Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/3139322e3230382e352e302f32342d3234203d3e20323134303235.roa
File:                     3139322e3230382e352e302f32342d3234203d3e20323134303235.roa (raw, json)
Hash identifier:          OxrE2YF+xkN6+V3c5ouhQVXXefe7kViaFQbueu5aZIU=
Subject key identifier:   44:B7:0A:18:A8:E8:FF:EC:9A:D1:8C:FF:95:A7:D2:D1:C8:BF:51:72
Certificate issuer:       /CN=c487e481b4a0d3800626ef058f9b9ae9411745794ebeaa34b7
Certificate serial:       6853D9848D58B2CFD204848C9B287D302DAF14F8
Authority key identifier: 66:18:76:BF:25:91:B8:70:21:FA:45:24:F5:40:65:A1:18:C3:15:60
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9612d9a4-803d-4413-aef7-b133b4ff80b7/c487e481b4a0d3800626ef058f9b9ae9411745794ebeaa34b7.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/3139322e3230382e352e302f32342d3234203d3e20323134303235.roa
Signing time:             Mon 21 Oct 2024 07:38:08 +0000
ROA not before:           Mon 21 Oct 2024 07:33:08 +0000
ROA not after:            Mon 20 Oct 2025 07:38:08 +0000
asID:                     214025
IP address blocks:        192.208.5.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/661876BF2591B87021FA4524F54065A118C31560.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/661876BF2591B87021FA4524F54065A118C31560.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9612d9a4-803d-4413-aef7-b133b4ff80b7/c487e481b4a0d3800626ef058f9b9ae9411745794ebeaa34b7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9612d9a4-803d-4413-aef7-b133b4ff80b7/9612d9a4-803d-4413-aef7-b133b4ff80b7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9612d9a4-803d-4413-aef7-b133b4ff80b7/9612d9a4-803d-4413-aef7-b133b4ff80b7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9612d9a4-803d-4413-aef7-b133b4ff80b7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:09:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:53:d9:84:8d:58:b2:cf:d2:04:84:8c:9b:28:7d:30:2d:af:14:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c487e481b4a0d3800626ef058f9b9ae9411745794ebeaa34b7
        Validity
            Not Before: Oct 21 07:33:08 2024 GMT
            Not After : Oct 20 07:38:08 2025 GMT
        Subject: CN=44B70A18A8E8FFEC9AD18CFF95A7D2D1C8BF5172
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:83:b7:72:0d:77:20:fd:89:a7:50:b8:f2:32:
                    f1:83:4d:b7:2f:c5:6f:fd:5f:b5:b3:4c:94:32:24:
                    84:35:fd:75:c4:10:9e:0c:9c:69:9c:34:f7:eb:5c:
                    60:d4:ad:8d:e2:21:63:40:c4:a4:50:21:d6:b0:9e:
                    60:08:87:f0:a1:77:13:95:74:81:24:4a:9f:7e:02:
                    70:43:ed:3b:b3:2f:f9:de:d4:f3:bc:48:e6:8e:c6:
                    6a:09:69:84:44:76:35:22:40:94:36:05:d9:dd:44:
                    7d:cf:db:ad:4b:f0:72:68:0a:0d:f8:5f:7b:99:97:
                    dc:b8:2a:c0:62:9a:35:09:13:47:f9:a1:d6:aa:2c:
                    b1:2e:78:67:b1:b9:5a:e0:d0:d0:ee:77:d5:65:ec:
                    d6:5d:cd:37:7a:77:39:db:66:d2:19:e0:24:b0:ee:
                    0b:82:6c:ba:37:82:56:a3:a0:20:9d:7b:08:de:d7:
                    f4:e4:cc:a0:d0:a3:db:9e:fb:04:a1:5d:1f:b8:12:
                    01:57:8c:2d:ef:94:86:eb:26:67:24:a2:33:9b:ec:
                    58:f8:95:13:0d:44:42:ca:13:41:84:b4:80:2a:06:
                    db:75:b3:f3:f8:e2:62:f6:24:8c:3e:be:0a:fd:5b:
                    a9:a6:f7:83:2a:25:ab:f1:72:d9:d5:89:c7:13:72:
                    41:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:B7:0A:18:A8:E8:FF:EC:9A:D1:8C:FF:95:A7:D2:D1:C8:BF:51:72
            X509v3 Authority Key Identifier:
                keyid:66:18:76:BF:25:91:B8:70:21:FA:45:24:F5:40:65:A1:18:C3:15:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/661876BF2591B87021FA4524F54065A118C31560.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9612d9a4-803d-4413-aef7-b133b4ff80b7/c487e481b4a0d3800626ef058f9b9ae9411745794ebeaa34b7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/3139322e3230382e352e302f32342d3234203d3e20323134303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.208.5.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3c:e6:78:24:a7:da:9a:c4:66:17:a4:df:69:af:b3:e4:69:79:
         37:0c:bc:99:53:a0:74:19:40:76:73:a1:db:f7:57:11:65:6c:
         d1:a3:91:fb:d6:eb:9f:30:9c:99:7a:6c:c6:4a:55:cf:72:95:
         6f:68:48:a7:72:01:9b:1c:82:ae:f8:7b:c6:9e:7a:07:c4:e8:
         a2:52:95:85:d5:9b:3a:f8:9a:ab:f2:8e:5c:4d:4c:d6:16:93:
         79:f6:f5:33:80:0a:c4:c2:30:6e:e8:11:34:a9:61:20:17:14:
         7e:01:51:df:b9:cd:e4:c1:72:04:d7:44:f2:1c:2b:48:cc:dd:
         dc:36:1e:94:72:0b:ec:7a:2b:2c:c6:93:6d:89:50:d2:db:eb:
         38:29:e8:e2:49:28:c8:5a:f6:c1:2d:75:5f:a7:e6:b5:4a:f1:
         1a:0c:3b:7e:6d:29:0f:61:71:5c:4f:61:60:98:72:00:47:f6:
         d1:1b:52:47:62:a3:9c:0a:a2:2a:52:2f:35:b2:83:b3:14:f8:
         f5:ca:fa:96:47:83:9e:5e:f2:1c:e9:3e:60:a2:71:58:74:c3:
         e1:88:d1:86:e8:e4:61:fb:cb:75:9f:84:22:fd:b9:40:eb:1c:
         95:da:c1:fa:60:38:ea:99:91:8b:20:46:7f:26:c2:a5:1a:b6:
         3b:a6:13:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 13:33:28 2024 by rpki-client on console-fra.rpki-client.org