Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/39312e3139342e3230312e302f32342d3234203d3e20323132323338.roa
File:                     39312e3139342e3230312e302f32342d3234203d3e20323132323338.roa (raw, json)
Hash identifier:          u2CdaqXHW8jvCHT4Pezj2QN/5BhAVzSkEPPKkeGaH3U=
Subject key identifier:   BC:AA:1B:AD:DB:63:D9:FC:5A:52:EB:0A:5D:19:04:58:34:D4:2F:BA
Certificate issuer:       /CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4
Certificate serial:       73240F9FEE07E5711C3BD8DADD713E092687186B
Authority key identifier: 62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/39312e3139342e3230312e302f32342d3234203d3e20323132323338.roa
Signing time:             Tue 07 May 2024 15:01:15 +0000
ROA not before:           Tue 07 May 2024 14:56:15 +0000
ROA not after:            Tue 06 May 2025 15:01:15 +0000
asID:                     212238
IP address blocks:        91.194.201.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/e203869d-6b95-465f-b4dc-088a5a2103fc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/e203869d-6b95-465f-b4dc-088a5a2103fc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 08 May 2024 16:34:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:24:0f:9f:ee:07:e5:71:1c:3b:d8:da:dd:71:3e:09:26:87:18:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4
        Validity
            Not Before: May  7 14:56:15 2024 GMT
            Not After : May  6 15:01:15 2025 GMT
        Subject: CN=BCAA1BADDB63D9FC5A52EB0A5D19045834D42FBA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:f1:45:19:21:df:49:ab:b7:6c:08:83:77:b5:
                    95:ef:bf:a6:e8:38:15:9a:9b:7c:4e:f5:34:79:d4:
                    eb:8e:39:5a:78:c3:79:c7:1a:7e:0b:fc:2e:01:30:
                    9f:08:42:9d:0a:54:ca:ee:14:3c:8f:07:13:aa:32:
                    19:8a:30:6d:b2:aa:a1:ad:9f:3b:eb:b9:6e:d5:f8:
                    6b:32:9b:2d:00:94:e5:71:02:1c:2a:24:e1:ae:3f:
                    52:1f:19:73:4e:53:6b:af:bf:f7:5d:83:7c:69:51:
                    27:49:0e:7f:3f:74:5d:d3:ee:ab:bb:41:73:b2:2a:
                    41:e7:c3:e4:e7:4f:0d:78:71:f3:e9:44:55:1f:02:
                    c5:67:2c:ec:09:a4:45:31:74:d0:ba:87:a4:6a:a6:
                    ae:de:3f:f6:f4:50:44:9a:a8:d3:77:c6:11:10:f3:
                    e5:8f:38:91:57:10:74:20:3e:47:20:4e:ea:ad:8b:
                    e0:d4:60:3d:ca:25:a1:11:81:0a:da:d3:21:5f:bc:
                    a1:dd:a7:b9:54:3f:18:42:78:e8:53:46:b4:98:68:
                    40:87:90:e7:5c:79:ac:f1:6f:6a:ef:4c:08:c4:dd:
                    f8:07:1e:d0:a6:63:f3:71:e4:d0:fb:ac:2b:df:ca:
                    68:2d:69:1b:bd:7b:79:82:7c:11:a2:45:5c:cf:95:
                    09:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:AA:1B:AD:DB:63:D9:FC:5A:52:EB:0A:5D:19:04:58:34:D4:2F:BA
            X509v3 Authority Key Identifier:
