Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8cea2ac6018cfa0a16bf19f4/0/3139392e3138382e3233372e302f32342d3234203d3e20333936333536.roa
File:                     3139392e3138382e3233372e302f32342d3234203d3e20333936333536.roa (raw, json)
Hash identifier:          H3h/beCGfbI78EuSWUvFbAYeBfvMe5H8q/5d7uEP/zw=
Subject key identifier:   93:E8:CF:4D:03:94:1F:B9:4D:0D:C5:01:F1:A3:1D:17:3B:A4:44:AA
Certificate issuer:       /CN=c3a7a2fa9fdf7a6f5087b840b66c4fc34120d5ce7114b878d0
Certificate serial:       21277E9DC3C79B754EA42A4E9BA42CA326708275
Authority key identifier: CB:A7:78:B7:41:5B:D4:D1:E6:EF:0E:80:0E:25:8B:46:DF:A5:4D:8A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cbfc84cd-39fb-4efb-a65d-dca73adfa9ac/c3a7a2fa9fdf7a6f5087b840b66c4fc34120d5ce7114b878d0.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8cea2ac6018cfa0a16bf19f4/0/3139392e3138382e3233372e302f32342d3234203d3e20333936333536.roa
Signing time:             Thu 12 Dec 2024 20:28:23 +0000
ROA not before:           Thu 12 Dec 2024 20:23:23 +0000
ROA not after:            Thu 11 Dec 2025 20:28:23 +0000
asID:                     396356
IP address blocks:        199.188.237.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8cea2ac6018cfa0a16bf19f4/0/CBA778B7415BD4D1E6EF0E800E258B46DFA54D8A.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8cea2ac6018cfa0a16bf19f4/0/CBA778B7415BD4D1E6EF0E800E258B46DFA54D8A.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cbfc84cd-39fb-4efb-a65d-dca73adfa9ac/c3a7a2fa9fdf7a6f5087b840b66c4fc34120d5ce7114b878d0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cbfc84cd-39fb-4efb-a65d-dca73adfa9ac/cbfc84cd-39fb-4efb-a65d-dca73adfa9ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cbfc84cd-39fb-4efb-a65d-dca73adfa9ac/cbfc84cd-39fb-4efb-a65d-dca73adfa9ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cbfc84cd-39fb-4efb-a65d-dca73adfa9ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 01:52:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:27:7e:9d:c3:c7:9b:75:4e:a4:2a:4e:9b:a4:2c:a3:26:70:82:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c3a7a2fa9fdf7a6f5087b840b66c4fc34120d5ce7114b878d0
        Validity
            Not Before: Dec 12 20:23:23 2024 GMT
            Not After : Dec 11 20:28:23 2025 GMT
        Subject: CN=93E8CF4D03941FB94D0DC501F1A31D173BA444AA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:59:fc:09:5c:f0:e5:db:6c:da:ec:ef:3f:0e:
                    5f:0a:5b:16:fa:79:6a:e0:11:b3:aa:a4:01:65:95:
                    1b:8b:14:c8:0c:79:22:2a:57:ec:0b:e3:0d:d1:69:
                    9c:ac:73:bb:df:28:55:3a:a1:2c:e1:a8:e7:34:c2:
                    f5:65:73:d1:6e:b1:05:62:bb:c4:14:a9:93:de:6f:
                    7c:14:50:c3:f4:4f:43:71:ba:c0:fd:c8:92:1b:1b:
                    45:67:72:9e:bb:3a:8e:df:ba:53:43:3c:2e:9d:d3:
                    f2:c9:19:3c:cf:03:3f:4f:6d:bc:ec:e1:9f:77:ce:
                    42:1d:30:cd:85:80:db:e0:f1:c2:25:4d:73:be:c3:
                    44:45:ef:75:51:9d:38:14:1b:81:56:6b:66:6b:e3:
                    46:f8:18:b3:ef:52:5d:0b:f7:ec:c5:06:7a:d4:48:
                    d8:ce:ef:2c:39:08:77:8e:5e:18:14:6c:fd:f6:ce:
                    dd:c3:4f:91:0f:f9:90:11:92:b4:15:ee:fb:8b:13:
                    2e:b9:3f:29:dd:9c:41:82:85:ae:fb:82:70:e5:d0:
                    ad:de:cd:be:ac:d2:67:a1:7f:42:84:df:3a:01:26:
                    47:7d:6e:bc:76:a3:b1:b1:28:05:68:85:fa:d0:36:
                    35:a5:a3:12:08:99:83:4a:da:3a:6b:05:54:bb:e2:
