Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/3139322e3230382e372e302f32342d3234203d3e2037303138.roa
File:                     3139322e3230382e372e302f32342d3234203d3e2037303138.roa (raw, json)
Hash identifier:          avvNOGTx1rRHBQSQnx1AdGzsnT2AnfO9V8BuIqts+so=
Subject key identifier:   5E:71:03:E7:61:24:7E:9B:25:AE:71:5A:1B:B1:4C:B8:70:23:CF:9A
Certificate issuer:       /CN=c487e481b4a0d3800626ef058f9b9ae9411745794ebeaa34b7
Certificate serial:       1A0F1810602BCFEA47385206B02DD197F0700D0C
Authority key identifier: 66:18:76:BF:25:91:B8:70:21:FA:45:24:F5:40:65:A1:18:C3:15:60
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9612d9a4-803d-4413-aef7-b133b4ff80b7/c487e481b4a0d3800626ef058f9b9ae9411745794ebeaa34b7.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/3139322e3230382e372e302f32342d3234203d3e2037303138.roa
Signing time:             Sat 17 Aug 2024 10:23:11 +0000
ROA not before:           Sat 17 Aug 2024 10:18:11 +0000
ROA not after:            Sat 16 Aug 2025 10:23:11 +0000
asID:                     7018
IP address blocks:        192.208.7.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/661876BF2591B87021FA4524F54065A118C31560.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/661876BF2591B87021FA4524F54065A118C31560.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9612d9a4-803d-4413-aef7-b133b4ff80b7/c487e481b4a0d3800626ef058f9b9ae9411745794ebeaa34b7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9612d9a4-803d-4413-aef7-b133b4ff80b7/9612d9a4-803d-4413-aef7-b133b4ff80b7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9612d9a4-803d-4413-aef7-b133b4ff80b7/9612d9a4-803d-4413-aef7-b133b4ff80b7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9612d9a4-803d-4413-aef7-b133b4ff80b7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 09:58:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:0f:18:10:60:2b:cf:ea:47:38:52:06:b0:2d:d1:97:f0:70:0d:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c487e481b4a0d3800626ef058f9b9ae9411745794ebeaa34b7
        Validity
            Not Before: Aug 17 10:18:11 2024 GMT
            Not After : Aug 16 10:23:11 2025 GMT
        Subject: CN=5E7103E761247E9B25AE715A1BB14CB87023CF9A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:57:e5:3e:9c:12:0f:87:de:af:b6:2c:9f:b1:
                    b9:e2:04:9d:60:03:29:15:5e:69:aa:cd:6d:85:48:
                    59:70:96:0e:f8:be:a0:c8:9f:e5:5b:d6:6c:2d:76:
                    9c:40:b1:64:bc:b2:12:59:39:72:df:dc:04:18:97:
                    aa:dd:06:99:c6:e6:f0:e4:66:7b:af:80:65:21:e8:
                    ee:15:08:4b:a5:3f:af:1b:f6:c4:1e:59:9a:d4:88:
                    98:24:a1:5b:f5:fe:16:cb:aa:4a:6c:d9:8c:b1:22:
                    39:3d:97:ad:ed:be:65:f4:3f:19:50:4c:b9:aa:9b:
                    d1:1b:81:96:00:7d:4d:3d:d1:27:2f:2f:33:c4:f7:
                    94:c0:3c:49:7e:cb:4c:55:c0:1d:85:89:86:f7:bf:
                    6e:a0:61:e7:72:ad:a0:1d:85:c6:fa:4d:27:30:d5:
                    56:be:6a:c5:71:61:f9:5f:6b:73:18:10:71:77:7e:
                    71:1b:c3:81:5a:df:48:0a:8d:95:84:2b:6b:dd:ac:
                    35:73:bf:a0:6e:44:a2:f0:be:27:33:5e:32:d4:8e:
                    e7:69:65:e8:9d:13:24:ba:78:55:4d:81:1a:3c:0a:
                    6c:83:5b:1b:5d:a1:fb:a8:dd:cc:8e:08:50:0a:ba:
                    54:63:6b:31:c8:94:3b:00:dc:7d:f2:46:b1:22:7b:
                    fc:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:71:03:E7:61:24:7E:9B:25:AE:71:5A:1B:B1:4C:B8:70:23:CF:9A
