Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8cea2ac6018cfa0a16bf19f4/0/3139392e3138382e3233372e302f32342d3234203d3e20333936333536.roa
File:                     3139392e3138382e3233372e302f32342d3234203d3e20333936333536.roa (raw, json)
Hash identifier:          Q7iCUewIeZZgVFKoAwX2shWM1D46rSO9Zd9g/kZAUZo=
Subject key identifier:   82:B9:44:C9:FC:AF:5E:FE:AC:98:8E:99:9E:1A:D7:B5:DA:E6:BE:82
Certificate issuer:       /CN=c3a7a2fa9fdf7a6f5087b840b66c4fc34120d5ce7114b878d0
Certificate serial:       4DE40C7FE4768B0064131439A168E1D92CB3443A
Authority key identifier: CB:A7:78:B7:41:5B:D4:D1:E6:EF:0E:80:0E:25:8B:46:DF:A5:4D:8A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cbfc84cd-39fb-4efb-a65d-dca73adfa9ac/c3a7a2fa9fdf7a6f5087b840b66c4fc34120d5ce7114b878d0.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8cea2ac6018cfa0a16bf19f4/0/3139392e3138382e3233372e302f32342d3234203d3e20333936333536.roa
Signing time:             Thu 11 Jan 2024 19:41:25 +0000
ROA not before:           Thu 11 Jan 2024 19:36:25 +0000
ROA not after:            Thu 09 Jan 2025 19:41:25 +0000
asID:                     396356
IP address blocks:        199.188.237.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8cea2ac6018cfa0a16bf19f4/0/CBA778B7415BD4D1E6EF0E800E258B46DFA54D8A.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8cea2ac6018cfa0a16bf19f4/0/CBA778B7415BD4D1E6EF0E800E258B46DFA54D8A.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cbfc84cd-39fb-4efb-a65d-dca73adfa9ac/c3a7a2fa9fdf7a6f5087b840b66c4fc34120d5ce7114b878d0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cbfc84cd-39fb-4efb-a65d-dca73adfa9ac/cbfc84cd-39fb-4efb-a65d-dca73adfa9ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cbfc84cd-39fb-4efb-a65d-dca73adfa9ac/cbfc84cd-39fb-4efb-a65d-dca73adfa9ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cbfc84cd-39fb-4efb-a65d-dca73adfa9ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 02 Jun 2024 22:18:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:e4:0c:7f:e4:76:8b:00:64:13:14:39:a1:68:e1:d9:2c:b3:44:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c3a7a2fa9fdf7a6f5087b840b66c4fc34120d5ce7114b878d0
        Validity
            Not Before: Jan 11 19:36:25 2024 GMT
            Not After : Jan  9 19:41:25 2025 GMT
        Subject: CN=82B944C9FCAF5EFEAC988E999E1AD7B5DAE6BE82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:d5:1a:18:7a:2c:f7:e0:0a:f7:d1:d0:e8:66:
                    cd:cb:e2:bd:52:60:03:f6:79:fe:58:b3:9d:2f:e2:
                    f7:6c:a4:cf:67:78:31:25:b6:dc:44:5d:66:d1:c7:
                    39:cd:ae:f8:bb:3a:77:40:f1:25:77:6f:d6:aa:df:
                    9b:a8:35:ea:ba:7c:d6:65:3b:f5:ad:38:2b:df:60:
                    44:b5:de:9c:a0:d7:79:4a:3a:d9:1c:b5:6c:5b:4f:
                    47:ee:0f:52:74:70:b6:dd:cf:0c:2d:59:a6:b3:9c:
                    c1:14:58:6f:a4:1a:97:4c:3a:7f:97:ec:d4:79:2f:
                    7a:28:b4:ff:fa:c8:90:f6:30:00:9b:bf:69:98:24:
                    57:a5:bd:c6:77:48:1b:3c:91:85:f0:d2:12:69:61:
                    2f:b2:8c:88:cf:16:d9:5b:ec:a8:f6:3a:17:cf:91:
                    d5:51:ea:c5:8a:f8:d2:3c:fb:d8:a3:21:77:2f:49:
                    e4:6a:d5:ec:2f:a4:6e:a8:a0:e7:4c:0b:9b:f3:39:
                    fe:9c:ef:c2:b6:8b:79:e8:da:7c:2e:15:5c:68:86:
                    71:78:a1:2d:c6:86:90:12:72:e5:d1:b8:4f:f4:8c:
                    33:d6:6c:55:80:55:3c:f1:a5:63:a3:18:ec:87:cb:
                    27:73:55:77:59:6d:05:9e:5c:87:ec:17:85:2b:be:
