Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/3139322e3230382e31322e302f32342d3234203d3e20323134363534.roa
File:                     3139322e3230382e31322e302f32342d3234203d3e20323134363534.roa (raw, json)
Hash identifier:          nspKdoxfa4UVjgcgh02Y6K4W2pEBlSTfCZR4DLMixYo=
Subject key identifier:   25:C3:21:D7:1B:B0:FE:F5:AF:07:CB:12:F3:BD:D5:F4:3A:A9:9A:61
Certificate issuer:       /CN=c487e481b4a0d3800626ef058f9b9ae9411745794ebeaa34b7
Certificate serial:       5CC6E1F460D0ACFE420C5B160D4A913663D8B9C7
Authority key identifier: 66:18:76:BF:25:91:B8:70:21:FA:45:24:F5:40:65:A1:18:C3:15:60
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9612d9a4-803d-4413-aef7-b133b4ff80b7/c487e481b4a0d3800626ef058f9b9ae9411745794ebeaa34b7.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/3139322e3230382e31322e302f32342d3234203d3e20323134363534.roa
Signing time:             Fri 29 Nov 2024 15:28:53 +0000
ROA not before:           Fri 29 Nov 2024 15:23:53 +0000
ROA not after:            Fri 28 Nov 2025 15:28:53 +0000
asID:                     214654
IP address blocks:        192.208.12.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/661876BF2591B87021FA4524F54065A118C31560.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/661876BF2591B87021FA4524F54065A118C31560.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9612d9a4-803d-4413-aef7-b133b4ff80b7/c487e481b4a0d3800626ef058f9b9ae9411745794ebeaa34b7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9612d9a4-803d-4413-aef7-b133b4ff80b7/9612d9a4-803d-4413-aef7-b133b4ff80b7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9612d9a4-803d-4413-aef7-b133b4ff80b7/9612d9a4-803d-4413-aef7-b133b4ff80b7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9612d9a4-803d-4413-aef7-b133b4ff80b7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 08:18:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:c6:e1:f4:60:d0:ac:fe:42:0c:5b:16:0d:4a:91:36:63:d8:b9:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c487e481b4a0d3800626ef058f9b9ae9411745794ebeaa34b7
        Validity
            Not Before: Nov 29 15:23:53 2024 GMT
            Not After : Nov 28 15:28:53 2025 GMT
        Subject: CN=25C321D71BB0FEF5AF07CB12F3BDD5F43AA99A61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:20:cc:7d:28:e9:ad:44:c1:2e:75:96:78:80:
                    99:f5:74:06:be:4c:59:eb:d9:9e:b0:a8:0a:a2:a0:
                    b2:71:33:7e:a3:55:cf:b9:22:4d:33:43:48:b2:f4:
                    1d:60:55:68:2b:65:43:e0:df:49:78:1f:77:ce:3c:
                    f2:41:dc:7d:f9:af:78:e4:1b:68:72:fe:25:c2:05:
                    f8:6f:b7:e3:30:61:08:43:70:21:de:cb:40:87:58:
                    1f:4b:74:b4:60:55:32:84:d9:d0:3f:9b:9b:a6:0c:
                    f3:fb:db:aa:56:2b:62:f7:13:e1:f2:e1:a1:c8:fe:
                    9e:03:23:77:c9:b6:3a:77:e7:da:10:06:da:37:5d:
                    8a:8b:6a:5f:c5:0a:e6:3b:c8:89:08:2d:e6:9e:31:
                    0c:0a:03:85:c1:84:79:ae:08:73:32:48:13:eb:d3:
                    4c:a2:aa:da:3d:a0:ef:a6:2a:8e:5b:71:bb:9b:9f:
                    96:50:99:c9:bb:68:a5:8d:e3:62:07:6a:c4:0c:a5:
                    cb:cb:23:54:fc:f3:b0:6c:06:c1:22:90:7d:68:a3:
                    e4:b5:74:73:23:60:f4:a4:d3:6a:24:7d:f5:9f:75:
                    1a:8a:c9:07:21:2f:d3:71:9d:ab:04:ea:c9:b7:b1:
                    ff:8c:45:9f:0c:b9:ca:47:a7:87:4c:c4:85:14:e4:
