Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139322e3130392e3132372e302f32342d3234203d3e203133323133.roa
File:                     3139322e3130392e3132372e302f32342d3234203d3e203133323133.roa (raw, json)
Hash identifier:          C9JC2o8ykUcmEumPSLyXYNtHcfJzMGecNkhfCVq6YnY=
Subject key identifier:   9E:C0:FE:7A:5F:78:53:68:F4:8E:A8:9A:09:8B:64:A6:17:F3:1E:2F
Certificate issuer:       /CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4
Certificate serial:       583A45FE86200EBFF87D1648EEDE441E957B0674
Authority key identifier: 62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139322e3130392e3132372e302f32342d3234203d3e203133323133.roa
Signing time:             Mon 03 Jun 2024 10:44:31 +0000
ROA not before:           Mon 03 Jun 2024 10:39:31 +0000
ROA not after:            Mon 02 Jun 2025 10:44:31 +0000
asID:                     13213
IP address blocks:        192.109.127.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/e203869d-6b95-465f-b4dc-088a5a2103fc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/e203869d-6b95-465f-b4dc-088a5a2103fc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 13:28:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:3a:45:fe:86:20:0e:bf:f8:7d:16:48:ee:de:44:1e:95:7b:06:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4
        Validity
            Not Before: Jun  3 10:39:31 2024 GMT
            Not After : Jun  2 10:44:31 2025 GMT
        Subject: CN=9EC0FE7A5F785368F48EA89A098B64A617F31E2F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:67:1e:04:79:73:d5:49:d1:cf:e0:5d:24:38:
                    a5:fb:dc:61:6f:29:a1:79:5c:fa:58:99:d3:b4:45:
                    c5:9e:f1:e0:ad:ff:ae:45:86:13:52:4d:f4:13:38:
                    c8:40:ac:3f:36:c6:cd:c6:f4:44:6f:27:25:b6:2d:
                    19:9c:aa:96:4c:40:60:28:86:8e:59:69:f9:93:9b:
                    cf:89:a5:00:91:12:60:78:7a:4d:4c:0e:83:62:d2:
                    f6:20:80:a4:83:12:f4:31:6f:a1:c8:9a:91:c7:b7:
                    22:47:56:c8:53:85:e6:39:27:1e:bd:47:ad:ae:25:
                    26:15:47:0d:07:2c:76:6c:56:77:74:17:7a:a6:80:
                    f6:74:95:51:a4:6f:d0:b4:b4:57:ce:71:c8:3b:f3:
                    08:60:8f:92:d8:c6:48:ca:38:64:7b:e6:03:cb:06:
                    19:d2:c7:01:3f:8f:fb:35:8b:06:c0:03:32:c9:86:
                    c7:78:0b:52:3c:f4:f5:67:64:42:63:7a:fd:f3:46:
                    cc:a4:c2:dc:28:61:40:d7:53:64:4c:5b:6d:4f:32:
                    3b:69:ad:ba:23:55:97:8f:ed:7b:1a:9f:7e:11:86:
                    f8:54:11:ee:96:dc:93:6e:b8:cc:08:19:dd:07:05:
                    cf:f0:15:2f:21:0f:8b:8c:3f:44:f8:b2:2f:d0:f4:
                    b4:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:C0:FE:7A:5F:78:53:68:F4:8E:A8:9A:09:8B:64:A6:17:F3:1E:2F
            X509v3 Authority Key Identifier:
                keyid:62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139322e3130392e3132372e302f32342d3234203d3e203133323133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.109.127.0/24

