Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139322e3130392e3132352e302f32342d3234203d3e2039303039.roa
File:                     3139322e3130392e3132352e302f32342d3234203d3e2039303039.roa (raw, json)
Hash identifier:          JeabLF54OeIXd4L2fj6WUyyEMhBoBuNwcyHVM/+hTt4=
Subject key identifier:   41:F1:01:12:95:7F:86:65:11:BD:1D:56:DF:2A:D4:B5:72:7A:4B:B4
Certificate issuer:       /CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4
Certificate serial:       192548C44936E6DB2EF5CE35BDE3704A45F7CE4A
Authority key identifier: 62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139322e3130392e3132352e302f32342d3234203d3e2039303039.roa
Signing time:             Tue 21 May 2024 08:14:37 +0000
ROA not before:           Tue 21 May 2024 08:09:37 +0000
ROA not after:            Tue 20 May 2025 08:14:37 +0000
asID:                     9009
IP address blocks:        192.109.125.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/e203869d-6b95-465f-b4dc-088a5a2103fc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/e203869d-6b95-465f-b4dc-088a5a2103fc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 13:28:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:25:48:c4:49:36:e6:db:2e:f5:ce:35:bd:e3:70:4a:45:f7:ce:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4
        Validity
            Not Before: May 21 08:09:37 2024 GMT
            Not After : May 20 08:14:37 2025 GMT
        Subject: CN=41F10112957F866511BD1D56DF2AD4B5727A4BB4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:7c:29:b1:d7:16:02:c5:67:10:f9:55:47:eb:
                    76:9a:f9:10:13:da:5b:3e:f6:24:3b:50:2d:9c:c0:
                    f6:bc:15:40:09:f8:db:4f:ee:93:f0:09:e9:0a:3e:
                    92:a3:1f:f2:84:dd:f2:2c:c2:71:cb:48:a5:e7:dd:
                    bf:42:0b:c9:2f:cf:21:92:58:e0:e3:db:75:22:27:
                    a8:fe:33:0b:1e:1c:e4:08:d0:bf:e1:de:0e:b6:c1:
                    3d:1a:21:d3:f5:ec:50:6e:a6:d0:86:29:75:55:02:
                    2e:03:9d:a6:90:48:5c:96:63:2f:a5:97:d5:f9:e3:
                    69:c3:80:73:5c:43:b0:48:3a:29:c8:45:e1:0c:31:
                    1c:9a:17:3a:e5:8e:95:66:aa:eb:b3:c0:37:16:ed:
                    24:94:32:6b:1c:83:2e:78:59:0a:42:9e:31:93:92:
                    54:ef:ac:18:7a:77:15:06:3c:42:d3:bf:50:1e:ce:
                    73:55:81:99:c2:07:a7:57:0c:f9:f7:a7:fc:0c:a2:
                    b9:44:db:35:40:52:2a:d2:3a:c0:70:12:89:87:cf:
                    0b:d9:51:7e:8e:d1:bc:82:1a:36:63:8b:2a:7e:21:
                    41:e8:3a:c4:df:16:ff:a7:89:fa:4f:8b:31:24:d4:
                    83:de:c5:df:0a:16:47:53:2e:2b:a6:17:6c:8a:c6:
                    a8:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:F1:01:12:95:7F:86:65:11:BD:1D:56:DF:2A:D4:B5:72:7A:4B:B4
            X509v3 Authority Key Identifier:
                keyid:62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139322e3130392e3132352e302f32342d3234203d3e2039303039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.109.125.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b2:e1:fe:26:25:0b:99:4f:71:b1:fa:68:37:93:c4:dc:76:72:
         f4:12:60:7c:25:73:18:a0:8c:1f:cb:d3:c6:cf:0e:bf:b2:34:
         00:0c:0b:86:b9:a5:d7:ee:52:04:85:a3:f7:64:4a:b7:4f:e6:
         c1:4a:a8:65:5c:cc:74:1f:fc:56:20:69:8c:34:62:4a:c6:f0:
         e8:1d:45:a3:d7:38:cf:a8:07:e2:88:ff:33:33:ec:bc:6c:4c:
         63:86:e4:0c:5d:5c:09:1f:4b:1d:ff:b3:84:f4:45:c6:ed:f1:
         0b:8b:f7:ef:df:d2:ff:1e:3a:7a:26:e0:5d:5b:f8:bd:52:06:
         3c:15:9e:87:83:33:03:aa:be:19:20:6f:fb:90:55:45:4f:74:
         f7:9b:15:8d:6b:e0:5b:dd:8d:39:76:4e:b4:03:1d:33:98:c6:
         a0:74:23:a3:fd:5b:6a:60:59:ce:5b:bc:77:1a:5c:d1:c0:3c:
         e3:d6:ab:96:8f:dd:3c:1e:47:a1:b0:f5:c2:37:c7:4c:6e:22:
         2b:30:3c:28:15:a1:51:61:b6:01:b7:72:35:ae:c3:b0:4a:aa:
         44:97:28:4d:75:d6:59:70:13:b1:0d:80:99:9c:f8:5f:3d:f9:
         ea:77:cf:85:06:5b:e1:09:d6:51:eb:3f:0c:35:0b:c5:91:59:
         ff:08:e6:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 13:18:46 2024 by rpki-client on console-fra.rpki-client.org