Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf89e02e8b018ab95d1cec7a41/0/3139312e352e35362e302f32322d3234203d3e203430383530.roa
File:                     3139312e352e35362e302f32322d3234203d3e203430383530.roa (raw, json)
Hash identifier:          9Cb1fE4U9LMr/3Fb+oRhqw0piUFFeB6UtUbLFuBaBJM=
Subject key identifier:   7A:A7:7E:5F:79:22:94:FD:92:14:E1:8D:7B:8C:53:A4:A7:A7:68:12
Certificate issuer:       /CN=0b75eb340709c863b5ee2132841f8644dd26fad4a204af7738
Certificate serial:       50235A91176D6092FB6E935B6C22E962667BC035
Authority key identifier: 54:0B:53:6A:C1:A2:BB:8F:D1:20:16:62:B4:30:48:5B:DE:4F:A6:D0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1a4b6836-4e28-439c-9ea2-50482aa15b68/0b75eb340709c863b5ee2132841f8644dd26fad4a204af7738.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf89e02e8b018ab95d1cec7a41/0/3139312e352e35362e302f32322d3234203d3e203430383530.roa
Signing time:             Thu 22 Aug 2024 20:25:51 +0000
ROA not before:           Thu 22 Aug 2024 20:20:51 +0000
ROA not after:            Thu 21 Aug 2025 20:25:51 +0000
asID:                     40850
IP address blocks:        191.5.56.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf89e02e8b018ab95d1cec7a41/0/540B536AC1A2BB8FD1201662B430485BDE4FA6D0.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf89e02e8b018ab95d1cec7a41/0/540B536AC1A2BB8FD1201662B430485BDE4FA6D0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1a4b6836-4e28-439c-9ea2-50482aa15b68/0b75eb340709c863b5ee2132841f8644dd26fad4a204af7738.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1a4b6836-4e28-439c-9ea2-50482aa15b68/1a4b6836-4e28-439c-9ea2-50482aa15b68.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1a4b6836-4e28-439c-9ea2-50482aa15b68/1a4b6836-4e28-439c-9ea2-50482aa15b68.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1a4b6836-4e28-439c-9ea2-50482aa15b68.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:43:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:23:5a:91:17:6d:60:92:fb:6e:93:5b:6c:22:e9:62:66:7b:c0:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0b75eb340709c863b5ee2132841f8644dd26fad4a204af7738
        Validity
            Not Before: Aug 22 20:20:51 2024 GMT
            Not After : Aug 21 20:25:51 2025 GMT
        Subject: CN=7AA77E5F792294FD9214E18D7B8C53A4A7A76812
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:f5:c9:42:71:fb:b8:cd:c6:5d:1a:da:64:08:
                    ce:5f:f3:41:1a:12:d9:02:04:3e:7f:63:9a:39:7a:
                    20:2a:5f:d9:c5:1e:a4:c4:1d:6c:3c:7c:85:c1:12:
                    8f:c5:bb:cc:17:41:20:2e:3b:e2:a0:95:d8:02:35:
                    be:15:21:7c:27:62:88:4d:0d:eb:f9:89:d9:97:93:
                    3f:b5:b9:ff:8e:dd:0c:83:b5:dc:6a:d1:cb:18:81:
                    53:4f:93:56:a4:68:38:aa:75:6a:06:eb:7f:ee:c5:
                    be:b3:44:52:0d:38:0a:fd:65:ce:13:f8:8d:bc:3a:
                    58:0a:1e:a7:85:bc:51:b6:d9:36:b7:4b:35:6e:1f:
                    a7:33:3d:0f:83:51:5f:b7:d7:ee:2e:46:79:bc:ad:
                    c1:d5:52:90:fc:2b:e2:ff:64:8b:92:5b:c2:ac:86:
                    37:e4:c7:71:60:49:c8:32:cd:f1:d0:00:d3:a8:ee:
                    00:51:b9:a2:c4:2e:91:3e:19:36:77:c8:35:8d:80:
                    09:97:d7:42:8b:31:7b:a7:e2:cc:f1:c9:84:3f:88:
                    ff:47:bd:92:a3:07:9d:19:d1:a8:5f:f8:0b:f9:9b:
                    dc:1d:ce:22:33:b1:2a:d6:ac:d0:4f:d4:04:d6:36:
                    3f:06:9d:f6:9d:0b:ca:80:fd:57:d4:2b:f0:4f:e2:
                    61:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:A7:7E:5F:79:22:94:FD:92:14:E1:8D:7B:8C:53:A4:A7:A7:68:12
            X509v3 Authority Key Identifier:
                keyid:54:0B:53:6A:C1:A2:BB:8F:D1:20:16:62:B4:30:48:5B:DE:4F:A6:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf89e02e8b018ab95d1cec7a41/0/540B536AC1A2BB8FD1201662B430485BDE4FA6D0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1a4b6836-4e28-439c-9ea2-50482aa15b68/0b75eb340709c863b5ee2132841f8644dd26fad4a204af7738.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf89e02e8b018ab95d1cec7a41/0/3139312e352e35362e302f32322d3234203d3e203430383530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.5.56.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9b:9a:96:71:10:64:99:a1:7f:1c:b9:5b:67:84:a9:2f:ea:90:
         97:a6:19:62:35:6d:79:cf:75:10:34:0b:65:4b:96:30:82:5d:
         30:9e:da:13:db:a1:7f:3b:09:86:0b:c6:d0:4b:8f:bd:54:fa:
         99:c4:25:10:57:c1:c0:67:59:23:46:a4:68:ca:9b:48:71:c0:
         79:9c:8f:ee:68:e2:ce:d6:00:8e:27:e9:16:f8:d1:4b:c6:c4:
         48:0a:db:88:39:37:84:04:ae:c8:a0:4e:91:66:5d:3e:65:57:
         e6:b5:01:98:4f:65:b4:57:9e:ad:b4:8f:3c:b4:5a:e3:53:cd:
         01:83:af:cf:72:83:e8:9f:6a:8d:c5:a6:ee:19:0c:9f:04:a1:
         07:f2:ac:ab:74:9d:da:10:e3:22:ea:0e:df:0e:9e:69:8b:da:
         14:23:1d:7b:05:ff:52:64:c5:f0:51:98:07:55:ad:be:ec:55:
         50:b5:9b:05:db:57:49:bd:5b:47:99:01:9a:a6:43:0d:06:d5:
         66:bd:96:16:a2:3d:ba:37:a6:e9:54:94:ba:b2:a7:62:20:0b:
         54:5a:dd:b1:d3:66:70:ca:e7:3a:46:3d:21:a2:01:93:20:83:
         21:ee:76:f8:27:1d:ab:b6:75:39:69:ee:27:18:d1:e3:c3:f2:
         48:f2:e9:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:16:04 2024 by rpki-client on console-fra.rpki-client.org