Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade88e39bfa01892704d5f332eb/0/3139392e39312e39362e302f32342d3234203d3e20313336373434.roa
File:                     3139392e39312e39362e302f32342d3234203d3e20313336373434.roa (raw, json)
Hash identifier:          ehJfiZJCc2y8fhIMNWNbE2fBoak4Zv6bslEXEzUulNM=
Subject key identifier:   25:5F:CD:E9:20:6B:E5:FD:7A:0A:20:25:74:4E:3C:8B:4D:51:42:9B
Certificate issuer:       /CN=74f7a45a3a510de918f6ddf7cca1df53d32dd9eb0564ed5cfb
Certificate serial:       79EC3E04683B0249B1853F59693030D6F569A24F
Authority key identifier: ED:23:65:19:8E:BA:74:92:78:14:95:16:E3:C7:6C:50:94:AE:99:3F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e16c2ee6-ee94-4ae3-a6f7-ccb776ef75a2/74f7a45a3a510de918f6ddf7cca1df53d32dd9eb0564ed5cfb.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01892704d5f332eb/0/3139392e39312e39362e302f32342d3234203d3e20313336373434.roa
Signing time:             Wed 05 Jul 2023 17:08:05 +0000
ROA not before:           Wed 05 Jul 2023 17:03:05 +0000
ROA not after:            Wed 03 Jul 2024 17:08:05 +0000
asID:                     136744
IP address blocks:        199.91.96.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01892704d5f332eb/0/ED2365198EBA749278149516E3C76C5094AE993F.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01892704d5f332eb/0/ED2365198EBA749278149516E3C76C5094AE993F.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e16c2ee6-ee94-4ae3-a6f7-ccb776ef75a2/74f7a45a3a510de918f6ddf7cca1df53d32dd9eb0564ed5cfb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e16c2ee6-ee94-4ae3-a6f7-ccb776ef75a2/e16c2ee6-ee94-4ae3-a6f7-ccb776ef75a2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e16c2ee6-ee94-4ae3-a6f7-ccb776ef75a2/e16c2ee6-ee94-4ae3-a6f7-ccb776ef75a2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e16c2ee6-ee94-4ae3-a6f7-ccb776ef75a2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 06 May 2024 23:22:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:ec:3e:04:68:3b:02:49:b1:85:3f:59:69:30:30:d6:f5:69:a2:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74f7a45a3a510de918f6ddf7cca1df53d32dd9eb0564ed5cfb
        Validity
            Not Before: Jul  5 17:03:05 2023 GMT
            Not After : Jul  3 17:08:05 2024 GMT
        Subject: CN=255FCDE9206BE5FD7A0A2025744E3C8B4D51429B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:98:de:a7:e8:c4:77:77:b0:a4:6c:19:d6:5d:
                    4f:a0:25:9a:3b:a8:3b:a6:50:2d:05:90:47:59:41:
                    7b:1f:9c:aa:ae:09:ca:3c:b4:89:ff:71:98:9c:b6:
                    ba:f2:a4:b9:31:da:34:da:fe:54:87:e0:7e:14:ba:
                    24:c5:45:ff:9b:5e:f3:47:fa:8d:7b:89:49:7c:65:
                    48:57:32:6b:91:b4:e9:bd:c5:2a:92:a3:0c:08:b6:
                    fd:a2:82:84:b8:db:14:a7:5f:41:04:00:ab:00:cf:
                    66:19:4b:9f:5a:c3:a1:9e:d7:d0:0c:57:e8:2b:62:
                    92:f6:f2:07:c0:7d:61:e9:a9:68:30:0a:c4:d0:6f:
                    97:bf:5d:69:73:92:a5:73:82:f3:0d:77:ac:a6:18:
                    60:6a:59:5b:c4:69:26:68:c7:3d:cc:2d:f1:c6:a9:
                    8e:28:86:34:76:db:30:33:e2:51:1a:b3:f9:59:7e:
                    c5:12:3e:61:01:cc:d0:73:da:94:5e:d9:f9:06:b2:
                    19:a9:e4:cb:64:7b:35:10:03:c5:92:c8:e7:79:ef:
                    8e:56:14:f6:89:6b:ef:1b:b8:a7:fb:a4:3f:fe:71:
                    23:e5:45:5a:60:e6:b7:c8:3a:56:8e:9a:87:ae:7d:
                    89:75:26:3c:66:13:e6:ac:a3:24:a1:82:c3:bb:b8:
                    07:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:5F:CD:E9:20:6B:E5:FD:7A:0A:20:25:74:4E:3C:8B:4D:51:42:9B
            X509v3 Authority Key Identifier:
                keyid:ED:23:65:19:8E:BA:74:92:78:14:95:16:E3:C7:6C:50:94:AE:99:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01892704d5f332eb/0/ED2365198EBA749278149516E3C76C5094AE993F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e16c2ee6-ee94-4ae3-a6f7-ccb776ef75a2/74f7a45a3a510de918f6ddf7cca1df53d32dd9eb0564ed5cfb.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01892704d5f332eb/0/3139392e39312e39362e302f32342d3234203d3e20313336373434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.91.96.0/24

    Signature Algorithm: sha256WithRSAEncryption
         54:05:70:11:ad:15:85:1d:0a:49:05:da:09:c9:9f:fb:c5:68:
         07:8a:b5:0b:a3:1e:ae:80:3b:08:bd:22:0a:d5:67:65:f5:d4:
         37:93:60:00:72:25:48:f9:38:f2:12:f2:6a:fb:85:34:52:b4:
         60:7f:25:6d:7e:10:05:85:56:0c:1c:b6:52:4f:13:d8:eb:6a:
         78:f1:5b:88:54:f5:b4:59:1d:ce:38:0e:eb:e9:f6:48:2d:57:
         f0:ed:ca:3a:ee:f3:f2:0c:41:0f:a1:21:fa:22:02:1a:e7:fc:
         80:9b:14:3e:25:35:96:5d:7f:38:42:92:f9:04:03:5a:b3:25:
         b4:4d:53:82:64:86:7e:ab:ad:00:d7:d2:75:2e:46:a3:69:31:
         24:b7:0f:eb:6e:67:d5:6a:50:41:df:2f:c3:05:f2:78:3c:27:
         3b:bb:b4:7e:0c:36:b8:0d:21:a3:3a:ff:8c:13:58:ca:1c:6a:
         42:66:09:f8:16:a9:31:67:4d:c0:91:f4:3c:aa:84:bd:72:ba:
         43:e0:9f:08:6c:07:31:f7:5c:cd:d4:50:e5:0c:8e:3c:e6:e4:
         d5:91:ea:13:1b:c6:b6:ad:e8:7d:13:70:bc:a2:b4:62:89:f6:
         e4:bb:7e:d3:32:dc:d7:c3:55:ad:73:44:f2:53:93:2d:39:09:
         2c:11:4e:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 21:18:52 2024 by rpki-client on console-ams.rpki-client.org