                    cf:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:B9:44:C9:FC:AF:5E:FE:AC:98:8E:99:9E:1A:D7:B5:DA:E6:BE:82
            X509v3 Authority Key Identifier:
                keyid:CB:A7:78:B7:41:5B:D4:D1:E6:EF:0E:80:0E:25:8B:46:DF:A5:4D:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8cea2ac6018cfa0a16bf19f4/0/CBA778B7415BD4D1E6EF0E800E258B46DFA54D8A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cbfc84cd-39fb-4efb-a65d-dca73adfa9ac/c3a7a2fa9fdf7a6f5087b840b66c4fc34120d5ce7114b878d0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8cea2ac6018cfa0a16bf19f4/0/3139392e3138382e3233372e302f32342d3234203d3e20333936333536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.188.237.0/24

    Signature Algorithm: sha256WithRSAEncryption
         13:14:38:a4:d3:be:d3:ae:d7:6b:32:fc:c1:de:d0:7a:42:68:
         18:39:7e:4d:49:1c:23:dd:05:56:98:1d:11:ce:71:9c:d0:d2:
         45:90:9f:40:e3:e8:61:e1:b5:5e:ca:f3:92:9e:34:c2:fc:69:
         34:48:e6:fa:a9:e3:0f:cd:1d:54:a6:b7:8f:72:69:3a:a4:6c:
         b1:29:20:bf:a4:c5:c7:d9:a3:07:d2:c1:52:a4:eb:0d:71:eb:
         37:ab:2c:5d:12:1e:30:13:ec:cf:51:8a:db:e9:06:02:80:58:
         59:30:e1:79:fd:c7:ae:9b:75:48:b0:db:03:58:58:10:cf:fe:
         34:97:09:3e:7a:63:a8:7a:0b:08:63:d5:5f:d0:44:23:fe:56:
         e7:bc:51:85:94:20:a6:1b:6f:54:7a:17:a9:b4:84:1c:23:b0:
         0c:89:55:c9:17:8a:f7:2d:bf:bd:af:87:76:55:8e:df:92:43:
         1f:db:f2:b5:1d:66:6a:34:72:03:e4:91:97:26:e5:d7:40:86:
         c1:c2:10:37:82:e8:fb:7a:52:3a:f2:97:ed:87:3c:fe:03:b4:
         01:72:0b:9c:b4:6f:c4:33:22:85:26:4b:e4:fa:1a:27:e4:f2:
         8e:96:0c:06:02:a8:1b:83:a6:35:20:d6:62:0d:66:14:37:d1:
         dd:73:83:00
-----BEGIN CERTIFICATE-----
MIIFtjCCBJ6gAwIBAgIUTeQMf+R2iwBkExQ5oWjh2SyzRDowDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyYzNhN2EyZmE5ZmRmN2E2ZjUwODdiODQwYjY2YzRmYzM0
MTIwZDVjZTcxMTRiODc4ZDAwHhcNMjQwMTExMTkzNjI1WhcNMjUwMTA5MTk0MTI1
WjAzMTEwLwYDVQQDEyg4MkI5NDRDOUZDQUY1RUZFQUM5ODhFOTk5RTFBRDdCNURB
RTZCRTgyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwtUaGHos9+AK
99HQ6GbNy+K9UmAD9nn+WLOdL+L3bKTPZ3gxJbbcRF1m0cc5za74uzp3QPEld2/W
qt+bqDXqunzWZTv1rTgr32BEtd6coNd5SjrZHLVsW09H7g9SdHC23c8MLVmms5zB
FFhvpBqXTDp/l+zUeS96KLT/+siQ9jAAm79pmCRXpb3Gd0gbPJGF8NISaWEvsoyI
zxbZW+yo9joXz5HVUerFivjSPPvYoyF3L0nkatXsL6RuqKDnTAub8zn+nO/Ctot5
6Np8LhVcaIZxeKEtxoaQEnLl0bhP9Iwz1mxVgFU88aVjoxjsh8snc1V3WW0FnlyH
7BeFK77PJQIDAQABo4ICtjCCArIwHQYDVR0OBBYEFIK5RMn8r17+rJiOmZ4a17Xa
5r6CMB8GA1UdIwQYMBaAFMuneLdBW9TR5u8OgA4li0bfpU2KMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmOGNlYTJhYzYwMThjZmEwYTE2YmYxOWY0LzAv
Q0JBNzc4Qjc0MTVCRDREMUU2RUYwRTgwMEUyNThCNDZERkE1NEQ4QS5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNGFiN2FlNGQtYmQ3Yi00YjMzLTlhODgtNWIyMmQy
YTgzMzdkL2NiZmM4NGNkLTM5ZmItNGVmYi1hNjVkLWRjYTczYWRmYTlhYy9jM2E3
YTJmYTlmZGY3YTZmNTA4N2I4NDBiNjZjNGZjMzQxMjBkNWNlNzExNGI4NzhkMC5j
ZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjhjZWEyYWM2MDE4Y2Zh
MGExNmJmMTlmNC8wLzMxMzkzOTJlMzEzODM4MmUzMjMzMzcyZTMwMmYzMjM0MmQz
MjM0MjAzZDNlMjAzMzM5MzYzMzM1MzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADHvO0wDQYJKoZIhvcN
AQELBQADggEBABMUOKTTvtOu12sy/MHe0HpCaBg5fk1JHCPdBVaYHRHOcZzQ0kWQ
n0Dj6GHhtV7K85KeNML8aTRI5vqp4w/NHVSmt49yaTqkbLEpIL+kxcfZowfSwVKk
6w1x6zerLF0SHjAT7M9RitvpBgKAWFkw4Xn9x66bdUiw2wNYWBDP/jSXCT56Y6h6
Cwhj1V/QRCP+Vue8UYWUIKYbb1R6F6m0hBwjsAyJVckXivctv72vh3ZVjt+SQx/b
8rUdZmo0cgPkkZcm5ddAhsHCEDeC6Pt6Ujryl+2HPP4DtAFyC5y0b8QzIoUmS+T6
Gifk8o6WDAYCqBuDpjUg1mINZhQ30d1zgwA=
-----END CERTIFICATE-----
Generated at Sat Jun 1 23:01:21 2024 by rpki-client on console-ams.rpki-client.org