Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3139392e3233312e37302e302f32342d3234203d3e20383334.roa
File:                     3139392e3233312e37302e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier:          AlPc/Bjd683NSLLUfzLLyGwg/wGukaQ6HewTf02Vyxo=
Subject key identifier:   09:29:71:87:29:8A:01:68:B2:D8:2E:F9:33:DD:4C:51:3E:7A:4A:93
Certificate issuer:       /CN=aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575
Certificate serial:       2BF4E74D49C9F8A7C3B2E167FD30250C6DCB77C4
Authority key identifier: 3C:ED:31:28:6B:CC:04:65:F8:DE:63:0A:45:22:05:FC:FD:28:FF:06
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3139392e3233312e37302e302f32342d3234203d3e20383334.roa
Signing time:             Tue 24 Dec 2024 10:58:53 +0000
ROA not before:           Tue 24 Dec 2024 10:53:53 +0000
ROA not after:            Tue 23 Dec 2025 10:58:53 +0000
asID:                     834
IP address blocks:        199.231.70.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3CED31286BCC0465F8DE630A452205FCFD28FF06.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3CED31286BCC0465F8DE630A452205FCFD28FF06.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/c576135d-7a7b-4781-acb2-21a0d33eb1d1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/c576135d-7a7b-4781-acb2-21a0d33eb1d1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 29 Dec 2024 22:27:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:f4:e7:4d:49:c9:f8:a7:c3:b2:e1:67:fd:30:25:0c:6d:cb:77:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575
        Validity
            Not Before: Dec 24 10:53:53 2024 GMT
            Not After : Dec 23 10:58:53 2025 GMT
        Subject: CN=09297187298A0168B2D82EF933DD4C513E7A4A93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:1b:35:ae:80:17:7b:e9:d6:c6:65:81:41:b4:
                    30:cd:8d:3b:8e:03:16:00:f1:1c:e9:b9:42:f7:15:
                    be:44:be:9e:6f:45:b3:78:65:55:66:25:7d:e9:df:
                    86:70:51:23:bd:c3:13:05:89:00:fa:49:a4:5c:70:
                    49:f4:71:7c:b1:49:1a:5e:91:e5:a6:cf:34:9b:82:
                    0c:2d:bb:c1:55:3d:61:35:1e:73:45:a8:c0:50:7a:
                    59:60:b4:35:02:28:dc:16:6f:0a:5f:35:bc:68:1c:
                    52:de:cf:f4:72:97:11:b0:74:ec:7a:b8:cc:76:44:
                    5c:24:87:97:52:3a:cc:1f:e4:64:da:e7:6b:3a:9d:
                    a5:40:f4:63:be:fc:96:36:f6:fc:1d:2f:9c:6f:8f:
                    bb:5c:85:81:e9:ab:04:cd:f8:90:71:32:6c:5d:78:
                    ef:94:ae:a6:ea:9f:fa:8a:b2:73:ac:33:4e:fa:79:
                    5e:2b:7b:41:78:a0:9d:98:f3:a6:c6:db:40:27:a4:
                    17:39:05:ba:bd:8e:fa:5b:3f:f8:96:43:f3:b8:79:
                    63:29:2b:a2:31:b1:5d:76:12:59:06:a7:80:87:0f:
                    e0:38:36:4c:59:86:41:2b:50:ec:10:59:fa:04:a8:
                    c4:f4:56:49:62:14:ba:5c:f6:42:c0:b1:9e:bc:19:
                    5f:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:29:71:87:29:8A:01:68:B2:D8:2E:F9:33:DD:4C:51:3E:7A:4A:93
            X509v3 Authority Key Identifier:
