Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139332e3134392e3232352e302f32342d3234203d3e20333938343635.roa
File:                     3139332e3134392e3232352e302f32342d3234203d3e20333938343635.roa (raw, json)
Hash identifier:          g6RtNmqaZJcozeUvxsxelKcBR/VJep/vBQLRqKfK+lo=
Subject key identifier:   77:33:7C:DD:B3:80:6A:02:8F:16:19:4E:78:F4:7F:72:70:01:11:E0
Certificate issuer:       /CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4
Certificate serial:       2B1A0AE867536B6F34B139B84644DD6B2493A644
Authority key identifier: 62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139332e3134392e3232352e302f32342d3234203d3e20333938343635.roa
Signing time:             Wed 08 Nov 2023 12:55:59 +0000
ROA not before:           Wed 08 Nov 2023 12:50:59 +0000
ROA not after:            Wed 06 Nov 2024 12:55:59 +0000
asID:                     398465
IP address blocks:        193.149.225.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/e203869d-6b95-465f-b4dc-088a5a2103fc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/e203869d-6b95-465f-b4dc-088a5a2103fc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 02 Jun 2024 03:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:1a:0a:e8:67:53:6b:6f:34:b1:39:b8:46:44:dd:6b:24:93:a6:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4
        Validity
            Not Before: Nov  8 12:50:59 2023 GMT
            Not After : Nov  6 12:55:59 2024 GMT
        Subject: CN=77337CDDB3806A028F16194E78F47F72700111E0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:43:03:12:65:ae:5a:99:82:19:8e:d2:7d:c8:
                    e0:1e:a2:2f:e2:dc:a5:e5:f4:7b:a6:5a:d2:18:6f:
                    70:c2:69:3d:4d:a6:80:0f:c4:ce:f0:49:ea:a4:68:
                    d1:77:33:88:b4:67:58:a6:f0:64:44:24:76:78:a1:
                    3d:67:f5:a7:3f:cc:1f:29:77:43:b7:ff:fe:4c:77:
                    56:bc:80:5d:d4:c8:09:41:bd:da:e1:2b:52:76:48:
                    be:aa:75:ef:9f:50:fe:56:53:a8:25:20:ae:eb:3c:
                    b3:2a:a4:ed:d2:25:2c:3b:ea:b8:8f:62:1c:78:f6:
                    4b:ff:ee:86:41:d4:91:5d:90:41:d7:ef:fe:74:2c:
                    06:c8:88:4f:45:52:04:ce:92:b4:74:e6:c4:b0:43:
                    56:5b:6b:91:b3:58:aa:a5:15:b4:5c:88:58:3a:48:
                    42:e2:4a:69:32:59:61:04:1d:a4:3f:90:2f:fe:66:
                    0c:cc:5d:f5:89:ab:fe:1d:58:97:a0:08:d7:b7:e7:
                    f1:23:0a:dc:91:65:41:3d:62:09:86:28:7e:c2:3c:
                    1a:ea:a6:5c:12:3a:de:1f:c2:e7:9b:e9:c9:ec:64:
                    3b:9f:f2:ba:a0:c6:ae:ee:a3:70:9e:c5:63:c4:f7:
                    38:9c:1a:ed:27:61:db:e9:33:ab:27:f1:b8:8d:53:
                    f8:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:33:7C:DD:B3:80:6A:02:8F:16:19:4E:78:F4:7F:72:70:01:11:E0
            X509v3 Authority Key Identifier:
