Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf88e8b90701892c2e50863c3e/0/3139392e34382e3234342e302f32342d3234203d3e20313530363938.roa
File:                     3139392e34382e3234342e302f32342d3234203d3e20313530363938.roa (raw, json)
Hash identifier:          3eqDnMJNeOh8+7LhPNuhSwZM+K7LDiS0fP+vs7c7R7M=
Subject key identifier:   63:D6:7C:67:C2:10:49:C3:A2:46:63:90:B0:75:D3:83:1A:91:14:9E
Certificate issuer:       /CN=600202b188e351fc29506275795bb89ce77c000f6e5b9b8fa5
Certificate serial:       40BAE5FA7C2C9B6F530192A1AEB9F7B15BBA5ABF
Authority key identifier: 3E:E8:72:5A:BA:B4:B8:22:15:6C:9E:32:8C:7A:18:8A:66:81:E7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b4586964-3c8b-4441-8b8a-b2d07721f346/600202b188e351fc29506275795bb89ce77c000f6e5b9b8fa5.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf88e8b90701892c2e50863c3e/0/3139392e34382e3234342e302f32342d3234203d3e20313530363938.roa
Signing time:             Tue 28 May 2024 15:52:55 +0000
ROA not before:           Tue 28 May 2024 15:47:55 +0000
ROA not after:            Tue 27 May 2025 15:52:55 +0000
asID:                     150698
IP address blocks:        199.48.244.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf88e8b90701892c2e50863c3e/0/3EE8725ABAB4B822156C9E328C7A188A6681E749.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf88e8b90701892c2e50863c3e/0/3EE8725ABAB4B822156C9E328C7A188A6681E749.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b4586964-3c8b-4441-8b8a-b2d07721f346/600202b188e351fc29506275795bb89ce77c000f6e5b9b8fa5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b4586964-3c8b-4441-8b8a-b2d07721f346/b4586964-3c8b-4441-8b8a-b2d07721f346.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b4586964-3c8b-4441-8b8a-b2d07721f346/b4586964-3c8b-4441-8b8a-b2d07721f346.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b4586964-3c8b-4441-8b8a-b2d07721f346.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 05:04:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:ba:e5:fa:7c:2c:9b:6f:53:01:92:a1:ae:b9:f7:b1:5b:ba:5a:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=600202b188e351fc29506275795bb89ce77c000f6e5b9b8fa5
        Validity
            Not Before: May 28 15:47:55 2024 GMT
            Not After : May 27 15:52:55 2025 GMT
        Subject: CN=63D67C67C21049C3A2466390B075D3831A91149E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:5b:04:9a:86:b9:40:c9:65:ff:3a:5a:a1:51:
                    1c:6f:5a:e5:71:81:aa:2f:54:2d:1e:26:2c:c9:34:
                    b8:d1:8e:43:62:9d:01:72:fc:63:45:58:1f:23:9d:
                    32:ba:70:0c:50:70:4c:1d:e4:47:09:90:8b:c9:9e:
                    ac:a2:55:44:e8:94:91:b5:a8:32:bf:56:7f:3a:f4:
                    e6:3b:b4:d7:ef:b3:e8:8e:d6:18:ff:fb:80:58:7b:
                    b4:f1:25:be:89:8c:a3:bd:26:f0:1e:aa:a6:4c:30:
                    ad:59:3e:47:01:7c:27:3c:42:28:dc:5c:f6:b9:68:
                    0a:f8:d9:4a:49:f4:11:58:2a:e1:27:56:b4:b9:94:
                    48:f9:29:9f:6a:c4:c2:7c:f9:8b:90:b9:c7:0a:da:
                    9b:9b:5f:4b:59:56:22:c3:67:a1:07:03:36:af:12:
                    5b:38:c8:7f:59:d0:97:b3:a9:23:de:4e:6e:e7:83:
                    58:f6:40:db:78:57:f4:5e:a1:01:22:aa:93:62:6c:
                    09:1f:5d:e6:84:8e:2f:2c:ee:b1:e3:40:75:90:c3:
                    4b:5c:61:cb:71:d9:aa:f4:24:51:a8:30:98:9a:57:
                    cd:fa:64:25:cf:2a:81:12:c8:1e:36:9e:7e:f1:ee:
                    06:9f:67:e2:f0:59:29:89:22:a7:44:53:b6:4b:33:
                    9f:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:D6:7C:67:C2:10:49:C3:A2:46:63:90:B0:75:D3:83:1A:91:14:9E
            X509v3 Authority Key Identifier:
                keyid:3E:E8:72:5A:BA:B4:B8:22:15:6C:9E:32:8C:7A:18:8A:66:81:E7:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf88e8b90701892c2e50863c3e/0/3EE8725ABAB4B822156C9E328C7A188A6681E749.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b4586964-3c8b-4441-8b8a-b2d07721f346/600202b188e351fc29506275795bb89ce77c000f6e5b9b8fa5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf88e8b90701892c2e50863c3e/0/3139392e34382e3234342e302f32342d3234203d3e20313530363938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.48.244.0/24

    Signature Algorithm: sha256WithRSAEncryption
         17:7b:cc:61:28:62:26:f3:0a:0d:2b:4e:ee:11:20:22:b1:a9:
         40:c5:46:a4:4c:1d:55:16:96:05:ad:1c:34:23:63:a2:9f:3b:
         c7:b1:f6:7e:14:a5:12:2a:30:4f:75:e4:42:43:14:95:64:8a:
         74:f1:cb:fc:4d:32:20:4c:d5:96:15:02:d4:0e:41:ba:2d:6f:
         6b:68:ed:f4:86:5c:bf:71:97:2d:9d:7d:81:be:f6:31:a9:da:
         7a:69:f5:81:ec:0f:74:4d:95:08:b8:da:c0:08:46:c2:18:b3:
         09:5b:c4:47:c7:b0:39:24:64:ac:55:88:9f:cf:82:19:29:a6:
         23:8b:64:b8:ca:94:b4:12:a4:35:3e:6b:e9:ef:c7:67:9c:89:
         76:9d:19:e7:1e:4e:c7:80:b8:66:b5:bc:67:bb:ac:18:23:98:
         db:aa:ef:22:2f:75:96:4a:22:80:6a:2e:20:c3:93:61:33:a2:
         a6:a9:94:a3:88:62:3e:98:e2:f0:44:53:ad:3f:98:49:02:74:
         7e:3d:d5:9a:96:a6:0c:db:0d:35:66:cd:ff:0f:77:9e:de:7b:
         bc:38:a0:72:0f:f9:79:21:41:e9:4a:bd:4a:85:72:7f:cb:da:
         2a:63:54:12:2d:67:85:ef:d1:ee:85:a2:01:c2:58:ad:6b:2e:
         22:17:91:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 02:57:12 2024 by rpki-client on console-fra.rpki-client.org