Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS213990.roa
File:                     AS213990.roa (raw, json)
Hash identifier:          jAG9Ia+oqCkG0uMte9GL7P3kDUTcr6/a0hqrPgbcFk0=
Subject key identifier:   DB:AF:28:46:AB:E1:8E:BF:C3:54:5C:02:89:60:B7:A3:DD:E3:32:FF
Certificate issuer:       /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Certificate serial:       2BD963F9ED667B5016E9F4B94FEA8A01F3B1F787
Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS213990.roa
Signing time:             Mon 18 Nov 2024 23:15:59 +0000
ROA not before:           Mon 18 Nov 2024 23:10:59 +0000
ROA not after:            Mon 17 Nov 2025 23:15:59 +0000
asID:                     213990
IP address blocks:        190.92.165.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:d9:63:f9:ed:66:7b:50:16:e9:f4:b9:4f:ea:8a:01:f3:b1:f7:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
        Validity
            Not Before: Nov 18 23:10:59 2024 GMT
            Not After : Nov 17 23:15:59 2025 GMT
        Subject: CN=DBAF2846ABE18EBFC3545C028960B7A3DDE332FF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:92:36:fd:95:9e:04:d8:57:83:47:45:ae:87:
                    81:b4:21:89:27:18:dc:36:3e:79:b5:4b:f6:2e:01:
                    21:c1:29:89:df:26:c1:53:71:c7:2b:76:41:9a:2f:
                    cd:90:1f:3c:2c:08:c8:fe:6b:e1:50:e8:1d:29:13:
                    5b:a7:4e:9a:28:40:3d:49:da:83:b5:dd:ea:33:55:
                    7f:a7:21:15:c1:b7:e3:9f:ef:7f:c3:47:c4:6c:7a:
                    19:ea:fd:3b:02:fa:1b:02:d7:fa:d1:a1:90:eb:de:
                    5e:1a:ac:61:f1:be:cb:f3:bb:6a:07:54:10:a5:0a:
                    45:6d:20:ea:46:0f:80:61:60:59:58:86:ce:81:22:
                    9d:a9:b4:a8:0c:85:19:35:67:14:14:e9:71:b7:48:
                    11:b6:7b:13:62:8c:b7:1f:2b:af:73:04:e7:a5:08:
                    77:8c:7a:93:ff:43:72:40:bd:20:ce:1f:56:ad:6c:
                    bf:1c:cf:a4:10:ba:b6:bb:2b:3c:9d:ea:1f:8b:7f:
                    86:52:43:50:ec:7f:e8:0e:a2:d6:d8:1f:68:1f:45:
                    9f:ea:b0:6c:6b:8a:64:a3:c9:38:e3:fc:22:bf:9d:
                    7e:bf:6c:e3:05:76:b4:2d:43:42:a5:0b:f0:1b:96:
                    b1:7d:f6:3d:d3:0f:d1:a6:c9:d4:92:15:76:a5:eb:
                    c6:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:AF:28:46:AB:E1:8E:BF:C3:54:5C:02:89:60:B7:A3:DD:E3:32:FF
            X509v3 Authority Key Identifier:
                keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS213990.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.92.165.0/24

    Signature Algorithm: sha256WithRSAEncryption
         78:91:10:46:cf:df:fd:88:12:f9:89:c5:c9:2a:c0:77:18:02:
         24:c5:d4:03:f7:55:ef:a7:12:31:14:97:32:26:83:9e:82:a9:
