Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8cea2ac6018cfa0a16bf19f4/0/3139392e3138382e3233362e302f32342d3234203d3e203533333536.roa
File:                     3139392e3138382e3233362e302f32342d3234203d3e203533333536.roa (raw, json)
Hash identifier:          WQU3S3gtFs27DKeVg38eZ/ue3TNujpTIUs+FMaNUFOY=
Subject key identifier:   D7:DD:59:98:EE:7D:3B:32:41:99:7D:AD:80:41:63:E0:B8:D2:B4:B0
Certificate issuer:       /CN=c3a7a2fa9fdf7a6f5087b840b66c4fc34120d5ce7114b878d0
Certificate serial:       3C5EA486E9B512664BFA4B3710477AE0FA596F56
Authority key identifier: CB:A7:78:B7:41:5B:D4:D1:E6:EF:0E:80:0E:25:8B:46:DF:A5:4D:8A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cbfc84cd-39fb-4efb-a65d-dca73adfa9ac/c3a7a2fa9fdf7a6f5087b840b66c4fc34120d5ce7114b878d0.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8cea2ac6018cfa0a16bf19f4/0/3139392e3138382e3233362e302f32342d3234203d3e203533333536.roa
Signing time:             Thu 11 Jan 2024 19:41:29 +0000
ROA not before:           Thu 11 Jan 2024 19:36:29 +0000
ROA not after:            Thu 09 Jan 2025 19:41:29 +0000
asID:                     53356
IP address blocks:        199.188.236.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8cea2ac6018cfa0a16bf19f4/0/CBA778B7415BD4D1E6EF0E800E258B46DFA54D8A.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8cea2ac6018cfa0a16bf19f4/0/CBA778B7415BD4D1E6EF0E800E258B46DFA54D8A.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cbfc84cd-39fb-4efb-a65d-dca73adfa9ac/c3a7a2fa9fdf7a6f5087b840b66c4fc34120d5ce7114b878d0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cbfc84cd-39fb-4efb-a65d-dca73adfa9ac/cbfc84cd-39fb-4efb-a65d-dca73adfa9ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cbfc84cd-39fb-4efb-a65d-dca73adfa9ac/cbfc84cd-39fb-4efb-a65d-dca73adfa9ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cbfc84cd-39fb-4efb-a65d-dca73adfa9ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 May 2024 20:19:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:5e:a4:86:e9:b5:12:66:4b:fa:4b:37:10:47:7a:e0:fa:59:6f:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c3a7a2fa9fdf7a6f5087b840b66c4fc34120d5ce7114b878d0
        Validity
            Not Before: Jan 11 19:36:29 2024 GMT
            Not After : Jan  9 19:41:29 2025 GMT
        Subject: CN=D7DD5998EE7D3B3241997DAD804163E0B8D2B4B0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:f8:af:a9:3c:a2:cc:d3:90:c8:fd:a2:c8:09:
                    01:27:c0:db:9a:5c:d6:16:a0:56:ab:a9:cb:7b:a4:
                    32:e8:fe:0d:51:0d:9a:f6:01:e1:04:b2:6a:87:f5:
                    c8:bc:09:16:c7:eb:3f:45:7e:3f:17:95:55:1e:02:
                    12:9b:39:2e:2a:32:a0:1e:3d:31:4a:02:35:ff:77:
                    ba:89:50:5e:c6:bc:ec:0d:70:22:36:81:fa:d4:31:
                    33:10:61:58:44:4d:bb:34:89:85:61:86:29:7a:bc:
                    f4:80:23:b1:25:67:d6:be:13:76:d8:e2:89:45:e1:
                    6e:c5:b3:80:50:27:a4:0f:a3:4e:9d:78:c7:69:a3:
                    41:99:76:6f:ec:11:32:e7:61:43:e0:da:75:58:db:
                    c1:d9:be:10:e2:bc:57:8c:d2:79:6e:83:67:c1:44:
                    38:12:ef:10:cd:73:6c:83:68:b4:b3:1a:20:40:fe:
                    17:82:39:92:a4:64:01:18:6e:93:36:90:cd:5d:32:
                    a2:61:a1:a5:5a:26:84:2a:c3:e7:ac:0b:40:7f:26:
                    63:88:9e:86:b4:56:23:09:ed:67:1b:28:f7:87:80:
                    7d:3a:e7:24:cb:d4:66:59:7c:c6:c8:3a:e4:eb:69:
                    19:f9:4a:d6:c9:71:11:41:86:17:00:c3:10:04:79:
                    52:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:DD:59:98:EE:7D:3B:32:41:99:7D:AD:80:41:63:E0:B8:D2:B4:B0
            X509v3 Authority Key Identifier:
                keyid:CB:A7:78:B7:41:5B:D4:D1:E6:EF:0E:80:0E:25:8B:46:DF:A5:4D:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8cea2ac6018cfa0a16bf19f4/0/CBA778B7415BD4D1E6EF0E800E258B46DFA54D8A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cbfc84cd-39fb-4efb-a65d-dca73adfa9ac/c3a7a2fa9fdf7a6f5087b840b66c4fc34120d5ce7114b878d0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8cea2ac6018cfa0a16bf19f4/0/3139392e3138382e3233362e302f32342d3234203d3e203533333536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.188.236.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8b:e8:2c:59:e5:dd:cb:6d:a7:39:91:0c:bc:d5:b2:ec:90:58:
         94:23:59:b3:85:06:b7:17:22:0f:9d:06:07:b2:31:b6:c4:d6:
         67:d8:a7:f9:d6:3a:90:d4:6f:1c:15:8e:9e:a6:bb:20:22:d3:
         f9:9b:9d:43:b6:cb:ef:ad:c8:82:ea:62:82:5a:ea:ea:bd:f4:
         14:b9:cf:82:4a:b4:19:de:b3:1f:2a:77:8a:37:03:10:ce:19:
         38:af:19:e5:60:e4:ea:45:d8:05:3d:d1:a4:33:06:77:2d:63:
         46:7f:f2:e9:49:d7:45:3a:8d:3e:f5:fd:16:a7:5a:b6:95:5d:
         19:dd:d8:86:e8:d0:eb:c7:46:d8:32:be:97:8e:6d:95:44:4c:
         2e:32:9a:44:b3:cd:f2:72:80:e5:cb:e2:a4:65:f9:e1:f7:04:
         0a:24:a8:03:cf:40:5c:e6:96:88:de:c8:88:9e:74:94:a5:81:
         fe:4e:c3:df:83:d6:40:e7:bf:42:d2:79:7a:ca:5a:5b:3b:b2:
         a8:29:74:e2:b6:d8:7b:67:e7:31:1a:9b:1a:9a:1d:c1:7a:c6:
         e0:fa:e3:40:f7:94:0a:7a:e7:27:a6:db:19:de:a3:af:72:a1:
         3c:fc:2e:2a:6d:ae:19:d3:1f:bc:c1:f3:3e:8e:82:94:70:39:
         50:a9:a9:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 20:02:30 2024 by rpki-client on console-ams.rpki-client.org