Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/3139322e3133382e3231302e302f32332d3234203d3e20333936383831.roa
File:                     3139322e3133382e3231302e302f32332d3234203d3e20333936383831.roa (raw, json)
Hash identifier:          N32gnag1D5Wz8PF90Rjo2QoGLVSf2IGTacIyXsmS5+o=
Subject key identifier:   3F:E3:0E:91:BB:1A:F4:16:AD:CB:85:B5:BB:51:C0:3C:4E:B4:24:70
Certificate issuer:       /CN=eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96
Certificate serial:       73B8D3486E1832E308270A51EC8337B0F9917B8C
Authority key identifier: 0F:03:31:2E:E5:9E:3D:E8:27:35:F6:6B:54:94:15:DE:44:64:78:75
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/3139322e3133382e3231302e302f32332d3234203d3e20333936383831.roa
Signing time:             Tue 05 Nov 2024 03:40:11 +0000
ROA not before:           Tue 05 Nov 2024 03:35:11 +0000
ROA not after:            Tue 04 Nov 2025 03:40:11 +0000
asID:                     396881
IP address blocks:        192.138.210.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/0F03312EE59E3DE82735F66B549415DE44647875.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/0F03312EE59E3DE82735F66B549415DE44647875.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/a01e997c-b89e-47c2-8d79-d31e58bc3ca4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/a01e997c-b89e-47c2-8d79-d31e58bc3ca4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:b8:d3:48:6e:18:32:e3:08:27:0a:51:ec:83:37:b0:f9:91:7b:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96
        Validity
            Not Before: Nov  5 03:35:11 2024 GMT
            Not After : Nov  4 03:40:11 2025 GMT
        Subject: CN=3FE30E91BB1AF416ADCB85B5BB51C03C4EB42470
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:59:5b:15:61:16:e1:eb:1c:ae:0e:96:82:a0:
                    7c:e3:e9:b3:42:6e:45:b6:e7:f2:7a:cf:c7:de:f5:
                    96:2a:14:c5:f6:85:4f:15:ea:8d:c2:63:99:52:6d:
                    0d:fa:7d:3e:e2:0a:f9:a4:78:3d:31:3c:00:a7:81:
                    0d:e2:42:0f:6f:7c:a6:2c:6f:7d:19:5f:11:51:58:
                    33:15:23:21:2e:69:87:bb:62:79:75:e1:b3:8c:64:
                    c6:69:bd:ba:7a:6f:6b:07:54:db:1e:c7:29:8e:d4:
                    78:a2:60:ac:bc:c9:bc:e7:ab:e5:06:d3:5f:b6:71:
                    62:8f:7f:56:a3:6e:f6:50:4c:68:27:54:f7:3d:95:
                    5b:62:46:b0:f8:1d:03:f9:14:1b:89:13:ed:a1:76:
                    bd:ad:6d:f9:6d:3f:81:da:ab:5c:f5:af:4f:ea:4a:
                    72:88:7c:81:38:20:20:90:79:13:52:67:24:b7:54:
                    1a:73:5c:ae:1c:a2:5c:ff:28:ea:c5:31:a3:db:c1:
                    3e:94:6f:23:c7:05:67:9d:7e:99:95:93:71:98:ff:
                    16:0f:f6:51:4f:a7:7b:3d:95:0e:8a:77:ca:e8:8b:
                    2c:5f:5b:12:d8:20:8b:21:4d:bb:ab:e5:a0:6c:8c:
                    c2:95:85:1b:70:f5:d8:37:d5:b2:88:3c:1a:b5:81:
                    4d:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:E3:0E:91:BB:1A:F4:16:AD:CB:85:B5:BB:51:C0:3C:4E:B4:24:70
            X509v3 Authority Key Identifier:
                keyid:0F:03:31:2E:E5:9E:3D:E8:27:35:F6:6B:54:94:15:DE:44:64:78:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/0F03312EE59E3DE82735F66B549415DE44647875.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/3139322e3133382e3231302e302f32332d3234203d3e20333936383831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.138.210.0/23

    Signature Algorithm: sha256WithRSAEncryption
         01:34:af:7b:ba:1f:b0:77:6a:3e:06:4e:2c:03:98:ed:f5:0d:
         f2:57:2d:e6:38:45:f0:4a:ff:a7:2a:8e:8b:73:7a:ab:17:4c:
         62:59:ef:e1:1b:df:d5:6d:47:b5:0e:19:13:df:b7:c1:e8:c0:
         8c:13:25:ca:9f:27:ae:42:43:65:59:f3:23:06:ca:40:3c:d4:
         84:4a:f0:8b:8e:21:74:48:19:14:03:40:5a:e4:71:8d:1c:08:
         28:64:e5:6c:33:35:2b:2f:c8:49:a4:8c:a1:f7:cd:97:50:0d:
         72:70:42:25:0a:f4:44:80:e9:f8:bf:fd:a0:93:20:68:ea:9d:
         32:b4:c2:27:e2:30:77:08:61:83:12:24:db:45:c4:fb:14:27:
         1d:b7:f4:a6:0c:49:14:05:7d:47:19:4f:c9:08:fb:a0:ef:d9:
         74:a0:d3:a7:72:ce:d3:d3:b6:0d:02:d6:f4:0d:74:83:da:bc:
         ea:b8:97:a4:5f:5f:2d:96:8f:a6:39:58:7a:3a:49:89:5d:6a:
         33:cb:e2:53:42:de:bd:aa:21:ff:9a:7c:3c:ef:88:ee:b0:68:
         37:0c:88:c9:d6:3e:9f:05:ca:1f:9a:13:e0:03:f7:a4:9f:10:
         48:6a:24:cf:05:05:53:d4:7b:77:6d:6d:dd:7a:91:0b:3a:5f:
         48:51:8d:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:03:21 2024 by rpki-client on console-fra.rpki-client.org