Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8cea2ac6018cfa0a16bf19f4/0/3139392e3138382e3233362e302f32342d3234203d3e203533333536.roa
File:                     3139392e3138382e3233362e302f32342d3234203d3e203533333536.roa (raw, json)
Hash identifier:          IgUw8z/AmvLTj+RS/RzHdFn0Pi0Hy/pmsyWI+vZtRF4=
Subject key identifier:   C2:3C:A7:10:99:C3:D6:E5:1D:72:24:9F:7D:62:62:93:62:BF:15:9C
Certificate issuer:       /CN=c3a7a2fa9fdf7a6f5087b840b66c4fc34120d5ce7114b878d0
Certificate serial:       165ED17CDA2504A120A992B4B340D16DA152D545
Authority key identifier: CB:A7:78:B7:41:5B:D4:D1:E6:EF:0E:80:0E:25:8B:46:DF:A5:4D:8A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cbfc84cd-39fb-4efb-a65d-dca73adfa9ac/c3a7a2fa9fdf7a6f5087b840b66c4fc34120d5ce7114b878d0.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8cea2ac6018cfa0a16bf19f4/0/3139392e3138382e3233362e302f32342d3234203d3e203533333536.roa
Signing time:             Tue 21 May 2024 12:28:38 +0000
ROA not before:           Tue 21 May 2024 12:23:38 +0000
ROA not after:            Tue 20 May 2025 12:28:38 +0000
asID:                     53356
IP address blocks:        199.188.236.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8cea2ac6018cfa0a16bf19f4/0/CBA778B7415BD4D1E6EF0E800E258B46DFA54D8A.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8cea2ac6018cfa0a16bf19f4/0/CBA778B7415BD4D1E6EF0E800E258B46DFA54D8A.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cbfc84cd-39fb-4efb-a65d-dca73adfa9ac/c3a7a2fa9fdf7a6f5087b840b66c4fc34120d5ce7114b878d0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cbfc84cd-39fb-4efb-a65d-dca73adfa9ac/cbfc84cd-39fb-4efb-a65d-dca73adfa9ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cbfc84cd-39fb-4efb-a65d-dca73adfa9ac/cbfc84cd-39fb-4efb-a65d-dca73adfa9ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cbfc84cd-39fb-4efb-a65d-dca73adfa9ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 18:46:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:5e:d1:7c:da:25:04:a1:20:a9:92:b4:b3:40:d1:6d:a1:52:d5:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c3a7a2fa9fdf7a6f5087b840b66c4fc34120d5ce7114b878d0
        Validity
            Not Before: May 21 12:23:38 2024 GMT
            Not After : May 20 12:28:38 2025 GMT
        Subject: CN=C23CA71099C3D6E51D72249F7D62629362BF159C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:96:c8:bf:ba:e5:ac:d2:98:02:33:93:2c:c1:
                    da:d0:ed:78:8a:b6:03:d3:0c:7e:b4:0e:b4:6c:44:
                    b8:67:f5:0b:91:22:a7:f3:3b:d0:a1:4f:ff:64:68:
                    5b:9c:11:63:0c:10:55:94:64:e3:16:23:7d:63:69:
                    26:cc:5d:65:63:d8:7f:d1:66:46:4d:bb:c9:aa:bb:
                    e7:3b:05:f8:2f:10:d0:8c:bd:99:17:24:1c:b0:d5:
                    71:44:ed:f6:69:3e:83:ec:97:a7:f4:2b:8f:e6:1f:
                    81:e4:c5:c1:ba:22:ff:8c:3e:6c:6a:15:bf:0d:3c:
                    9d:66:4d:f9:00:2e:4e:a6:00:a2:c7:e7:4a:be:87:
                    f2:2b:21:e4:54:30:d8:9c:92:24:09:ac:44:ba:a1:
                    90:d5:07:c4:c6:ed:fd:98:a8:99:71:55:95:1e:da:
                    e2:dc:d2:7c:8b:a9:85:53:29:6c:8f:e2:24:1c:5b:
                    8d:9c:ea:af:ac:0e:9f:c1:02:c4:0a:b9:43:77:1e:
                    29:b5:ae:16:95:73:2b:fc:88:c9:aa:25:57:ab:39:
                    25:75:66:99:6c:23:cc:6e:42:6c:df:7a:2d:05:ea:
                    a0:5c:43:96:32:7d:95:91:13:ff:a8:b4:81:5e:28:
                    03:68:32:72:76:43:63:f9:58:fc:44:e0:32:73:b6:
