Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/3139322e3230382e382e302f32342d3234203d3e20323037333838.roa
File:                     3139322e3230382e382e302f32342d3234203d3e20323037333838.roa (raw, json)
Hash identifier:          7MYf732HFas07pIsSvTosnTsXtvucnHPNyfTx5ove1U=
Subject key identifier:   C0:9E:43:11:98:92:0D:78:1A:20:56:AD:DD:33:26:2A:54:8C:DD:7E
Certificate issuer:       /CN=c487e481b4a0d3800626ef058f9b9ae9411745794ebeaa34b7
Certificate serial:       3C3B9700CA3FB9B08C03B8ABD0BA856B816C6DD8
Authority key identifier: 66:18:76:BF:25:91:B8:70:21:FA:45:24:F5:40:65:A1:18:C3:15:60
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9612d9a4-803d-4413-aef7-b133b4ff80b7/c487e481b4a0d3800626ef058f9b9ae9411745794ebeaa34b7.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/3139322e3230382e382e302f32342d3234203d3e20323037333838.roa
Signing time:             Wed 09 Oct 2024 14:27:35 +0000
ROA not before:           Wed 09 Oct 2024 14:22:35 +0000
ROA not after:            Wed 08 Oct 2025 14:27:35 +0000
asID:                     207388
IP address blocks:        192.208.8.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/661876BF2591B87021FA4524F54065A118C31560.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/661876BF2591B87021FA4524F54065A118C31560.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9612d9a4-803d-4413-aef7-b133b4ff80b7/c487e481b4a0d3800626ef058f9b9ae9411745794ebeaa34b7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9612d9a4-803d-4413-aef7-b133b4ff80b7/9612d9a4-803d-4413-aef7-b133b4ff80b7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9612d9a4-803d-4413-aef7-b133b4ff80b7/9612d9a4-803d-4413-aef7-b133b4ff80b7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9612d9a4-803d-4413-aef7-b133b4ff80b7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:09:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:3b:97:00:ca:3f:b9:b0:8c:03:b8:ab:d0:ba:85:6b:81:6c:6d:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c487e481b4a0d3800626ef058f9b9ae9411745794ebeaa34b7
        Validity
            Not Before: Oct  9 14:22:35 2024 GMT
            Not After : Oct  8 14:27:35 2025 GMT
        Subject: CN=C09E431198920D781A2056ADDD33262A548CDD7E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:3b:d3:c2:a4:d3:83:9d:c8:11:b6:d2:f5:d4:
                    a5:c1:96:12:52:df:49:d4:81:20:cd:f9:1d:a4:9a:
                    cf:d8:ff:c6:95:1e:74:79:3a:b0:af:9e:24:ab:2b:
                    be:ff:63:dd:d3:79:9e:31:12:33:74:17:bb:c1:63:
                    31:ff:a6:0d:4a:6a:86:bc:9d:c3:2c:8b:9c:ac:a0:
                    66:ea:ef:a0:1c:be:7a:ae:47:7e:06:27:c8:41:ae:
                    89:9c:9b:56:b4:72:50:e3:ed:fe:0f:f8:b4:73:2d:
                    de:09:23:48:d0:c1:a7:f6:08:0c:42:fa:ab:a2:1d:
                    7f:11:83:12:78:3a:1b:93:61:ee:04:04:f5:0b:e7:
                    6c:83:73:b8:b7:1c:cd:1a:01:7d:e1:bf:a5:94:8b:
                    9a:84:98:6e:c4:fd:2a:b0:f8:29:e3:eb:ae:fa:99:
                    2f:29:cc:49:09:00:67:2b:ef:1e:34:5a:73:ac:51:
                    03:3b:b5:3e:30:7a:8b:3a:e9:bc:ee:08:83:b8:cf:
                    16:3b:28:7b:a2:e2:ca:62:fa:5e:03:42:ee:f6:8e:
                    bf:e6:e0:df:26:4d:39:ca:67:e9:a4:87:e3:a9:97:
                    aa:b1:58:c1:f2:63:77:f0:09:f1:83:2f:ce:ae:b6:
                    60:76:28:c6:12:16:38:6b:33:f0:db:a9:91:b8:76:
                    05:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:9E:43:11:98:92:0D:78:1A:20:56:AD:DD:33:26:2A:54:8C:DD:7E
