Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/38392e3230372e3137362e302f32322d3234203d3e203631333137.roa
File:                     38392e3230372e3137362e302f32322d3234203d3e203631333137.roa (raw, json)
Hash identifier:          q+UMyYsaccllrWhvlU8sAxILJk8FW6UTylulLP289Fs=
Subject key identifier:   31:05:C5:58:22:5C:E8:61:A8:2E:52:F5:0C:2D:72:69:A9:BD:5B:A0
Certificate issuer:       /CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4
Certificate serial:       434BADB5E642D168B330465D89564A5124CD1E6F
Authority key identifier: 62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/38392e3230372e3137362e302f32322d3234203d3e203631333137.roa
Signing time:             Mon 20 Nov 2023 15:00:21 +0000
ROA not before:           Mon 20 Nov 2023 14:55:21 +0000
ROA not after:            Mon 18 Nov 2024 15:00:21 +0000
asID:                     61317
IP address blocks:        89.207.176.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/e203869d-6b95-465f-b4dc-088a5a2103fc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/e203869d-6b95-465f-b4dc-088a5a2103fc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 05 May 2024 03:06:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:4b:ad:b5:e6:42:d1:68:b3:30:46:5d:89:56:4a:51:24:cd:1e:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4
        Validity
            Not Before: Nov 20 14:55:21 2023 GMT
            Not After : Nov 18 15:00:21 2024 GMT
        Subject: CN=3105C558225CE861A82E52F50C2D7269A9BD5BA0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:d5:b0:4a:98:4e:03:db:8a:9d:ee:01:57:e3:
                    4f:7a:9d:6a:b6:c5:93:83:eb:f3:83:8c:d3:6e:72:
                    f3:70:9f:b9:69:91:98:86:8b:1e:89:3a:42:bf:07:
                    f5:d2:b7:fb:e0:64:ce:8a:72:e5:b6:a0:21:b4:22:
                    7a:c0:e3:c4:16:81:a6:51:a1:52:68:da:6c:0a:3c:
                    28:8c:28:6e:1e:60:bf:7d:ba:f8:34:3a:a9:d5:30:
                    78:13:6f:68:8a:19:1f:56:63:8a:82:d9:50:0e:d2:
                    bb:6c:4a:0d:4f:63:9f:2b:f1:0c:dd:6f:55:56:48:
                    a5:51:75:9d:b2:8c:6f:b0:12:2c:63:0e:58:4f:48:
                    f2:66:f6:9e:5e:d5:e2:35:61:bb:83:3f:f4:a1:03:
                    49:61:3b:ee:8e:04:cc:d7:1e:52:b5:34:85:43:25:
                    78:61:69:e2:d0:64:75:1d:ab:4a:5d:a1:f7:9b:55:
                    2e:41:e3:5c:af:71:3a:b5:bd:89:29:46:44:45:8a:
                    9e:82:52:43:cd:86:ae:e9:99:43:a7:42:56:bd:e5:
                    ec:f9:0e:43:aa:db:a4:ef:40:2e:1b:0c:5d:a7:4c:
                    32:8a:f2:7d:bc:9b:27:94:4f:16:ac:0b:9b:2f:55:
                    08:5d:0d:55:6f:aa:88:10:60:a3:27:c9:c1:40:fe:
                    99:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:05:C5:58:22:5C:E8:61:A8:2E:52:F5:0C:2D:72:69:A9:BD:5B:A0
            X509v3 Authority Key Identifier:
                keyid:62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/38392e3230372e3137362e302f32322d3234203d3e203631333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  89.207.176.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5f:f1:ef:3d:67:23:74:22:a4:b3:73:87:52:38:3a:86:37:7e:
         9c:69:01:51:6e:05:7c:be:02:c1:95:d7:f3:72:90:e2:f4:0f:
         cf:a4:79:0c:1e:5e:92:e7:f8:ab:9d:36:72:1c:8f:e1:e2:1d:
         fd:25:32:88:b1:cc:ab:68:e4:03:17:c1:a1:54:79:d7:55:5d:
         44:39:2d:22:9c:44:d6:a6:e5:28:42:e8:08:08:d1:75:46:51:
         8f:07:d0:53:b4:96:c2:3e:88:f0:f1:66:d9:7b:fb:65:b9:a9:
         af:0e:5e:d1:80:78:d1:d7:27:96:2a:c9:cf:f2:a1:78:81:5e:
         64:23:94:7b:08:c3:83:67:a6:9b:f9:b8:cb:e0:6f:c8:c1:a4:
         ee:cf:ef:ee:df:1e:52:61:34:3d:92:e7:98:9f:5d:98:37:67:
         56:a9:55:8b:1e:04:b6:82:60:76:78:90:70:19:97:6e:91:a7:
         42:f2:96:d8:a0:e6:e9:12:b1:92:8a:3c:0c:bb:22:36:75:0f:
         96:e3:d0:3e:75:67:4e:20:75:73:4c:a6:4e:8c:e5:ea:88:c3:
         60:36:02:87:47:21:52:fe:f4:52:c6:94:02:a6:1d:43:86:85:
         df:48:d3:71:34:dc:b9:c8:90:67:41:64:b2:29:d1:ae:38:e7:
         9b:b1:15:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 03:55:20 2024 by rpki-client on console-fra.rpki-client.org