                    84:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:3C:A7:10:99:C3:D6:E5:1D:72:24:9F:7D:62:62:93:62:BF:15:9C
            X509v3 Authority Key Identifier:
                keyid:CB:A7:78:B7:41:5B:D4:D1:E6:EF:0E:80:0E:25:8B:46:DF:A5:4D:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8cea2ac6018cfa0a16bf19f4/0/CBA778B7415BD4D1E6EF0E800E258B46DFA54D8A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cbfc84cd-39fb-4efb-a65d-dca73adfa9ac/c3a7a2fa9fdf7a6f5087b840b66c4fc34120d5ce7114b878d0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8cea2ac6018cfa0a16bf19f4/0/3139392e3138382e3233362e302f32342d3234203d3e203533333536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.188.236.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b5:a6:ad:a9:f4:0e:79:b3:2d:8c:8b:c8:e8:cc:41:29:b7:f3:
         9e:a3:42:cd:46:3f:50:8a:8d:46:84:5f:09:88:b8:6c:5d:23:
         0e:b4:38:ab:e7:cf:5a:fb:59:a5:0c:f6:f3:88:53:35:47:72:
         91:82:e6:69:00:39:b2:2e:23:47:ac:d7:84:92:da:c1:7b:78:
         9a:99:27:2f:b2:60:c6:9a:b6:5d:c4:cf:1a:a6:19:e9:f7:fb:
         ff:89:49:1c:61:da:88:67:f0:9f:95:df:7e:42:d9:d1:f7:09:
         f4:d5:c4:e9:e4:e8:a1:b8:4b:75:a9:a5:bd:cd:36:65:ef:e6:
         0b:a2:73:ea:d5:58:90:12:a8:2e:be:21:ec:b1:ae:9e:37:3e:
         cb:ae:f9:31:7b:15:77:4c:b8:92:d2:29:2a:58:22:f3:0c:25:
         b2:00:7c:22:ee:a4:cd:58:58:57:e1:f9:55:32:11:b9:fb:26:
         5d:89:f9:15:b7:d8:6d:f7:27:77:e0:4e:17:fe:4c:89:fe:72:
         cc:ac:d4:50:73:ec:14:7f:68:af:2d:c6:71:2c:37:0d:67:0b:
         5c:12:53:e1:94:81:2c:a7:5e:72:7f:13:82:65:62:db:ea:10:
         fb:c8:36:82:d1:7f:5b:29:41:fb:4d:71:23:f4:dd:88:83:c6:
         18:e4:37:1c
-----BEGIN CERTIFICATE-----
MIIFtDCCBJygAwIBAgIUFl7RfNolBKEgqZK0s0DRbaFS1UUwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyYzNhN2EyZmE5ZmRmN2E2ZjUwODdiODQwYjY2YzRmYzM0
MTIwZDVjZTcxMTRiODc4ZDAwHhcNMjQwNTIxMTIyMzM4WhcNMjUwNTIwMTIyODM4
WjAzMTEwLwYDVQQDEyhDMjNDQTcxMDk5QzNENkU1MUQ3MjI0OUY3RDYyNjI5MzYy
QkYxNTlDMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8JbIv7rlrNKY
AjOTLMHa0O14irYD0wx+tA60bES4Z/ULkSKn8zvQoU//ZGhbnBFjDBBVlGTjFiN9
Y2kmzF1lY9h/0WZGTbvJqrvnOwX4LxDQjL2ZFyQcsNVxRO32aT6D7Jen9CuP5h+B
5MXBuiL/jD5sahW/DTydZk35AC5OpgCix+dKvofyKyHkVDDYnJIkCaxEuqGQ1QfE
xu39mKiZcVWVHtri3NJ8i6mFUylsj+IkHFuNnOqvrA6fwQLECrlDdx4pta4WlXMr
/IjJqiVXqzkldWaZbCPMbkJs33otBeqgXEOWMn2VkRP/qLSBXigDaDJydkNj+Vj8
ROAyc7aETwIDAQABo4ICtDCCArAwHQYDVR0OBBYEFMI8pxCZw9blHXIkn31iYpNi
vxWcMB8GA1UdIwQYMBaAFMuneLdBW9TR5u8OgA4li0bfpU2KMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmOGNlYTJhYzYwMThjZmEwYTE2YmYxOWY0LzAv
Q0JBNzc4Qjc0MTVCRDREMUU2RUYwRTgwMEUyNThCNDZERkE1NEQ4QS5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNGFiN2FlNGQtYmQ3Yi00YjMzLTlhODgtNWIyMmQy
YTgzMzdkL2NiZmM4NGNkLTM5ZmItNGVmYi1hNjVkLWRjYTczYWRmYTlhYy9jM2E3
YTJmYTlmZGY3YTZmNTA4N2I4NDBiNjZjNGZjMzQxMjBkNWNlNzExNGI4NzhkMC5j
ZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjhjZWEyYWM2MDE4Y2Zh
MGExNmJmMTlmNC8wLzMxMzkzOTJlMzEzODM4MmUzMjMzMzYyZTMwMmYzMjM0MmQz
MjM0MjAzZDNlMjAzNTMzMzMzNTM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx7zsMA0GCSqGSIb3DQEB
CwUAA4IBAQC1pq2p9A55sy2Mi8jozEEpt/Oeo0LNRj9Qio1GhF8JiLhsXSMOtDir
589a+1mlDPbziFM1R3KRguZpADmyLiNHrNeEktrBe3iamScvsmDGmrZdxM8aphnp
9/v/iUkcYdqIZ/Cfld9+QtnR9wn01cTp5OihuEt1qaW9zTZl7+YLonPq1ViQEqgu
viHssa6eNz7LrvkxexV3TLiS0ikqWCLzDCWyAHwi7qTNWFhX4flVMhG5+yZdifkV
t9ht9yd34E4X/kyJ/nLMrNRQc+wUf2ivLcZxLDcNZwtcElPhlIEsp15yfxOCZWLb
6hD7yDaC0X9bKUH7TXEj9N2Ig8YY5Dcc
-----END CERTIFICATE-----
Generated at Thu Nov 21 18:49:11 2024 by rpki-client on console-ams.rpki-client.org