Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8baa579c018bb2c1b19e0c5e/0/3139392e3130312e3137312e302f32342d3234203d3e2031323339.roa
File:                     3139392e3130312e3137312e302f32342d3234203d3e2031323339.roa (raw, json)
Hash identifier:          7KPGTfR5UQfgsbbcwhG2rhvCf86DcODKNDBKg8Yug04=
Subject key identifier:   B9:98:67:2B:34:A4:DF:CB:13:89:92:92:9C:A3:C1:2F:E9:BD:61:B8
Certificate issuer:       /CN=351eed99ff4398ae146cfa3319c768c0f7700db77f30196f6a
Certificate serial:       7D68137DA3EBDD262A419A9736CECFF0FD72A87A
Authority key identifier: 10:87:0E:4C:11:D9:CA:AE:10:65:BF:FB:2A:E0:D9:CF:45:5C:1C:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d7058b26-d77c-4005-8cb8-f5876d4c0d15/351eed99ff4398ae146cfa3319c768c0f7700db77f30196f6a.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8baa579c018bb2c1b19e0c5e/0/3139392e3130312e3137312e302f32342d3234203d3e2031323339.roa
Signing time:             Thu 10 Oct 2024 06:49:01 +0000
ROA not before:           Thu 10 Oct 2024 06:44:01 +0000
ROA not after:            Thu 09 Oct 2025 06:49:01 +0000
asID:                     1239
IP address blocks:        199.101.171.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade8baa579c018bb2c1b19e0c5e/0/10870E4C11D9CAAE1065BFFB2AE0D9CF455C1CDB.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade8baa579c018bb2c1b19e0c5e/0/10870E4C11D9CAAE1065BFFB2AE0D9CF455C1CDB.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d7058b26-d77c-4005-8cb8-f5876d4c0d15/351eed99ff4398ae146cfa3319c768c0f7700db77f30196f6a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d7058b26-d77c-4005-8cb8-f5876d4c0d15/d7058b26-d77c-4005-8cb8-f5876d4c0d15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d7058b26-d77c-4005-8cb8-f5876d4c0d15/d7058b26-d77c-4005-8cb8-f5876d4c0d15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d7058b26-d77c-4005-8cb8-f5876d4c0d15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 04:29:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:68:13:7d:a3:eb:dd:26:2a:41:9a:97:36:ce:cf:f0:fd:72:a8:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=351eed99ff4398ae146cfa3319c768c0f7700db77f30196f6a
        Validity
            Not Before: Oct 10 06:44:01 2024 GMT
            Not After : Oct  9 06:49:01 2025 GMT
        Subject: CN=B998672B34A4DFCB138992929CA3C12FE9BD61B8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:1b:08:64:3f:96:84:53:48:98:24:92:af:c1:
                    d7:7c:a3:5d:0f:78:8d:be:3a:55:60:6d:47:68:88:
                    d6:26:72:f4:e9:25:86:ce:55:ca:b2:00:b2:87:ad:
                    34:e3:59:84:d7:f0:d6:0d:6d:08:45:3f:71:b8:f7:
                    3b:cc:27:71:b9:7b:c9:a4:20:7a:31:2c:c1:50:03:
                    93:1d:41:89:b6:95:c7:4a:50:76:7f:4e:35:26:30:
                    18:0a:4d:69:51:f2:5c:1f:e7:ac:e6:37:a1:cc:09:
                    d8:57:c6:ea:4d:e3:c0:37:d7:cd:0e:8a:79:62:fb:
                    68:ce:74:ba:11:bb:9d:39:5d:90:de:4e:f8:f9:a8:
                    ae:08:3b:2e:11:77:79:fb:db:c5:a3:c4:fd:6e:ff:
                    70:9d:bc:b3:91:87:d5:be:ff:be:ec:25:22:dd:79:
                    7b:59:75:00:c9:ee:2a:0a:5f:cd:72:1b:bf:e2:24:
                    81:04:4c:e4:1c:cc:be:57:3f:1c:cb:ad:cb:c4:30:
                    47:9b:e8:8c:7a:82:e4:77:ec:ab:54:d8:4d:68:08:
                    94:de:2b:cd:1a:81:12:19:67:c7:63:a8:c9:09:7c:
                    91:25:01:ee:6b:35:7e:b5:ae:3a:fc:c9:56:9a:75:
                    15:ab:ba:ab:35:7f:79:0d:91:b0:70:07:69:93:9b:
                    e1:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:98:67:2B:34:A4:DF:CB:13:89:92:92:9C:A3:C1:2F:E9:BD:61:B8
            X509v3 Authority Key Identifier:
                keyid:10:87:0E:4C:11:D9:CA:AE:10:65:BF:FB:2A:E0:D9:CF:45:5C:1C:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8baa579c018bb2c1b19e0c5e/0/10870E4C11D9CAAE1065BFFB2AE0D9CF455C1CDB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d7058b26-d77c-4005-8cb8-f5876d4c0d15/351eed99ff4398ae146cfa3319c768c0f7700db77f30196f6a.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8baa579c018bb2c1b19e0c5e/0/3139392e3130312e3137312e302f32342d3234203d3e2031323339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.101.171.0/24

    Signature Algorithm: sha256WithRSAEncryption
         50:84:be:11:be:6b:40:8c:61:70:4b:5b:1e:15:58:6b:d6:da:
         ff:93:ac:11:cf:53:d3:00:db:68:e5:a8:7d:ba:13:2b:14:9d:
         41:c2:32:ca:08:42:18:1d:8e:71:90:31:de:0a:49:e8:bc:ba:
         47:4b:50:41:24:2b:54:d2:c9:28:ba:fa:ed:4c:2b:bd:c6:ef:
         ea:45:d5:cf:98:53:8b:c6:22:68:48:d7:08:76:47:be:cd:cb:
         5a:c5:cb:47:f8:ec:de:3e:6c:3b:75:e0:b6:29:c9:93:7d:cb:
         62:5b:b5:e6:c8:a5:7d:e8:f8:30:3e:17:5d:63:48:68:1f:40:
         25:53:69:39:4c:3d:5d:2a:ca:ce:48:3e:fc:df:0b:0a:52:ba:
         b6:4b:27:bc:e1:34:ef:21:a7:0b:74:48:ae:c5:27:98:18:c9:
         11:4a:40:f5:58:04:b8:b4:e3:6e:28:08:35:3d:3a:4a:c5:ed:
         c0:f3:06:73:28:9c:0a:d9:03:e3:6e:5d:7c:44:b7:35:13:32:
         2c:36:4f:f8:1a:c8:64:c0:77:0e:9e:15:8a:d2:8a:1c:69:61:
         53:f9:a2:48:d6:78:80:61:3b:bc:f4:7c:f3:1a:68:b0:bf:c9:
         bf:d4:f3:2c:60:86:a2:ea:a0:e0:42:96:46:b6:42:f9:e5:e0:
         63:1a:14:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:07:33 2024 by rpki-client on console-fra.rpki-client.org