Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/3139322e3230382e31342e302f32342d3234203d3e20323134303235.roa
File:                     3139322e3230382e31342e302f32342d3234203d3e20323134303235.roa (raw, json)
Hash identifier:          yyP5851aRNMBx5VZ3Y16kgKVUfk97dfJfxd14pigH+Y=
Subject key identifier:   70:AB:42:34:B1:EB:BD:6A:39:C6:AE:81:2B:AC:0D:EA:7E:5A:6F:23
Certificate issuer:       /CN=c487e481b4a0d3800626ef058f9b9ae9411745794ebeaa34b7
Certificate serial:       057FF385F1E2AB5F80DFE9BF2E25276EB74CA2D6
Authority key identifier: 66:18:76:BF:25:91:B8:70:21:FA:45:24:F5:40:65:A1:18:C3:15:60
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9612d9a4-803d-4413-aef7-b133b4ff80b7/c487e481b4a0d3800626ef058f9b9ae9411745794ebeaa34b7.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/3139322e3230382e31342e302f32342d3234203d3e20323134303235.roa
Signing time:             Thu 28 Nov 2024 12:00:53 +0000
ROA not before:           Thu 28 Nov 2024 11:55:53 +0000
ROA not after:            Thu 27 Nov 2025 12:00:53 +0000
asID:                     214025
IP address blocks:        192.208.14.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/661876BF2591B87021FA4524F54065A118C31560.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/661876BF2591B87021FA4524F54065A118C31560.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9612d9a4-803d-4413-aef7-b133b4ff80b7/c487e481b4a0d3800626ef058f9b9ae9411745794ebeaa34b7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9612d9a4-803d-4413-aef7-b133b4ff80b7/9612d9a4-803d-4413-aef7-b133b4ff80b7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9612d9a4-803d-4413-aef7-b133b4ff80b7/9612d9a4-803d-4413-aef7-b133b4ff80b7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9612d9a4-803d-4413-aef7-b133b4ff80b7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 21:53:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:7f:f3:85:f1:e2:ab:5f:80:df:e9:bf:2e:25:27:6e:b7:4c:a2:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c487e481b4a0d3800626ef058f9b9ae9411745794ebeaa34b7
        Validity
            Not Before: Nov 28 11:55:53 2024 GMT
            Not After : Nov 27 12:00:53 2025 GMT
        Subject: CN=70AB4234B1EBBD6A39C6AE812BAC0DEA7E5A6F23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:c5:e8:86:c3:32:0f:6d:e9:01:55:e6:db:2c:
                    2f:2c:29:b9:66:55:59:12:88:db:51:59:ae:e7:14:
                    bc:3b:ed:ee:06:87:53:0b:58:19:83:ad:5b:b8:8f:
                    e8:04:54:c8:80:43:a2:0a:87:05:93:01:9a:da:90:
                    18:ba:6d:7c:f5:23:ba:97:99:13:da:d1:c4:51:aa:
                    3d:52:dc:69:33:57:a0:60:09:3e:58:04:0a:98:f0:
                    c5:95:33:88:46:7f:bb:a2:42:b1:83:4c:0c:e7:31:
                    8c:44:6b:ac:13:9d:22:31:dc:7e:3a:7f:11:2e:8e:
                    e9:87:11:21:3e:e4:c0:8b:39:33:e4:2c:f0:8a:14:
                    94:19:6b:06:32:c0:04:2e:2e:ab:f5:38:d0:c0:be:
                    d1:7f:6a:c5:35:98:96:25:8b:33:f8:ce:69:d7:22:
                    1f:28:b5:a3:ac:52:81:5d:92:0d:ae:be:cc:7b:c2:
                    d7:5c:9e:78:95:27:53:29:9a:39:ad:4d:28:8f:82:
                    73:97:d0:14:62:3c:1f:3a:fd:b9:c8:7f:63:27:37:
                    b9:d2:a9:65:6e:d8:39:5e:0c:0b:d5:ea:5b:4d:c2:
                    cd:0d:98:ac:62:c8:30:4c:b2:1d:44:38:d2:19:79:
                    71:7a:0f:b3:ab:65:14:d1:f6:c2:21:69:be:8f:58:
                    0a:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:AB:42:34:B1:EB:BD:6A:39:C6:AE:81:2B:AC:0D:EA:7E:5A:6F:23
            X509v3 Authority Key Identifier:
                keyid:66:18:76:BF:25:91:B8:70:21:FA:45:24:F5:40:65:A1:18:C3:15:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/661876BF2591B87021FA4524F54065A118C31560.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9612d9a4-803d-4413-aef7-b133b4ff80b7/c487e481b4a0d3800626ef058f9b9ae9411745794ebeaa34b7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/3139322e3230382e31342e302f32342d3234203d3e20323134303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.208.14.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2f:07:83:fc:23:ed:c0:77:2d:a6:d0:05:e1:d7:9e:b6:ce:e3:
         4a:76:dc:83:25:e0:36:03:b5:6e:14:89:08:78:29:0a:af:25:
         a6:93:bc:97:12:4f:8d:8f:75:15:2f:3c:22:d9:a7:ad:10:52:
         1f:dd:f0:eb:14:0d:8e:3f:52:20:70:ad:33:e2:bb:53:5e:22:
         d9:5d:d1:1a:aa:0e:27:5a:81:04:0d:cf:22:4f:c1:f8:e9:3c:
         46:24:e6:34:25:08:d5:ba:f7:18:35:34:af:fb:ab:85:81:29:
         c5:30:c5:bf:92:0f:84:21:c4:41:bb:67:cf:9c:14:a4:f0:59:
         af:bc:18:16:8c:48:3b:78:b4:56:22:4a:04:b3:5a:d3:49:e5:
         57:da:c9:4d:61:09:c7:2a:a6:db:3a:01:9e:a7:56:23:f2:fa:
         78:38:a5:b2:96:6a:78:b5:39:04:32:9e:5e:b1:f7:d1:6e:b6:
         e2:af:6e:e6:fa:e7:d5:51:a1:6d:13:e9:10:66:62:63:02:1c:
         d2:49:a7:0d:2c:a7:05:12:d5:a8:b6:c7:0e:bf:51:fb:4d:d7:
         c5:b2:ff:81:c9:04:d1:f9:ca:e7:7c:8e:50:32:c3:78:3e:4d:
         67:dc:eb:58:49:c1:09:f1:9f:af:62:03:61:be:3c:ca:48:b4:
         cf:6a:da:ad
-----BEGIN CERTIFICATE-----
MIIFtDCCBJygAwIBAgIUBX/zhfHiq1+A3+m/LiUnbrdMotYwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyYzQ4N2U0ODFiNGEwZDM4MDA2MjZlZjA1OGY5YjlhZTk0
MTE3NDU3OTRlYmVhYTM0YjcwHhcNMjQxMTI4MTE1NTUzWhcNMjUxMTI3MTIwMDUz
WjAzMTEwLwYDVQQDEyg3MEFCNDIzNEIxRUJCRDZBMzlDNkFFODEyQkFDMERFQTdF
NUE2RjIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlMXohsMyD23p
AVXm2ywvLCm5ZlVZEojbUVmu5xS8O+3uBodTC1gZg61buI/oBFTIgEOiCocFkwGa
2pAYum189SO6l5kT2tHEUao9UtxpM1egYAk+WAQKmPDFlTOIRn+7okKxg0wM5zGM
RGusE50iMdx+On8RLo7phxEhPuTAizkz5CzwihSUGWsGMsAELi6r9TjQwL7Rf2rF
NZiWJYsz+M5p1yIfKLWjrFKBXZINrr7Me8LXXJ54lSdTKZo5rU0oj4Jzl9AUYjwf
Ov25yH9jJze50qllbtg5XgwL1epbTcLNDZisYsgwTLIdRDjSGXlxeg+zq2UU0fbC
IWm+j1gK+wIDAQABo4ICtDCCArAwHQYDVR0OBBYEFHCrQjSx671qOcaugSusDep+
Wm8jMB8GA1UdIwQYMBaAFGYYdr8lkbhwIfpFJPVAZaEYwxVgMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmOGZkZWVjMGMwMTkwMTc4MzYxMTczOGZmLzAv
NjYxODc2QkYyNTkxQjg3MDIxRkE0NTI0RjU0MDY1QTExOEMzMTU2MC5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNmVhZDA3M2MtYjlmMC00NTIzLWIzOWUtYTNjN2Rh
Yjk3YzI1Lzk2MTJkOWE0LTgwM2QtNDQxMy1hZWY3LWIxMzNiNGZmODBiNy9jNDg3
ZTQ4MWI0YTBkMzgwMDYyNmVmMDU4ZjliOWFlOTQxMTc0NTc5NGViZWFhMzRiNy5j
ZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjhmZGVlYzBjMDE5MDE3
ODM2MTE3MzhmZi8wLzMxMzkzMjJlMzIzMDM4MmUzMTM0MmUzMDJmMzIzNDJkMzIz
NDIwM2QzZTIwMzIzMTM0MzAzMjM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwNAOMA0GCSqGSIb3DQEB
CwUAA4IBAQAvB4P8I+3Ady2m0AXh1562zuNKdtyDJeA2A7VuFIkIeCkKryWmk7yX
Ek+Nj3UVLzwi2aetEFIf3fDrFA2OP1IgcK0z4rtTXiLZXdEaqg4nWoEEDc8iT8H4
6TxGJOY0JQjVuvcYNTSv+6uFgSnFMMW/kg+EIcRBu2fPnBSk8FmvvBgWjEg7eLRW
IkoEs1rTSeVX2slNYQnHKqbbOgGep1Yj8vp4OKWylmp4tTkEMp5esffRbrbir27m
+ufVUaFtE+kQZmJjAhzSSacNLKcFEtWotscOv1H7TdfFsv+ByQTR+crnfI5QMsN4
Pk1n3OtYScEJ8Z+vYgNhvjzKSLTPatqt
-----END CERTIFICATE-----
Generated at Mon Apr 7 02:46:56 2025 by rpki-client