                keyid:62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139332e3134392e3232352e302f32342d3234203d3e20333938343635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.149.225.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6b:5d:60:5d:39:c5:44:a6:97:86:70:6d:a7:0d:5f:ed:ee:70:
         11:2f:77:26:dc:fe:70:5d:15:8a:c2:ba:34:31:00:ce:46:eb:
         ea:cc:06:0c:fc:75:e1:ee:40:c1:e7:51:c4:a9:a7:a9:07:ff:
         9f:78:21:6d:c3:ea:30:3d:ad:17:0d:00:c2:35:47:11:f6:8a:
         45:a9:d4:a9:b6:f2:43:60:ae:e1:91:11:36:31:6b:ae:4d:7f:
         88:13:f9:12:29:68:02:6c:d4:16:d9:d1:61:04:24:94:e9:f8:
         c4:bd:75:f9:1e:70:f8:ec:9b:96:4e:eb:e9:a1:19:89:24:3b:
         ae:b8:89:07:64:27:25:0b:23:b3:b7:b2:49:4e:bd:45:54:2e:
         6e:79:16:0f:1e:36:8f:1f:d0:25:b5:75:f4:21:bd:e8:08:a7:
         82:32:37:9a:a9:93:da:3a:bc:d5:18:9e:e1:47:8d:ee:8e:f5:
         a9:a5:81:1b:0d:34:b1:87:30:e3:3a:85:83:6c:54:3e:65:ec:
         fe:d1:ca:7b:b9:a4:80:f1:16:ee:59:ad:ee:0c:eb:f1:13:b3:
         68:1c:a1:64:83:2a:f9:07:67:dd:87:18:c6:08:0d:89:a1:c7:
         37:61:a9:95:b0:e1:cb:53:7f:ab:e1:42:d0:23:d7:d1:a1:17:
         63:03:22:c5
-----BEGIN CERTIFICATE-----
MIIFtjCCBJ6gAwIBAgIUKxoK6GdTa280sTm4RkTdaySTpkQwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMWYyMmNmMDc1NzFlY2JhYjZkNDYwYTFmM2I2YzVkNjE5
N2QwOTgzNjQzYTU0ZDJlZDQwHhcNMjMxMTA4MTI1MDU5WhcNMjQxMTA2MTI1NTU5
WjAzMTEwLwYDVQQDEyg3NzMzN0NEREIzODA2QTAyOEYxNjE5NEU3OEY0N0Y3Mjcw
MDExMUUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl0MDEmWuWpmC
GY7SfcjgHqIv4tyl5fR7plrSGG9wwmk9TaaAD8TO8EnqpGjRdzOItGdYpvBkRCR2
eKE9Z/WnP8wfKXdDt//+THdWvIBd1MgJQb3a4StSdki+qnXvn1D+VlOoJSCu6zyz
KqTt0iUsO+q4j2IcePZL/+6GQdSRXZBB1+/+dCwGyIhPRVIEzpK0dObEsENWW2uR
s1iqpRW0XIhYOkhC4kppMllhBB2kP5Av/mYMzF31iav+HViXoAjXt+fxIwrckWVB
PWIJhih+wjwa6qZcEjreH8Lnm+nJ7GQ7n/K6oMau7qNwnsVjxPc4nBrtJ2Hb6TOr
J/G4jVP40wIDAQABo4ICtjCCArIwHQYDVR0OBBYEFHczfN2zgGoCjxYZTnj0f3Jw
ARHgMB8GA1UdIwQYMBaAFGK0t02IaU0zyBBuijO8FJ6zkE/rMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmODE0M2JmNjIwMTgxZWNkMzdkYWM3MmYxLzEv
NjJCNEI3NEQ4ODY5NEQzM0M4MTA2RThBMzNCQzE0OUVCMzkwNEZFQi5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi
MGI4NDE1L2UyMDM4NjlkLTZiOTUtNDY1Zi1iNGRjLTA4OGE1YTIxMDNmYy8xZjIy
Y2YwNzU3MWVjYmFiNmQ0NjBhMWYzYjZjNWQ2MTk3ZDA5ODM2NDNhNTRkMmVkNC5j
ZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjgxNDNiZjYyMDE4MWVj
ZDM3ZGFjNzJmMS8xLzMxMzkzMzJlMzEzNDM5MmUzMjMyMzUyZTMwMmYzMjM0MmQz
MjM0MjAzZDNlMjAzMzM5MzgzNDM2MzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADBleEwDQYJKoZIhvcN
AQELBQADggEBAGtdYF05xUSml4ZwbacNX+3ucBEvdybc/nBdFYrCujQxAM5G6+rM
Bgz8deHuQMHnUcSpp6kH/594IW3D6jA9rRcNAMI1RxH2ikWp1Km28kNgruGRETYx
a65Nf4gT+RIpaAJs1BbZ0WEEJJTp+MS9dfkecPjsm5ZO6+mhGYkkO664iQdkJyUL
I7O3sklOvUVULm55Fg8eNo8f0CW1dfQhvegIp4IyN5qpk9o6vNUYnuFHje6O9aml
gRsNNLGHMOM6hYNsVD5l7P7Rynu5pIDxFu5Zre4M6/ETs2gcoWSDKvkHZ92HGMYI
DYmhxzdhqZWw4ctTf6vhQtAj19GhF2MDIsU=
-----END CERTIFICATE-----
Generated at Sat Jun 1 00:32:25 2024 by rpki-client on console-fra.rpki-client.org