Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3139392e3233312e36372e302f32342d3234203d3e20383334.roa
File:                     3139392e3233312e36372e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier:          jkJNW/BZmWC+dyYrgmEgQauOOGe1HZ6j6jCEatj5aIw=
Subject key identifier:   B5:7D:4B:42:7D:10:76:A6:AC:5F:08:CA:B5:8B:D7:1E:34:10:77:E8
Certificate issuer:       /CN=aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575
Certificate serial:       E5F4541850BAF400002F5EB9F2681D81779F2C
Authority key identifier: 3C:ED:31:28:6B:CC:04:65:F8:DE:63:0A:45:22:05:FC:FD:28:FF:06
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3139392e3233312e36372e302f32342d3234203d3e20383334.roa
Signing time:             Tue 24 Dec 2024 10:59:14 +0000
ROA not before:           Tue 24 Dec 2024 10:54:14 +0000
ROA not after:            Tue 23 Dec 2025 10:59:14 +0000
asID:                     834
IP address blocks:        199.231.67.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3CED31286BCC0465F8DE630A452205FCFD28FF06.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3CED31286BCC0465F8DE630A452205FCFD28FF06.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/c576135d-7a7b-4781-acb2-21a0d33eb1d1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/c576135d-7a7b-4781-acb2-21a0d33eb1d1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 29 Dec 2024 22:27:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            e5:f4:54:18:50:ba:f4:00:00:2f:5e:b9:f2:68:1d:81:77:9f:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575
        Validity
            Not Before: Dec 24 10:54:14 2024 GMT
            Not After : Dec 23 10:59:14 2025 GMT
        Subject: CN=B57D4B427D1076A6AC5F08CAB58BD71E341077E8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:68:25:5c:cc:e1:d9:0e:cc:a0:60:cc:39:1f:
                    ee:5c:28:a9:ab:63:7e:bc:f1:c5:1d:29:f3:44:33:
                    e5:87:1a:f3:ad:1b:a0:05:55:8f:41:4a:b1:1c:8c:
                    30:c7:a0:77:95:20:ec:d7:9f:94:46:39:48:4e:1d:
                    9f:34:40:70:0a:8e:4f:f9:31:16:a9:c1:26:56:bb:
                    68:64:ca:06:c5:cd:c5:09:07:cf:ee:65:94:74:54:
                    a8:ef:ae:15:f6:b3:11:20:87:30:5f:89:eb:bd:b3:
                    f3:36:d9:b6:01:a0:f5:4a:2e:1c:b2:20:e4:27:e5:
                    91:db:45:96:84:78:71:c6:f6:69:33:08:92:b2:3c:
                    90:a4:a0:14:8e:a3:c2:13:6b:ea:cc:b3:e0:53:b8:
                    6c:06:bd:be:f0:7d:0e:96:44:cf:37:d0:7a:5d:3f:
                    0a:d6:86:47:07:77:8a:83:05:65:5a:91:f8:b0:a5:
                    4a:5f:5d:81:a5:e9:c4:df:b1:3d:12:96:02:d6:a1:
                    95:1b:11:98:5e:7e:b2:27:0f:c1:1d:30:25:f2:57:
                    a9:f0:1b:6b:f0:5b:bc:4a:9e:ea:cb:b7:20:d5:fd:
                    97:7e:f9:28:24:4d:60:6e:fc:7b:7f:c8:20:7c:41:
                    cb:03:31:1b:cb:37:1d:4f:08:12:71:12:8b:d1:79:
                    cb:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:7D:4B:42:7D:10:76:A6:AC:5F:08:CA:B5:8B:D7:1E:34:10:77:E8
            X509v3 Authority Key Identifier:
