Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8baa579c018bb2c1b19e0c5e/0/3139392e3130312e3137312e302f32342d3234203d3e2031323339.roa
File:                     3139392e3130312e3137312e302f32342d3234203d3e2031323339.roa (raw, json)
Hash identifier:          /0+zVU5UymJRaUhzf5FShsRhETH3pxOP7jyb7UtmEIw=
Subject key identifier:   3B:3C:12:EE:2E:64:5E:25:46:CF:BA:CA:6C:37:74:CD:78:8D:B6:04
Certificate issuer:       /CN=351eed99ff4398ae146cfa3319c768c0f7700db77f30196f6a
Certificate serial:       7B18E70D661FE81D6A71F2C607D8CB128A4D33F1
Authority key identifier: 10:87:0E:4C:11:D9:CA:AE:10:65:BF:FB:2A:E0:D9:CF:45:5C:1C:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d7058b26-d77c-4005-8cb8-f5876d4c0d15/351eed99ff4398ae146cfa3319c768c0f7700db77f30196f6a.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8baa579c018bb2c1b19e0c5e/0/3139392e3130312e3137312e302f32342d3234203d3e2031323339.roa
Signing time:             Thu 09 Nov 2023 06:25:49 +0000
ROA not before:           Thu 09 Nov 2023 06:20:49 +0000
ROA not after:            Thu 07 Nov 2024 06:25:49 +0000
asID:                     1239
IP address blocks:        199.101.171.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade8baa579c018bb2c1b19e0c5e/0/10870E4C11D9CAAE1065BFFB2AE0D9CF455C1CDB.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade8baa579c018bb2c1b19e0c5e/0/10870E4C11D9CAAE1065BFFB2AE0D9CF455C1CDB.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d7058b26-d77c-4005-8cb8-f5876d4c0d15/351eed99ff4398ae146cfa3319c768c0f7700db77f30196f6a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d7058b26-d77c-4005-8cb8-f5876d4c0d15/d7058b26-d77c-4005-8cb8-f5876d4c0d15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d7058b26-d77c-4005-8cb8-f5876d4c0d15/d7058b26-d77c-4005-8cb8-f5876d4c0d15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d7058b26-d77c-4005-8cb8-f5876d4c0d15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 May 2024 08:34:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:18:e7:0d:66:1f:e8:1d:6a:71:f2:c6:07:d8:cb:12:8a:4d:33:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=351eed99ff4398ae146cfa3319c768c0f7700db77f30196f6a
        Validity
            Not Before: Nov  9 06:20:49 2023 GMT
            Not After : Nov  7 06:25:49 2024 GMT
        Subject: CN=3B3C12EE2E645E2546CFBACA6C3774CD788DB604
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:6f:a5:f3:93:74:aa:02:51:42:21:e1:d4:bb:
                    59:76:db:9d:49:20:34:ab:40:a1:ea:e5:d2:09:44:
                    97:ac:05:08:e6:b2:ec:13:da:32:5e:46:f4:e9:37:
                    3f:44:9f:ff:c3:03:95:40:b5:e0:dd:9e:44:d2:3f:
                    a3:5b:6e:26:a3:79:61:a6:96:14:45:86:f2:f8:eb:
                    eb:84:e2:66:ab:ac:59:fa:66:71:ea:94:fc:fd:38:
                    47:78:f5:4a:83:49:46:c4:0b:ba:60:ad:37:c7:23:
                    14:a6:66:fb:01:e3:56:8a:83:51:d3:91:c6:8f:04:
                    e7:fe:d1:ab:f2:f3:6b:7c:55:ba:3a:d9:d3:cc:06:
                    32:07:dc:a6:0e:33:e3:df:87:f6:cf:0a:1b:be:36:
                    e9:50:5d:50:2c:52:af:44:e1:8d:38:6c:3c:36:41:
                    ae:4d:78:3e:4d:72:6e:ad:7b:03:80:67:2e:58:8c:
                    7e:14:09:5c:bf:b7:d0:73:c0:f4:e2:cf:3f:81:d7:
                    d5:88:ed:a9:1f:03:cf:22:d1:3e:7b:3b:af:85:95:
                    bd:28:fd:06:14:a1:ca:78:ee:20:03:d1:d0:de:58:
                    03:6d:30:19:90:3f:a1:64:55:20:d4:b2:bc:a9:ab:
                    07:46:9f:dd:40:8c:21:e3:8d:c8:10:a7:82:8f:8f:
                    2a:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:3C:12:EE:2E:64:5E:25:46:CF:BA:CA:6C:37:74:CD:78:8D:B6:04
            X509v3 Authority Key Identifier:
                keyid:10:87:0E:4C:11:D9:CA:AE:10:65:BF:FB:2A:E0:D9:CF:45:5C:1C:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8baa579c018bb2c1b19e0c5e/0/10870E4C11D9CAAE1065BFFB2AE0D9CF455C1CDB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d7058b26-d77c-4005-8cb8-f5876d4c0d15/351eed99ff4398ae146cfa3319c768c0f7700db77f30196f6a.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8baa579c018bb2c1b19e0c5e/0/3139392e3130312e3137312e302f32342d3234203d3e2031323339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.101.171.0/24

    Signature Algorithm: sha256WithRSAEncryption
         56:26:2a:ff:f0:6d:4a:c5:59:f0:66:96:02:9f:77:cc:2c:50:
         9f:0e:ce:16:41:98:68:35:3d:b3:4b:a5:b8:a1:dd:91:03:7d:
         c0:b4:56:c3:cb:e2:3e:e1:60:89:32:db:f0:46:9a:ca:a0:f6:
         05:e9:50:6f:d5:33:9d:e6:30:8f:33:32:46:dc:46:e9:6a:3d:
         0d:fc:e9:d1:44:2f:ef:07:3c:70:5d:1b:a6:ed:16:76:a0:d7:
         72:f4:15:dc:3a:fa:88:b1:74:88:85:3c:06:d4:bf:08:e9:82:
         b1:09:31:6f:8e:62:92:11:0d:88:95:f9:36:95:39:8d:74:3e:
         61:74:56:3e:4b:cf:69:eb:dc:0f:d7:2a:c1:96:60:b5:f6:23:
         ce:da:8b:73:7b:a5:e3:26:08:ee:dc:9a:76:0b:7a:b0:c2:e7:
         77:86:10:2c:0f:df:df:7f:c6:11:d8:5e:c5:6e:c5:65:1d:f4:
         ae:54:21:08:cd:e4:6a:56:b9:94:d8:b7:07:5e:a7:96:f4:07:
         6a:3f:3e:ec:b0:00:66:2b:fc:c3:8d:0b:76:e9:ee:23:ca:8b:
         d4:00:34:6e:50:fe:38:f5:20:9d:39:29:66:10:c0:d9:72:8b:
         03:43:ab:bd:a7:21:26:6c:8e:b1:e4:0d:38:a4:df:a1:10:5b:
         3a:24:0a:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 07:40:58 2024 by rpki-client on console-ams.rpki-client.org