    Signature Algorithm: sha256WithRSAEncryption
         02:f2:e8:f0:e3:0c:f6:8e:be:be:d9:5b:6d:07:ea:b7:90:e8:
         d7:e7:00:ba:d8:ba:a0:f5:fe:fe:bc:fe:0b:a4:c8:1b:44:a5:
         73:2e:15:01:69:32:57:b7:cb:e1:31:7b:31:2d:7c:7e:76:f7:
         23:fc:46:c1:d5:3d:dd:df:2b:3b:4c:8a:36:65:48:06:9c:03:
         27:a7:47:16:27:02:36:b6:88:37:ca:79:24:7e:f9:b3:47:c6:
         8f:4a:d6:30:7c:73:08:21:6e:0f:9d:07:8a:23:96:de:51:cc:
         fa:2a:e5:2b:d5:7d:c6:0d:18:7e:63:c8:98:8a:31:41:c6:e9:
         34:49:b9:07:31:8b:22:11:65:14:33:f6:83:80:f1:c7:43:4b:
         bd:ff:21:d0:71:24:51:23:f4:16:98:39:4f:ab:ab:5f:3f:e1:
         4a:4e:25:62:c3:73:7d:98:bf:1d:d3:83:b5:22:1d:b0:98:9a:
         69:8d:6f:00:5b:73:fb:82:77:ba:03:7c:ea:73:b0:67:6b:99:
         d0:82:44:7f:7e:b8:7e:ee:80:6a:57:b9:e7:6e:b1:89:4c:92:
         25:95:00:d1:15:cf:65:69:91:2b:c9:17:50:65:16:de:d3:62:
         16:88:01:85:70:be:9b:4f:c9:c7:b5:10:60:13:47:83:fa:79:
         42:83:53:cf
-----BEGIN CERTIFICATE-----
MIIFtDCCBJygAwIBAgIUWDpF/oYgDr/4fRZI7t5EHpV7BnQwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMWYyMmNmMDc1NzFlY2JhYjZkNDYwYTFmM2I2YzVkNjE5
N2QwOTgzNjQzYTU0ZDJlZDQwHhcNMjQwNjAzMTAzOTMxWhcNMjUwNjAyMTA0NDMx
WjAzMTEwLwYDVQQDEyg5RUMwRkU3QTVGNzg1MzY4RjQ4RUE4OUEwOThCNjRBNjE3
RjMxRTJGMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqmceBHlz1UnR
z+BdJDil+9xhbymheVz6WJnTtEXFnvHgrf+uRYYTUk30EzjIQKw/NsbNxvREbycl
ti0ZnKqWTEBgKIaOWWn5k5vPiaUAkRJgeHpNTA6DYtL2IICkgxL0MW+hyJqRx7ci
R1bIU4XmOScevUetriUmFUcNByx2bFZ3dBd6poD2dJVRpG/QtLRXznHIO/MIYI+S
2MZIyjhke+YDywYZ0scBP4/7NYsGwAMyyYbHeAtSPPT1Z2RCY3r980bMpMLcKGFA
11NkTFttTzI7aa26I1WXj+17Gp9+EYb4VBHultyTbrjMCBndBwXP8BUvIQ+LjD9E
+LIv0PS0ZwIDAQABo4ICtDCCArAwHQYDVR0OBBYEFJ7A/npfeFNo9I6omgmLZKYX
8x4vMB8GA1UdIwQYMBaAFGK0t02IaU0zyBBuijO8FJ6zkE/rMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmODE0M2JmNjIwMTgxZWNkMzdkYWM3MmYxLzEv
NjJCNEI3NEQ4ODY5NEQzM0M4MTA2RThBMzNCQzE0OUVCMzkwNEZFQi5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi
MGI4NDE1L2UyMDM4NjlkLTZiOTUtNDY1Zi1iNGRjLTA4OGE1YTIxMDNmYy8xZjIy
Y2YwNzU3MWVjYmFiNmQ0NjBhMWYzYjZjNWQ2MTk3ZDA5ODM2NDNhNTRkMmVkNC5j
ZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjgxNDNiZjYyMDE4MWVj
ZDM3ZGFjNzJmMS8xLzMxMzkzMjJlMzEzMDM5MmUzMTMyMzcyZTMwMmYzMjM0MmQz
MjM0MjAzZDNlMjAzMTMzMzIzMTMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwG1/MA0GCSqGSIb3DQEB
CwUAA4IBAQAC8ujw4wz2jr6+2VttB+q3kOjX5wC62Lqg9f7+vP4LpMgbRKVzLhUB
aTJXt8vhMXsxLXx+dvcj/EbB1T3d3ys7TIo2ZUgGnAMnp0cWJwI2tog3ynkkfvmz
R8aPStYwfHMIIW4PnQeKI5beUcz6KuUr1X3GDRh+Y8iYijFBxuk0SbkHMYsiEWUU
M/aDgPHHQ0u9/yHQcSRRI/QWmDlPq6tfP+FKTiViw3N9mL8d04O1Ih2wmJppjW8A
W3P7gne6A3zqc7Bna5nQgkR/frh+7oBqV7nnbrGJTJIllQDRFc9laZEryRdQZRbe
02IWiAGFcL6bT8nHtRBgE0eD+nlCg1PP
-----END CERTIFICATE-----
Generated at Thu Nov 21 13:18:46 2024 by rpki-client on console-fra.rpki-client.org