Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8cea2ac6018cfa0a16bf19f4/0/3139392e3138382e3233392e302f32342d3234203d3e203631333137.roa
File:                     3139392e3138382e3233392e302f32342d3234203d3e203631333137.roa (raw, json)
Hash identifier:          OsxDDS3dZf0CGHzSMXOau5qPbsqlQX/Z1yAI375Ol8k=
Subject key identifier:   98:58:15:A3:4B:F0:05:40:EB:F4:55:AE:AF:1B:47:D0:A4:A8:7F:DB
Certificate issuer:       /CN=c3a7a2fa9fdf7a6f5087b840b66c4fc34120d5ce7114b878d0
Certificate serial:       7652F123D374A6F1E743F24DC4EE1EB6EE8C737D
Authority key identifier: CB:A7:78:B7:41:5B:D4:D1:E6:EF:0E:80:0E:25:8B:46:DF:A5:4D:8A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cbfc84cd-39fb-4efb-a65d-dca73adfa9ac/c3a7a2fa9fdf7a6f5087b840b66c4fc34120d5ce7114b878d0.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8cea2ac6018cfa0a16bf19f4/0/3139392e3138382e3233392e302f32342d3234203d3e203631333137.roa
Signing time:             Thu 12 Dec 2024 20:28:23 +0000
ROA not before:           Thu 12 Dec 2024 20:23:23 +0000
ROA not after:            Thu 11 Dec 2025 20:28:23 +0000
asID:                     61317
IP address blocks:        199.188.239.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8cea2ac6018cfa0a16bf19f4/0/CBA778B7415BD4D1E6EF0E800E258B46DFA54D8A.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8cea2ac6018cfa0a16bf19f4/0/CBA778B7415BD4D1E6EF0E800E258B46DFA54D8A.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cbfc84cd-39fb-4efb-a65d-dca73adfa9ac/c3a7a2fa9fdf7a6f5087b840b66c4fc34120d5ce7114b878d0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cbfc84cd-39fb-4efb-a65d-dca73adfa9ac/cbfc84cd-39fb-4efb-a65d-dca73adfa9ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cbfc84cd-39fb-4efb-a65d-dca73adfa9ac/cbfc84cd-39fb-4efb-a65d-dca73adfa9ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cbfc84cd-39fb-4efb-a65d-dca73adfa9ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 01:52:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:52:f1:23:d3:74:a6:f1:e7:43:f2:4d:c4:ee:1e:b6:ee:8c:73:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c3a7a2fa9fdf7a6f5087b840b66c4fc34120d5ce7114b878d0
        Validity
            Not Before: Dec 12 20:23:23 2024 GMT
            Not After : Dec 11 20:28:23 2025 GMT
        Subject: CN=985815A34BF00540EBF455AEAF1B47D0A4A87FDB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:42:eb:44:81:19:de:c5:90:34:1e:65:91:33:
                    61:8b:6c:e9:8a:3a:d9:4f:25:b1:bc:55:24:d0:2f:
                    62:18:f2:12:4d:27:6d:bb:30:9e:fa:61:cc:48:98:
                    b3:aa:71:48:09:01:72:17:16:f5:8b:f2:c1:19:f6:
                    cd:8e:a6:25:5e:7b:51:a1:d7:fb:3a:ba:3a:17:15:
                    bd:ee:fc:39:7e:84:76:dd:3c:fe:ed:3d:51:a8:dc:
                    d1:54:2d:56:34:6d:31:66:26:55:b7:23:4a:2c:bd:
                    10:50:76:39:b0:b7:66:56:fd:b8:9f:b3:2c:4b:e6:
                    6b:5e:ce:21:64:25:cb:f8:eb:c0:2b:0f:4f:9b:f7:
                    9a:9d:bc:4a:2e:ec:09:5c:a8:eb:5e:b5:fb:3b:43:
                    77:72:f3:55:52:f7:40:06:73:76:b3:92:78:b9:7a:
                    1e:81:e4:53:03:c3:b3:fe:a8:41:da:9c:d6:89:f3:
                    0b:16:af:bf:cc:2c:83:16:54:bc:c0:ce:f1:74:88:
                    dc:23:91:90:de:0a:2e:02:b2:4c:73:8a:91:02:56:
                    87:66:dc:8c:87:44:4a:93:b2:99:ac:7c:91:6d:dc:
                    06:ae:a3:5b:95:3a:a2:74:8b:52:4f:82:7e:a9:1c:
                    44:e7:dc:27:b6:8d:0e:8f:54:f0:7e:81:d1:b3:df:
                    b8:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:58:15:A3:4B:F0:05:40:EB:F4:55:AE:AF:1B:47:D0:A4:A8:7F:DB
            X509v3 Authority Key Identifier:
                keyid:CB:A7:78:B7:41:5B:D4:D1:E6:EF:0E:80:0E:25:8B:46:DF:A5:4D:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8cea2ac6018cfa0a16bf19f4/0/CBA778B7415BD4D1E6EF0E800E258B46DFA54D8A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cbfc84cd-39fb-4efb-a65d-dca73adfa9ac/c3a7a2fa9fdf7a6f5087b840b66c4fc34120d5ce7114b878d0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8cea2ac6018cfa0a16bf19f4/0/3139392e3138382e3233392e302f32342d3234203d3e203631333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.188.239.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ad:16:26:d3:e7:fd:28:77:b4:f4:94:ba:94:19:9b:a9:d7:7d:
         68:19:b0:9e:14:c2:a0:6f:73:28:0b:a5:e1:b0:02:75:ea:cf:
         c8:25:17:6c:ec:91:d9:0f:12:4f:80:0c:70:86:6f:77:12:1a:
         c3:95:ed:9c:10:7e:6d:b3:35:06:df:8d:d0:d8:db:13:a8:12:
         4f:4e:2e:05:a2:9c:5d:09:da:7f:5b:6c:d8:35:a1:78:76:d4:
         5e:4b:9c:0f:ae:69:b0:ce:01:19:ce:87:f8:43:45:0e:dd:9c:
         4f:25:ba:0c:a0:13:c5:aa:bb:37:ac:9a:4c:04:ff:a5:05:67:
         b3:cc:21:dc:46:b1:e6:a7:f8:2d:a2:d6:a3:3f:22:65:29:81:
         c3:6f:93:29:95:83:33:c5:e1:af:1d:43:fd:4c:82:eb:7d:34:
         a5:a9:4b:b0:44:5e:13:08:9e:35:9f:91:8c:10:3f:7d:b7:17:
         12:68:d5:24:6a:5c:45:d9:91:92:0d:4f:2e:aa:a5:ff:23:df:
         a7:70:bc:ab:05:e5:d6:e3:a1:81:3d:4d:ca:9b:9e:76:93:84:
         89:4e:19:c8:d1:79:c1:77:a2:61:0e:7d:6e:d3:df:5d:d9:05:
         90:b6:e3:b1:77:41:b5:dd:16:73:d8:91:b3:8c:19:4d:bb:09:
         92:26:fb:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:09:25 2025 by rpki-client