Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/3139322e3230382e31322e302f32342d3234203d3e20323135333034.roa
File:                     3139322e3230382e31322e302f32342d3234203d3e20323135333034.roa (raw, json)
Hash identifier:          OVu2Vi14Ckp+Nsj4EP2+1I/ImIVn/2+XK0mAguCKLbQ=
Subject key identifier:   F6:7D:52:C4:F3:51:84:50:BD:80:47:D7:7B:F6:2B:C8:2A:10:E2:40
Certificate issuer:       /CN=c487e481b4a0d3800626ef058f9b9ae9411745794ebeaa34b7
Certificate serial:       7ECE1350ECB8B5961002EA530921D7F122C8C1D9
Authority key identifier: 66:18:76:BF:25:91:B8:70:21:FA:45:24:F5:40:65:A1:18:C3:15:60
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9612d9a4-803d-4413-aef7-b133b4ff80b7/c487e481b4a0d3800626ef058f9b9ae9411745794ebeaa34b7.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/3139322e3230382e31322e302f32342d3234203d3e20323135333034.roa
Signing time:             Thu 28 Nov 2024 12:00:50 +0000
ROA not before:           Thu 28 Nov 2024 11:55:50 +0000
ROA not after:            Thu 27 Nov 2025 12:00:50 +0000
asID:                     215304
IP address blocks:        192.208.12.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/661876BF2591B87021FA4524F54065A118C31560.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/661876BF2591B87021FA4524F54065A118C31560.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9612d9a4-803d-4413-aef7-b133b4ff80b7/c487e481b4a0d3800626ef058f9b9ae9411745794ebeaa34b7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9612d9a4-803d-4413-aef7-b133b4ff80b7/9612d9a4-803d-4413-aef7-b133b4ff80b7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9612d9a4-803d-4413-aef7-b133b4ff80b7/9612d9a4-803d-4413-aef7-b133b4ff80b7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9612d9a4-803d-4413-aef7-b133b4ff80b7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 01:59:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:ce:13:50:ec:b8:b5:96:10:02:ea:53:09:21:d7:f1:22:c8:c1:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c487e481b4a0d3800626ef058f9b9ae9411745794ebeaa34b7
        Validity
            Not Before: Nov 28 11:55:50 2024 GMT
            Not After : Nov 27 12:00:50 2025 GMT
        Subject: CN=F67D52C4F3518450BD8047D77BF62BC82A10E240
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:43:f2:c4:26:0e:7c:ed:ad:38:a6:da:cc:64:
                    ee:cb:d6:19:f5:63:64:f6:1e:86:35:21:72:51:53:
                    c2:0d:97:7f:f4:d5:b5:a3:95:81:7e:09:af:cd:95:
                    87:5d:11:3a:96:21:28:47:6a:56:61:98:c8:21:18:
                    37:e7:da:15:11:d9:4d:3e:11:75:95:54:40:c6:7f:
                    90:95:65:91:72:d0:f0:aa:7b:e6:39:98:10:74:4d:
                    6d:0e:da:88:1f:c1:c0:d1:2a:d3:a3:2e:5d:a9:06:
                    56:5b:df:3d:5e:3b:5e:34:64:25:59:e5:99:9f:bf:
                    19:42:dc:2b:e4:42:e5:e9:8e:49:95:e4:20:91:2c:
                    e7:45:42:4d:9d:91:c1:27:96:6c:f8:b4:0c:bc:18:
                    bc:c1:45:18:43:79:68:ed:85:90:ec:50:02:2b:89:
                    8f:af:22:96:c7:48:a7:3c:f3:44:45:f0:37:94:3e:
                    7b:fa:f4:3c:da:47:56:ad:ae:3f:88:16:66:72:c7:
                    33:c7:4e:da:06:28:68:9e:44:77:64:15:c9:5d:de:
                    2f:e6:35:a0:9e:a7:03:c4:ae:d2:ca:a6:2a:30:b6:
                    45:1a:67:dc:07:39:4a:a7:32:81:00:3d:f1:8f:2d:
                    a8:49:e0:da:91:05:57:aa:30:eb:dc:e8:33:4f:ee:
                    5d:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:7D:52:C4:F3:51:84:50:BD:80:47:D7:7B:F6:2B:C8:2A:10:E2:40
            X509v3 Authority Key Identifier:
                keyid:66:18:76:BF:25:91:B8:70:21:FA:45:24:F5:40:65:A1:18:C3:15:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/661876BF2591B87021FA4524F54065A118C31560.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9612d9a4-803d-4413-aef7-b133b4ff80b7/c487e481b4a0d3800626ef058f9b9ae9411745794ebeaa34b7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/3139322e3230382e31322e302f32342d3234203d3e20323135333034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.208.12.0/24

    Signature Algorithm: sha256WithRSAEncryption
         70:08:65:3a:c2:21:92:59:6d:8b:60:e7:0c:78:b5:2f:15:a5:
         46:9e:f8:70:ac:71:cb:bd:6f:5e:f6:d7:04:51:c2:c8:12:7d:
         a4:ca:79:14:63:de:fe:b8:4c:d8:22:42:bd:46:72:d6:06:1e:
         1b:a9:1d:22:f2:99:96:c1:10:88:89:44:28:53:89:45:09:40:
         c2:64:58:ca:a3:6d:56:6a:05:07:b1:05:6c:80:f3:8c:c7:b5:
         7c:4d:d7:89:e1:43:e9:ef:43:4c:22:d2:d4:c1:be:10:f9:70:
         c2:53:83:4b:d7:39:57:98:30:3b:c8:7d:b1:b5:59:85:3f:ef:
         00:05:6f:47:4b:54:b4:d6:e8:ad:92:52:df:58:82:3a:9d:8d:
         4e:1c:17:4f:94:89:1b:33:c1:91:c3:22:be:28:03:a4:05:2f:
         99:23:4e:cb:a2:0d:a2:18:6a:fc:59:28:1f:2c:90:fe:d9:45:
         52:cc:0f:26:83:94:a2:ae:91:3d:89:dc:7e:33:2b:84:7c:ae:
         5f:6b:77:c7:12:f5:0e:c4:ce:48:0a:5f:71:0f:51:66:46:cd:
         f1:36:d8:54:8e:c6:dd:f2:d5:0e:86:43:2d:cc:6a:87:a9:ec:
         19:8f:16:99:c0:4f:2f:fe:18:15:3c:52:2b:2e:be:77:d0:b9:
         cc:48:ea:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 15:00:46 2025 by rpki-client