:f5:89:60:c0:09:a4:2a:b3:8f:c6:95:1f:16:77:
         d4:e4:f3:c0:5f:f2:60:21:11:7a:0c:23:bc:01:7f:74:dd:38:
         13:5a:9b:dd:5b:38:5f:f9:aa:22:fb:e1:93:be:3f:5c:9b:51:
         1d:9b:69:df:bb:69:8a:c6:f7:b5:cf:b6:0f:69:b9:9f:2e:8f:
         62:3e:b9:d8:c8:a4:6f:a0:29:90:e8:18:de:1e:a1:18:61:eb:
         84:4e:bf:a7:ce:af:46:a8:0c:40:ca:23:c3:6c:fa:cf:f4:07:
         01:09:db:7f:cb:52:db:0c:62:da:65:43:5d:cb:60:5d:4f:ef:
         35:32:1b:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 10:50:12 2024 by rpki-client on console-fra.rpki-client.org