Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3139382e31352e3232392e302f32342d3234203d3e203139393035.roa
File:                     3139382e31352e3232392e302f32342d3234203d3e203139393035.roa (raw, json)
Hash identifier:          MGBws+wy7mqmjD7I1V3gPkaii+yiRly5K7tQvEjS3hE=
Subject key identifier:   7C:1B:1D:9E:2F:E7:3F:6E:A9:9F:BD:63:13:66:62:63:F0:69:3C:87
Certificate issuer:       /CN=aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575
Certificate serial:       01DAF5CEF317F43B0E3A623A7F0F320A65F59BCF
Authority key identifier: 3C:ED:31:28:6B:CC:04:65:F8:DE:63:0A:45:22:05:FC:FD:28:FF:06
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3139382e31352e3232392e302f32342d3234203d3e203139393035.roa
Signing time:             Tue 24 Dec 2024 10:58:25 +0000
ROA not before:           Tue 24 Dec 2024 10:53:25 +0000
ROA not after:            Tue 23 Dec 2025 10:58:25 +0000
asID:                     19905
IP address blocks:        198.15.229.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3CED31286BCC0465F8DE630A452205FCFD28FF06.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3CED31286BCC0465F8DE630A452205FCFD28FF06.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/c576135d-7a7b-4781-acb2-21a0d33eb1d1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/c576135d-7a7b-4781-acb2-21a0d33eb1d1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 29 Dec 2024 22:27:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:da:f5:ce:f3:17:f4:3b:0e:3a:62:3a:7f:0f:32:0a:65:f5:9b:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575
        Validity
            Not Before: Dec 24 10:53:25 2024 GMT
            Not After : Dec 23 10:58:25 2025 GMT
        Subject: CN=7C1B1D9E2FE73F6EA99FBD6313666263F0693C87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:56:51:dd:5f:d9:a7:d8:4c:0e:b1:03:e6:58:
                    dc:6a:7e:87:a3:0c:06:c8:c9:67:68:36:d1:13:d7:
                    1c:8e:0d:db:b5:d0:52:e7:33:1f:66:d4:41:1c:0c:
                    1a:aa:6b:52:da:e5:fa:5c:59:d2:80:77:a6:cd:f4:
                    c5:d4:5f:13:55:1e:f0:f8:48:15:be:db:e9:9b:82:
                    3e:13:11:a1:c1:75:20:fc:c1:77:ca:12:b0:11:fa:
                    b5:84:03:14:e2:78:5e:ac:c3:5a:60:a9:34:44:4f:
                    96:87:07:8b:2f:ef:4d:c6:da:77:ac:de:22:da:51:
                    28:65:fd:61:58:32:90:31:01:ee:30:bc:9f:49:f7:
                    13:e2:45:6d:1a:2d:38:66:9a:c7:ab:3e:c4:38:0c:
                    bf:0b:7a:92:68:a9:5f:54:0e:b3:1d:86:32:21:67:
                    51:f7:c2:67:9f:25:e8:af:25:9a:b9:87:a0:64:7a:
                    38:0b:2e:20:f6:8f:03:7e:d6:d9:d3:b4:df:3d:77:
                    4e:be:21:08:dc:13:21:1c:cb:5a:be:fb:e7:39:7d:
                    48:a4:75:ee:bf:cb:62:51:e7:59:f4:1d:9b:7c:dd:
                    2d:97:d1:58:ca:26:6e:f6:20:73:ac:56:75:49:5c:
                    57:54:c9:85:aa:16:8d:38:80:55:19:2c:a8:14:cb:
                    e2:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:1B:1D:9E:2F:E7:3F:6E:A9:9F:BD:63:13:66:62:63:F0:69:3C:87
            X509v3 Authority Key Identifier:
                keyid:3C:ED:31:28:6B:CC:04:65:F8:DE:63:0A:45:22:05:FC:FD:28:FF:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3CED31286BCC0465F8DE630A452205FCFD28FF06.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3139382e31352e3232392e302f32342d3234203d3e203139393035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.15.229.0/24

    Signature Algorithm: sha256WithRSAEncryption
         45:e2:f6:e5:47:ba:28:08:24:32:b2:36:24:64:83:1c:51:e3:
         80:02:5e:6d:95:dc:dd:77:2b:5d:f7:55:78:a2:b9:0b:94:55:
         38:64:35:d6:81:c0:1c:b9:47:5f:1b:3d:05:e5:86:4a:18:cb:
         f0:6d:f8:56:fd:c5:41:e8:4c:be:28:98:00:02:1b:23:a5:3c:
         04:d1:2e:8f:1c:68:05:ea:d0:69:8b:a9:26:25:32:92:c8:ed:
         35:3f:07:eb:21:e7:8d:49:0e:a6:01:06:42:76:fa:3a:a2:e1:
         80:f4:76:13:e1:bf:ed:a9:60:4a:61:fb:f2:28:48:11:a8:c2:
         14:b3:c1:67:b4:e8:ab:7c:92:07:93:e4:a9:4c:73:12:30:3a:
         a8:d8:c4:5a:16:4c:c5:67:9a:ee:7f:c7:e8:f2:a7:14:9c:08:
         8c:15:10:1b:c1:ad:56:ea:80:f1:cc:97:ba:7d:16:ba:a2:38:
         0b:66:34:7f:6e:73:8e:29:16:03:04:a0:b5:36:03:06:55:c8:
         94:d9:ad:a4:9d:84:d4:64:0e:ac:87:8d:26:0b:43:49:ea:a9:
         40:04:b3:9d:ff:66:bf:61:fe:21:3e:d0:75:53:fc:49:bc:77:
         4a:31:5e:7a:43:3e:ad:8d:cc:91:c4:19:8a:5a:40:a7:ce:fe:
         cd:cc:7e:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 28 22:05:07 2024 by rpki-client on console-fra.rpki-client.org