Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139322e3130392e3135392e302f32342d3234203d3e20323132323338.roa
File:                     3139322e3130392e3135392e302f32342d3234203d3e20323132323338.roa (raw, json)
Hash identifier:          ndlkxjc2hSF0av1Sd1RqGsRZY5o8m8oYSRBMwXyUXyo=
Subject key identifier:   72:65:C6:B6:5C:C0:E7:E7:A2:26:AC:28:D0:46:14:92:C0:26:58:0D
Certificate issuer:       /CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4
Certificate serial:       7ABAF09D76538D18D9B9C57F5FE2EC71B9A22B42
Authority key identifier: 62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139322e3130392e3135392e302f32342d3234203d3e20323132323338.roa
Signing time:             Mon 30 Sep 2024 12:49:00 +0000
ROA not before:           Mon 30 Sep 2024 12:44:00 +0000
ROA not after:            Mon 29 Sep 2025 12:49:00 +0000
asID:                     212238
IP address blocks:        192.109.159.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/e203869d-6b95-465f-b4dc-088a5a2103fc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/e203869d-6b95-465f-b4dc-088a5a2103fc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 13:28:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:ba:f0:9d:76:53:8d:18:d9:b9:c5:7f:5f:e2:ec:71:b9:a2:2b:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4
        Validity
            Not Before: Sep 30 12:44:00 2024 GMT
            Not After : Sep 29 12:49:00 2025 GMT
        Subject: CN=7265C6B65CC0E7E7A226AC28D0461492C026580D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:b7:cd:6c:e2:4d:3b:31:6c:ed:10:c6:6f:ba:
                    10:29:15:cd:cf:b0:69:32:41:a3:6a:2a:05:6f:15:
                    0d:50:2c:4d:3b:c5:39:2c:35:d1:77:36:59:ea:c3:
                    85:31:d6:aa:67:7e:80:3d:bc:cc:69:28:6e:cd:40:
                    d7:51:1c:4c:c6:7e:9b:a6:fc:2b:89:4c:14:0b:33:
                    3a:4d:2b:81:66:db:7e:cb:0c:c5:61:b5:b5:50:7b:
                    37:35:57:51:3a:34:16:be:b0:1d:67:6d:18:fe:29:
                    d8:1e:ff:68:1d:d7:cc:86:47:45:ef:b1:6a:19:45:
                    da:35:07:0d:15:67:03:c4:4c:d4:23:15:b0:a3:55:
                    5d:18:be:55:39:89:55:52:ed:df:11:2d:7b:bf:44:
                    45:c0:af:d3:21:4a:a9:db:77:2e:ad:e2:95:4f:a4:
                    d3:27:78:3b:0e:aa:ac:a0:ce:9b:5b:eb:e6:02:b9:
                    64:c6:ae:ba:03:7f:43:34:40:d4:97:89:5e:b8:fa:
                    48:ae:6e:35:12:c9:09:2b:5c:c5:0e:b1:0b:a8:94:
                    ed:b4:1d:9d:53:11:b4:23:38:05:fe:24:dc:6a:69:
                    3d:6a:85:2d:0a:8e:40:de:8b:21:84:8a:5f:08:39:
                    4c:d6:89:d0:2e:b7:82:bb:47:36:76:73:3b:40:6d:
                    e0:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:65:C6:B6:5C:C0:E7:E7:A2:26:AC:28:D0:46:14:92:C0:26:58:0D
            X509v3 Authority Key Identifier:
                keyid:62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139322e3130392e3135392e302f32342d3234203d3e20323132323338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.109.159.0/24

    Signature Algorithm: sha256WithRSAEncryption
         47:d2:09:e0:32:b1:1a:72:eb:45:f1:0f:74:3e:5b:6f:b7:68:
         c9:66:59:d6:5e:d5:fe:0f:b6:90:9e:13:9a:5c:fc:18:73:3d:
         9e:de:2c:b9:7c:eb:f6:21:26:a6:93:98:ce:7f:c1:cc:59:b0:
         aa:39:4b:c0:65:02:85:b0:d3:59:aa:21:ab:5e:1f:de:e8:d3:
         55:1d:92:53:5f:f8:46:2c:05:1c:ac:4c:66:99:f3:2e:94:39:
         6c:12:6a:e6:e2:78:4c:b8:ad:8f:cd:f5:cf:f9:d2:98:4a:f6:
         53:88:2c:81:2b:f9:a3:e7:b1:c8:88:d3:f5:6b:01:60:c3:0b:
         92:bb:aa:e8:dd:6b:27:5c:6e:d3:7f:44:77:ee:db:5c:a1:99:
         af:86:f9:7b:ea:21:6d:71:5a:41:1c:4c:dc:90:e7:d4:44:a2:
         f1:fa:b0:9d:c5:0c:2f:c5:5a:f5:45:c5:ee:70:3c:ce:c2:40:
         85:93:95:b4:f3:d2:63:5a:f8:f9:39:df:ff:4b:e9:11:8c:4c:
         7d:e6:7f:58:e5:f1:4f:f2:12:30:3f:6d:08:5a:fe:34:79:9f:
         14:dc:e6:34:b2:d5:43:55:01:2f:cf:80:78:b9:04:44:c8:a6:
         7e:8b:f2:f3:3e:d6:82:25:b7:c3:db:d1:ec:7f:4d:97:0d:ce:
         59:9b:8a:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 13:39:41 2024 by rpki-client on console-ams.rpki-client.org