Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade88e39bfa01892704d5f332eb/0/3139392e39312e39392e302f32342d3234203d3e203139343337.roa
File:                     3139392e39312e39392e302f32342d3234203d3e203139343337.roa (raw, json)
Hash identifier:          BIwaQ0qXvI2sROhtQkOwButAnr9S8nLpw0p5nL6HqTg=
Subject key identifier:   53:45:75:F9:27:EE:F8:4D:01:70:4E:46:B1:6C:2F:90:02:0F:E0:30
Certificate issuer:       /CN=74f7a45a3a510de918f6ddf7cca1df53d32dd9eb0564ed5cfb
Certificate serial:       2559C96F55697CDDE07972218A2A15D0E3A7A980
Authority key identifier: ED:23:65:19:8E:BA:74:92:78:14:95:16:E3:C7:6C:50:94:AE:99:3F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e16c2ee6-ee94-4ae3-a6f7-ccb776ef75a2/74f7a45a3a510de918f6ddf7cca1df53d32dd9eb0564ed5cfb.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01892704d5f332eb/0/3139392e39312e39392e302f32342d3234203d3e203139343337.roa
Signing time:             Wed 05 Jul 2023 17:08:45 +0000
ROA not before:           Wed 05 Jul 2023 17:03:45 +0000
ROA not after:            Wed 03 Jul 2024 17:08:45 +0000
asID:                     19437
IP address blocks:        199.91.99.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01892704d5f332eb/0/ED2365198EBA749278149516E3C76C5094AE993F.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01892704d5f332eb/0/ED2365198EBA749278149516E3C76C5094AE993F.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e16c2ee6-ee94-4ae3-a6f7-ccb776ef75a2/74f7a45a3a510de918f6ddf7cca1df53d32dd9eb0564ed5cfb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e16c2ee6-ee94-4ae3-a6f7-ccb776ef75a2/e16c2ee6-ee94-4ae3-a6f7-ccb776ef75a2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e16c2ee6-ee94-4ae3-a6f7-ccb776ef75a2/e16c2ee6-ee94-4ae3-a6f7-ccb776ef75a2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e16c2ee6-ee94-4ae3-a6f7-ccb776ef75a2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 May 2024 18:36:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:59:c9:6f:55:69:7c:dd:e0:79:72:21:8a:2a:15:d0:e3:a7:a9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74f7a45a3a510de918f6ddf7cca1df53d32dd9eb0564ed5cfb
        Validity
            Not Before: Jul  5 17:03:45 2023 GMT
            Not After : Jul  3 17:08:45 2024 GMT
        Subject: CN=534575F927EEF84D01704E46B16C2F90020FE030
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:29:a8:8c:9b:06:a7:dd:bd:b9:31:0a:e5:2e:
                    e1:ef:33:c3:b3:56:ae:68:c2:84:a4:4e:a0:1f:d2:
                    27:bf:8a:a5:10:12:c3:98:3c:3c:81:d3:f4:26:b5:
                    00:36:95:ff:65:b1:4d:d4:33:bd:38:56:c6:e5:fc:
                    26:a6:2e:1c:a8:83:6e:45:3f:53:8e:dc:1d:bd:72:
                    a1:3b:61:75:01:f3:79:59:d5:af:10:78:ba:2f:fe:
                    bb:7a:f2:1e:75:91:6d:5d:61:9d:09:6e:be:a9:1c:
                    4f:9c:cb:99:09:fa:f6:76:07:69:7d:64:6b:c0:c8:
                    93:ac:4e:a9:26:c5:3f:03:14:60:37:f2:54:d2:6c:
                    cc:da:e7:a7:6a:21:14:03:bd:b2:f4:66:ff:00:01:
                    8b:aa:a6:33:af:0b:96:bb:b8:45:36:68:18:c6:bb:
                    e1:c0:32:cc:62:a8:3a:ef:d6:43:d7:44:1f:a5:4f:
                    0c:4c:5c:36:fa:f1:7d:a6:a0:d6:8d:07:f1:44:b5:
                    9c:6c:d0:6e:0b:de:c4:14:cb:24:38:1b:12:75:b8:
                    25:e4:31:66:e6:cf:57:d8:f4:6a:e4:f7:2a:de:a3:
                    85:44:6a:b9:86:cb:e2:43:3c:70:8d:e8:21:5b:a1:
                    5f:3b:89:07:7b:1b:7e:53:06:cb:f1:10:da:77:e0:
                    dd:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:45:75:F9:27:EE:F8:4D:01:70:4E:46:B1:6C:2F:90:02:0F:E0:30
            X509v3 Authority Key Identifier:
                keyid:ED:23:65:19:8E:BA:74:92:78:14:95:16:E3:C7:6C:50:94:AE:99:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01892704d5f332eb/0/ED2365198EBA749278149516E3C76C5094AE993F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e16c2ee6-ee94-4ae3-a6f7-ccb776ef75a2/74f7a45a3a510de918f6ddf7cca1df53d32dd9eb0564ed5cfb.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01892704d5f332eb/0/3139392e39312e39392e302f32342d3234203d3e203139343337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.91.99.0/24

    Signature Algorithm: sha256WithRSAEncryption
         29:73:6e:41:a5:e9:e7:e6:9a:ba:a3:9c:ff:54:c9:13:08:56:
         0b:6c:96:f7:c3:5c:1d:5f:bb:ad:3e:16:5d:ae:a5:16:12:27:
         23:ff:26:1a:7f:11:32:df:fe:ac:ea:95:4d:d0:f4:45:5c:ab:
         a2:12:eb:7a:e8:c5:3c:e9:76:6d:11:a0:bb:2c:30:8d:f6:0c:
         2f:44:c1:4a:b6:fd:e3:59:44:20:76:fb:3d:f7:1b:2b:73:b6:
         26:cb:9e:dd:de:7c:8e:1b:02:64:8c:20:ca:eb:5e:bc:c4:da:
         b1:85:da:f0:9c:83:bd:a1:ef:5e:c3:65:a6:2d:40:18:0c:8a:
         bd:74:86:17:7d:81:db:61:ec:2d:ea:51:83:5a:ff:37:52:10:
         45:d8:4d:21:b9:2d:07:44:13:68:3c:5b:c6:85:ef:2c:1b:03:
         6a:d7:8d:27:40:69:c8:6d:a4:ae:b9:a4:cf:b5:9a:e6:cd:b1:
         76:34:a6:7d:6c:68:47:df:be:5a:2a:1a:56:14:c6:10:26:79:
         a6:b0:83:01:eb:e5:32:4e:60:53:61:41:41:b5:ca:68:34:0d:
         ba:d6:f1:5f:04:9a:5c:09:90:51:4b:60:14:71:5c:d6:8a:26:
         7c:c8:d4:35:49:01:5e:cd:22:64:2c:40:1c:9c:2f:e5:c3:be:
         8b:ec:1d:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 11 18:13:35 2024 by rpki-client on console-fra.rpki-client.org