                    97:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:C3:21:D7:1B:B0:FE:F5:AF:07:CB:12:F3:BD:D5:F4:3A:A9:9A:61
            X509v3 Authority Key Identifier:
                keyid:66:18:76:BF:25:91:B8:70:21:FA:45:24:F5:40:65:A1:18:C3:15:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/661876BF2591B87021FA4524F54065A118C31560.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9612d9a4-803d-4413-aef7-b133b4ff80b7/c487e481b4a0d3800626ef058f9b9ae9411745794ebeaa34b7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/3139322e3230382e31322e302f32342d3234203d3e20323134363534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.208.12.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5e:94:bc:c6:c7:16:3b:9c:06:37:c2:33:bb:fa:34:8a:11:bb:
         1d:40:03:a5:e5:64:57:1d:07:9c:26:51:60:ed:d0:8c:72:ad:
         ab:74:3e:56:79:3d:99:1b:20:59:53:d6:52:bf:f2:c4:53:77:
         75:84:a0:43:5a:34:b4:0c:3e:d4:75:92:cc:43:4b:4b:b2:51:
         f5:03:f6:1a:ab:f2:28:b9:19:da:71:90:94:30:60:b3:6d:38:
         9d:a7:bc:42:9e:ec:fb:32:9e:53:f9:82:a6:01:5b:c8:3c:c4:
         32:a4:79:21:bc:04:7f:e7:d9:21:94:20:52:db:ca:8d:dc:0c:
         11:16:f7:64:50:bf:e4:93:7f:da:bc:93:e8:1f:5e:67:30:ed:
         92:8d:1d:1c:9f:9a:f6:d4:61:35:d0:5c:dc:af:b2:fd:87:4e:
         bc:67:89:ce:ca:b4:a3:43:ba:32:36:f1:74:bb:94:f3:f8:5a:
         77:96:7b:b6:fe:28:ef:7f:95:65:71:50:a8:0d:c5:21:d4:db:
         cb:e4:5f:da:ea:49:f5:bd:ec:8a:82:78:ae:a2:fc:07:3f:e6:
         46:e8:6f:35:ae:c7:6c:c0:1a:cf:ed:df:97:4c:60:e7:15:d6:
         80:58:96:03:2f:d1:c5:d2:65:3b:95:8b:4a:9d:4a:5c:17:3b:
         9a:44:82:d8
-----BEGIN CERTIFICATE-----
MIIFtDCCBJygAwIBAgIUXMbh9GDQrP5CDFsWDUqRNmPYuccwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyYzQ4N2U0ODFiNGEwZDM4MDA2MjZlZjA1OGY5YjlhZTk0
MTE3NDU3OTRlYmVhYTM0YjcwHhcNMjQxMTI5MTUyMzUzWhcNMjUxMTI4MTUyODUz
WjAzMTEwLwYDVQQDEygyNUMzMjFENzFCQjBGRUY1QUYwN0NCMTJGM0JERDVGNDNB
QTk5QTYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAriDMfSjprUTB
LnWWeICZ9XQGvkxZ69mesKgKoqCycTN+o1XPuSJNM0NIsvQdYFVoK2VD4N9JeB93
zjzyQdx9+a945Btocv4lwgX4b7fjMGEIQ3Ah3stAh1gfS3S0YFUyhNnQP5ubpgzz
+9uqViti9xPh8uGhyP6eAyN3ybY6d+faEAbaN12Ki2pfxQrmO8iJCC3mnjEMCgOF
wYR5rghzMkgT69NMoqraPaDvpiqOW3G7m5+WUJnJu2iljeNiB2rEDKXLyyNU/POw
bAbBIpB9aKPktXRzI2D0pNNqJH31n3UaiskHIS/TcZ2rBOrJt7H/jEWfDLnKR6eH
TMSFFOSXHwIDAQABo4ICtDCCArAwHQYDVR0OBBYEFCXDIdcbsP71rwfLEvO91fQ6
qZphMB8GA1UdIwQYMBaAFGYYdr8lkbhwIfpFJPVAZaEYwxVgMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmOGZkZWVjMGMwMTkwMTc4MzYxMTczOGZmLzAv
NjYxODc2QkYyNTkxQjg3MDIxRkE0NTI0RjU0MDY1QTExOEMzMTU2MC5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNmVhZDA3M2MtYjlmMC00NTIzLWIzOWUtYTNjN2Rh
Yjk3YzI1Lzk2MTJkOWE0LTgwM2QtNDQxMy1hZWY3LWIxMzNiNGZmODBiNy9jNDg3
ZTQ4MWI0YTBkMzgwMDYyNmVmMDU4ZjliOWFlOTQxMTc0NTc5NGViZWFhMzRiNy5j
ZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjhmZGVlYzBjMDE5MDE3
ODM2MTE3MzhmZi8wLzMxMzkzMjJlMzIzMDM4MmUzMTMyMmUzMDJmMzIzNDJkMzIz
NDIwM2QzZTIwMzIzMTM0MzYzNTM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwNAMMA0GCSqGSIb3DQEB
CwUAA4IBAQBelLzGxxY7nAY3wjO7+jSKEbsdQAOl5WRXHQecJlFg7dCMcq2rdD5W
eT2ZGyBZU9ZSv/LEU3d1hKBDWjS0DD7UdZLMQ0tLslH1A/Yaq/IouRnacZCUMGCz
bTidp7xCnuz7Mp5T+YKmAVvIPMQypHkhvAR/59khlCBS28qN3AwRFvdkUL/kk3/a
vJPoH15nMO2SjR0cn5r21GE10Fzcr7L9h068Z4nOyrSjQ7oyNvF0u5Tz+Fp3lnu2
/ijvf5VlcVCoDcUh1NvL5F/a6kn1veyKgniuovwHP+ZG6G81rsdswBrP7d+XTGDn
FdaAWJYDL9HF0mU7lYtKnUpcFzuaRILY
-----END CERTIFICATE-----
Generated at Sat Apr 5 16:18:26 2025 by rpki-client