Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/3139322e3230392e36322e302f32342d3234203d3e20313338393935.roa
File:                     3139322e3230392e36322e302f32342d3234203d3e20313338393935.roa (raw, json)
Hash identifier:          R5p8Ix9zcpiGl6nW+G7s4Cfj12v5Y8ThvP6aWda1smg=
Subject key identifier:   18:13:B7:01:63:92:98:2D:CF:92:14:E1:37:61:6F:34:A1:C4:40:CB
Certificate issuer:       /CN=eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96
Certificate serial:       3755287DECAEC03C2087105AF178B361356EEF03
Authority key identifier: 0F:03:31:2E:E5:9E:3D:E8:27:35:F6:6B:54:94:15:DE:44:64:78:75
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/3139322e3230392e36322e302f32342d3234203d3e20313338393935.roa
Signing time:             Tue 05 Nov 2024 03:40:11 +0000
ROA not before:           Tue 05 Nov 2024 03:35:11 +0000
ROA not after:            Tue 04 Nov 2025 03:40:11 +0000
asID:                     138995
IP address blocks:        192.209.62.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/0F03312EE59E3DE82735F66B549415DE44647875.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/0F03312EE59E3DE82735F66B549415DE44647875.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/a01e997c-b89e-47c2-8d79-d31e58bc3ca4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/a01e997c-b89e-47c2-8d79-d31e58bc3ca4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:55:28:7d:ec:ae:c0:3c:20:87:10:5a:f1:78:b3:61:35:6e:ef:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96
        Validity
            Not Before: Nov  5 03:35:11 2024 GMT
            Not After : Nov  4 03:40:11 2025 GMT
        Subject: CN=1813B7016392982DCF9214E137616F34A1C440CB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:1a:95:0d:15:f5:0f:c5:de:31:f9:b2:1e:8e:
                    51:8c:e1:0c:a8:eb:77:d7:33:49:e0:ee:97:82:ee:
                    98:e7:8b:a4:4f:e6:f5:65:f4:7d:28:0d:43:49:6c:
                    68:9e:6c:6e:46:1d:f4:1f:ff:46:f7:91:e8:64:89:
                    9e:f7:fa:fd:a8:d3:b7:dd:8e:88:06:d1:c7:b8:89:
                    aa:83:1d:6a:88:07:32:10:91:41:c4:4b:2e:53:0b:
                    7a:0e:65:09:ab:61:d1:3c:1f:85:59:d2:0c:95:3f:
                    aa:81:48:86:30:d2:49:82:94:03:38:99:e3:0e:e8:
                    f4:2c:2d:f4:f9:bc:d5:f2:4b:91:dc:02:57:82:6c:
                    d0:fe:37:16:1b:cf:ca:7f:b5:e3:92:50:4c:dd:30:
                    0b:ad:d1:34:40:ef:26:5f:2c:99:23:ef:54:03:bb:
                    f6:f7:a0:04:09:da:3c:65:74:ee:21:4f:db:a5:0d:
                    d5:97:2b:34:54:16:14:71:0d:89:28:9e:97:25:bc:
                    30:09:4d:a6:8c:31:87:0e:14:5d:82:94:27:41:3a:
                    74:51:64:86:9f:48:c5:7c:55:83:df:4b:4b:a2:e9:
                    8a:e8:9a:53:a6:e5:4d:82:61:3a:d5:33:f9:0d:67:
                    8b:1a:b0:80:9c:9e:e6:d7:68:06:c5:b8:de:3c:ad:
                    da:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:13:B7:01:63:92:98:2D:CF:92:14:E1:37:61:6F:34:A1:C4:40:CB
            X509v3 Authority Key Identifier:
                keyid:0F:03:31:2E:E5:9E:3D:E8:27:35:F6:6B:54:94:15:DE:44:64:78:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/0F03312EE59E3DE82735F66B549415DE44647875.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/3139322e3230392e36322e302f32342d3234203d3e20313338393935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.209.62.0/24

    Signature Algorithm: sha256WithRSAEncryption
         65:0f:2e:4d:26:d8:84:9e:a2:a5:8f:71:80:a5:bb:7d:4b:87:
         fa:b0:66:64:46:f4:b9:05:87:e9:57:95:09:a0:3c:cc:6f:b9:
         fd:93:20:18:40:b2:3a:bc:eb:7b:b5:c8:75:7b:20:38:db:ba:
         7f:d3:8d:16:80:a5:a7:2e:79:36:b9:17:35:00:f2:0e:09:f4:
         6e:9e:8e:37:ce:f3:ff:3e:4a:38:1e:21:f8:50:e3:39:34:45:
         fa:13:30:23:99:1c:8a:07:88:b1:4f:c7:74:58:bb:be:91:16:
         d4:50:46:35:5d:b0:93:e1:d9:b3:ec:81:74:8b:79:0a:f1:82:
         50:57:ef:f6:85:49:14:86:a6:1d:cf:e1:6b:8d:d0:68:c4:6b:
         04:9b:ca:c2:b8:81:af:5c:a6:07:de:2e:0a:a6:03:1d:8f:49:
         1b:09:cd:24:3d:fc:25:d9:8c:97:6b:99:33:90:df:dc:16:a6:
         d6:4b:76:5c:74:8f:90:00:0a:d2:7c:d1:ff:67:8a:3d:57:d7:
         0e:42:8e:93:e8:d3:25:95:7e:87:cd:05:c8:2a:13:b1:3a:df:
         4e:a1:50:2d:e9:42:48:02:84:6f:63:a6:6d:a3:0d:81:91:82:
         43:c0:e3:ad:8d:3a:31:f3:b2:9c:10:05:a2:14:34:63:99:bb:
         ac:23:cf:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:40:16 2024 by rpki-client on console-ams.rpki-client.org