         1a:66:08:3e:9f:ba:30:f5:9e:90:24:a7:1e:bc:de:46:7c:1f:
         48:0a:b7:aa:00:26:e7:67:63:e1:83:f6:6a:f4:67:af:26:8e:
         5e:7d:1c:e0:8d:b5:6f:60:29:f3:25:11:79:4b:c8:b3:4a:8b:
         65:38:ba:c0:f8:eb:8b:24:cf:82:25:e4:81:72:10:1b:2b:16:
         38:ad:d1:eb:fa:09:63:ae:1b:be:02:8b:76:d2:e9:72:e2:9a:
         65:3e:dc:2b:39:c1:cc:5a:47:25:fb:66:43:f5:22:b5:58:cf:
         8d:b5:a2:5f:c9:1d:9d:19:ad:1c:57:5e:2f:b7:e6:2f:7a:85:
         8a:b8:7c:3e:85:e7:f4:17:5c:06:e5:43:38:56:c4:36:78:f4:
         72:42:f8:cf:94:dc:4d:65:c0:66:7c:60:aa:dd:85:b1:fd:9d:
         04:45:59:ed:09:eb:c5:5e:e4:b0:d5:af:42:0e:15:44:ad:8f:
         74:2a:30:9c:d6:44:e1:22:0e:0d:0f:16:64:8a:11:86:08:fe:
         a2:5e:4b:fe:12:67:72:7a:5d:a9:3f:5e:42:ba:d6:c2:0a:70:
         73:1e:43:54
-----BEGIN CERTIFICATE-----
MIIFfzCCBGegAwIBAgIUK9lj+e1me1AW6fS5T+qKAfOx94cwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNDRkYTVkMTAzMjc3YzkzN2M1M2RjZTMwNWJkOWQ3OWMy
YmE3OTQyNTM1N2JiNTZlZWQwHhcNMjQxMTE4MjMxMDU5WhcNMjUxMTE3MjMxNTU5
WjAzMTEwLwYDVQQDEyhEQkFGMjg0NkFCRTE4RUJGQzM1NDVDMDI4OTYwQjdBM0RE
RTMzMkZGMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtZI2/ZWeBNhX
g0dFroeBtCGJJxjcNj55tUv2LgEhwSmJ3ybBU3HHK3ZBmi/NkB88LAjI/mvhUOgd
KRNbp06aKEA9SdqDtd3qM1V/pyEVwbfjn+9/w0fEbHoZ6v07AvobAtf60aGQ695e
Gqxh8b7L87tqB1QQpQpFbSDqRg+AYWBZWIbOgSKdqbSoDIUZNWcUFOlxt0gRtnsT
Yoy3HyuvcwTnpQh3jHqT/0NyQL0gzh9WrWy/HM+kELq2uys8neofi3+GUkNQ7H/o
DqLW2B9oH0Wf6rBsa4pko8k44/wiv51+v2zjBXa0LUNCpQvwG5axffY90w/RpsnU
khV2pevGuwIDAQABo4ICfzCCAnswHQYDVR0OBBYEFNuvKEar4Y6/w1RcAolgt6Pd
4zL/MB8GA1UdIwQYMBaAFFtA03PWcXxwTEg8oGWM+1JXxOk8MA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmODE0M2JmNjIwMTgyMTEzZWVhNDkwZDMzLzEv
NUI0MEQzNzNENjcxN0M3MDRDNDgzQ0EwNjU4Q0ZCNTI1N0M0RTkzQy5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEz
YjAyZTI5LzJiZDBmYWM2LTFhNDYtNDBiNS1iZTY2LTllMGY3YjU0ZGY3Ny80NGRh
NWQxMDMyNzdjOTM3YzUzZGNlMzA1YmQ5ZDc5YzJiYTc5NDI1MzU3YmI1NmVlZC5j
ZXIwcAYIKwYBBQUHAQsEZDBiMGAGCCsGAQUFBzALhlRyc3luYzovL3Jwa2ktcnBz
LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4MTQzYmY2MjAxODIxMTNlZWE0
OTBkMzMvMS9BUzIxMzk5MC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAL5cpTANBgkqhkiG9w0BAQsFAAOC
AQEAeJEQRs/f/YgS+YnFySrAdxgCJMXUA/dV76cSMRSXMiaDnoKpGmYIPp+6MPWe
kCSnHrzeRnwfSAq3qgAm52dj4YP2avRnryaOXn0c4I21b2Ap8yUReUvIs0qLZTi6
wPjriyTPgiXkgXIQGysWOK3R6/oJY64bvgKLdtLpcuKaZT7cKznBzFpHJftmQ/Ui
tVjPjbWiX8kdnRmtHFdeL7fmL3qFirh8PoXn9BdcBuVDOFbENnj0ckL4z5TcTWXA
Znxgqt2Fsf2dBEVZ7QnrxV7ksNWvQg4VRK2PdCownNZE4SIODQ8WZIoRhgj+ol5L
/hJncnpdqT9eQrrWwgpwcx5DVA==
-----END CERTIFICATE-----
Generated at Thu Nov 21 23:34:59 2024 by rpki-client on console-ams.rpki-client.org