Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8baa579c018bb2c1b19e0c5e/0/3139392e3130312e3136392e302f32342d3234203d3e2037303239.roa
File:                     3139392e3130312e3136392e302f32342d3234203d3e2037303239.roa (raw, json)
Hash identifier:          2x60b4wyj74lroE8FyoH4KT/WJ2aNEqY3EQTGoCzx6A=
Subject key identifier:   F0:28:14:DA:0F:86:EB:A9:6A:8F:E6:29:10:AD:45:E1:41:41:80:26
Certificate issuer:       /CN=351eed99ff4398ae146cfa3319c768c0f7700db77f30196f6a
Certificate serial:       1CB013D99FCD065BB1D88A0D57954998B1FB3B22
Authority key identifier: 10:87:0E:4C:11:D9:CA:AE:10:65:BF:FB:2A:E0:D9:CF:45:5C:1C:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d7058b26-d77c-4005-8cb8-f5876d4c0d15/351eed99ff4398ae146cfa3319c768c0f7700db77f30196f6a.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8baa579c018bb2c1b19e0c5e/0/3139392e3130312e3136392e302f32342d3234203d3e2037303239.roa
Signing time:             Thu 10 Oct 2024 06:49:02 +0000
ROA not before:           Thu 10 Oct 2024 06:44:02 +0000
ROA not after:            Thu 09 Oct 2025 06:49:02 +0000
asID:                     7029
IP address blocks:        199.101.169.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade8baa579c018bb2c1b19e0c5e/0/10870E4C11D9CAAE1065BFFB2AE0D9CF455C1CDB.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade8baa579c018bb2c1b19e0c5e/0/10870E4C11D9CAAE1065BFFB2AE0D9CF455C1CDB.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d7058b26-d77c-4005-8cb8-f5876d4c0d15/351eed99ff4398ae146cfa3319c768c0f7700db77f30196f6a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d7058b26-d77c-4005-8cb8-f5876d4c0d15/d7058b26-d77c-4005-8cb8-f5876d4c0d15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d7058b26-d77c-4005-8cb8-f5876d4c0d15/d7058b26-d77c-4005-8cb8-f5876d4c0d15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d7058b26-d77c-4005-8cb8-f5876d4c0d15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 04:29:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:b0:13:d9:9f:cd:06:5b:b1:d8:8a:0d:57:95:49:98:b1:fb:3b:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=351eed99ff4398ae146cfa3319c768c0f7700db77f30196f6a
        Validity
            Not Before: Oct 10 06:44:02 2024 GMT
            Not After : Oct  9 06:49:02 2025 GMT
        Subject: CN=F02814DA0F86EBA96A8FE62910AD45E141418026
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:9e:59:1b:d1:ef:c6:b5:83:45:ca:95:11:f7:
                    12:80:bb:04:9a:f0:6d:b8:5d:15:0b:47:4c:f3:98:
                    56:06:9d:11:4a:26:3d:52:21:73:8e:46:bc:f5:10:
                    80:c5:3b:14:0d:f2:a2:9b:f8:30:c9:f6:2e:b6:b1:
                    76:c3:f5:80:71:f3:67:48:fa:13:de:31:be:72:21:
                    3d:69:d0:9e:dc:ff:b1:b9:61:11:72:26:aa:b9:e7:
                    a5:a5:c4:91:46:29:94:67:54:c8:9f:40:ff:2c:56:
                    90:72:48:b6:b5:71:0b:9b:ac:41:01:3f:6b:cf:1a:
                    1a:97:42:ed:22:39:8d:1a:12:82:74:10:50:8d:b5:
                    b2:71:f8:58:c4:13:76:70:54:0a:81:8a:d3:6f:ba:
                    da:69:39:00:64:3e:e9:0a:c2:79:2f:31:bc:62:01:
                    f8:12:93:50:60:50:c9:c9:aa:8b:e9:8d:9e:e9:4c:
                    ba:00:9a:70:a0:94:f4:29:25:01:db:89:8a:33:23:
                    f8:25:4b:f6:8c:75:d0:42:04:57:77:f8:91:27:9f:
                    d4:b7:da:00:78:62:63:90:81:76:cc:5a:47:58:50:
                    24:e8:e3:51:34:ca:8b:a7:38:0c:03:f4:04:3c:30:
                    0d:d2:35:05:2f:2a:7e:24:ed:2a:7f:89:08:ea:cc:
                    95:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:28:14:DA:0F:86:EB:A9:6A:8F:E6:29:10:AD:45:E1:41:41:80:26
