Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/3139322e3230382e322e302f32342d3234203d3e20323134373034.roa
File:                     3139322e3230382e322e302f32342d3234203d3e20323134373034.roa (raw, json)
Hash identifier:          1FV9fVUURfjB9suM1ZCmMeohXTqQ/RkeDZ9yGzsOMUA=
Subject key identifier:   F1:BD:3D:46:DB:D5:2F:55:CD:B6:70:3D:06:72:20:81:DC:E2:C9:5C
Certificate issuer:       /CN=c487e481b4a0d3800626ef058f9b9ae9411745794ebeaa34b7
Certificate serial:       7DBB102B8B4ED640112426F35C1553CC74E4C657
Authority key identifier: 66:18:76:BF:25:91:B8:70:21:FA:45:24:F5:40:65:A1:18:C3:15:60
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9612d9a4-803d-4413-aef7-b133b4ff80b7/c487e481b4a0d3800626ef058f9b9ae9411745794ebeaa34b7.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/3139322e3230382e322e302f32342d3234203d3e20323134373034.roa
Signing time:             Mon 15 Jul 2024 14:22:07 +0000
ROA not before:           Mon 15 Jul 2024 14:17:07 +0000
ROA not after:            Mon 14 Jul 2025 14:22:07 +0000
asID:                     214704
IP address blocks:        192.208.2.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/661876BF2591B87021FA4524F54065A118C31560.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/661876BF2591B87021FA4524F54065A118C31560.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9612d9a4-803d-4413-aef7-b133b4ff80b7/c487e481b4a0d3800626ef058f9b9ae9411745794ebeaa34b7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9612d9a4-803d-4413-aef7-b133b4ff80b7/9612d9a4-803d-4413-aef7-b133b4ff80b7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9612d9a4-803d-4413-aef7-b133b4ff80b7/9612d9a4-803d-4413-aef7-b133b4ff80b7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9612d9a4-803d-4413-aef7-b133b4ff80b7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:09:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:bb:10:2b:8b:4e:d6:40:11:24:26:f3:5c:15:53:cc:74:e4:c6:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c487e481b4a0d3800626ef058f9b9ae9411745794ebeaa34b7
        Validity
            Not Before: Jul 15 14:17:07 2024 GMT
            Not After : Jul 14 14:22:07 2025 GMT
        Subject: CN=F1BD3D46DBD52F55CDB6703D06722081DCE2C95C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:c7:23:dc:37:63:c6:f5:8e:9f:97:82:e1:60:
                    4d:58:57:e6:7f:a1:f8:29:4e:97:c2:7c:55:c6:dc:
                    e6:cd:8a:b6:df:69:c6:f4:6e:ed:5f:8d:6e:7c:df:
                    5e:cd:b4:65:aa:86:8b:b0:2a:80:7d:fa:dc:9f:71:
                    68:a0:1f:42:09:96:78:5d:c9:ff:cc:dc:1a:47:34:
                    69:06:99:7a:0d:75:8b:35:c4:61:87:c8:84:ec:23:
                    6a:f1:55:4f:57:6a:b6:73:34:40:de:d7:0d:9e:cc:
                    73:bd:39:fc:2f:c7:cb:5e:f4:e4:51:35:64:46:fb:
                    17:3b:72:67:3d:d9:8e:9c:15:9d:e3:70:46:32:81:
                    9e:5a:fa:77:b2:f3:4a:76:48:25:2a:85:47:44:a6:
                    db:47:c1:c1:2a:64:94:12:9e:e8:85:f6:30:88:ab:
                    9e:1e:fd:65:48:7f:3f:36:c2:fc:1c:5c:ed:17:7b:
                    1b:76:61:c6:c0:45:d8:b7:1c:aa:57:3c:dc:d2:a2:
                    28:0c:cc:6d:c0:ad:d7:c7:ef:34:47:08:96:45:b7:
                    3a:3c:39:e4:07:6a:4b:6a:4e:e5:b9:61:fa:7c:d0:
                    24:29:1b:36:24:48:98:bd:b7:29:90:16:fe:a1:4c:
                    3a:76:d8:3c:0a:ac:26:2b:df:cc:c8:f5:45:48:93:
                    22:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:BD:3D:46:DB:D5:2F:55:CD:B6:70:3D:06:72:20:81:DC:E2:C9:5C
