Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8baa579c018bb2c1b19e0c5e/0/3139392e3130312e3137302e302f32342d3234203d3e20313430393032.roa
File:                     3139392e3130312e3137302e302f32342d3234203d3e20313430393032.roa (raw, json)
Hash identifier:          lo972X8i4gMMYOAzsnZUB/v4no3VdKDOsukNpPx89zw=
Subject key identifier:   5E:3C:FA:A0:16:C4:13:8A:2F:56:1F:4A:98:9A:0B:B0:4B:67:CF:A8
Certificate issuer:       /CN=351eed99ff4398ae146cfa3319c768c0f7700db77f30196f6a
Certificate serial:       77EFF90CF31D912DE8747816FF26E4DE6C4C7B03
Authority key identifier: 10:87:0E:4C:11:D9:CA:AE:10:65:BF:FB:2A:E0:D9:CF:45:5C:1C:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d7058b26-d77c-4005-8cb8-f5876d4c0d15/351eed99ff4398ae146cfa3319c768c0f7700db77f30196f6a.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8baa579c018bb2c1b19e0c5e/0/3139392e3130312e3137302e302f32342d3234203d3e20313430393032.roa
Signing time:             Thu 10 Oct 2024 06:49:02 +0000
ROA not before:           Thu 10 Oct 2024 06:44:02 +0000
ROA not after:            Thu 09 Oct 2025 06:49:02 +0000
asID:                     140902
IP address blocks:        199.101.170.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade8baa579c018bb2c1b19e0c5e/0/10870E4C11D9CAAE1065BFFB2AE0D9CF455C1CDB.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade8baa579c018bb2c1b19e0c5e/0/10870E4C11D9CAAE1065BFFB2AE0D9CF455C1CDB.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d7058b26-d77c-4005-8cb8-f5876d4c0d15/351eed99ff4398ae146cfa3319c768c0f7700db77f30196f6a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d7058b26-d77c-4005-8cb8-f5876d4c0d15/d7058b26-d77c-4005-8cb8-f5876d4c0d15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d7058b26-d77c-4005-8cb8-f5876d4c0d15/d7058b26-d77c-4005-8cb8-f5876d4c0d15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d7058b26-d77c-4005-8cb8-f5876d4c0d15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 00:40:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:ef:f9:0c:f3:1d:91:2d:e8:74:78:16:ff:26:e4:de:6c:4c:7b:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=351eed99ff4398ae146cfa3319c768c0f7700db77f30196f6a
        Validity
            Not Before: Oct 10 06:44:02 2024 GMT
            Not After : Oct  9 06:49:02 2025 GMT
        Subject: CN=5E3CFAA016C4138A2F561F4A989A0BB04B67CFA8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:4c:a5:2c:5e:ab:12:b0:aa:6a:ed:b4:fa:7b:
                    1f:37:9a:3b:ad:d1:d1:5a:41:e1:0f:c2:16:2d:e4:
                    a0:04:63:7c:d5:25:38:62:c7:4b:7b:1a:3b:8c:52:
                    ba:23:d2:4c:0c:42:15:fe:e0:30:1b:0c:42:58:fa:
                    24:c6:da:85:b0:67:19:ee:d1:58:34:c9:ed:6d:08:
                    10:8a:04:30:7b:7e:8a:6b:3c:28:d9:6e:83:7f:c7:
                    be:d3:4d:51:a9:ca:57:f0:d0:23:11:7a:3d:2b:fb:
                    a9:7b:fb:8b:99:61:18:95:41:4b:f8:a1:c7:43:1d:
                    b1:b3:9a:0a:66:27:33:8e:fd:9a:00:be:44:d4:85:
                    06:4f:06:e4:ae:f5:b4:11:cb:82:a6:06:60:12:99:
                    73:df:05:6c:33:0c:f5:7b:3b:82:1b:26:16:06:54:
                    31:67:0c:a9:c9:22:1b:8b:17:82:ba:4f:51:89:22:
                    f2:38:7d:c1:f2:44:b5:a4:56:f4:02:b8:3e:06:d0:
                    81:96:41:69:88:76:da:26:e4:b1:0d:13:29:a9:d1:
                    79:92:61:34:69:2a:e4:ef:35:c8:a9:1b:d7:1f:d9:
                    8b:e6:09:7d:a6:95:34:c0:91:55:ba:12:68:58:db:
                    e9:56:0e:4d:a1:9f:d6:4f:c1:8e:f2:c1:37:38:7f:
                    73:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:3C:FA:A0:16:C4:13:8A:2F:56:1F:4A:98:9A:0B:B0:4B:67:CF:A8
            X509v3 Authority Key Identifier:
                keyid:10:87:0E:4C:11:D9:CA:AE:10:65:BF:FB:2A:E0:D9:CF:45:5C:1C:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8baa579c018bb2c1b19e0c5e/0/10870E4C11D9CAAE1065BFFB2AE0D9CF455C1CDB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d7058b26-d77c-4005-8cb8-f5876d4c0d15/351eed99ff4398ae146cfa3319c768c0f7700db77f30196f6a.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8baa579c018bb2c1b19e0c5e/0/3139392e3130312e3137302e302f32342d3234203d3e20313430393032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.101.170.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a9:71:83:aa:5d:6f:94:95:98:69:f2:02:6c:3c:70:a2:ba:3a:
         92:82:6e:49:20:5b:4f:4f:e8:53:3b:ba:78:66:52:52:68:28:
         2c:b3:3f:89:4b:7d:b0:22:d9:6c:42:92:90:9a:53:a0:18:c1:
         42:8d:85:36:5a:22:c5:b8:b6:b8:a0:92:db:d1:f3:dd:0c:e2:
         f0:43:a5:67:bb:8a:d9:7a:ab:01:78:f5:59:34:a7:e7:f6:65:
         5f:fe:c1:e6:77:fd:af:20:ce:e3:6d:a0:c9:c7:6e:39:94:01:
         a4:e3:8e:c0:0a:35:75:63:a3:02:54:b4:de:97:97:dc:96:2d:
         e3:69:95:ed:61:a7:23:e2:a1:dc:4b:79:b6:09:24:1d:69:d9:
         ae:95:68:25:97:6b:6b:f9:f3:92:78:1a:71:b1:71:46:1a:94:
         97:09:6d:76:ba:44:de:c7:5b:b6:63:eb:f8:dc:4e:a9:fa:df:
         f6:30:9a:04:f2:9e:c7:e9:23:ae:80:32:50:2c:d8:68:b5:10:
         aa:0c:dc:9e:08:77:7b:d7:f0:e2:65:05:e7:8c:c6:75:38:59:
         5f:0f:d2:64:5e:1c:ce:e1:91:0b:74:8b:44:41:3c:a9:0d:04:
         a4:6b:cf:98:2d:22:5f:6c:84:01:47:9f:00:09:2e:f6:d7:96:
         44:a9:6b:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 01:15:13 2024 by rpki-client on console-fra.rpki-client.org