            X509v3 Authority Key Identifier:
                keyid:10:87:0E:4C:11:D9:CA:AE:10:65:BF:FB:2A:E0:D9:CF:45:5C:1C:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8baa579c018bb2c1b19e0c5e/0/10870E4C11D9CAAE1065BFFB2AE0D9CF455C1CDB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d7058b26-d77c-4005-8cb8-f5876d4c0d15/351eed99ff4398ae146cfa3319c768c0f7700db77f30196f6a.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8baa579c018bb2c1b19e0c5e/0/3139392e3130312e3136392e302f32342d3234203d3e2037303239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.101.169.0/24

    Signature Algorithm: sha256WithRSAEncryption
         64:54:17:57:72:29:76:1e:13:6e:e2:e0:f0:7e:21:07:40:26:
         6b:aa:fc:10:42:b0:b1:c3:11:10:b0:d5:ce:0b:02:8b:4f:78:
         c0:17:11:ea:d8:6d:28:01:79:0c:3c:6f:79:3d:7f:59:48:e9:
         56:6b:a8:77:00:81:bc:59:58:b2:fb:1b:1c:4b:02:a8:b9:8c:
         8e:46:73:32:32:38:7c:a0:14:89:c2:02:1e:3b:21:02:52:70:
         a1:c2:70:53:61:e5:67:32:c0:f2:d6:77:d2:84:c5:08:e0:eb:
         48:ef:51:25:6e:8a:c0:5d:16:0c:99:b4:f2:4d:62:68:34:5e:
         dc:92:c0:07:37:43:5c:42:09:e1:8c:7e:83:5d:af:5e:cf:83:
         c8:73:37:c5:c8:aa:50:9b:5b:d9:69:ff:2b:fe:7a:47:2c:0c:
         0b:9b:6c:84:bf:e7:f1:d3:ae:74:e5:0c:51:f6:3f:e7:f2:81:
         8f:e3:28:31:00:c8:b8:c2:2b:cd:4e:37:96:97:06:e7:45:61:
         8e:f3:dc:9b:4d:59:00:2b:25:48:df:3b:1f:5c:0b:47:d5:4a:
         d1:1f:8b:63:62:c8:d7:cd:07:f4:ec:5f:97:80:e4:bf:9b:9c:
         09:e2:8c:72:d4:bf:4d:cf:dd:ee:c6:74:d1:76:b0:bf:d5:47:
         65:45:cc:52
-----BEGIN CERTIFICATE-----
MIIFsjCCBJqgAwIBAgIUHLAT2Z/NBlux2IoNV5VJmLH7OyIwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMzUxZWVkOTlmZjQzOThhZTE0NmNmYTMzMTljNzY4YzBm
NzcwMGRiNzdmMzAxOTZmNmEwHhcNMjQxMDEwMDY0NDAyWhcNMjUxMDA5MDY0OTAy
WjAzMTEwLwYDVQQDEyhGMDI4MTREQTBGODZFQkE5NkE4RkU2MjkxMEFENDVFMTQx
NDE4MDI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArZ5ZG9HvxrWD
RcqVEfcSgLsEmvBtuF0VC0dM85hWBp0RSiY9UiFzjka89RCAxTsUDfKim/gwyfYu
trF2w/WAcfNnSPoT3jG+ciE9adCe3P+xuWERciaqueelpcSRRimUZ1TIn0D/LFaQ
cki2tXELm6xBAT9rzxoal0LtIjmNGhKCdBBQjbWycfhYxBN2cFQKgYrTb7raaTkA
ZD7pCsJ5LzG8YgH4EpNQYFDJyaqL6Y2e6Uy6AJpwoJT0KSUB24mKMyP4JUv2jHXQ
QgRXd/iRJ5/Ut9oAeGJjkIF2zFpHWFAk6ONRNMqLpzgMA/QEPDAN0jUFLyp+JO0q
f4kI6syVPQIDAQABo4ICsjCCAq4wHQYDVR0OBBYEFPAoFNoPhuupao/mKRCtReFB
QYAmMB8GA1UdIwQYMBaAFBCHDkwR2cquEGW/+yrg2c9FXBzbMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlOGJhYTU3OWMwMThiYjJjMWIxOWUwYzVlLzAv
MTA4NzBFNEMxMUQ5Q0FBRTEwNjVCRkZCMkFFMEQ5Q0Y0NTVDMUNEQi5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvODcxZGE0MGYtNzkzYS00YTQ1LWEwYTktOTc4MTQ4
MzIxYTA3L2Q3MDU4YjI2LWQ3N2MtNDAwNS04Y2I4LWY1ODc2ZDRjMGQxNS8zNTFl
ZWQ5OWZmNDM5OGFlMTQ2Y2ZhMzMxOWM3NjhjMGY3NzAwZGI3N2YzMDE5NmY2YS5j
ZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZThiYWE1NzljMDE4YmIy
YzFiMTllMGM1ZS8wLzMxMzkzOTJlMzEzMDMxMmUzMTM2MzkyZTMwMmYzMjM0MmQz
MjM0MjAzZDNlMjAzNzMwMzIzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO
AjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMdlqTANBgkqhkiG9w0BAQsF
AAOCAQEAZFQXV3Ipdh4TbuLg8H4hB0Ama6r8EEKwscMRELDVzgsCi094wBcR6tht
KAF5DDxveT1/WUjpVmuodwCBvFlYsvsbHEsCqLmMjkZzMjI4fKAUicICHjshAlJw
ocJwU2HlZzLA8tZ30oTFCODrSO9RJW6KwF0WDJm08k1iaDRe3JLABzdDXEIJ4Yx+
g12vXs+DyHM3xciqUJtb2Wn/K/56RywMC5tshL/n8dOudOUMUfY/5/KBj+MoMQDI
uMIrzU43lpcG50VhjvPcm01ZACslSN87H1wLR9VK0R+LY2LI180H9Oxfl4Dkv5uc
CeKMctS/Tc/d7sZ00Xawv9VHZUXMUg==
-----END CERTIFICATE-----
Generated at Fri Nov 22 02:07:33 2024 by rpki-client on console-fra.rpki-client.org