Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade88e39bfa01892704d5f332eb/0/3139392e39312e39392e302f32342d3234203d3e203139343337.roa
File:                     3139392e39312e39392e302f32342d3234203d3e203139343337.roa (raw, json)
Hash identifier:          0oLd2irEAzXSgFf3GySMmUs+6eSQ0zK5jChZHg6950M=
Subject key identifier:   6F:B1:E4:87:19:1B:A6:34:54:75:A1:90:E4:DC:14:FD:72:3F:09:37
Certificate issuer:       /CN=74f7a45a3a510de918f6ddf7cca1df53d32dd9eb0564ed5cfb
Certificate serial:       1F1F740E53C04F5F005B7FC3F64824F4CBC98683
Authority key identifier: ED:23:65:19:8E:BA:74:92:78:14:95:16:E3:C7:6C:50:94:AE:99:3F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e16c2ee6-ee94-4ae3-a6f7-ccb776ef75a2/74f7a45a3a510de918f6ddf7cca1df53d32dd9eb0564ed5cfb.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01892704d5f332eb/0/3139392e39312e39392e302f32342d3234203d3e203139343337.roa
Signing time:             Wed 05 Jun 2024 17:48:58 +0000
ROA not before:           Wed 05 Jun 2024 17:43:58 +0000
ROA not after:            Wed 04 Jun 2025 17:48:58 +0000
asID:                     19437
IP address blocks:        199.91.99.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01892704d5f332eb/0/ED2365198EBA749278149516E3C76C5094AE993F.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01892704d5f332eb/0/ED2365198EBA749278149516E3C76C5094AE993F.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e16c2ee6-ee94-4ae3-a6f7-ccb776ef75a2/74f7a45a3a510de918f6ddf7cca1df53d32dd9eb0564ed5cfb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e16c2ee6-ee94-4ae3-a6f7-ccb776ef75a2/e16c2ee6-ee94-4ae3-a6f7-ccb776ef75a2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e16c2ee6-ee94-4ae3-a6f7-ccb776ef75a2/e16c2ee6-ee94-4ae3-a6f7-ccb776ef75a2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e16c2ee6-ee94-4ae3-a6f7-ccb776ef75a2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:02:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:1f:74:0e:53:c0:4f:5f:00:5b:7f:c3:f6:48:24:f4:cb:c9:86:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74f7a45a3a510de918f6ddf7cca1df53d32dd9eb0564ed5cfb
        Validity
            Not Before: Jun  5 17:43:58 2024 GMT
            Not After : Jun  4 17:48:58 2025 GMT
        Subject: CN=6FB1E487191BA6345475A190E4DC14FD723F0937
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:08:ef:50:68:44:95:d1:0f:2f:b5:f4:e9:60:
                    c1:b7:90:76:a8:5e:ad:ee:c4:df:df:f3:33:9e:7f:
                    cb:d0:1d:6a:f6:d8:52:27:ad:0c:fd:b1:3a:5d:dd:
                    d9:c4:91:17:2e:05:c6:fa:4d:26:72:50:4a:f2:68:
                    3d:e0:c8:17:97:b0:a7:e2:5e:2b:41:83:0a:30:f7:
                    53:4c:fe:a9:8c:3e:a1:cb:4b:fc:08:39:2a:75:ed:
                    3d:dd:1e:f0:28:76:64:28:1b:e9:a5:04:f0:f2:c8:
                    03:cc:dc:67:1c:99:30:f3:e7:74:d2:8c:e8:76:c9:
                    64:1c:82:59:c5:b7:d3:7c:6b:fd:97:b6:28:39:e9:
                    f2:87:26:ee:c0:35:fe:f2:85:ec:44:2d:a6:ed:ab:
                    aa:b8:ac:5a:84:dc:47:ca:56:59:b0:99:48:60:80:
                    aa:25:59:ac:36:a6:93:d5:a3:f7:57:05:2f:70:f5:
                    60:c7:cb:0e:69:c7:be:c1:91:a2:b3:e9:81:c4:23:
                    f5:ed:d4:98:c6:6e:c0:44:d3:2f:d7:02:ba:51:27:
                    ab:35:79:b1:13:49:e1:9f:55:54:e6:73:2d:76:05:
                    59:7b:76:f7:84:e5:c5:30:98:7d:83:3d:c4:43:5d:
                    01:80:f2:d5:15:f2:e4:b6:97:34:de:7d:85:2e:f1:
                    a8:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:B1:E4:87:19:1B:A6:34:54:75:A1:90:E4:DC:14:FD:72:3F:09:37
            X509v3 Authority Key Identifier:
                keyid:ED:23:65:19:8E:BA:74:92:78:14:95:16:E3:C7:6C:50:94:AE:99:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01892704d5f332eb/0/ED2365198EBA749278149516E3C76C5094AE993F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e16c2ee6-ee94-4ae3-a6f7-ccb776ef75a2/74f7a45a3a510de918f6ddf7cca1df53d32dd9eb0564ed5cfb.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01892704d5f332eb/0/3139392e39312e39392e302f32342d3234203d3e203139343337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.91.99.0/24

    Signature Algorithm: sha256WithRSAEncryption
         90:dc:d1:bf:f2:8b:58:3a:b1:cf:a2:35:8c:9b:4c:5b:92:4c:
         dd:22:57:1f:5c:4a:9c:45:3c:97:5c:c6:27:79:3e:46:f6:51:
         72:a3:e3:78:fb:a4:dc:ed:09:62:2b:8a:32:11:79:0e:3d:78:
         cb:c8:76:5c:e4:de:c2:7c:b6:b1:0e:b3:75:f6:43:c2:3f:d2:
         5b:1d:70:77:78:fc:68:38:8b:5f:90:50:36:7f:35:07:8d:4f:
         27:f7:e7:3a:84:1a:aa:46:ed:87:e6:34:40:0c:1a:c1:8a:02:
         6e:77:a5:de:c0:56:75:52:0e:ed:db:96:d8:41:53:b5:e0:f9:
         d1:08:80:b5:3d:e5:bc:ca:d6:07:ac:70:44:5c:c1:88:00:f0:
         69:6a:0a:58:b3:3b:87:fc:3f:a1:c6:2b:3d:03:6c:fb:8e:be:
         e6:45:07:44:a5:3e:b4:b6:c5:62:8e:81:d7:f3:62:ef:54:d3:
         1e:93:0f:cf:9c:dd:b7:f6:f0:45:2a:8a:e4:ea:08:23:72:42:
         48:e0:6c:70:8e:9d:af:dd:06:32:e7:45:22:af:d4:4b:3b:e1:
         b5:31:ef:65:49:b4:29:08:4b:38:07:ea:0b:72:18:84:18:a1:
         93:7e:8a:c6:52:3b:b6:0c:8a:c5:08:17:e9:1b:21:9c:71:d1:
         a3:6d:53:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:41:09 2024 by rpki-client on console-ams.rpki-client.org