                keyid:3C:ED:31:28:6B:CC:04:65:F8:DE:63:0A:45:22:05:FC:FD:28:FF:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3CED31286BCC0465F8DE630A452205FCFD28FF06.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3139392e3233312e37302e302f32342d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.231.70.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3a:93:35:4d:c7:82:d2:36:c6:aa:6c:4b:8c:34:ad:62:8c:8d:
         2e:a0:3c:bb:88:1c:64:c9:44:aa:57:2f:51:14:cd:61:c4:cd:
         ec:94:28:5f:0f:ba:5a:7d:94:5b:0d:c7:bf:0f:47:cd:9d:fb:
         62:99:e1:b9:fc:cd:71:6f:65:f2:ee:ab:42:d2:f4:a8:59:3f:
         d2:cf:76:01:83:a2:fe:cd:8e:a4:07:69:48:14:76:25:db:a1:
         43:3e:53:b8:5d:b4:22:c6:31:bf:96:7f:2d:23:e9:fe:2c:75:
         61:63:07:dc:ff:41:ea:93:c5:93:27:b2:57:14:9d:7b:19:a9:
         16:9f:16:fb:1a:a4:a2:e3:c2:47:03:86:85:ec:60:8c:94:a4:
         a7:b4:f6:1e:cf:0d:80:5e:c9:57:a0:a8:a8:ba:46:87:60:59:
         9a:92:e5:c3:8c:2e:3e:0e:34:fc:d6:d6:80:36:0f:74:c3:cc:
         d2:96:c7:dd:1c:9c:8b:c3:b0:46:46:1d:d1:05:18:42:85:3f:
         a5:54:a0:19:85:bf:ea:5b:9f:9c:c1:9c:8b:66:ee:da:bf:09:
         35:cd:a8:61:4a:36:a8:12:41:66:9e:ad:55:5c:f5:20:c9:c1:
         04:09:4d:fd:6c:1a:97:d7:c9:5f:07:4b:23:27:ad:f5:9a:aa:
         69:c8:93:5f
-----BEGIN CERTIFICATE-----
MIIFrTCCBJWgAwIBAgIUK/TnTUnJ+KfDsuFn/TAlDG3Ld8QwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyYWNhMDUzMDhhYzc5ZDVhNjJiNDk3ZDZiODgzZjlmNTlm
YjIyZDE0NTgzZjAwYmU1NzUwHhcNMjQxMjI0MTA1MzUzWhcNMjUxMjIzMTA1ODUz
WjAzMTEwLwYDVQQDEygwOTI5NzE4NzI5OEEwMTY4QjJEODJFRjkzM0RENEM1MTNF
N0E0QTkzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtBs1roAXe+nW
xmWBQbQwzY07jgMWAPEc6blC9xW+RL6eb0WzeGVVZiV96d+GcFEjvcMTBYkA+kmk
XHBJ9HF8sUkaXpHlps80m4IMLbvBVT1hNR5zRajAUHpZYLQ1AijcFm8KXzW8aBxS
3s/0cpcRsHTserjMdkRcJIeXUjrMH+Rk2udrOp2lQPRjvvyWNvb8HS+cb4+7XIWB
6asEzfiQcTJsXXjvlK6m6p/6irJzrDNO+nleK3tBeKCdmPOmxttAJ6QXOQW6vY76
Wz/4lkPzuHljKSuiMbFddhJZBqeAhw/gODZMWYZBK1DsEFn6BKjE9FZJYhS6XPZC
wLGevBlfQwIDAQABo4ICrTCCAqkwHQYDVR0OBBYEFAkpcYcpigFostgu+TPdTFE+
ekqTMB8GA1UdIwQYMBaAFDztMShrzARl+N5jCkUiBfz9KP8GMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmOTJlZTRkODQwMTkzZjQyOGVhOWI3MjY3LzAv
M0NFRDMxMjg2QkNDMDQ2NUY4REU2MzBBNDUyMjA1RkNGRDI4RkYwNi5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvZDlkMTU3MmYtNmNiYi00Y2Y3LWI1OTktZTlkMGU5
ODFkOWJmL2M1NzYxMzVkLTdhN2ItNDc4MS1hY2IyLTIxYTBkMzNlYjFkMS9hY2Ew
NTMwOGFjNzlkNWE2MmI0OTdkNmI4ODNmOWY1OWZiMjJkMTQ1ODNmMDBiZTU3NS5j
ZXIwgZ0GCCsGAQUFBwELBIGQMIGNMIGKBggrBgEFBQcwC4Z+cnN5bmM6Ly9ycGtp
LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmOTJlZTRkODQwMTkzZjQy
OGVhOWI3MjY3LzAvMzEzOTM5MmUzMjMzMzEyZTM3MzAyZTMwMmYzMjM0MmQzMjM0
MjAzZDNlMjAzODMzMzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADH50YwDQYJKoZIhvcNAQELBQADggEB
ADqTNU3HgtI2xqpsS4w0rWKMjS6gPLuIHGTJRKpXL1EUzWHEzeyUKF8Pulp9lFsN
x78PR82d+2KZ4bn8zXFvZfLuq0LS9KhZP9LPdgGDov7NjqQHaUgUdiXboUM+U7hd
tCLGMb+Wfy0j6f4sdWFjB9z/QeqTxZMnslcUnXsZqRafFvsapKLjwkcDhoXsYIyU
pKe09h7PDYBeyVegqKi6RodgWZqS5cOMLj4ONPzW1oA2D3TDzNKWx90cnIvDsEZG
HdEFGEKFP6VUoBmFv+pbn5zBnItm7tq/CTXNqGFKNqgSQWaerVVc9SDJwQQJTf1s
GpfXyV8HSyMnrfWaqmnIk18=
-----END CERTIFICATE-----
Generated at Sat Dec 28 22:05:07 2024 by rpki-client on console-fra.rpki-client.org