Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/3139322e3230382e352e302f32342d3234203d3e20323135333034.roa
File:                     3139322e3230382e352e302f32342d3234203d3e20323135333034.roa (raw, json)
Hash identifier:          Hi69iMJbQoKkgzsu7Gnwq9adQd16Cq0ANeyB97sakZo=
Subject key identifier:   CF:19:AE:22:B1:2D:8B:B5:E9:DA:E1:1B:90:26:25:E5:03:42:9A:F8
Certificate issuer:       /CN=c487e481b4a0d3800626ef058f9b9ae9411745794ebeaa34b7
Certificate serial:       0234FD1CD556DCE86A6931C8B8A09B776D0853A9
Authority key identifier: 66:18:76:BF:25:91:B8:70:21:FA:45:24:F5:40:65:A1:18:C3:15:60
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9612d9a4-803d-4413-aef7-b133b4ff80b7/c487e481b4a0d3800626ef058f9b9ae9411745794ebeaa34b7.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/3139322e3230382e352e302f32342d3234203d3e20323135333034.roa
Signing time:             Wed 16 Oct 2024 14:42:24 +0000
ROA not before:           Wed 16 Oct 2024 14:37:24 +0000
ROA not after:            Wed 15 Oct 2025 14:42:24 +0000
asID:                     215304
IP address blocks:        192.208.5.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/661876BF2591B87021FA4524F54065A118C31560.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/661876BF2591B87021FA4524F54065A118C31560.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9612d9a4-803d-4413-aef7-b133b4ff80b7/c487e481b4a0d3800626ef058f9b9ae9411745794ebeaa34b7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9612d9a4-803d-4413-aef7-b133b4ff80b7/9612d9a4-803d-4413-aef7-b133b4ff80b7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9612d9a4-803d-4413-aef7-b133b4ff80b7/9612d9a4-803d-4413-aef7-b133b4ff80b7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9612d9a4-803d-4413-aef7-b133b4ff80b7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 19:47:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:34:fd:1c:d5:56:dc:e8:6a:69:31:c8:b8:a0:9b:77:6d:08:53:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c487e481b4a0d3800626ef058f9b9ae9411745794ebeaa34b7
        Validity
            Not Before: Oct 16 14:37:24 2024 GMT
            Not After : Oct 15 14:42:24 2025 GMT
        Subject: CN=CF19AE22B12D8BB5E9DAE11B902625E503429AF8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:60:33:d0:6e:61:44:76:ca:a7:be:29:1b:74:
                    9d:b4:a8:67:1e:6f:a0:2f:53:a5:39:77:c4:30:60:
                    72:14:af:e4:b6:23:7e:20:af:57:9f:e9:a0:35:2a:
                    00:ce:75:aa:47:c0:1f:d5:d9:22:44:ed:22:b9:f9:
                    56:64:d5:86:fd:44:de:75:08:1b:7d:d1:ad:f7:87:
                    cc:5f:e7:83:87:a0:8f:de:ca:b4:5c:26:80:12:5d:
                    71:f6:37:ea:74:0d:a4:21:8e:d0:14:4e:e9:4e:90:
                    ab:70:76:92:ac:28:05:90:96:2b:9b:f3:30:ea:ae:
                    5d:ba:0d:d0:18:82:b8:35:82:e7:53:41:39:3a:e6:
                    6b:f8:02:6f:dd:80:d5:f9:04:33:f3:4b:7d:97:82:
                    42:8b:e5:51:f6:13:8b:d6:6c:fa:e6:6e:fa:c2:e8:
                    62:4e:84:0c:e9:f5:3a:db:9a:40:4b:40:00:ed:70:
                    73:90:7b:1a:96:93:49:90:b9:0b:23:64:c5:8f:8b:
                    05:94:03:e0:1a:5f:57:fd:00:89:fe:12:14:58:5b:
                    f8:8b:ef:e6:37:92:44:98:76:1b:2c:3f:e8:7b:d8:
                    73:46:1b:b3:ff:70:bc:e5:11:3e:b7:58:d9:bc:20:
                    7e:73:b7:1c:d0:c6:8d:f2:d3:5e:9c:a5:99:d8:42:
                    e0:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:19:AE:22:B1:2D:8B:B5:E9:DA:E1:1B:90:26:25:E5:03:42:9A:F8
            X509v3 Authority Key Identifier:
                keyid:66:18:76:BF:25:91:B8:70:21:FA:45:24:F5:40:65:A1:18:C3:15:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/661876BF2591B87021FA4524F54065A118C31560.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9612d9a4-803d-4413-aef7-b133b4ff80b7/c487e481b4a0d3800626ef058f9b9ae9411745794ebeaa34b7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/3139322e3230382e352e302f32342d3234203d3e20323135333034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.208.5.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6e:58:4c:7d:6e:a2:0c:4b:e3:ef:c8:49:d2:3d:29:08:89:6f:
         9c:f6:34:bd:12:2a:a8:20:fa:96:1c:08:2c:3f:b3:cc:3e:37:
         ef:75:52:a4:1b:2b:30:62:3c:99:3e:20:6e:f2:97:4f:6d:4b:
         29:6f:df:2a:c9:b1:a3:54:b2:2c:a6:da:41:cd:83:b0:09:e3:
         1d:a3:75:a7:21:cc:d1:7d:ab:e7:9e:82:09:cb:29:1b:f6:2e:
         22:6b:4b:00:c0:b5:46:f5:dc:79:a5:c7:12:97:75:a5:f7:3a:
         e1:29:d0:50:8d:2d:cc:d3:0f:39:c0:19:6c:98:09:b0:17:ac:
         69:19:49:76:b9:79:ff:17:18:fd:83:cd:22:56:1d:ee:e5:57:
         ff:1f:9d:63:d5:66:85:f2:99:6f:dc:3d:7b:82:4a:88:14:72:
         72:b2:24:7d:fa:07:f2:7c:63:b8:2e:7a:19:6f:7c:86:56:4d:
         58:55:22:50:02:59:bc:25:c0:41:92:7d:6a:61:95:54:73:22:
         9a:4d:8f:3e:5c:1a:a4:aa:1b:6b:44:4f:a2:e2:6a:86:00:10:
         77:59:92:91:f2:df:f9:df:ae:2b:29:2a:e2:68:a7:19:48:95:
         4d:d5:44:3e:fd:3d:b6:6e:a8:41:4c:1c:47:f2:8d:2e:a7:00:
         df:0e:c4:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:40:22 2024 by rpki-client on console-ams.rpki-client.org