Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/3139322e3230382e352e302f32342d3234203d3e20323134303234.roa
File:                     3139322e3230382e352e302f32342d3234203d3e20323134303234.roa (raw, json)
Hash identifier:          Kvc+4dcKLydw9JNBDUB7Qjl4GYETU0J7DMGwGpbt3z0=
Subject key identifier:   C6:67:94:B0:9E:0F:50:FE:38:EA:8D:A7:77:A3:C3:54:C5:44:19:2A
Certificate issuer:       /CN=c487e481b4a0d3800626ef058f9b9ae9411745794ebeaa34b7
Certificate serial:       7B560D1B0B5DC6A22BEC5649C8F90C4B506DC83F
Authority key identifier: 66:18:76:BF:25:91:B8:70:21:FA:45:24:F5:40:65:A1:18:C3:15:60
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9612d9a4-803d-4413-aef7-b133b4ff80b7/c487e481b4a0d3800626ef058f9b9ae9411745794ebeaa34b7.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/3139322e3230382e352e302f32342d3234203d3e20323134303234.roa
Signing time:             Mon 21 Oct 2024 07:38:08 +0000
ROA not before:           Mon 21 Oct 2024 07:33:08 +0000
ROA not after:            Mon 20 Oct 2025 07:38:08 +0000
asID:                     214024
IP address blocks:        192.208.5.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/661876BF2591B87021FA4524F54065A118C31560.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/661876BF2591B87021FA4524F54065A118C31560.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9612d9a4-803d-4413-aef7-b133b4ff80b7/c487e481b4a0d3800626ef058f9b9ae9411745794ebeaa34b7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9612d9a4-803d-4413-aef7-b133b4ff80b7/9612d9a4-803d-4413-aef7-b133b4ff80b7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9612d9a4-803d-4413-aef7-b133b4ff80b7/9612d9a4-803d-4413-aef7-b133b4ff80b7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9612d9a4-803d-4413-aef7-b133b4ff80b7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 19:47:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:56:0d:1b:0b:5d:c6:a2:2b:ec:56:49:c8:f9:0c:4b:50:6d:c8:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c487e481b4a0d3800626ef058f9b9ae9411745794ebeaa34b7
        Validity
            Not Before: Oct 21 07:33:08 2024 GMT
            Not After : Oct 20 07:38:08 2025 GMT
        Subject: CN=C66794B09E0F50FE38EA8DA777A3C354C544192A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:db:fa:08:76:6d:1b:a6:56:e9:18:e3:52:c8:
                    06:e7:d6:c7:23:09:5c:71:02:54:da:f1:b5:19:a5:
                    01:11:0a:c8:dd:97:3b:ad:62:f1:c6:49:39:28:ee:
                    01:5d:a8:f9:71:13:56:d8:a9:88:31:1c:94:48:69:
                    42:2f:d2:5d:78:9e:c8:fd:cf:f0:22:28:23:a4:c2:
                    53:65:30:28:12:0a:c7:82:7a:d5:c2:62:2e:d8:3b:
                    8f:06:7b:af:8d:bf:e8:3c:6e:3a:1d:d8:9f:ad:c8:
                    42:71:de:9c:ae:3e:51:fc:ff:8e:88:56:cf:12:31:
                    de:12:48:1c:04:c1:9c:94:64:4f:f0:4d:a9:32:a3:
                    03:22:b2:97:76:ad:5e:45:fb:a3:e0:1a:f9:91:ea:
                    c2:3b:6c:fb:f1:a4:5f:38:26:08:be:a4:47:fe:6c:
                    61:51:74:fc:84:52:1a:ce:85:cb:c3:ec:f9:48:0f:
                    fd:14:d3:61:ca:d5:c7:00:ce:59:1e:d1:0a:10:09:
                    1c:39:ab:78:18:08:11:ce:a2:7b:7a:7b:71:3d:f8:
                    42:95:86:44:72:35:76:77:e0:9b:1e:32:8a:f9:bc:
                    fa:69:bd:a6:af:2e:9e:38:73:e4:39:ff:ef:ec:cb:
                    e9:66:f5:0a:61:24:a7:5e:0c:f3:1a:3a:2e:06:68:
                    b4:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:67:94:B0:9E:0F:50:FE:38:EA:8D:A7:77:A3:C3:54:C5:44:19:2A
            X509v3 Authority Key Identifier:
                keyid:66:18:76:BF:25:91:B8:70:21:FA:45:24:F5:40:65:A1:18:C3:15:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/661876BF2591B87021FA4524F54065A118C31560.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9612d9a4-803d-4413-aef7-b133b4ff80b7/c487e481b4a0d3800626ef058f9b9ae9411745794ebeaa34b7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/3139322e3230382e352e302f32342d3234203d3e20323134303234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.208.5.0/24

    Signature Algorithm: sha256WithRSAEncryption
         51:cf:fc:aa:85:a1:96:db:f5:e3:1b:ae:f1:28:45:78:54:d4:
         9e:b8:f2:54:cd:b9:cd:32:02:a3:9b:19:37:0d:db:20:44:c6:
         ef:70:cd:e6:ce:8d:81:24:ab:bf:c1:85:67:6a:67:bd:54:57:
         7b:81:f0:76:f4:17:9f:42:43:b7:37:80:8a:15:f2:0e:c2:35:
         15:21:64:11:4c:36:98:44:d9:90:cf:7d:d4:f0:16:c2:96:8e:
         ca:7d:66:91:c5:39:16:71:2d:7c:b3:1a:55:0e:c3:54:dc:f4:
         8c:a1:20:a9:44:83:10:85:1d:9c:46:55:4b:60:47:04:3d:31:
         f5:f2:d2:96:b7:44:3a:06:7e:06:bc:d6:2a:c7:98:aa:d5:97:
         5d:44:19:e1:22:34:21:8f:5d:d3:42:ea:78:b8:20:bf:50:eb:
         c8:51:00:61:05:c3:5a:21:f4:a6:38:8a:c0:c3:46:e0:0b:b5:
         74:74:59:93:fb:0e:e4:db:78:d3:cc:2f:f1:eb:5c:a3:95:66:
         bb:6c:9a:50:5f:41:16:2f:50:91:19:4b:bd:c9:2e:82:03:0d:
         09:08:27:fb:02:d0:a6:f5:15:ed:cd:ae:16:fa:cf:1e:ee:79:
         82:b7:3c:f1:91:70:db:13:f4:0d:6a:89:60:4c:86:d4:25:09:
         cc:92:25:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:40:22 2024 by rpki-client on console-ams.rpki-client.org