                keyid:62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/39312e3139342e3230312e302f32342d3234203d3e20323132323338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.194.201.0/24

    Signature Algorithm: sha256WithRSAEncryption
         60:67:4a:94:dc:c7:a6:76:4a:bd:fd:5d:fc:8c:5c:c9:1a:43:
         58:5b:1d:4e:fc:9f:85:19:7f:da:7a:9f:4d:96:ba:10:fc:e5:
         eb:4a:b1:c9:3d:1e:c0:19:77:43:54:0b:53:f7:c9:28:1e:7b:
         ab:75:9b:14:a7:a3:26:e7:34:7d:b6:10:ca:33:08:08:94:85:
         16:71:3b:44:23:97:36:66:59:22:36:46:b3:39:ad:da:fb:16:
         58:47:3d:3c:19:7d:63:12:25:79:25:ce:0e:04:45:8a:54:75:
         88:6d:ee:71:f8:74:93:ee:6f:2f:8f:18:41:2c:7f:1b:8b:ab:
         53:4a:0b:89:d9:bc:6c:86:ba:11:29:66:b2:6c:e9:e8:fc:de:
         a8:38:0c:79:19:12:86:13:5d:94:47:a5:5e:7b:d8:7e:e3:fe:
         9f:24:14:ae:bd:2f:1b:d2:8c:07:5a:de:0d:51:14:02:cb:d7:
         ee:0b:66:d3:19:1f:82:c0:ee:fc:10:4a:7e:3e:cc:c6:13:01:
         9d:e6:c1:6f:42:79:ff:38:fc:75:d0:aa:77:40:e4:97:11:fd:
         a4:25:60:f2:22:80:3f:8f:3a:e2:eb:6c:e8:38:60:0e:56:7a:
         c9:d2:b4:cb:b7:58:73:0b:5c:e3:26:1d:66:66:50:ff:77:e4:
         b4:24:7d:c2
-----BEGIN CERTIFICATE-----
MIIFtDCCBJygAwIBAgIUcyQPn+4H5XEcO9ja3XE+CSaHGGswDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMWYyMmNmMDc1NzFlY2JhYjZkNDYwYTFmM2I2YzVkNjE5
N2QwOTgzNjQzYTU0ZDJlZDQwHhcNMjQwNTA3MTQ1NjE1WhcNMjUwNTA2MTUwMTE1
WjAzMTEwLwYDVQQDEyhCQ0FBMUJBRERCNjNEOUZDNUE1MkVCMEE1RDE5MDQ1ODM0
RDQyRkJBMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArfFFGSHfSau3
bAiDd7WV77+m6DgVmpt8TvU0edTrjjlaeMN5xxp+C/wuATCfCEKdClTK7hQ8jwcT
qjIZijBtsqqhrZ8767lu1fhrMpstAJTlcQIcKiThrj9SHxlzTlNrr7/3XYN8aVEn
SQ5/P3Rd0+6ru0FzsipB58Pk508NeHHz6URVHwLFZyzsCaRFMXTQuoekaqau3j/2
9FBEmqjTd8YREPPljziRVxB0ID5HIE7qrYvg1GA9yiWhEYEK2tMhX7yh3ae5VD8Y
QnjoU0a0mGhAh5DnXHms8W9q70wIxN34Bx7QpmPzceTQ+6wr38poLWkbvXt5gnwR
okVcz5UJzwIDAQABo4ICtDCCArAwHQYDVR0OBBYEFLyqG63bY9n8WlLrCl0ZBFg0
1C+6MB8GA1UdIwQYMBaAFGK0t02IaU0zyBBuijO8FJ6zkE/rMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmODE0M2JmNjIwMTgxZWNkMzdkYWM3MmYxLzEv
NjJCNEI3NEQ4ODY5NEQzM0M4MTA2RThBMzNCQzE0OUVCMzkwNEZFQi5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi
MGI4NDE1L2UyMDM4NjlkLTZiOTUtNDY1Zi1iNGRjLTA4OGE1YTIxMDNmYy8xZjIy
Y2YwNzU3MWVjYmFiNmQ0NjBhMWYzYjZjNWQ2MTk3ZDA5ODM2NDNhNTRkMmVkNC5j
ZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjgxNDNiZjYyMDE4MWVj
ZDM3ZGFjNzJmMS8xLzM5MzEyZTMxMzkzNDJlMzIzMDMxMmUzMDJmMzIzNDJkMzIz
NDIwM2QzZTIwMzIzMTMyMzIzMzM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW8LJMA0GCSqGSIb3DQEB
CwUAA4IBAQBgZ0qU3Memdkq9/V38jFzJGkNYWx1O/J+FGX/aep9NlroQ/OXrSrHJ
PR7AGXdDVAtT98koHnurdZsUp6Mm5zR9thDKMwgIlIUWcTtEI5c2ZlkiNkazOa3a
+xZYRz08GX1jEiV5Jc4OBEWKVHWIbe5x+HST7m8vjxhBLH8bi6tTSguJ2bxshroR
KWaybOno/N6oOAx5GRKGE12UR6Vee9h+4/6fJBSuvS8b0owHWt4NURQCy9fuC2bT
GR+CwO78EEp+PszGEwGd5sFvQnn/OPx10Kp3QOSXEf2kJWDyIoA/jzri62zoOGAO
VnrJ0rTLt1hzC1zjJh1mZlD/d+S0JH3C
-----END CERTIFICATE-----
Generated at Tue May 7 18:08:26 2024 by rpki-client on console-fra.rpki-client.org