                    ae:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:E8:CF:4D:03:94:1F:B9:4D:0D:C5:01:F1:A3:1D:17:3B:A4:44:AA
            X509v3 Authority Key Identifier:
                keyid:CB:A7:78:B7:41:5B:D4:D1:E6:EF:0E:80:0E:25:8B:46:DF:A5:4D:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8cea2ac6018cfa0a16bf19f4/0/CBA778B7415BD4D1E6EF0E800E258B46DFA54D8A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cbfc84cd-39fb-4efb-a65d-dca73adfa9ac/c3a7a2fa9fdf7a6f5087b840b66c4fc34120d5ce7114b878d0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8cea2ac6018cfa0a16bf19f4/0/3139392e3138382e3233372e302f32342d3234203d3e20333936333536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.188.237.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1b:c2:93:13:7b:99:14:44:44:71:f7:c8:d5:ca:45:77:bc:a7:
         6d:c2:20:95:5a:f1:e6:a1:26:94:25:17:ac:81:30:2e:39:3e:
         db:32:3f:9a:a1:cf:c7:54:20:13:45:d7:ac:4d:26:06:37:8e:
         4b:99:d6:3c:42:34:73:a9:5a:c0:5d:e7:aa:3e:19:ce:39:a9:
         aa:31:97:6b:41:58:b7:ab:a4:8f:c7:a1:86:4c:5e:6d:13:20:
         e6:48:b8:f1:b9:5a:25:39:42:cf:bd:06:8a:09:6b:c1:74:05:
         bd:c8:79:6d:01:fe:36:fa:d4:fd:69:16:aa:13:0e:a4:fe:bd:
         dd:87:ef:29:d6:9f:1e:b4:b7:c5:87:dd:54:6a:0a:91:59:8d:
         ee:3a:b4:0c:32:78:e6:9e:56:54:3f:1f:9e:67:84:04:75:dc:
         25:50:79:dd:81:1e:5e:2d:31:ef:17:46:ee:e8:cd:bd:a4:e9:
         e9:3a:4f:2e:1d:77:57:42:71:41:28:df:43:c6:86:13:21:7b:
         2a:02:80:a8:af:02:2a:29:a3:b9:49:9b:8f:92:7b:2c:c8:b3:
         f8:6f:84:50:3f:c0:27:24:47:95:7b:3f:3a:57:0f:41:03:50:
         9d:1e:6c:97:fc:53:a2:61:13:9e:96:7f:10:d9:55:c7:04:31:
         c7:4f:67:3b
-----BEGIN CERTIFICATE-----
MIIFtjCCBJ6gAwIBAgIUISd+ncPHm3VOpCpOm6QsoyZwgnUwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyYzNhN2EyZmE5ZmRmN2E2ZjUwODdiODQwYjY2YzRmYzM0
MTIwZDVjZTcxMTRiODc4ZDAwHhcNMjQxMjEyMjAyMzIzWhcNMjUxMjExMjAyODIz
WjAzMTEwLwYDVQQDEyg5M0U4Q0Y0RDAzOTQxRkI5NEQwREM1MDFGMUEzMUQxNzNC
QTQ0NEFBMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxln8CVzw5dts
2uzvPw5fClsW+nlq4BGzqqQBZZUbixTIDHkiKlfsC+MN0WmcrHO73yhVOqEs4ajn
NML1ZXPRbrEFYrvEFKmT3m98FFDD9E9DcbrA/ciSGxtFZ3KeuzqO37pTQzwundPy
yRk8zwM/T2287OGfd85CHTDNhYDb4PHCJU1zvsNERe91UZ04FBuBVmtma+NG+Biz
71JdC/fsxQZ61EjYzu8sOQh3jl4YFGz99s7dw0+RD/mQEZK0Fe77ixMuuT8p3ZxB
goWu+4Jw5dCt3s2+rNJnoX9ChN86ASZHfW68dqOxsSgFaIX60DY1paMSCJmDSto6
awVUu+Ku2wIDAQABo4ICtjCCArIwHQYDVR0OBBYEFJPoz00DlB+5TQ3FAfGjHRc7
pESqMB8GA1UdIwQYMBaAFMuneLdBW9TR5u8OgA4li0bfpU2KMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmOGNlYTJhYzYwMThjZmEwYTE2YmYxOWY0LzAv
Q0JBNzc4Qjc0MTVCRDREMUU2RUYwRTgwMEUyNThCNDZERkE1NEQ4QS5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNGFiN2FlNGQtYmQ3Yi00YjMzLTlhODgtNWIyMmQy
YTgzMzdkL2NiZmM4NGNkLTM5ZmItNGVmYi1hNjVkLWRjYTczYWRmYTlhYy9jM2E3
YTJmYTlmZGY3YTZmNTA4N2I4NDBiNjZjNGZjMzQxMjBkNWNlNzExNGI4NzhkMC5j
ZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjhjZWEyYWM2MDE4Y2Zh
MGExNmJmMTlmNC8wLzMxMzkzOTJlMzEzODM4MmUzMjMzMzcyZTMwMmYzMjM0MmQz
MjM0MjAzZDNlMjAzMzM5MzYzMzM1MzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADHvO0wDQYJKoZIhvcN
AQELBQADggEBABvCkxN7mRRERHH3yNXKRXe8p23CIJVa8eahJpQlF6yBMC45Ptsy
P5qhz8dUIBNF16xNJgY3jkuZ1jxCNHOpWsBd56o+Gc45qaoxl2tBWLerpI/HoYZM
Xm0TIOZIuPG5WiU5Qs+9BooJa8F0Bb3IeW0B/jb61P1pFqoTDqT+vd2H7ynWnx60
t8WH3VRqCpFZje46tAwyeOaeVlQ/H55nhAR13CVQed2BHl4tMe8XRu7ozb2k6ek6
Ty4dd1dCcUEo30PGhhMheyoCgKivAiopo7lJm4+SeyzIs/hvhFA/wCckR5V7PzpX
D0EDUJ0ebJf8U6JhE56WfxDZVccEMcdPZzs=
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:26:34 2025 by rpki-client