Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/3139322e3230392e36332e302f32342d3234203d3e20343030323938.roa
File:                     3139322e3230392e36332e302f32342d3234203d3e20343030323938.roa (raw, json)
Hash identifier:          VgzZ8gloa7qhoaqbJJ/frPoRu5RBI5dUEY395oz4nnw=
Subject key identifier:   7A:89:43:7F:44:E4:15:56:0D:C6:2A:89:1A:3D:2E:4D:AC:23:0D:99
Certificate issuer:       /CN=eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96
Certificate serial:       4811A59956AA098DCCC67EDC445EF1B56B03EF48
Authority key identifier: 0F:03:31:2E:E5:9E:3D:E8:27:35:F6:6B:54:94:15:DE:44:64:78:75
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/3139322e3230392e36332e302f32342d3234203d3e20343030323938.roa
Signing time:             Thu 01 Jun 2023 20:40:29 +0000
ROA not before:           Thu 01 Jun 2023 20:35:29 +0000
ROA not after:            Thu 30 May 2024 20:40:29 +0000
asID:                     400298
IP address blocks:        192.209.63.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/0F03312EE59E3DE82735F66B549415DE44647875.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/0F03312EE59E3DE82735F66B549415DE44647875.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/a01e997c-b89e-47c2-8d79-d31e58bc3ca4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/a01e997c-b89e-47c2-8d79-d31e58bc3ca4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 26 Apr 2024 22:44:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:11:a5:99:56:aa:09:8d:cc:c6:7e:dc:44:5e:f1:b5:6b:03:ef:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96
        Validity
            Not Before: Jun  1 20:35:29 2023 GMT
            Not After : May 30 20:40:29 2024 GMT
        Subject: CN=7A89437F44E415560DC62A891A3D2E4DAC230D99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:f5:1b:db:9b:84:5a:a3:3c:32:bb:7f:de:39:
                    e8:9e:08:e7:f5:55:ad:d0:45:d8:cd:64:15:e8:b4:
                    7f:80:65:7b:c7:40:6b:45:0f:cd:9b:c6:48:14:33:
                    ea:7d:da:e9:c2:28:49:f7:8f:25:a2:85:d7:6d:eb:
                    b1:61:17:9c:1a:97:a5:c2:07:2b:ba:87:30:c6:08:
                    8b:b4:60:a2:73:24:2a:04:30:17:38:02:37:dc:0b:
                    a7:1a:4a:ed:14:26:d6:72:c2:74:b5:45:b9:fa:4d:
                    89:fe:59:3c:45:6c:f8:0e:c2:ee:45:2c:a3:cc:ae:
                    f2:a0:a9:5d:d8:48:29:8b:8a:7f:f5:f2:88:63:41:
                    04:f5:8a:74:35:a6:e9:f4:65:1f:09:0c:09:26:db:
                    d7:95:87:65:6f:52:6b:73:bd:82:71:db:e5:1c:fb:
                    b0:56:1f:ee:df:9d:cd:e6:a7:40:5d:58:ff:2e:12:
                    18:d0:9c:b9:62:6f:3a:b7:a6:52:4a:0d:c5:ee:86:
                    84:8a:30:61:2a:50:94:42:da:e3:38:01:96:65:40:
                    24:72:78:c8:dc:7e:4a:f1:5c:74:78:9c:d9:03:9a:
                    f4:5c:8e:12:e1:78:bb:72:54:b4:13:ed:85:9d:bc:
                    05:25:47:8f:ce:33:1e:ed:90:89:b3:2c:0d:dc:c1:
                    c6:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:89:43:7F:44:E4:15:56:0D:C6:2A:89:1A:3D:2E:4D:AC:23:0D:99
            X509v3 Authority Key Identifier:
                keyid:0F:03:31:2E:E5:9E:3D:E8:27:35:F6:6B:54:94:15:DE:44:64:78:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/0F03312EE59E3DE82735F66B549415DE44647875.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/3139322e3230392e36332e302f32342d3234203d3e20343030323938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.209.63.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ae:c2:46:31:fc:16:a3:31:a7:b6:cf:a2:41:59:c1:cc:24:65:
         5c:d2:fe:9c:59:03:81:3a:4b:9f:e4:6b:30:28:9b:1e:27:0f:
         56:5c:61:91:48:5b:ed:34:66:fe:9a:22:e1:8d:9e:a0:42:49:
         18:0c:73:da:01:6d:78:87:53:32:eb:a3:ee:fa:c5:31:92:6d:
         53:fd:3f:ea:91:28:7c:98:8b:b3:d8:f3:52:b2:31:83:cc:40:
         59:56:6a:d9:85:66:de:5e:de:f7:96:5f:ad:03:be:b2:a9:95:
         2d:02:e1:98:e2:29:91:a1:05:69:e8:94:bc:1f:a2:69:7e:5b:
         f4:42:9d:eb:06:aa:eb:b3:11:e6:e9:2e:46:4c:93:0c:2d:27:
         b7:3a:ba:c9:6a:d0:65:1b:33:f9:37:0c:71:ac:18:27:b0:69:
         6a:7d:a5:fc:b7:01:51:57:95:a0:3c:b5:f2:cf:19:04:40:ee:
         d1:53:5f:8d:e6:6c:da:47:79:e4:65:57:2a:e8:22:ab:09:d2:
         bc:21:64:6f:3f:19:01:03:0a:27:10:03:40:81:ed:95:8e:f5:
         7a:ba:92:a2:62:c1:13:ab:f5:02:22:89:fa:af:6a:97:ed:74:
         73:60:bb:05:64:69:ad:95:13:d1:2e:95:96:96:31:7b:fd:e1:
         0d:f2:85:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 23:29:40 2024 by rpki-client on console-ams.rpki-client.org