Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/3139322e3230382e31322e302f32342d3234203d3e20333937343233.roa
File:                     3139322e3230382e31322e302f32342d3234203d3e20333937343233.roa (raw, json)
Hash identifier:          /b8W4QimUHRjrG8rV8F+ZmrUrCNCzbvWjvXzxWc75Mk=
Subject key identifier:   FD:95:40:B8:70:83:2D:4E:84:55:57:1F:D0:F0:0A:1B:25:45:E1:4E
Certificate issuer:       /CN=c487e481b4a0d3800626ef058f9b9ae9411745794ebeaa34b7
Certificate serial:       055339AD6DD5A6E66E262E44204A9447DB8E7795
Authority key identifier: 66:18:76:BF:25:91:B8:70:21:FA:45:24:F5:40:65:A1:18:C3:15:60
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9612d9a4-803d-4413-aef7-b133b4ff80b7/c487e481b4a0d3800626ef058f9b9ae9411745794ebeaa34b7.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/3139322e3230382e31322e302f32342d3234203d3e20333937343233.roa
Signing time:             Fri 14 Jun 2024 16:14:01 +0000
ROA not before:           Fri 14 Jun 2024 16:09:01 +0000
ROA not after:            Fri 13 Jun 2025 16:14:01 +0000
asID:                     397423
IP address blocks:        192.208.12.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/661876BF2591B87021FA4524F54065A118C31560.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/661876BF2591B87021FA4524F54065A118C31560.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9612d9a4-803d-4413-aef7-b133b4ff80b7/c487e481b4a0d3800626ef058f9b9ae9411745794ebeaa34b7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9612d9a4-803d-4413-aef7-b133b4ff80b7/9612d9a4-803d-4413-aef7-b133b4ff80b7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9612d9a4-803d-4413-aef7-b133b4ff80b7/9612d9a4-803d-4413-aef7-b133b4ff80b7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9612d9a4-803d-4413-aef7-b133b4ff80b7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 19:47:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:53:39:ad:6d:d5:a6:e6:6e:26:2e:44:20:4a:94:47:db:8e:77:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c487e481b4a0d3800626ef058f9b9ae9411745794ebeaa34b7
        Validity
            Not Before: Jun 14 16:09:01 2024 GMT
            Not After : Jun 13 16:14:01 2025 GMT
        Subject: CN=FD9540B870832D4E8455571FD0F00A1B2545E14E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:2d:08:e0:03:65:87:93:cf:ec:f9:0b:88:36:
                    b8:17:c2:e3:64:65:77:24:77:ba:22:f9:0e:3e:77:
                    68:2b:05:3b:a4:a3:de:82:58:37:d9:36:07:47:47:
                    4b:96:28:97:ff:99:fc:1b:63:a0:58:50:e4:2f:0d:
                    58:9c:6d:fb:a4:a6:b0:06:6b:78:3a:43:d4:b5:67:
                    35:9f:af:cd:37:d1:ff:0e:42:94:7d:9c:55:2e:bd:
                    7e:49:c1:72:76:eb:3c:b4:4c:be:c7:31:67:47:13:
                    c5:e3:e9:f1:6f:b4:25:91:f6:6a:60:f2:ef:73:c5:
                    c3:73:c5:90:d7:1d:9a:6f:5c:c4:12:72:80:4e:80:
                    0f:d7:ac:f0:19:eb:2d:55:ef:89:55:2b:fe:77:e2:
                    7e:a1:8e:fe:ba:1e:e3:76:f6:27:6d:08:9c:2c:20:
                    6c:48:09:4b:a3:d7:04:1a:bc:f5:c4:b8:ad:06:73:
                    9b:31:1f:4c:d6:14:d3:0c:45:f7:15:77:08:4b:4c:
                    23:a7:cd:67:1e:bb:c0:eb:46:15:18:b4:ea:59:c9:
                    fc:6b:c3:fd:a2:1f:2c:d4:33:c4:a4:1c:a6:e1:e2:
                    e0:8d:bc:f1:7a:f0:67:c1:80:1b:b1:ec:46:d3:6f:
                    79:8c:2e:8f:8e:1d:11:90:9c:39:ab:32:af:9b:0e:
                    e0:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:95:40:B8:70:83:2D:4E:84:55:57:1F:D0:F0:0A:1B:25:45:E1:4E
            X509v3 Authority Key Identifier:
                keyid:66:18:76:BF:25:91:B8:70:21:FA:45:24:F5:40:65:A1:18:C3:15:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/661876BF2591B87021FA4524F54065A118C31560.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9612d9a4-803d-4413-aef7-b133b4ff80b7/c487e481b4a0d3800626ef058f9b9ae9411745794ebeaa34b7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/3139322e3230382e31322e302f32342d3234203d3e20333937343233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.208.12.0/24

    Signature Algorithm: sha256WithRSAEncryption
         36:a5:34:0b:84:6e:84:2f:74:57:a1:aa:a4:dd:a2:8c:52:93:
         63:5b:dc:c1:d8:8f:1d:f3:19:bc:eb:d4:26:10:ac:8d:45:a8:
         ca:1e:31:aa:f5:a5:66:e8:4c:72:61:60:b0:c3:69:0f:74:77:
         1b:0b:37:d0:0a:de:ee:6d:2b:a9:5f:b7:cd:7b:7c:14:fd:20:
         7f:f6:c3:94:b3:50:25:a5:0a:16:9e:ba:a4:4c:88:22:b8:66:
         e4:cc:1d:30:ff:c4:ff:9e:48:8e:a8:3b:21:c4:e6:2a:c6:d5:
         a4:19:47:20:01:ee:36:6e:03:35:ae:b2:05:36:2c:19:9e:9f:
         ab:13:c2:70:55:fd:4f:f6:5e:78:8b:d1:9e:51:f6:01:e5:4f:
         f2:ba:6e:2d:fc:09:16:c0:5f:9b:08:22:68:7d:12:89:c4:4e:
         ee:8a:72:aa:d3:d0:80:29:5f:b0:19:71:1a:02:2a:85:3a:ce:
         69:cc:3b:ff:45:fe:50:9e:b2:f3:c1:d3:a0:55:d2:e1:2e:7f:
         98:b5:ff:6b:11:c1:d0:5c:63:3e:98:82:7f:c9:b3:1d:91:fc:
         5b:93:66:a1:62:01:90:ca:e7:a0:13:97:64:a2:f8:b0:22:31:
         91:bd:06:71:8c:c5:a9:42:59:c9:71:7d:e6:62:d9:fc:7e:b4:
         4d:0a:cf:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:03:25 2024 by rpki-client on console-fra.rpki-client.org