Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8baa579c018bb2c1b19e0c5e/0/3139392e3130312e3136382e302f32342d3234203d3e2037303239.roa
File:                     3139392e3130312e3136382e302f32342d3234203d3e2037303239.roa (raw, json)
Hash identifier:          KVwbkGGRj2KIBzH6hYnmrTR/VjANcpBXr2iK6Iut3gs=
Subject key identifier:   CA:A9:30:1E:F0:C4:0B:04:98:13:4C:0F:52:98:1F:9A:97:63:8F:75
Certificate issuer:       /CN=351eed99ff4398ae146cfa3319c768c0f7700db77f30196f6a
Certificate serial:       5DA3E80C9C9C15991C270BC2AB506DA232E359AC
Authority key identifier: 10:87:0E:4C:11:D9:CA:AE:10:65:BF:FB:2A:E0:D9:CF:45:5C:1C:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d7058b26-d77c-4005-8cb8-f5876d4c0d15/351eed99ff4398ae146cfa3319c768c0f7700db77f30196f6a.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8baa579c018bb2c1b19e0c5e/0/3139392e3130312e3136382e302f32342d3234203d3e2037303239.roa
Signing time:             Thu 10 Oct 2024 06:49:01 +0000
ROA not before:           Thu 10 Oct 2024 06:44:01 +0000
ROA not after:            Thu 09 Oct 2025 06:49:01 +0000
asID:                     7029
IP address blocks:        199.101.168.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade8baa579c018bb2c1b19e0c5e/0/10870E4C11D9CAAE1065BFFB2AE0D9CF455C1CDB.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade8baa579c018bb2c1b19e0c5e/0/10870E4C11D9CAAE1065BFFB2AE0D9CF455C1CDB.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d7058b26-d77c-4005-8cb8-f5876d4c0d15/351eed99ff4398ae146cfa3319c768c0f7700db77f30196f6a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d7058b26-d77c-4005-8cb8-f5876d4c0d15/d7058b26-d77c-4005-8cb8-f5876d4c0d15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d7058b26-d77c-4005-8cb8-f5876d4c0d15/d7058b26-d77c-4005-8cb8-f5876d4c0d15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d7058b26-d77c-4005-8cb8-f5876d4c0d15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 00:40:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:a3:e8:0c:9c:9c:15:99:1c:27:0b:c2:ab:50:6d:a2:32:e3:59:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=351eed99ff4398ae146cfa3319c768c0f7700db77f30196f6a
        Validity
            Not Before: Oct 10 06:44:01 2024 GMT
            Not After : Oct  9 06:49:01 2025 GMT
        Subject: CN=CAA9301EF0C40B0498134C0F52981F9A97638F75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:17:ab:1c:5e:05:79:b8:06:f9:86:87:51:ed:
                    2d:4b:d9:05:95:79:79:41:51:59:69:67:38:70:b0:
                    7e:92:f4:3c:8a:d8:ce:98:4f:fc:92:82:57:be:d4:
                    a1:f1:9f:22:26:9b:2c:ed:c3:e9:d3:30:23:8f:95:
                    08:fe:48:b2:b3:4f:a9:c2:ad:d7:bd:4a:77:2c:e3:
                    39:5f:a9:8b:0d:d2:f0:db:d1:be:80:38:02:51:e6:
                    cd:1c:4f:c7:0b:cd:4f:b8:8b:e6:88:5a:b8:78:ce:
                    a9:56:dc:fd:1b:33:34:9b:45:52:a6:74:69:f5:cb:
                    09:1d:a8:ee:11:61:6a:1d:04:f5:a9:87:7f:f6:61:
                    b3:46:37:84:56:cb:7c:22:d8:82:3d:4d:9d:59:06:
                    23:70:a9:76:a6:a0:e6:5a:d9:3a:89:8a:1c:af:18:
                    70:0c:87:2e:61:6e:69:b3:75:fd:f7:cf:c7:77:5e:
                    f0:62:29:1e:7f:2c:d3:32:3a:73:fd:b5:fc:a4:bf:
                    16:5d:16:bd:05:0b:22:29:d2:c4:7f:a6:a8:d7:7b:
                    00:70:8a:bd:2e:8d:2a:24:17:ec:f7:96:1c:6d:6f:
                    bd:c7:20:ee:cc:e1:5a:d0:8b:a5:bf:80:dc:51:69:
                    f5:c4:bf:91:75:8a:53:85:c2:29:1f:88:de:fc:c8:
                    6f:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:A9:30:1E:F0:C4:0B:04:98:13:4C:0F:52:98:1F:9A:97:63:8F:75
            X509v3 Authority Key Identifier:
                keyid:10:87:0E:4C:11:D9:CA:AE:10:65:BF:FB:2A:E0:D9:CF:45:5C:1C:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8baa579c018bb2c1b19e0c5e/0/10870E4C11D9CAAE1065BFFB2AE0D9CF455C1CDB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d7058b26-d77c-4005-8cb8-f5876d4c0d15/351eed99ff4398ae146cfa3319c768c0f7700db77f30196f6a.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8baa579c018bb2c1b19e0c5e/0/3139392e3130312e3136382e302f32342d3234203d3e2037303239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.101.168.0/24

    Signature Algorithm: sha256WithRSAEncryption
         27:d0:25:77:c2:dd:7e:fd:7a:0f:8d:f7:a8:f4:24:6d:30:15:
         0c:a9:17:f2:fc:e5:b0:03:76:fa:83:80:80:54:fd:f4:01:2e:
         4b:00:54:e6:4e:8f:b4:8a:1a:ad:4b:ca:d6:0a:b2:7f:0f:bb:
         31:51:68:df:be:59:97:b7:ec:50:fc:55:2f:4e:1d:58:a9:0d:
         43:ed:a5:51:38:b6:62:38:2b:db:10:a0:22:ea:1e:17:64:43:
         54:03:82:dc:17:90:51:59:ca:7b:ee:e1:98:a4:95:66:f1:6f:
         f7:9b:ab:87:37:6d:6c:21:68:58:b2:1e:d4:47:62:b2:fa:7f:
         69:b8:98:2c:ea:b0:a3:cc:d5:84:ae:be:45:31:33:2d:a9:e2:
         32:70:54:da:5a:5a:03:c7:17:8d:fa:ad:1f:f6:37:da:d4:59:
         a4:e8:ee:8f:08:96:da:21:26:2a:b1:b6:c5:fb:dc:8b:c2:0d:
         eb:c4:f9:d1:fe:9e:a8:69:4b:4c:41:d3:16:2c:c3:bb:69:61:
         54:31:32:d2:65:e1:c6:4a:66:77:67:fe:59:9e:80:f8:00:f3:
         01:b4:3e:7c:d3:32:06:52:ad:93:21:ef:2d:79:7c:de:ee:4a:
         4c:12:61:59:e9:14:df:a2:95:1c:e2:42:4e:bd:6d:db:31:59:
         09:a6:12:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 01:01:08 2024 by rpki-client on console-ams.rpki-client.org