Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3139392e3233312e37312e302f32342d3234203d3e203233343730.roa
File:                     3139392e3233312e37312e302f32342d3234203d3e203233343730.roa (raw, json)
Hash identifier:          wn3ZXx3s2AmYQNtnLKXwEe7KzCzcdGb5csdx6l+vh+Y=
Subject key identifier:   16:36:6A:C7:77:6E:8B:3F:67:E5:E1:9E:95:39:DD:92:DE:3C:56:11
Certificate issuer:       /CN=aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575
Certificate serial:       410E5E555114251E5CA807CAA729A8AC262E1820
Authority key identifier: 3C:ED:31:28:6B:CC:04:65:F8:DE:63:0A:45:22:05:FC:FD:28:FF:06
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3139392e3233312e37312e302f32342d3234203d3e203233343730.roa
Signing time:             Tue 24 Dec 2024 10:58:10 +0000
ROA not before:           Tue 24 Dec 2024 10:53:10 +0000
ROA not after:            Tue 23 Dec 2025 10:58:10 +0000
asID:                     23470
IP address blocks:        199.231.71.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3CED31286BCC0465F8DE630A452205FCFD28FF06.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3CED31286BCC0465F8DE630A452205FCFD28FF06.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/c576135d-7a7b-4781-acb2-21a0d33eb1d1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/c576135d-7a7b-4781-acb2-21a0d33eb1d1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 29 Dec 2024 22:27:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:0e:5e:55:51:14:25:1e:5c:a8:07:ca:a7:29:a8:ac:26:2e:18:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575
        Validity
            Not Before: Dec 24 10:53:10 2024 GMT
            Not After : Dec 23 10:58:10 2025 GMT
        Subject: CN=16366AC7776E8B3F67E5E19E9539DD92DE3C5611
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:45:62:25:42:41:86:9a:76:1b:71:73:ab:79:
                    f7:1c:a8:cf:9f:98:c6:e1:67:60:97:6d:bc:e6:01:
                    49:43:37:29:18:06:8a:b5:39:96:6b:82:78:b6:fe:
                    ba:4b:2b:31:e9:c5:cf:1e:c2:dc:14:88:ae:9b:6d:
                    7f:b1:d2:38:ca:6e:bb:8b:43:3b:1c:b4:c2:0e:8a:
                    af:de:9d:6c:b7:48:01:5c:da:67:22:b7:d1:bd:e2:
                    23:51:3a:af:6f:8a:86:5c:d0:0a:51:25:42:0d:c3:
                    dc:6b:aa:53:1c:f4:10:51:e7:2f:07:94:5b:8e:e9:
                    11:b9:89:87:2e:fb:ce:2d:22:cd:3e:f7:0f:4e:62:
                    d6:7d:9f:fe:7b:f9:49:f8:fb:5e:be:ce:fa:3c:cb:
                    e8:ec:75:52:83:fe:31:88:60:64:d6:7d:09:35:a1:
                    5b:23:eb:b4:32:3a:2d:f6:3b:d2:69:f5:03:1e:67:
                    5e:dc:df:a0:79:f9:22:f7:f8:36:5a:df:eb:9e:a0:
                    1d:00:21:65:46:13:97:ff:bf:5e:dc:fd:9d:80:e3:
                    71:db:01:b0:ba:73:23:8a:de:66:af:f4:0b:0f:2e:
                    b9:6f:ff:9f:c4:13:62:b4:10:05:aa:0d:2e:12:4d:
                    d5:51:d5:a7:e5:1e:5b:1e:fa:8e:75:07:3c:9e:83:
                    15:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:36:6A:C7:77:6E:8B:3F:67:E5:E1:9E:95:39:DD:92:DE:3C:56:11
            X509v3 Authority Key Identifier:
                keyid:3C:ED:31:28:6B:CC:04:65:F8:DE:63:0A:45:22:05:FC:FD:28:FF:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3CED31286BCC0465F8DE630A452205FCFD28FF06.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3139392e3233312e37312e302f32342d3234203d3e203233343730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.231.71.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ac:70:73:be:75:3d:b1:75:a5:29:0d:68:98:3e:2c:78:a3:24:
         91:54:65:ba:83:17:00:e7:7b:e0:a1:6a:b1:94:38:87:77:7e:
         8a:e9:c1:06:4f:6d:2b:cd:4b:09:4f:89:87:67:91:fa:1f:58:
         e7:63:ec:a6:be:7c:ee:ca:08:34:87:4f:55:f7:18:b2:94:17:
         81:69:50:7a:7b:23:a7:12:11:71:1c:98:e5:96:58:3e:05:fc:
         d3:16:35:87:db:4c:3a:ef:e3:5f:71:d7:0d:a9:cc:1b:05:15:
         db:a4:e0:ca:0c:69:81:3d:4d:e3:2d:2e:32:ee:3b:20:b0:b4:
         3f:ac:92:81:b2:04:02:30:ef:a0:89:9e:f0:d1:23:11:c2:bc:
         27:14:4d:a6:aa:36:a1:23:c4:14:7e:84:f1:cc:b4:cf:66:93:
         5e:ae:58:61:8a:f9:69:97:46:ae:69:bd:5c:b1:ee:70:00:8a:
         43:f4:8c:e9:1e:57:41:5f:34:fd:a9:f0:51:80:a8:aa:3f:ff:
         0f:21:15:2e:1b:47:9a:69:d7:f1:2a:99:25:e2:7b:13:df:72:
         c7:9f:e9:45:c7:36:cc:f2:29:a5:11:a9:ce:68:89:94:26:17:
         8d:5d:a9:1c:b4:7d:ef:6c:70:fa:79:10:bf:fd:51:37:6c:fe:
         0c:61:7e:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 28 22:05:07 2024 by rpki-client on console-fra.rpki-client.org