Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade88e39bfa01892704d5f332eb/0/3139392e39312e39372e302f32342d3234203d3e203233343730.roa
File:                     3139392e39312e39372e302f32342d3234203d3e203233343730.roa (raw, json)
Hash identifier:          H/atd/t2YAaDgUcgURoxFqMqe083935+qZsAfXYUCoc=
Subject key identifier:   F3:FE:E1:A4:C6:9C:58:D3:6B:6E:D1:9F:0D:E4:50:EE:4F:A0:BD:B9
Certificate issuer:       /CN=74f7a45a3a510de918f6ddf7cca1df53d32dd9eb0564ed5cfb
Certificate serial:       30568D6D434640AC432C09ABE28B3EF2DC873358
Authority key identifier: ED:23:65:19:8E:BA:74:92:78:14:95:16:E3:C7:6C:50:94:AE:99:3F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e16c2ee6-ee94-4ae3-a6f7-ccb776ef75a2/74f7a45a3a510de918f6ddf7cca1df53d32dd9eb0564ed5cfb.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01892704d5f332eb/0/3139392e39312e39372e302f32342d3234203d3e203233343730.roa
Signing time:             Wed 05 Jun 2024 17:48:58 +0000
ROA not before:           Wed 05 Jun 2024 17:43:58 +0000
ROA not after:            Wed 04 Jun 2025 17:48:58 +0000
asID:                     23470
IP address blocks:        199.91.97.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01892704d5f332eb/0/ED2365198EBA749278149516E3C76C5094AE993F.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01892704d5f332eb/0/ED2365198EBA749278149516E3C76C5094AE993F.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e16c2ee6-ee94-4ae3-a6f7-ccb776ef75a2/74f7a45a3a510de918f6ddf7cca1df53d32dd9eb0564ed5cfb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e16c2ee6-ee94-4ae3-a6f7-ccb776ef75a2/e16c2ee6-ee94-4ae3-a6f7-ccb776ef75a2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e16c2ee6-ee94-4ae3-a6f7-ccb776ef75a2/e16c2ee6-ee94-4ae3-a6f7-ccb776ef75a2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e16c2ee6-ee94-4ae3-a6f7-ccb776ef75a2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 15:59:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:56:8d:6d:43:46:40:ac:43:2c:09:ab:e2:8b:3e:f2:dc:87:33:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74f7a45a3a510de918f6ddf7cca1df53d32dd9eb0564ed5cfb
        Validity
            Not Before: Jun  5 17:43:58 2024 GMT
            Not After : Jun  4 17:48:58 2025 GMT
        Subject: CN=F3FEE1A4C69C58D36B6ED19F0DE450EE4FA0BDB9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:eb:ed:6a:f4:58:96:4e:55:32:53:23:14:ff:
                    af:ea:fd:fd:57:15:7d:e8:fb:76:5e:b2:20:c1:83:
                    a5:ba:b7:58:8f:a1:c8:56:f8:1e:b9:b6:ad:dc:96:
                    cf:da:e7:1d:0e:3d:dc:36:6c:75:d2:48:34:ca:da:
                    62:3a:29:a9:51:34:be:0a:5c:08:c0:98:52:82:b3:
                    e9:50:f2:3e:bc:11:8f:c0:c7:bc:73:c3:31:62:8b:
                    16:91:0e:cb:1f:e7:6d:18:82:a7:99:70:57:c2:4a:
                    42:d9:80:f0:13:07:90:38:28:5a:2a:1f:eb:23:de:
                    ad:53:80:d2:a9:a0:b6:c2:d2:2b:f2:bb:14:1e:7f:
                    18:cc:26:83:37:a0:e9:fe:cf:7a:84:74:d5:ca:40:
                    2c:19:6e:b1:3e:d0:59:d3:10:c3:42:5d:37:3d:a1:
                    e0:35:89:3b:c2:de:66:e9:69:15:ed:64:d3:4a:08:
                    d8:e9:59:88:76:bb:a3:69:4b:28:d9:8f:d3:5d:70:
                    64:b5:65:e7:0b:4b:e6:cb:aa:09:11:9b:ab:8b:54:
                    17:21:15:ee:9f:b5:35:ad:af:1f:56:0c:9e:3d:82:
                    ac:23:88:c1:85:56:cc:9d:c6:ad:0f:5c:76:32:35:
                    df:3d:1d:ac:ee:0d:35:86:9b:53:8e:f8:41:ce:80:
                    b9:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:FE:E1:A4:C6:9C:58:D3:6B:6E:D1:9F:0D:E4:50:EE:4F:A0:BD:B9
            X509v3 Authority Key Identifier:
                keyid:ED:23:65:19:8E:BA:74:92:78:14:95:16:E3:C7:6C:50:94:AE:99:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01892704d5f332eb/0/ED2365198EBA749278149516E3C76C5094AE993F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e16c2ee6-ee94-4ae3-a6f7-ccb776ef75a2/74f7a45a3a510de918f6ddf7cca1df53d32dd9eb0564ed5cfb.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01892704d5f332eb/0/3139392e39312e39372e302f32342d3234203d3e203233343730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.91.97.0/24

    Signature Algorithm: sha256WithRSAEncryption
         84:89:f7:f3:f2:33:20:d2:36:8d:f0:5e:7c:e7:46:11:8b:d5:
         06:a4:ff:f7:e4:d4:54:5d:b2:ef:e6:cf:b1:db:be:4c:5e:6a:
         be:d5:5c:6f:55:6a:b6:67:bc:1a:85:6d:ef:22:07:62:16:c7:
         a0:f9:bd:da:9f:99:67:d3:1d:7c:18:bb:61:11:53:9d:f9:a8:
         ac:b0:3e:b5:4c:42:5a:8b:ec:69:2a:14:d9:d4:c1:27:36:df:
         c7:27:e8:97:f0:70:2e:e5:61:ea:10:3e:47:21:7b:d5:6b:3c:
         eb:df:5b:43:9e:f8:b6:04:42:e0:dd:7a:86:a4:3b:c1:76:df:
         e8:f7:b3:a6:14:2b:ab:2d:cd:58:d2:1c:e7:3a:ab:ac:8c:a5:
         35:26:c0:ab:63:c0:42:58:b8:30:31:5b:54:46:04:2e:94:dc:
         41:dd:ad:b0:46:3d:ca:0b:86:3d:da:8a:3e:ff:e0:04:45:34:
         6a:11:d6:1f:ae:15:dd:c5:08:f6:50:7e:f8:62:a6:44:4a:ea:
         88:4b:c5:19:57:4c:a0:ff:7a:95:a9:19:2b:35:a0:0d:b6:7e:
         c8:31:1a:24:11:74:e4:42:c8:05:eb:63:50:eb:ae:08:35:5c:
         d8:4e:16:29:c3:09:9a:7f:30:9c:a9:b5:91:7f:ab:33:ce:19:
         0c:2f:b8:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 18:49:10 2024 by rpki-client on console-ams.rpki-client.org