Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/3139322e3230382e382e302f32342d3234203d3e2033333230.roa
File:                     3139322e3230382e382e302f32342d3234203d3e2033333230.roa (raw, json)
Hash identifier:          zFWh21Vs9/AUtBHNY7+M74c4ZuRD2MmDgMVrGuRH25k=
Subject key identifier:   7C:F0:C5:49:C1:9D:F7:9B:40:81:FD:78:E4:03:43:65:C7:95:EC:5F
Certificate issuer:       /CN=c487e481b4a0d3800626ef058f9b9ae9411745794ebeaa34b7
Certificate serial:       7B91E7CEFEE0AD01F523937308981E259980511E
Authority key identifier: 66:18:76:BF:25:91:B8:70:21:FA:45:24:F5:40:65:A1:18:C3:15:60
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9612d9a4-803d-4413-aef7-b133b4ff80b7/c487e481b4a0d3800626ef058f9b9ae9411745794ebeaa34b7.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/3139322e3230382e382e302f32342d3234203d3e2033333230.roa
Signing time:             Sat 28 Sep 2024 15:31:38 +0000
ROA not before:           Sat 28 Sep 2024 15:26:38 +0000
ROA not after:            Sat 27 Sep 2025 15:31:38 +0000
asID:                     3320
IP address blocks:        192.208.8.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/661876BF2591B87021FA4524F54065A118C31560.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/661876BF2591B87021FA4524F54065A118C31560.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9612d9a4-803d-4413-aef7-b133b4ff80b7/c487e481b4a0d3800626ef058f9b9ae9411745794ebeaa34b7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9612d9a4-803d-4413-aef7-b133b4ff80b7/9612d9a4-803d-4413-aef7-b133b4ff80b7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9612d9a4-803d-4413-aef7-b133b4ff80b7/9612d9a4-803d-4413-aef7-b133b4ff80b7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9612d9a4-803d-4413-aef7-b133b4ff80b7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:09:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:91:e7:ce:fe:e0:ad:01:f5:23:93:73:08:98:1e:25:99:80:51:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c487e481b4a0d3800626ef058f9b9ae9411745794ebeaa34b7
        Validity
            Not Before: Sep 28 15:26:38 2024 GMT
            Not After : Sep 27 15:31:38 2025 GMT
        Subject: CN=7CF0C549C19DF79B4081FD78E4034365C795EC5F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:58:a7:1e:0b:14:c3:a1:5a:ac:d5:f5:cf:9d:
                    30:7c:e5:66:78:56:b4:3d:76:26:8f:6e:ea:c9:4c:
                    1f:c6:6f:66:ce:7d:7b:ef:b8:94:b8:3a:62:cb:5f:
                    3b:8e:f7:df:97:2f:95:33:f1:78:76:55:05:21:88:
                    31:2f:22:2f:42:cb:98:cc:51:ee:b2:22:12:46:c3:
                    ad:69:c8:5e:c4:be:af:70:10:79:5c:a8:39:7f:2f:
                    cb:45:91:a7:d1:e6:f3:5c:11:2c:e0:bd:72:ca:d8:
                    2a:31:c9:a1:73:3a:5d:28:b0:c6:a6:c1:35:69:f3:
                    a4:5d:93:d6:3c:0e:16:7f:c0:61:ad:29:93:6d:01:
                    a7:21:ad:25:38:22:a1:dc:4d:0c:42:4d:b8:d8:31:
                    2b:d7:f7:0a:ac:7a:7a:c0:74:42:ce:3d:b2:b4:37:
                    fc:1d:29:63:54:46:15:85:05:55:fe:4c:2e:7c:dc:
                    0d:00:ad:c5:42:74:33:fb:dd:8d:ee:be:9a:1a:07:
                    90:2c:a1:34:7d:91:49:d3:e4:9a:56:48:dc:22:1d:
                    14:09:b2:01:b2:99:ae:5a:42:5e:eb:b0:75:28:36:
                    8f:01:3a:76:ba:98:1c:2d:0e:fe:6d:9c:61:cd:6e:
                    ec:30:9e:28:38:c8:db:d2:ba:bd:87:11:0f:ff:ad:
                    c0:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:F0:C5:49:C1:9D:F7:9B:40:81:FD:78:E4:03:43:65:C7:95:EC:5F
