Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139382e33372e3131322e302f32302d3234203d3e20333937333733.roa
File:                     3139382e33372e3131322e302f32302d3234203d3e20333937333733.roa (raw, json)
Hash identifier:          X/jpr3MJiJldrkq2/tSENuyob4gl5+Hj+wjSOVgkJek=
Subject key identifier:   38:86:9B:B2:9D:FD:30:61:B1:FC:DF:A9:00:52:A7:4D:57:5B:D2:48
Certificate issuer:       /CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4
Certificate serial:       3128AB7AB2C67C7D398741E2F2B4F0DB48FD6455
Authority key identifier: 62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139382e33372e3131322e302f32302d3234203d3e20333937333733.roa
Signing time:             Mon 30 Oct 2023 12:03:58 +0000
ROA not before:           Mon 30 Oct 2023 11:58:58 +0000
ROA not after:            Mon 28 Oct 2024 12:03:58 +0000
asID:                     397373
IP address blocks:        198.37.112.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/e203869d-6b95-465f-b4dc-088a5a2103fc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/e203869d-6b95-465f-b4dc-088a5a2103fc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 18:08:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:28:ab:7a:b2:c6:7c:7d:39:87:41:e2:f2:b4:f0:db:48:fd:64:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4
        Validity
            Not Before: Oct 30 11:58:58 2023 GMT
            Not After : Oct 28 12:03:58 2024 GMT
        Subject: CN=38869BB29DFD3061B1FCDFA90052A74D575BD248
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:39:65:c2:a5:01:dd:30:1a:af:0f:c6:f9:74:
                    94:69:87:91:d8:28:fc:3b:7e:30:94:44:fd:95:cf:
                    cc:3b:9e:93:21:b9:2a:99:30:61:69:4d:67:6a:7c:
                    7f:15:d8:5c:a0:50:c0:14:e3:65:44:47:cb:d7:ca:
                    94:f4:7b:fa:23:66:9a:29:ac:db:1e:32:9b:bc:37:
                    5c:9c:91:2b:a0:9f:10:15:8b:eb:5d:62:66:d8:92:
                    e0:8f:f0:d4:59:f6:c4:cd:90:dd:39:43:7c:4a:0b:
                    b9:62:04:ba:bf:f4:3f:7f:50:7b:65:e6:b0:e9:bb:
                    1e:69:ea:eb:25:81:81:6a:f7:84:e8:68:98:0e:b7:
                    01:26:27:f7:9f:9a:7f:a2:e6:bf:be:23:c9:68:c1:
                    e3:00:06:6c:2f:63:72:fb:22:e8:c9:79:2d:86:84:
                    cb:81:2a:46:55:7d:a2:10:22:80:25:bf:8c:c1:f2:
                    d0:ec:0d:65:43:e6:88:1d:13:37:d2:7e:34:7c:90:
                    28:6c:9a:a8:19:88:b6:f7:47:2d:e5:ac:2b:d9:b2:
                    56:62:9e:08:5b:67:02:eb:73:6e:85:4f:29:ca:15:
                    74:6e:17:e1:0d:0f:44:eb:f3:30:d8:2c:2c:e0:63:
                    85:17:ca:ef:2a:4c:6d:d0:ef:0f:9e:8a:f9:d7:49:
                    4d:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:86:9B:B2:9D:FD:30:61:B1:FC:DF:A9:00:52:A7:4D:57:5B:D2:48
            X509v3 Authority Key Identifier:
                keyid:62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139382e33372e3131322e302f32302d3234203d3e20333937333733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.37.112.0/20

    Signature Algorithm: sha256WithRSAEncryption
         65:a6:13:c2:61:82:4d:ea:98:e9:08:60:1c:f3:83:42:4c:22:
         45:5f:95:bf:26:c7:f6:e3:72:4b:e1:4b:03:8f:49:22:b9:53:
         84:f7:c7:2f:62:a3:d6:5b:e0:4b:c3:15:6e:7c:de:fb:be:47:
         7a:34:7b:14:2d:00:3f:1a:0e:90:89:17:6d:79:2e:1c:36:99:
         88:ae:94:3d:9a:42:b7:8e:d2:ba:8c:23:28:e3:de:10:9b:88:
         5a:e2:38:da:6e:23:3e:c2:b4:07:98:a7:54:2f:3d:a1:de:75:
         c0:7f:7f:e6:21:87:55:3f:1c:0c:83:e3:dc:e3:6f:cc:d8:d4:
         89:86:b3:7e:86:2f:5e:cf:df:3e:f8:c6:ae:e5:24:21:7b:2e:
         0e:25:db:e6:19:27:77:40:18:3d:74:3a:f3:b3:01:ed:f7:b4:
         95:8f:f1:fb:cc:c8:7a:c5:de:b0:15:b9:77:a1:5e:2b:e9:26:
         30:3e:e0:4a:b1:d3:af:d0:eb:d5:3a:b1:40:13:76:99:2b:75:
         ab:69:6a:3d:34:4d:51:e6:f7:6d:65:63:45:5e:2a:ce:d7:33:
         da:58:61:cc:3f:b9:6f:58:81:8a:70:34:3a:96:f0:f8:00:f1:
         b4:c2:dc:07:a9:be:2a:23:dd:35:4a:4c:75:df:30:d1:ec:d4:
         43:c8:c2:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 17:40:56 2024 by rpki-client on console-fra.rpki-client.org