Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139322e3130392e3135392e302f32342d3234203d3e20323132323338.roa
File:                     3139322e3130392e3135392e302f32342d3234203d3e20323132323338.roa (raw, json)
Hash identifier:          f1SOn/fqAWe0s/DCo3XwJBv5aBKFPt0hvg4PkjBr+YU=
Subject key identifier:   84:55:B7:48:B3:21:5F:E3:2A:ED:52:FA:15:D0:49:3B:CE:B6:BB:36
Certificate issuer:       /CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4
Certificate serial:       3F5499E4B52122EBDDF55C351A2EE5C5794A7D3F
Authority key identifier: 62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139322e3130392e3135392e302f32342d3234203d3e20323132323338.roa
Signing time:             Mon 30 Oct 2023 12:03:57 +0000
ROA not before:           Mon 30 Oct 2023 11:58:57 +0000
ROA not after:            Mon 28 Oct 2024 12:03:57 +0000
asID:                     212238
IP address blocks:        192.109.159.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/e203869d-6b95-465f-b4dc-088a5a2103fc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/e203869d-6b95-465f-b4dc-088a5a2103fc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 19 Apr 2024 13:30:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:54:99:e4:b5:21:22:eb:dd:f5:5c:35:1a:2e:e5:c5:79:4a:7d:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4
        Validity
            Not Before: Oct 30 11:58:57 2023 GMT
            Not After : Oct 28 12:03:57 2024 GMT
        Subject: CN=8455B748B3215FE32AED52FA15D0493BCEB6BB36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:5b:8f:e9:4b:7b:24:0c:b2:2f:48:12:0a:7d:
                    c6:05:77:07:ad:a3:7a:4d:49:0f:d9:01:4c:f2:a1:
                    f7:98:20:d4:fd:0d:b5:46:ad:51:d4:01:1f:70:27:
                    d4:55:8d:e0:30:f5:83:2d:73:01:94:62:c2:2c:6f:
                    3b:d2:e7:51:4c:26:9e:fb:a2:b0:c2:5f:23:86:02:
                    6e:ef:fe:13:64:89:cd:fc:4b:4b:a6:9f:5d:c2:5d:
                    9e:e0:df:57:38:e9:2f:6d:9f:8a:6f:44:a7:dd:9e:
                    52:ba:c8:72:5b:51:89:19:5b:3d:e4:90:14:2a:a0:
                    f0:03:5e:e5:a8:1c:2c:a6:52:8c:f1:6b:a1:56:a0:
                    5a:0f:67:09:86:44:36:8d:0b:03:b9:52:81:b7:22:
                    98:83:1f:3d:de:90:3e:17:2a:0f:3f:6a:17:46:b7:
                    f7:db:53:ba:d6:b7:2c:88:03:47:42:ae:1f:11:6e:
                    25:27:31:14:42:97:64:4b:34:27:97:82:78:21:2b:
                    f2:e0:cd:ac:fc:c4:7f:0e:2a:4b:f3:a4:2e:06:b1:
                    41:17:13:d8:22:a4:34:80:75:4f:70:fb:5a:93:90:
                    31:78:fc:6b:61:1b:36:76:82:f4:bb:7f:cb:fe:69:
                    45:a0:20:1b:bf:0f:ca:16:cb:3c:b7:f0:bd:d6:8b:
                    dc:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:55:B7:48:B3:21:5F:E3:2A:ED:52:FA:15:D0:49:3B:CE:B6:BB:36
            X509v3 Authority Key Identifier:
                keyid:62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139322e3130392e3135392e302f32342d3234203d3e20323132323338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.109.159.0/24

    Signature Algorithm: sha256WithRSAEncryption
         56:e0:25:5c:46:30:11:99:d6:33:5c:82:42:ed:e4:89:d5:9c:
         b1:11:43:9b:88:05:f4:9c:0d:82:81:fe:fa:f9:23:be:56:22:
         51:29:d4:1c:a2:1b:1d:44:b9:d5:ed:d0:a4:9a:31:23:99:b6:
         87:b2:42:71:eb:d6:8f:71:64:24:6b:b5:91:9d:a5:24:af:32:
         5c:fd:75:f2:a3:3e:1f:9b:e3:13:ea:01:89:c8:b3:45:e5:65:
         43:2a:7f:eb:16:c2:c4:c0:a4:e8:17:3a:66:84:81:7e:ca:12:
         d7:53:34:37:6d:8f:30:12:fa:0d:3a:31:09:77:ea:d9:f1:6f:
         2e:51:2e:15:0b:65:52:de:f7:96:b4:ff:7e:92:6d:b6:38:0a:
         91:59:8c:1f:ae:50:d5:39:4e:4f:ca:1a:b5:79:47:e3:94:06:
         f5:7f:67:d8:d4:4a:35:ab:82:7f:fa:bc:d6:95:4c:2e:8a:1c:
         e7:cc:33:1f:5b:d9:15:11:bb:de:75:e6:28:96:76:bb:4a:10:
         7a:41:bf:ac:e1:98:72:22:04:24:4f:bb:09:0f:ca:93:de:cc:
         95:7a:6d:4a:c2:32:be:ab:2a:e5:b2:63:a7:dd:ee:93:1e:47:
         9b:fa:3c:f2:48:a7:02:65:99:36:5c:27:28:69:94:a0:c1:76:
         e4:74:c7:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 18 14:06:31 2024 by rpki-client on console-ams.rpki-client.org