Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf86941d5c0186998663d80702/0/3230382e39312e3139312e302f32342d3234203d3e203431303935.roa
File:                     3230382e39312e3139312e302f32342d3234203d3e203431303935.roa (raw, json)
Hash identifier:          eOvhbaJDPmuyqKpkKrS5UtRnXDd18ibNKHrx5dVgQyc=
Subject key identifier:   10:89:6F:46:5C:21:EB:70:8B:2A:AE:D7:C6:E2:C6:66:FC:EE:4D:5F
Certificate issuer:       /CN=58f72174a0a9e3d07a37cad87c2235a762efa6a9b620372845
Certificate serial:       42EA1D91E70E3D72D5CFF62A9AD077FFEB5AAA97
Authority key identifier: E9:AB:82:D4:D9:BF:4C:16:EA:6E:7C:FA:F3:EE:14:CF:EC:5A:4A:8A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ae85d24a-77d4-4cf7-80aa-c071199c2889/58f72174a0a9e3d07a37cad87c2235a762efa6a9b620372845.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf86941d5c0186998663d80702/0/3230382e39312e3139312e302f32342d3234203d3e203431303935.roa
Signing time:             Tue 02 Jul 2024 03:48:59 +0000
ROA not before:           Tue 02 Jul 2024 03:43:59 +0000
ROA not after:            Tue 01 Jul 2025 03:48:59 +0000
asID:                     41095
IP address blocks:        208.91.191.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf86941d5c0186998663d80702/0/E9AB82D4D9BF4C16EA6E7CFAF3EE14CFEC5A4A8A.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf86941d5c0186998663d80702/0/E9AB82D4D9BF4C16EA6E7CFAF3EE14CFEC5A4A8A.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ae85d24a-77d4-4cf7-80aa-c071199c2889/58f72174a0a9e3d07a37cad87c2235a762efa6a9b620372845.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ae85d24a-77d4-4cf7-80aa-c071199c2889/ae85d24a-77d4-4cf7-80aa-c071199c2889.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ae85d24a-77d4-4cf7-80aa-c071199c2889/ae85d24a-77d4-4cf7-80aa-c071199c2889.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ae85d24a-77d4-4cf7-80aa-c071199c2889.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 20:59:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:ea:1d:91:e7:0e:3d:72:d5:cf:f6:2a:9a:d0:77:ff:eb:5a:aa:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58f72174a0a9e3d07a37cad87c2235a762efa6a9b620372845
        Validity
            Not Before: Jul  2 03:43:59 2024 GMT
            Not After : Jul  1 03:48:59 2025 GMT
        Subject: CN=10896F465C21EB708B2AAED7C6E2C666FCEE4D5F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:ac:e8:f7:90:d6:7d:f4:55:fe:75:57:18:bb:
                    71:5a:a4:17:6e:14:a0:b7:24:10:75:61:2b:ab:a5:
                    54:b5:7b:8c:8f:32:09:b9:7d:02:4c:89:30:34:ec:
                    f1:8c:f5:c4:84:a6:0e:30:49:0d:69:c8:21:f9:c0:
                    2c:82:73:6f:be:c4:c7:71:64:17:af:1b:23:5d:9a:
                    f5:d7:9f:ab:87:8f:a3:3d:a0:3a:d7:2d:52:5d:12:
                    03:89:f9:c6:24:1c:da:ce:53:41:8c:aa:59:bb:30:
                    b5:4e:ba:e4:db:b2:bb:0a:a7:8f:ab:ce:b1:43:9f:
                    fe:b9:d6:be:e5:21:95:ab:e0:2b:62:46:9b:44:db:
                    cc:c7:f9:56:9b:27:29:d3:30:cc:95:2a:8d:90:96:
                    73:55:19:87:41:f7:c9:12:65:7e:30:29:49:da:c9:
                    81:5d:0f:1b:c9:a8:6a:34:6a:a4:32:44:0b:79:28:
                    fa:27:a8:ae:56:55:f7:bb:bd:71:7f:0e:fa:a5:ef:
                    72:ed:ca:56:f2:5e:b1:25:43:e3:38:fc:12:61:84:
                    5d:8f:06:3d:2b:52:a5:dc:8c:71:f4:58:2e:39:3d:
                    45:c9:b0:a7:68:b0:6d:d0:11:a0:40:02:92:91:c7:
                    8f:4f:d3:b9:46:9f:a4:c3:bc:28:77:c1:33:c7:02:
                    12:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:89:6F:46:5C:21:EB:70:8B:2A:AE:D7:C6:E2:C6:66:FC:EE:4D:5F
            X509v3 Authority Key Identifier:
                keyid:E9:AB:82:D4:D9:BF:4C:16:EA:6E:7C:FA:F3:EE:14:CF:EC:5A:4A:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf86941d5c0186998663d80702/0/E9AB82D4D9BF4C16EA6E7CFAF3EE14CFEC5A4A8A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ae85d24a-77d4-4cf7-80aa-c071199c2889/58f72174a0a9e3d07a37cad87c2235a762efa6a9b620372845.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf86941d5c0186998663d80702/0/3230382e39312e3139312e302f32342d3234203d3e203431303935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.91.191.0/24

    Signature Algorithm: sha256WithRSAEncryption
         62:01:dc:f9:09:5a:51:9f:a4:e5:ef:e4:90:ac:f3:5b:72:02:
         d0:b2:2c:26:9d:f8:c9:6b:1d:3d:e6:49:c2:d5:7a:f8:47:7f:
         d0:e4:97:cc:f8:5b:e2:d7:28:81:fd:51:5d:12:8c:f4:4f:19:
         b6:a0:7c:3f:31:ce:05:5f:dc:e9:d4:bd:f7:04:a3:f2:98:ee:
         b9:1d:d5:35:2b:60:63:70:9c:2d:0a:41:95:96:d5:d3:9f:94:
         67:5e:f2:cc:cd:53:50:7d:6c:0a:11:d7:db:61:6d:6c:9a:11:
         c1:a0:12:c3:87:83:78:7d:bb:86:62:2d:a4:bd:d9:ec:03:48:
         7d:b4:72:07:21:87:60:69:f2:6c:2a:9b:92:c8:08:6e:21:b8:
         9f:25:0e:b4:53:4c:d4:e6:1f:01:40:a4:9c:ef:24:f4:72:6e:
         da:c9:e7:6f:6b:80:da:27:bf:a7:db:e3:4f:c4:b2:74:11:47:
         d7:0a:9b:cc:99:0d:a8:16:17:91:8c:cb:74:13:33:7e:93:df:
         98:4a:33:e9:17:bb:37:e8:24:b4:2c:dd:f4:83:f3:fa:a5:91:
         89:55:10:fb:42:de:92:f2:48:84:44:6c:bd:62:c0:c9:f8:2d:
         8a:4a:69:f2:c8:a9:05:1a:b9:85:6c:e1:b6:84:30:dd:0d:ee:
         b5:0d:03:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:34:39 2024 by rpki-client on console-fra.rpki-client.org