            X509v3 Authority Key Identifier:
                keyid:66:18:76:BF:25:91:B8:70:21:FA:45:24:F5:40:65:A1:18:C3:15:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/661876BF2591B87021FA4524F54065A118C31560.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9612d9a4-803d-4413-aef7-b133b4ff80b7/c487e481b4a0d3800626ef058f9b9ae9411745794ebeaa34b7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/3139322e3230382e382e302f32342d3234203d3e20323037333838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.208.8.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5c:1d:35:f9:e4:a2:6d:e7:3b:b9:1b:d2:72:99:86:8d:b5:32:
         33:40:55:dc:ce:32:4c:3c:04:4a:dc:dc:33:04:42:35:60:ce:
         09:62:d4:17:ad:62:05:60:1f:61:fb:97:c1:51:58:6b:69:4f:
         65:b1:d8:48:61:fe:6e:05:69:ec:1e:40:6b:7d:3b:ea:59:e2:
         43:4c:15:41:a4:08:d2:6c:af:e9:4d:32:a6:3c:b7:3a:83:2f:
         ae:f3:3b:52:74:a1:11:a2:ba:aa:8b:e7:c3:be:4b:99:3c:f8:
         17:fa:92:8b:5c:f9:bb:da:b8:6c:9f:e8:01:23:ef:2a:54:1f:
         6f:b3:b4:ab:66:99:2a:7f:4a:ff:c6:84:df:6d:0e:f7:ae:8a:
         89:39:c9:85:3e:00:68:cc:2a:6b:dd:5a:da:d8:43:40:76:ce:
         d2:4b:ce:7e:a2:90:50:a5:1f:d6:8c:66:94:35:06:56:67:fd:
         77:e7:b4:b3:42:fc:92:4e:9f:6a:05:0a:92:ac:c3:4b:4d:19:
         b8:b3:e7:7f:a5:e0:8f:b8:aa:48:ef:d5:ff:40:76:37:11:43:
         7d:6b:93:1d:fb:e9:bb:d7:41:8f:ed:a3:8d:a6:af:34:c6:32:
         ba:c0:74:c4:41:7d:4d:22:60:7f:4a:23:14:79:84:a0:9f:d0:
         28:0c:ed:e4
-----BEGIN CERTIFICATE-----
MIIFsjCCBJqgAwIBAgIUPDuXAMo/ubCMA7ir0LqFa4FsbdgwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyYzQ4N2U0ODFiNGEwZDM4MDA2MjZlZjA1OGY5YjlhZTk0
MTE3NDU3OTRlYmVhYTM0YjcwHhcNMjQxMDA5MTQyMjM1WhcNMjUxMDA4MTQyNzM1
WjAzMTEwLwYDVQQDEyhDMDlFNDMxMTk4OTIwRDc4MUEyMDU2QURERDMzMjYyQTU0
OENERDdFMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjzvTwqTTg53I
EbbS9dSlwZYSUt9J1IEgzfkdpJrP2P/GlR50eTqwr54kqyu+/2Pd03meMRIzdBe7
wWMx/6YNSmqGvJ3DLIucrKBm6u+gHL56rkd+BifIQa6JnJtWtHJQ4+3+D/i0cy3e
CSNI0MGn9ggMQvqroh1/EYMSeDobk2HuBAT1C+dsg3O4txzNGgF94b+llIuahJhu
xP0qsPgp4+uu+pkvKcxJCQBnK+8eNFpzrFEDO7U+MHqLOum87giDuM8WOyh7ouLK
YvpeA0Lu9o6/5uDfJk05ymfppIfjqZeqsVjB8mN38Anxgy/OrrZgdijGEhY4azPw
26mRuHYF6wIDAQABo4ICsjCCAq4wHQYDVR0OBBYEFMCeQxGYkg14GiBWrd0zJipU
jN1+MB8GA1UdIwQYMBaAFGYYdr8lkbhwIfpFJPVAZaEYwxVgMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmOGZkZWVjMGMwMTkwMTc4MzYxMTczOGZmLzAv
NjYxODc2QkYyNTkxQjg3MDIxRkE0NTI0RjU0MDY1QTExOEMzMTU2MC5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNmVhZDA3M2MtYjlmMC00NTIzLWIzOWUtYTNjN2Rh
Yjk3YzI1Lzk2MTJkOWE0LTgwM2QtNDQxMy1hZWY3LWIxMzNiNGZmODBiNy9jNDg3
ZTQ4MWI0YTBkMzgwMDYyNmVmMDU4ZjliOWFlOTQxMTc0NTc5NGViZWFhMzRiNy5j
ZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjhmZGVlYzBjMDE5MDE3
ODM2MTE3MzhmZi8wLzMxMzkzMjJlMzIzMDM4MmUzODJlMzAyZjMyMzQyZDMyMzQy
MDNkM2UyMDMyMzAzNzMzMzgzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO
AjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMDQCDANBgkqhkiG9w0BAQsF
AAOCAQEAXB01+eSibec7uRvScpmGjbUyM0BV3M4yTDwEStzcMwRCNWDOCWLUF61i
BWAfYfuXwVFYa2lPZbHYSGH+bgVp7B5Aa3076lniQ0wVQaQI0myv6U0ypjy3OoMv
rvM7UnShEaK6qovnw75LmTz4F/qSi1z5u9q4bJ/oASPvKlQfb7O0q2aZKn9K/8aE
320O966KiTnJhT4AaMwqa91a2thDQHbO0kvOfqKQUKUf1oxmlDUGVmf9d+e0s0L8
kk6fagUKkqzDS00ZuLPnf6Xgj7iqSO/V/0B2NxFDfWuTHfvpu9dBj+2jjaavNMYy
usB0xEF9TSJgf0ojFHmEoJ/QKAzt5A==
-----END CERTIFICATE-----
Generated at Fri Nov 22 13:33:28 2024 by rpki-client on console-fra.rpki-client.org