Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade88e39bfa01892704d5f332eb/0/3139392e39312e39362e302f32342d3234203d3e203633303233.roa
File:                     3139392e39312e39362e302f32342d3234203d3e203633303233.roa (raw, json)
Hash identifier:          8H16H4mf4UUSFP5r20VXaag40aKBsSLcUGDYz+09WDk=
Subject key identifier:   8C:DE:3E:1D:DA:01:18:66:C2:38:05:B1:24:9E:1B:2C:65:01:B5:E0
Certificate issuer:       /CN=74f7a45a3a510de918f6ddf7cca1df53d32dd9eb0564ed5cfb
Certificate serial:       4B550DC7EB6A460A07DAE51E044B87DF579F1505
Authority key identifier: ED:23:65:19:8E:BA:74:92:78:14:95:16:E3:C7:6C:50:94:AE:99:3F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e16c2ee6-ee94-4ae3-a6f7-ccb776ef75a2/74f7a45a3a510de918f6ddf7cca1df53d32dd9eb0564ed5cfb.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01892704d5f332eb/0/3139392e39312e39362e302f32342d3234203d3e203633303233.roa
Signing time:             Mon 12 Aug 2024 15:42:54 +0000
ROA not before:           Mon 12 Aug 2024 15:37:54 +0000
ROA not after:            Mon 11 Aug 2025 15:42:54 +0000
asID:                     63023
IP address blocks:        199.91.96.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01892704d5f332eb/0/ED2365198EBA749278149516E3C76C5094AE993F.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01892704d5f332eb/0/ED2365198EBA749278149516E3C76C5094AE993F.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e16c2ee6-ee94-4ae3-a6f7-ccb776ef75a2/74f7a45a3a510de918f6ddf7cca1df53d32dd9eb0564ed5cfb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e16c2ee6-ee94-4ae3-a6f7-ccb776ef75a2/e16c2ee6-ee94-4ae3-a6f7-ccb776ef75a2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e16c2ee6-ee94-4ae3-a6f7-ccb776ef75a2/e16c2ee6-ee94-4ae3-a6f7-ccb776ef75a2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e16c2ee6-ee94-4ae3-a6f7-ccb776ef75a2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 15:59:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:55:0d:c7:eb:6a:46:0a:07:da:e5:1e:04:4b:87:df:57:9f:15:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74f7a45a3a510de918f6ddf7cca1df53d32dd9eb0564ed5cfb
        Validity
            Not Before: Aug 12 15:37:54 2024 GMT
            Not After : Aug 11 15:42:54 2025 GMT
        Subject: CN=8CDE3E1DDA011866C23805B1249E1B2C6501B5E0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:33:cc:a2:26:ac:ae:46:4b:c8:e2:c8:8c:ec:
                    fb:39:29:21:4e:77:fc:7f:23:2b:86:ae:e1:f0:2c:
                    6a:a4:09:10:c6:42:d1:90:8f:06:65:b8:5d:1d:d4:
                    44:f9:8b:60:86:0a:c8:c3:29:d2:15:27:e1:fa:3f:
                    98:43:5f:1e:cd:d8:bb:05:31:b2:ff:8e:c2:b5:b0:
                    17:15:e5:4f:af:6c:1c:39:7a:59:94:ed:32:b6:dc:
                    ce:cf:61:7e:92:dd:6e:aa:f4:76:76:8d:d2:92:20:
                    18:71:7a:d0:d0:a6:b7:3a:76:97:40:bb:3a:7f:55:
                    3a:06:c5:e4:09:1e:5f:34:d6:eb:12:2d:ba:cf:05:
                    62:35:9c:dd:eb:22:7a:6a:f6:3a:55:79:4e:cf:04:
                    3c:38:1d:e2:9b:2a:6c:1a:7b:16:b9:ee:6e:e6:56:
                    f9:47:d9:3d:88:7e:f1:6a:e3:a9:56:e4:3c:29:8d:
                    6f:3b:35:6c:c7:85:88:fe:9d:bc:46:38:b5:66:07:
                    1b:a8:7f:6c:c0:c4:0e:e1:ad:86:a0:54:ab:93:7f:
                    4e:6d:b9:49:b4:9b:4b:3d:08:76:d0:32:f6:65:7e:
                    58:9e:01:e7:bd:8c:1a:9b:9f:42:50:04:15:7b:99:
                    fc:16:37:3a:1b:e0:dc:73:b3:46:4d:c9:29:d6:cd:
                    91:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:DE:3E:1D:DA:01:18:66:C2:38:05:B1:24:9E:1B:2C:65:01:B5:E0
            X509v3 Authority Key Identifier:
                keyid:ED:23:65:19:8E:BA:74:92:78:14:95:16:E3:C7:6C:50:94:AE:99:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01892704d5f332eb/0/ED2365198EBA749278149516E3C76C5094AE993F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e16c2ee6-ee94-4ae3-a6f7-ccb776ef75a2/74f7a45a3a510de918f6ddf7cca1df53d32dd9eb0564ed5cfb.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01892704d5f332eb/0/3139392e39312e39362e302f32342d3234203d3e203633303233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.91.96.0/24

    Signature Algorithm: sha256WithRSAEncryption
         64:51:dc:0d:53:8f:2c:9b:55:75:4a:0e:df:28:53:61:59:d5:
         5e:f7:18:0a:4b:89:d0:fd:07:82:cb:ba:90:fd:a8:ce:fa:da:
         4a:d2:03:4a:1e:86:05:36:78:f0:66:ca:a8:6b:53:2e:3c:9f:
         49:24:f4:64:cf:78:f7:ba:ca:c7:a1:b4:d3:d0:7f:b9:ce:95:
         c8:d9:df:1d:7a:27:ca:9a:21:7b:24:22:86:23:56:46:a4:9d:
         48:5a:8b:5d:a9:ee:a7:3f:8c:1a:32:9c:26:02:b0:3d:1a:12:
         c1:52:e1:44:00:65:9e:41:e5:e1:42:1f:59:00:52:8b:57:7c:
         64:ce:68:ad:3f:57:73:b8:e8:3b:dc:53:0f:1b:b1:ca:61:71:
         37:8f:d9:6e:29:fb:bd:41:10:58:fb:d8:a2:03:c7:a1:f4:9b:
         4c:48:2d:52:24:c5:94:de:aa:a5:3a:8d:a2:e3:5e:d0:e9:56:
         60:cb:6a:99:f5:6a:b8:a5:b1:2c:38:40:25:5f:e9:3c:dd:0f:
         b8:1c:8a:70:66:b8:fe:60:14:b8:92:92:04:63:9c:54:85:69:
         74:b9:2f:cd:a3:39:4e:3f:c3:e0:aa:da:bb:b7:4d:f0:5a:dc:
         73:0c:0a:fb:19:97:9f:f2:e1:bf:3a:59:eb:88:2b:8c:2f:4d:
         37:d4:e2:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 18:49:10 2024 by rpki-client on console-ams.rpki-client.org