            X509v3 Authority Key Identifier:
                keyid:66:18:76:BF:25:91:B8:70:21:FA:45:24:F5:40:65:A1:18:C3:15:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/661876BF2591B87021FA4524F54065A118C31560.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9612d9a4-803d-4413-aef7-b133b4ff80b7/c487e481b4a0d3800626ef058f9b9ae9411745794ebeaa34b7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/3139322e3230382e382e302f32342d3234203d3e2033333230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.208.8.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9c:13:57:f4:2c:25:17:5f:b5:dc:cd:e2:0e:61:0d:81:59:da:
         3e:ee:ea:5b:ba:0f:2d:4e:0e:71:81:9e:9c:21:47:3c:9f:00:
         ac:75:6f:c7:30:91:ef:9f:88:2b:9e:14:0f:ad:1e:17:6a:e9:
         2c:4f:0b:b4:2e:0f:2c:c3:8a:57:fe:86:0f:25:73:2b:eb:76:
         ff:86:c0:fa:82:83:fc:34:54:4e:f7:c3:5b:5b:2f:34:a0:43:
         9d:8b:9e:18:38:4c:aa:36:78:23:7a:4f:6b:e4:81:ee:c9:ad:
         91:13:e4:a8:ce:9e:01:52:5b:bc:91:a9:33:64:aa:9f:09:37:
         c1:4e:be:13:b6:c7:04:a4:ef:75:6c:6e:d1:fd:2d:2e:38:b7:
         75:a9:db:c0:d1:d7:76:c8:04:e3:8a:91:d0:01:ec:38:a0:32:
         01:55:06:09:9a:e8:0d:50:8f:9d:27:ee:66:d0:07:bd:6d:81:
         d3:9b:eb:65:04:5f:2a:40:41:6d:76:92:af:24:f5:98:00:f1:
         f1:55:2d:10:15:38:45:53:4b:14:90:61:5c:42:57:33:dd:ff:
         8e:9f:68:b4:32:a3:b5:73:28:04:62:bb:c5:dc:ce:f4:a1:f4:
         7a:df:c1:ef:16:5e:22:cf:f9:8b:88:90:91:2f:b1:e6:6c:83:
         75:03:54:74
-----BEGIN CERTIFICATE-----
MIIFrTCCBJWgAwIBAgIUe5Hnzv7grQH1I5NzCJgeJZmAUR4wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyYzQ4N2U0ODFiNGEwZDM4MDA2MjZlZjA1OGY5YjlhZTk0
MTE3NDU3OTRlYmVhYTM0YjcwHhcNMjQwOTI4MTUyNjM4WhcNMjUwOTI3MTUzMTM4
WjAzMTEwLwYDVQQDEyg3Q0YwQzU0OUMxOURGNzlCNDA4MUZENzhFNDAzNDM2NUM3
OTVFQzVGMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvVinHgsUw6Fa
rNX1z50wfOVmeFa0PXYmj27qyUwfxm9mzn1777iUuDpiy187jvffly+VM/F4dlUF
IYgxLyIvQsuYzFHusiISRsOtachexL6vcBB5XKg5fy/LRZGn0ebzXBEs4L1yytgq
McmhczpdKLDGpsE1afOkXZPWPA4Wf8BhrSmTbQGnIa0lOCKh3E0MQk242DEr1/cK
rHp6wHRCzj2ytDf8HSljVEYVhQVV/kwufNwNAK3FQnQz+92N7r6aGgeQLKE0fZFJ
0+SaVkjcIh0UCbIBspmuWkJe67B1KDaPATp2upgcLQ7+bZxhzW7sMJ4oOMjb0rq9
hxEP/63AaQIDAQABo4ICrTCCAqkwHQYDVR0OBBYEFHzwxUnBnfebQIH9eOQDQ2XH
lexfMB8GA1UdIwQYMBaAFGYYdr8lkbhwIfpFJPVAZaEYwxVgMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmOGZkZWVjMGMwMTkwMTc4MzYxMTczOGZmLzAv
NjYxODc2QkYyNTkxQjg3MDIxRkE0NTI0RjU0MDY1QTExOEMzMTU2MC5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNmVhZDA3M2MtYjlmMC00NTIzLWIzOWUtYTNjN2Rh
Yjk3YzI1Lzk2MTJkOWE0LTgwM2QtNDQxMy1hZWY3LWIxMzNiNGZmODBiNy9jNDg3
ZTQ4MWI0YTBkMzgwMDYyNmVmMDU4ZjliOWFlOTQxMTc0NTc5NGViZWFhMzRiNy5j
ZXIwgZ0GCCsGAQUFBwELBIGQMIGNMIGKBggrBgEFBQcwC4Z+cnN5bmM6Ly9ycGtp
LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmOGZkZWVjMGMwMTkwMTc4
MzYxMTczOGZmLzAvMzEzOTMyMmUzMjMwMzgyZTM4MmUzMDJmMzIzNDJkMzIzNDIw
M2QzZTIwMzMzMzMyMzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADA0AgwDQYJKoZIhvcNAQELBQADggEB
AJwTV/QsJRdftdzN4g5hDYFZ2j7u6lu6Dy1ODnGBnpwhRzyfAKx1b8cwke+fiCue
FA+tHhdq6SxPC7QuDyzDilf+hg8lcyvrdv+GwPqCg/w0VE73w1tbLzSgQ52Lnhg4
TKo2eCN6T2vkge7JrZET5KjOngFSW7yRqTNkqp8JN8FOvhO2xwSk73VsbtH9LS44
t3Wp28DR13bIBOOKkdAB7DigMgFVBgma6A1Qj50n7mbQB71tgdOb62UEXypAQW12
kq8k9ZgA8fFVLRAVOEVTSxSQYVxCVzPd/46faLQyo7VzKARiu8XczvSh9Hrfwe8W
XiLP+YuIkJEvseZsg3UDVHQ=
-----END CERTIFICATE-----
Generated at Fri Nov 22 14:21:37 2024 by rpki-client on console-ams.rpki-client.org