            X509v3 Authority Key Identifier:
                keyid:66:18:76:BF:25:91:B8:70:21:FA:45:24:F5:40:65:A1:18:C3:15:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/661876BF2591B87021FA4524F54065A118C31560.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9612d9a4-803d-4413-aef7-b133b4ff80b7/c487e481b4a0d3800626ef058f9b9ae9411745794ebeaa34b7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/3139322e3230382e372e302f32342d3234203d3e2037303138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.208.7.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3d:30:11:77:b8:69:6c:a1:06:3e:d6:51:e4:93:54:4c:37:05:
         0f:df:f9:87:61:2a:ce:f4:78:37:5d:e9:20:2f:83:c0:fd:af:
         b9:9b:e5:87:bd:7a:dc:26:74:aa:b0:55:82:98:49:67:cb:cf:
         09:ac:86:c3:6b:4c:22:81:a6:01:c6:5b:fa:5c:e2:71:c5:ac:
         52:da:30:74:89:a8:b4:44:47:cc:ed:fe:68:aa:7b:85:4e:03:
         b3:36:a6:47:eb:4c:c0:e2:85:ae:80:69:12:9c:56:73:11:aa:
         1b:82:04:b0:df:f5:2b:2a:e0:49:10:6c:df:79:68:9d:ff:84:
         88:67:ef:64:35:d7:d7:93:39:41:f3:5b:77:5f:00:1c:9a:44:
         47:16:2d:5a:11:52:51:89:1b:95:6f:78:d6:79:aa:89:6b:b5:
         6e:14:7f:f4:fc:3b:a9:3c:8f:5e:b8:21:6a:ca:22:e5:7b:44:
         f6:bd:55:66:60:7d:c9:27:48:f0:08:73:76:bf:93:dc:18:7c:
         69:d4:25:a0:bc:0c:64:ad:2e:88:ba:40:61:0d:98:f6:31:02:
         56:eb:a4:d5:28:13:ca:57:c9:91:ea:d8:56:59:21:11:fd:7d:
         62:14:da:c6:b2:86:91:7d:10:53:37:1d:f5:be:cf:ef:68:50:
         7b:82:92:94
-----BEGIN CERTIFICATE-----
MIIFrTCCBJWgAwIBAgIUGg8YEGArz+pHOFIGsC3Rl/BwDQwwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyYzQ4N2U0ODFiNGEwZDM4MDA2MjZlZjA1OGY5YjlhZTk0
MTE3NDU3OTRlYmVhYTM0YjcwHhcNMjQwODE3MTAxODExWhcNMjUwODE2MTAyMzEx
WjAzMTEwLwYDVQQDEyg1RTcxMDNFNzYxMjQ3RTlCMjVBRTcxNUExQkIxNENCODcw
MjNDRjlBMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvFflPpwSD4fe
r7Ysn7G54gSdYAMpFV5pqs1thUhZcJYO+L6gyJ/lW9ZsLXacQLFkvLISWTly39wE
GJeq3QaZxubw5GZ7r4BlIejuFQhLpT+vG/bEHlma1IiYJKFb9f4Wy6pKbNmMsSI5
PZet7b5l9D8ZUEy5qpvRG4GWAH1NPdEnLy8zxPeUwDxJfstMVcAdhYmG979uoGHn
cq2gHYXG+k0nMNVWvmrFcWH5X2tzGBBxd35xG8OBWt9ICo2VhCtr3aw1c7+gbkSi
8L4nM14y1I7naWXonRMkunhVTYEaPApsg1sbXaH7qN3MjghQCrpUY2sxyJQ7ANx9
8kaxInv8xQIDAQABo4ICrTCCAqkwHQYDVR0OBBYEFF5xA+dhJH6bJa5xWhuxTLhw
I8+aMB8GA1UdIwQYMBaAFGYYdr8lkbhwIfpFJPVAZaEYwxVgMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmOGZkZWVjMGMwMTkwMTc4MzYxMTczOGZmLzAv
NjYxODc2QkYyNTkxQjg3MDIxRkE0NTI0RjU0MDY1QTExOEMzMTU2MC5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNmVhZDA3M2MtYjlmMC00NTIzLWIzOWUtYTNjN2Rh
Yjk3YzI1Lzk2MTJkOWE0LTgwM2QtNDQxMy1hZWY3LWIxMzNiNGZmODBiNy9jNDg3
ZTQ4MWI0YTBkMzgwMDYyNmVmMDU4ZjliOWFlOTQxMTc0NTc5NGViZWFhMzRiNy5j
ZXIwgZ0GCCsGAQUFBwELBIGQMIGNMIGKBggrBgEFBQcwC4Z+cnN5bmM6Ly9ycGtp
LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmOGZkZWVjMGMwMTkwMTc4
MzYxMTczOGZmLzAvMzEzOTMyMmUzMjMwMzgyZTM3MmUzMDJmMzIzNDJkMzIzNDIw
M2QzZTIwMzczMDMxMzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADA0AcwDQYJKoZIhvcNAQELBQADggEB
AD0wEXe4aWyhBj7WUeSTVEw3BQ/f+YdhKs70eDdd6SAvg8D9r7mb5Ye9etwmdKqw
VYKYSWfLzwmshsNrTCKBpgHGW/pc4nHFrFLaMHSJqLRER8zt/miqe4VOA7M2pkfr
TMDiha6AaRKcVnMRqhuCBLDf9Ssq4EkQbN95aJ3/hIhn72Q119eTOUHzW3dfABya
REcWLVoRUlGJG5VveNZ5qolrtW4Uf/T8O6k8j164IWrKIuV7RPa9VWZgfcknSPAI
c3a/k9wYfGnUJaC8DGStLoi6QGENmPYxAlbrpNUoE8pXyZHq2FZZIRH9fWIU2say
hpF9EFM3HfW+z+9oUHuCkpQ=
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:43:48 2025 by rpki-client