Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8baa579c018bb2c1b19e0c5e/0/3139392e3130312e3137302e302f32342d3234203d3e20383334.roa
File:                     3139392e3130312e3137302e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier:          UjIwxO+Y2+eqwNh0HuAKK3IKP8KY9AHym3NXaqF4TtQ=
Subject key identifier:   72:CD:F8:C0:83:49:4F:47:45:A7:51:96:0F:C1:FE:C3:A5:38:18:0E
Certificate issuer:       /CN=351eed99ff4398ae146cfa3319c768c0f7700db77f30196f6a
Certificate serial:       1A42B892BE4E9A036C6F63E71B30E666EE405A7A
Authority key identifier: 10:87:0E:4C:11:D9:CA:AE:10:65:BF:FB:2A:E0:D9:CF:45:5C:1C:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d7058b26-d77c-4005-8cb8-f5876d4c0d15/351eed99ff4398ae146cfa3319c768c0f7700db77f30196f6a.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8baa579c018bb2c1b19e0c5e/0/3139392e3130312e3137302e302f32342d3234203d3e20383334.roa
Signing time:             Tue 26 Nov 2024 11:13:12 +0000
ROA not before:           Tue 26 Nov 2024 11:08:12 +0000
ROA not after:            Tue 25 Nov 2025 11:13:12 +0000
asID:                     834
IP address blocks:        199.101.170.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade8baa579c018bb2c1b19e0c5e/0/10870E4C11D9CAAE1065BFFB2AE0D9CF455C1CDB.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade8baa579c018bb2c1b19e0c5e/0/10870E4C11D9CAAE1065BFFB2AE0D9CF455C1CDB.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d7058b26-d77c-4005-8cb8-f5876d4c0d15/351eed99ff4398ae146cfa3319c768c0f7700db77f30196f6a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d7058b26-d77c-4005-8cb8-f5876d4c0d15/d7058b26-d77c-4005-8cb8-f5876d4c0d15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d7058b26-d77c-4005-8cb8-f5876d4c0d15/d7058b26-d77c-4005-8cb8-f5876d4c0d15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d7058b26-d77c-4005-8cb8-f5876d4c0d15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Apr 2025 07:28:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:42:b8:92:be:4e:9a:03:6c:6f:63:e7:1b:30:e6:66:ee:40:5a:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=351eed99ff4398ae146cfa3319c768c0f7700db77f30196f6a
        Validity
            Not Before: Nov 26 11:08:12 2024 GMT
            Not After : Nov 25 11:13:12 2025 GMT
        Subject: CN=72CDF8C083494F4745A751960FC1FEC3A538180E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:e3:d5:5c:5b:b6:bb:cb:ba:23:de:f4:4c:2a:
                    2e:dd:ca:03:5b:4d:e7:fd:9e:7f:98:81:28:b7:0f:
                    6d:c3:c2:73:c7:f5:c9:8f:d3:f6:fa:e2:74:98:32:
                    5a:6d:34:80:f1:89:4a:91:f0:a0:53:ec:d0:5e:aa:
                    24:0a:e8:68:db:ff:76:66:1b:f8:87:75:7d:a7:86:
                    d6:57:26:c4:ce:61:f4:4f:f9:26:13:0e:b9:22:38:
                    e0:68:cc:08:2b:99:2c:73:4c:6a:4c:60:e7:8a:85:
                    5a:de:cc:8d:8b:5f:cd:31:10:fe:12:b5:0a:7a:ec:
                    b1:63:42:d6:e5:1b:8c:a9:b5:42:3c:e9:ef:99:8d:
                    ea:86:0f:98:2c:15:e7:bb:69:af:c7:57:73:6f:05:
                    99:b9:1a:ad:9a:e2:4e:ce:dd:89:57:e2:8c:95:ba:
                    55:64:bd:70:ea:9c:80:8f:4b:79:48:35:46:3c:81:
                    b4:3e:94:0f:99:99:ff:5b:ae:c9:a8:65:e1:d7:92:
                    62:cc:07:e9:b4:bd:1a:9f:3d:23:f6:6e:2b:36:da:
                    1a:c5:ba:fe:d6:67:63:eb:d0:74:5c:94:e8:af:96:
                    71:3d:5b:37:a0:e4:09:a8:bf:07:91:7a:f2:ea:cb:
                    b6:67:88:63:3e:cc:aa:5e:b8:c5:1c:04:bc:de:c9:
                    dd:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:CD:F8:C0:83:49:4F:47:45:A7:51:96:0F:C1:FE:C3:A5:38:18:0E
            X509v3 Authority Key Identifier:
                keyid:10:87:0E:4C:11:D9:CA:AE:10:65:BF:FB:2A:E0:D9:CF:45:5C:1C:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8baa579c018bb2c1b19e0c5e/0/10870E4C11D9CAAE1065BFFB2AE0D9CF455C1CDB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d7058b26-d77c-4005-8cb8-f5876d4c0d15/351eed99ff4398ae146cfa3319c768c0f7700db77f30196f6a.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8baa579c018bb2c1b19e0c5e/0/3139392e3130312e3137302e302f32342d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.101.170.0/24

    Signature Algorithm: sha256WithRSAEncryption
         58:99:c4:88:f7:04:9e:d1:13:a5:f0:42:d4:d0:de:ea:c9:17:
         80:47:de:09:f8:a5:c3:11:da:27:08:4a:09:d2:7b:75:ee:be:
         72:5b:e0:31:9f:f5:1d:65:5f:03:a6:0e:d7:a8:66:89:2e:83:
         9d:19:cf:86:c3:05:22:1e:e9:86:4d:91:ce:14:c2:a6:9c:52:
         46:9a:0a:d0:55:16:ed:a9:e6:7a:80:3e:00:04:a1:c1:9a:b7:
         20:06:60:8d:97:90:f5:31:44:54:25:1f:5a:4c:9e:56:57:98:
         9a:57:da:d8:e4:9d:d3:ff:6a:f8:63:2d:84:dc:08:81:99:74:
         3a:04:f2:f9:22:c6:de:af:37:c5:5c:1c:dc:b7:97:98:5f:4f:
         72:15:0a:f3:51:37:7b:c8:a6:9c:9d:cd:b0:40:fb:77:0d:57:
         51:6b:78:64:b4:1c:06:d6:67:8a:7b:f2:a2:13:bf:54:1b:89:
         93:2f:5b:25:c8:b2:14:11:ff:4e:3b:1f:75:70:83:40:fc:91:
         53:fb:8e:03:30:4b:8b:86:29:f1:dc:b6:b6:f8:82:c3:99:bb:
         cc:b2:46:04:0a:aa:12:06:d2:49:38:4c:e7:80:d1:ce:43:e8:
         9c:8a:15:d7:8f:78:1b:3f:8f:f6:40:96:07:43:24:37:75:1c:
         95:52:36:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 21:49:45 2025 by rpki-client