Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/3139322e3133382e3231302e302f32332d3234203d3e203631313338.roa
File:                     3139322e3133382e3231302e302f32332d3234203d3e203631313338.roa (raw, json)
Hash identifier:          LgtXCazGasfw8kHqHOXvH7e6/PNdRminoTIsXBKxSio=
Subject key identifier:   E6:68:6E:E1:4F:62:40:DA:19:19:87:B9:15:7A:C4:81:1C:C5:DB:25
Certificate issuer:       /CN=eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96
Certificate serial:       2F61CD7FE712576C6EC726612601A74E1F608964
Authority key identifier: 0F:03:31:2E:E5:9E:3D:E8:27:35:F6:6B:54:94:15:DE:44:64:78:75
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/3139322e3133382e3231302e302f32332d3234203d3e203631313338.roa
Signing time:             Tue 05 Dec 2023 02:44:20 +0000
ROA not before:           Tue 05 Dec 2023 02:39:20 +0000
ROA not after:            Tue 03 Dec 2024 02:44:20 +0000
asID:                     61138
IP address blocks:        192.138.210.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/0F03312EE59E3DE82735F66B549415DE44647875.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/0F03312EE59E3DE82735F66B549415DE44647875.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/a01e997c-b89e-47c2-8d79-d31e58bc3ca4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/a01e997c-b89e-47c2-8d79-d31e58bc3ca4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 26 Apr 2024 22:44:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:61:cd:7f:e7:12:57:6c:6e:c7:26:61:26:01:a7:4e:1f:60:89:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96
        Validity
            Not Before: Dec  5 02:39:20 2023 GMT
            Not After : Dec  3 02:44:20 2024 GMT
        Subject: CN=E6686EE14F6240DA191987B9157AC4811CC5DB25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:2e:c4:ca:7f:66:bf:c7:98:c2:ed:ff:8a:2e:
                    78:a6:3a:3d:7d:52:c7:76:b7:e7:0f:c0:58:27:eb:
                    45:f2:83:43:df:67:62:ab:ab:f3:08:35:3f:65:34:
                    f4:87:3b:60:64:4b:8e:61:91:c9:5e:e5:0e:7b:dd:
                    a5:c1:18:b0:13:ca:0e:db:45:d5:35:ea:17:55:f5:
                    fb:d3:1d:b5:f8:e8:c4:51:2d:ac:f1:b4:af:98:63:
                    ce:a5:76:1a:f3:21:09:ad:15:8c:3f:6c:13:2f:88:
                    e6:58:dc:86:ab:62:d3:b4:fe:48:fd:35:fd:f8:3d:
                    ad:70:6f:5c:21:df:36:56:50:0a:96:68:0f:fa:c0:
                    a5:d1:28:43:48:5a:19:12:6f:e6:f5:4e:9a:e8:91:
                    52:30:96:b9:13:7a:e1:14:7b:6b:65:4d:8c:76:d7:
                    12:5c:38:58:ca:86:f2:3d:76:ed:73:02:bc:09:61:
                    72:12:db:bd:a5:67:a7:79:af:93:1a:46:40:a1:3e:
                    80:0d:7e:69:31:fd:f8:99:8d:46:91:10:da:83:b3:
                    23:40:66:cc:f6:7c:3a:54:38:54:ab:2b:1f:56:fc:
                    3f:b1:b1:c8:41:73:81:2f:a4:6a:7e:5b:79:42:7c:
                    4d:bb:23:ad:0d:c1:47:47:35:33:9a:36:ec:c6:1e:
                    0c:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:68:6E:E1:4F:62:40:DA:19:19:87:B9:15:7A:C4:81:1C:C5:DB:25
            X509v3 Authority Key Identifier:
                keyid:0F:03:31:2E:E5:9E:3D:E8:27:35:F6:6B:54:94:15:DE:44:64:78:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/0F03312EE59E3DE82735F66B549415DE44647875.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/3139322e3133382e3231302e302f32332d3234203d3e203631313338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.138.210.0/23

    Signature Algorithm: sha256WithRSAEncryption
         ab:31:49:73:2a:34:4f:9b:e6:5c:e5:b1:73:bd:a4:d8:38:a5:
         73:09:06:5a:f6:a7:6a:f3:30:ce:27:0c:0a:94:6f:dd:73:bf:
         b5:ee:ce:84:d5:e4:38:2d:2d:0d:cc:c8:ac:b2:68:67:cd:d4:
         36:b4:73:12:3b:60:cb:4e:22:3b:04:e4:e1:f4:7c:17:57:06:
         73:f0:1d:be:3b:31:71:36:f2:39:75:b3:05:b2:04:e0:cd:a3:
         c2:63:a3:d2:d1:33:9f:41:96:c8:ba:92:a4:b5:86:ee:b6:80:
         2e:e7:e2:dc:8f:f2:30:fc:d3:20:fe:e6:1c:87:29:fa:af:2e:
         4f:3c:11:b2:0e:41:a0:53:8e:7b:50:bf:05:03:07:3e:69:e2:
         81:62:9c:5c:f4:2c:29:4e:4d:e2:8a:6c:a4:7c:c7:d3:e4:bf:
         d8:82:da:73:5a:57:e4:3c:41:27:46:3a:a3:15:b0:80:b2:f8:
         bf:c7:fa:55:1d:20:55:03:3a:a8:8d:82:70:c2:14:e4:9d:8f:
         bd:9e:51:13:83:fc:b6:f9:47:d8:0c:ba:a0:d9:16:cd:4d:42:
         78:f2:04:0b:2f:78:6b:5b:cb:42:e8:5b:3b:7f:f4:93:22:3b:
         b3:52:7f:44:ca:bb:f0:20:8c:cd:f1:cf:83:67:90:c2:59:4a:
         00:55:0d:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 22:32:16 2024 by rpki-client on console-fra.rpki-client.org