                keyid:3C:ED:31:28:6B:CC:04:65:F8:DE:63:0A:45:22:05:FC:FD:28:FF:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3CED31286BCC0465F8DE630A452205FCFD28FF06.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3139392e3233312e36372e302f32342d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.231.67.0/24

    Signature Algorithm: sha256WithRSAEncryption
         89:a8:95:42:a6:1a:f0:85:ca:a2:7d:83:26:19:0f:e2:3c:b4:
         c4:ab:61:ad:59:51:a9:5a:fc:ce:f2:57:2d:34:de:57:24:c8:
         c1:33:b4:ff:8e:d4:78:c9:d2:11:85:9d:21:dc:88:6e:2e:84:
         66:0f:98:85:25:e7:ff:c6:86:02:f8:bc:65:14:99:d9:da:9f:
         81:c6:f7:54:6a:77:c0:7b:62:2d:ab:63:22:2d:07:dc:ef:35:
         de:ab:78:14:a3:45:1a:0a:90:6d:f1:12:19:12:ee:5e:b4:ff:
         2e:a0:d0:23:0f:99:6b:34:1b:45:39:4b:ee:27:e5:80:62:05:
         68:cd:d3:6a:a1:2c:92:e6:cd:03:55:9e:c0:27:b1:d9:1d:ce:
         04:22:6c:50:ea:01:9e:d8:8f:5e:69:3c:df:a0:48:63:d5:57:
         ba:e2:12:1e:a5:e2:2f:be:b2:fc:70:09:99:39:d6:14:a7:30:
         da:3d:ba:e5:55:0b:1d:f8:93:3c:52:7b:16:9b:db:bd:e7:bc:
         e9:3a:a0:fd:90:85:9c:04:e4:d6:3e:f7:86:93:c0:6a:dc:54:
         a7:d0:79:b8:0f:b9:74:7c:99:48:ce:c9:f4:e8:6a:db:fd:0e:
         9c:88:f2:3a:b1:18:b9:d1:d7:1c:80:96:50:95:74:76:b2:19:
         6f:56:03:2c
-----BEGIN CERTIFICATE-----
MIIFrTCCBJWgAwIBAgIUAOX0VBhQuvQAAC9eufJoHYF3nywwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyYWNhMDUzMDhhYzc5ZDVhNjJiNDk3ZDZiODgzZjlmNTlm
YjIyZDE0NTgzZjAwYmU1NzUwHhcNMjQxMjI0MTA1NDE0WhcNMjUxMjIzMTA1OTE0
WjAzMTEwLwYDVQQDEyhCNTdENEI0MjdEMTA3NkE2QUM1RjA4Q0FCNThCRDcxRTM0
MTA3N0U4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlGglXMzh2Q7M
oGDMOR/uXCipq2N+vPHFHSnzRDPlhxrzrRugBVWPQUqxHIwwx6B3lSDs15+URjlI
Th2fNEBwCo5P+TEWqcEmVrtoZMoGxc3FCQfP7mWUdFSo764V9rMRIIcwX4nrvbPz
Ntm2AaD1Si4csiDkJ+WR20WWhHhxxvZpMwiSsjyQpKAUjqPCE2vqzLPgU7hsBr2+
8H0OlkTPN9B6XT8K1oZHB3eKgwVlWpH4sKVKX12BpenE37E9EpYC1qGVGxGYXn6y
Jw/BHTAl8lep8Btr8Fu8Sp7qy7cg1f2XfvkoJE1gbvx7f8ggfEHLAzEbyzcdTwgS
cRKL0XnL/QIDAQABo4ICrTCCAqkwHQYDVR0OBBYEFLV9S0J9EHamrF8IyrWL1x40
EHfoMB8GA1UdIwQYMBaAFDztMShrzARl+N5jCkUiBfz9KP8GMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmOTJlZTRkODQwMTkzZjQyOGVhOWI3MjY3LzAv
M0NFRDMxMjg2QkNDMDQ2NUY4REU2MzBBNDUyMjA1RkNGRDI4RkYwNi5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvZDlkMTU3MmYtNmNiYi00Y2Y3LWI1OTktZTlkMGU5
ODFkOWJmL2M1NzYxMzVkLTdhN2ItNDc4MS1hY2IyLTIxYTBkMzNlYjFkMS9hY2Ew
NTMwOGFjNzlkNWE2MmI0OTdkNmI4ODNmOWY1OWZiMjJkMTQ1ODNmMDBiZTU3NS5j
ZXIwgZ0GCCsGAQUFBwELBIGQMIGNMIGKBggrBgEFBQcwC4Z+cnN5bmM6Ly9ycGtp
LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmOTJlZTRkODQwMTkzZjQy
OGVhOWI3MjY3LzAvMzEzOTM5MmUzMjMzMzEyZTM2MzcyZTMwMmYzMjM0MmQzMjM0
MjAzZDNlMjAzODMzMzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADH50MwDQYJKoZIhvcNAQELBQADggEB
AImolUKmGvCFyqJ9gyYZD+I8tMSrYa1ZUala/M7yVy003lckyMEztP+O1HjJ0hGF
nSHciG4uhGYPmIUl5//GhgL4vGUUmdnan4HG91Rqd8B7Yi2rYyItB9zvNd6reBSj
RRoKkG3xEhkS7l60/y6g0CMPmWs0G0U5S+4n5YBiBWjN02qhLJLmzQNVnsAnsdkd
zgQibFDqAZ7Yj15pPN+gSGPVV7riEh6l4i++svxwCZk51hSnMNo9uuVVCx34kzxS
exab273nvOk6oP2QhZwE5NY+94aTwGrcVKfQebgPuXR8mUjOyfToatv9DpyI8jqx
GLnR1xyAllCVdHayGW9WAyw=
-----END CERTIFICATE-----
Generated at Sat Dec 28 23:02:57 2024 by rpki-client on console-ams.rpki-client.org