Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8baa579c018bb2c1b19e0c5e/0/3139392e3130312e3137312e302f32342d3234203d3e20313734.roa
File:                     3139392e3130312e3137312e302f32342d3234203d3e20313734.roa (raw, json)
Hash identifier:          t1IuRKZY/ftsZ8XqFWtEIewFbtOGVZb27UdXqxHBPuI=
Subject key identifier:   9C:8D:5C:78:81:41:5E:B1:43:14:4D:5E:81:D9:6D:D2:09:A4:89:3A
Certificate issuer:       /CN=351eed99ff4398ae146cfa3319c768c0f7700db77f30196f6a
Certificate serial:       1C1D1E9AA4115AAA3DEC1033802DB6D9471397D7
Authority key identifier: 10:87:0E:4C:11:D9:CA:AE:10:65:BF:FB:2A:E0:D9:CF:45:5C:1C:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d7058b26-d77c-4005-8cb8-f5876d4c0d15/351eed99ff4398ae146cfa3319c768c0f7700db77f30196f6a.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8baa579c018bb2c1b19e0c5e/0/3139392e3130312e3137312e302f32342d3234203d3e20313734.roa
Signing time:             Wed 25 Sep 2024 16:11:16 +0000
ROA not before:           Wed 25 Sep 2024 16:06:16 +0000
ROA not after:            Wed 24 Sep 2025 16:11:16 +0000
asID:                     174
IP address blocks:        199.101.171.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade8baa579c018bb2c1b19e0c5e/0/10870E4C11D9CAAE1065BFFB2AE0D9CF455C1CDB.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade8baa579c018bb2c1b19e0c5e/0/10870E4C11D9CAAE1065BFFB2AE0D9CF455C1CDB.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d7058b26-d77c-4005-8cb8-f5876d4c0d15/351eed99ff4398ae146cfa3319c768c0f7700db77f30196f6a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d7058b26-d77c-4005-8cb8-f5876d4c0d15/d7058b26-d77c-4005-8cb8-f5876d4c0d15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d7058b26-d77c-4005-8cb8-f5876d4c0d15/d7058b26-d77c-4005-8cb8-f5876d4c0d15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d7058b26-d77c-4005-8cb8-f5876d4c0d15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 09:09:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:1d:1e:9a:a4:11:5a:aa:3d:ec:10:33:80:2d:b6:d9:47:13:97:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=351eed99ff4398ae146cfa3319c768c0f7700db77f30196f6a
        Validity
            Not Before: Sep 25 16:06:16 2024 GMT
            Not After : Sep 24 16:11:16 2025 GMT
        Subject: CN=9C8D5C7881415EB143144D5E81D96DD209A4893A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:9c:74:d9:df:2a:13:c1:34:2f:da:9e:f7:49:
                    35:6b:c7:ee:40:c7:ec:28:17:0c:26:fb:97:bd:ea:
                    36:d8:8b:23:be:34:7e:28:17:83:08:d3:36:b8:bd:
                    b1:6f:f3:04:39:6e:3b:f5:b3:5e:14:5b:e8:96:cf:
                    e9:2c:c9:39:d5:e6:12:8f:e6:63:1d:e9:ed:56:2d:
                    f9:96:35:08:cf:10:64:80:ba:97:74:a1:d9:ae:8e:
                    60:2a:bd:36:6e:27:82:a3:f9:41:b5:b7:d1:54:9b:
                    fc:a8:84:77:e9:88:39:02:c8:a7:4d:82:92:4f:78:
                    23:e9:b0:8c:55:4a:b1:d4:d8:18:db:e4:38:1a:8f:
                    81:0f:13:b3:c7:0f:e9:19:57:a5:dd:73:a5:72:06:
                    33:1e:c9:4b:6a:54:75:42:63:2e:bb:bb:f3:35:63:
                    52:3d:eb:29:09:e6:0f:fe:b6:69:50:ae:cc:00:74:
                    06:6e:02:2a:65:f8:26:86:f2:50:a6:f6:8e:26:01:
                    8d:d3:f4:69:92:49:b2:3a:75:6a:0b:3d:a6:b0:cd:
                    10:e8:dd:e6:fc:b1:ac:9c:42:5f:82:ef:a1:2f:c3:
                    21:43:fd:f2:43:3e:f6:86:30:7e:5f:d9:39:06:52:
                    26:06:c9:80:9b:ee:03:69:9d:1d:7e:d8:d6:c9:aa:
                    09:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:8D:5C:78:81:41:5E:B1:43:14:4D:5E:81:D9:6D:D2:09:A4:89:3A
            X509v3 Authority Key Identifier:
                keyid:10:87:0E:4C:11:D9:CA:AE:10:65:BF:FB:2A:E0:D9:CF:45:5C:1C:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8baa579c018bb2c1b19e0c5e/0/10870E4C11D9CAAE1065BFFB2AE0D9CF455C1CDB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d7058b26-d77c-4005-8cb8-f5876d4c0d15/351eed99ff4398ae146cfa3319c768c0f7700db77f30196f6a.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8baa579c018bb2c1b19e0c5e/0/3139392e3130312e3137312e302f32342d3234203d3e20313734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.101.171.0/24

    Signature Algorithm: sha256WithRSAEncryption
         60:bb:b1:5c:c6:5d:27:b6:4c:5f:66:99:9a:3c:41:b5:27:80:
         ea:d5:c4:86:5f:16:18:f6:e9:79:cc:5d:ee:d2:87:a1:40:11:
         09:74:91:a5:01:01:61:a2:8a:0b:ac:85:df:75:99:29:5a:f1:
         58:8f:9c:92:c0:a0:09:b1:a7:b8:a3:53:fa:b4:34:e0:1b:e6:
         8f:e1:c7:90:25:ca:94:be:e8:f1:89:07:93:3e:8e:12:d5:93:
         f8:3b:f0:00:6b:35:55:63:33:58:42:00:fa:f9:b7:46:01:06:
         3b:2e:28:75:9d:21:51:65:f2:50:74:14:f2:33:fa:a8:f2:eb:
         a7:22:1f:a2:77:be:ef:ca:1f:b5:b6:ed:76:eb:00:5b:58:db:
         01:c9:bb:a4:46:65:47:0c:4c:03:c5:08:f5:9a:2c:f6:c9:65:
         80:6c:37:bf:b5:1a:50:54:eb:7f:48:c1:66:b0:94:81:9f:c9:
         fa:9b:50:5e:c2:45:71:03:7c:76:28:0c:53:df:e4:33:87:ae:
         48:ac:80:c5:8f:48:70:31:b5:d7:8e:16:eb:5f:73:63:37:34:
         0c:71:bd:d4:80:f9:eb:86:91:26:9f:b9:9f:8b:24:b4:28:45:
         df:63:18:66:d9:76:fe:51:1d:dc:a5:50:10:9d:ab:6a:61:0d:
         61:4a:fb:96
-----BEGIN CERTIFICATE-----
MIIFsDCCBJigAwIBAgIUHB0emqQRWqo97BAzgC222UcTl9cwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMzUxZWVkOTlmZjQzOThhZTE0NmNmYTMzMTljNzY4YzBm
NzcwMGRiNzdmMzAxOTZmNmEwHhcNMjQwOTI1MTYwNjE2WhcNMjUwOTI0MTYxMTE2
WjAzMTEwLwYDVQQDEyg5QzhENUM3ODgxNDE1RUIxNDMxNDRENUU4MUQ5NkREMjA5
QTQ4OTNBMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvpx02d8qE8E0
L9qe90k1a8fuQMfsKBcMJvuXveo22IsjvjR+KBeDCNM2uL2xb/MEOW479bNeFFvo
ls/pLMk51eYSj+ZjHentVi35ljUIzxBkgLqXdKHZro5gKr02bieCo/lBtbfRVJv8
qIR36Yg5AsinTYKST3gj6bCMVUqx1NgY2+Q4Go+BDxOzxw/pGVel3XOlcgYzHslL
alR1QmMuu7vzNWNSPespCeYP/rZpUK7MAHQGbgIqZfgmhvJQpvaOJgGN0/Rpkkmy
OnVqCz2msM0Q6N3m/LGsnEJfgu+hL8MhQ/3yQz72hjB+X9k5BlImBsmAm+4DaZ0d
ftjWyaoJ6wIDAQABo4ICsDCCAqwwHQYDVR0OBBYEFJyNXHiBQV6xQxRNXoHZbdIJ
pIk6MB8GA1UdIwQYMBaAFBCHDkwR2cquEGW/+yrg2c9FXBzbMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlOGJhYTU3OWMwMThiYjJjMWIxOWUwYzVlLzAv
MTA4NzBFNEMxMUQ5Q0FBRTEwNjVCRkZCMkFFMEQ5Q0Y0NTVDMUNEQi5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvODcxZGE0MGYtNzkzYS00YTQ1LWEwYTktOTc4MTQ4
MzIxYTA3L2Q3MDU4YjI2LWQ3N2MtNDAwNS04Y2I4LWY1ODc2ZDRjMGQxNS8zNTFl
ZWQ5OWZmNDM5OGFlMTQ2Y2ZhMzMxOWM3NjhjMGY3NzAwZGI3N2YzMDE5NmY2YS5j
ZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZThiYWE1NzljMDE4YmIy
YzFiMTllMGM1ZS8wLzMxMzkzOTJlMzEzMDMxMmUzMTM3MzEyZTMwMmYzMjM0MmQz
MjM0MjAzZDNlMjAzMTM3MzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADHZaswDQYJKoZIhvcNAQELBQAD
ggEBAGC7sVzGXSe2TF9mmZo8QbUngOrVxIZfFhj26XnMXe7Sh6FAEQl0kaUBAWGi
igushd91mSla8ViPnJLAoAmxp7ijU/q0NOAb5o/hx5AlypS+6PGJB5M+jhLVk/g7
8ABrNVVjM1hCAPr5t0YBBjsuKHWdIVFl8lB0FPIz+qjy66ciH6J3vu/KH7W27Xbr
AFtY2wHJu6RGZUcMTAPFCPWaLPbJZYBsN7+1GlBU639IwWawlIGfyfqbUF7CRXED
fHYoDFPf5DOHrkisgMWPSHAxtdeOFutfc2M3NAxxvdSA+euGkSafuZ+LJLQoRd9j
GGbZdv5RHdylUBCdq2phDWFK+5Y=
-----END CERTIFICATE-----
Generated at Thu Nov 21 07:39:56 2024 by rpki-client on console-ams.rpki-client.org