            X509v3 Authority Key Identifier:
                keyid:66:18:76:BF:25:91:B8:70:21:FA:45:24:F5:40:65:A1:18:C3:15:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/661876BF2591B87021FA4524F54065A118C31560.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9612d9a4-803d-4413-aef7-b133b4ff80b7/c487e481b4a0d3800626ef058f9b9ae9411745794ebeaa34b7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/3139322e3230382e322e302f32342d3234203d3e20323134373034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.208.2.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5c:4b:62:17:2f:f9:ce:50:61:cc:d9:a0:d6:43:96:ef:1c:60:
         ca:f3:c0:03:6e:00:26:40:f0:f9:9f:96:93:1f:ce:69:e8:f1:
         de:31:c5:af:fe:d1:ec:9f:5e:a7:fa:35:85:d8:ed:9a:b8:96:
         5d:33:1d:41:58:2a:67:86:12:95:17:7c:33:0c:d0:6d:4b:ed:
         fa:5e:90:9d:7e:69:26:05:19:8c:2b:e3:ff:d9:dd:ec:5e:06:
         d0:3c:0a:b2:bf:68:8a:a4:2d:99:bc:d1:f2:ea:51:9a:f9:17:
         12:51:11:e0:1e:12:5d:ae:43:5a:2b:d2:75:89:aa:ca:26:63:
         9b:94:01:71:c7:f8:94:8f:18:cf:8b:f4:cc:e7:37:b5:ab:99:
         5d:15:59:2c:8d:1e:e7:7d:7b:ea:4a:d5:cf:3c:9a:5c:79:50:
         8c:58:54:51:2a:ba:53:03:91:bd:ba:2e:36:23:cb:c1:1e:70:
         04:bf:f1:c4:92:96:2e:23:17:23:d6:7e:2e:65:b1:b3:da:68:
         51:b2:7b:87:26:e1:8d:03:ac:e0:a1:ef:e1:a8:8f:12:6f:4c:
         38:03:cb:e7:22:d8:04:41:3e:68:27:ea:9d:ec:84:dd:64:ab:
         f7:a5:74:64:13:e8:01:54:8a:0c:94:8a:b5:15:ed:eb:d9:0b:
         78:18:27:5e
-----BEGIN CERTIFICATE-----
MIIFsjCCBJqgAwIBAgIUfbsQK4tO1kARJCbzXBVTzHTkxlcwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyYzQ4N2U0ODFiNGEwZDM4MDA2MjZlZjA1OGY5YjlhZTk0
MTE3NDU3OTRlYmVhYTM0YjcwHhcNMjQwNzE1MTQxNzA3WhcNMjUwNzE0MTQyMjA3
WjAzMTEwLwYDVQQDEyhGMUJEM0Q0NkRCRDUyRjU1Q0RCNjcwM0QwNjcyMjA4MURD
RTJDOTVDMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5Mcj3DdjxvWO
n5eC4WBNWFfmf6H4KU6XwnxVxtzmzYq232nG9G7tX41ufN9ezbRlqoaLsCqAffrc
n3FooB9CCZZ4Xcn/zNwaRzRpBpl6DXWLNcRhh8iE7CNq8VVPV2q2czRA3tcNnsxz
vTn8L8fLXvTkUTVkRvsXO3JnPdmOnBWd43BGMoGeWvp3svNKdkglKoVHRKbbR8HB
KmSUEp7ohfYwiKueHv1lSH8/NsL8HFztF3sbdmHGwEXYtxyqVzzc0qIoDMxtwK3X
x+80RwiWRbc6PDnkB2pLak7luWH6fNAkKRs2JEiYvbcpkBb+oUw6dtg8CqwmK9/M
yPVFSJMi5wIDAQABo4ICsjCCAq4wHQYDVR0OBBYEFPG9PUbb1S9VzbZwPQZyIIHc
4slcMB8GA1UdIwQYMBaAFGYYdr8lkbhwIfpFJPVAZaEYwxVgMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmOGZkZWVjMGMwMTkwMTc4MzYxMTczOGZmLzAv
NjYxODc2QkYyNTkxQjg3MDIxRkE0NTI0RjU0MDY1QTExOEMzMTU2MC5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNmVhZDA3M2MtYjlmMC00NTIzLWIzOWUtYTNjN2Rh
Yjk3YzI1Lzk2MTJkOWE0LTgwM2QtNDQxMy1hZWY3LWIxMzNiNGZmODBiNy9jNDg3
ZTQ4MWI0YTBkMzgwMDYyNmVmMDU4ZjliOWFlOTQxMTc0NTc5NGViZWFhMzRiNy5j
ZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjhmZGVlYzBjMDE5MDE3
ODM2MTE3MzhmZi8wLzMxMzkzMjJlMzIzMDM4MmUzMjJlMzAyZjMyMzQyZDMyMzQy
MDNkM2UyMDMyMzEzNDM3MzAzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO
AjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMDQAjANBgkqhkiG9w0BAQsF
AAOCAQEAXEtiFy/5zlBhzNmg1kOW7xxgyvPAA24AJkDw+Z+Wkx/Oaejx3jHFr/7R
7J9ep/o1hdjtmriWXTMdQVgqZ4YSlRd8MwzQbUvt+l6QnX5pJgUZjCvj/9nd7F4G
0DwKsr9oiqQtmbzR8upRmvkXElER4B4SXa5DWivSdYmqyiZjm5QBccf4lI8Yz4v0
zOc3tauZXRVZLI0e53176krVzzyaXHlQjFhUUSq6UwORvbouNiPLwR5wBL/xxJKW
LiMXI9Z+LmWxs9poUbJ7hybhjQOs4KHv4aiPEm9MOAPL5yLYBEE+aCfqneyE3WSr
96V0ZBPoAVSKDJSKtRXt69kLeBgnXg==
-----END CERTIFICATE-----
Generated at Fri Nov 22 13:33:28 2024 by rpki-client on console-fra.rpki-client.org