Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139322e3130392e3136352e302f32342d3234203d3e2031323339.roa
File:                     3139322e3130392e3136352e302f32342d3234203d3e2031323339.roa (raw, json)
Hash identifier:          kfcmSiPnxV0+Yd+k/fztWCycEd4w7Mu44zKKq6bJDfI=
Subject key identifier:   A8:5D:09:A4:31:5F:7B:C4:FE:51:A9:3C:4B:06:99:DD:A1:D3:5D:24
Certificate issuer:       /CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4
Certificate serial:       6F695198EF0BCA82CCA2A41F304440432231094E
Authority key identifier: 62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139322e3130392e3136352e302f32342d3234203d3e2031323339.roa
Signing time:             Sat 28 Oct 2023 21:57:08 +0000
ROA not before:           Sat 28 Oct 2023 21:52:08 +0000
ROA not after:            Sat 26 Oct 2024 21:57:08 +0000
asID:                     1239
IP address blocks:        192.109.165.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/e203869d-6b95-465f-b4dc-088a5a2103fc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/e203869d-6b95-465f-b4dc-088a5a2103fc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 05 May 2024 20:10:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:69:51:98:ef:0b:ca:82:cc:a2:a4:1f:30:44:40:43:22:31:09:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4
        Validity
            Not Before: Oct 28 21:52:08 2023 GMT
            Not After : Oct 26 21:57:08 2024 GMT
        Subject: CN=A85D09A4315F7BC4FE51A93C4B0699DDA1D35D24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:c0:7f:54:c3:8f:f3:73:a1:73:db:a0:2a:a1:
                    40:8c:8e:dc:70:c4:12:d3:9c:76:35:56:17:29:45:
                    3a:3b:a9:39:7a:48:bb:e8:c5:36:c4:a6:12:d1:4a:
                    78:d8:44:2b:6e:1c:67:fd:c3:98:ed:03:53:9f:65:
                    71:54:2e:95:5a:f5:29:5c:49:6c:55:13:c7:b6:f2:
                    5e:22:43:7f:79:98:e1:cb:98:8c:fd:75:67:69:8d:
                    19:83:2b:06:e0:43:91:39:80:20:72:b4:29:4c:cf:
                    18:88:90:29:7a:e5:11:c2:18:e3:de:53:d8:c2:2a:
                    f2:58:e9:de:2c:4f:56:6d:6b:b4:6b:4c:f3:af:fd:
                    ac:59:1e:e8:b7:4c:ac:8e:a5:54:97:6b:88:b8:b9:
                    b7:44:d5:59:55:a0:72:cf:f8:47:fa:0d:96:8c:24:
                    ff:18:27:28:9f:de:f5:33:06:b3:7e:94:64:94:4f:
                    92:77:e6:6c:2e:31:e3:1e:92:ea:ca:ce:1b:66:3b:
                    2a:91:5a:b2:f6:0b:23:4d:05:1e:dc:e9:2a:0f:82:
                    c7:5d:e2:10:fc:46:36:14:42:fc:d5:37:69:72:61:
                    91:a1:62:5a:8e:cf:eb:33:ad:9a:bd:cf:b4:47:d4:
                    ad:92:5a:90:a2:a6:1b:de:aa:db:87:05:63:86:a9:
                    86:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:5D:09:A4:31:5F:7B:C4:FE:51:A9:3C:4B:06:99:DD:A1:D3:5D:24
            X509v3 Authority Key Identifier:
                keyid:62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139322e3130392e3136352e302f32342d3234203d3e2031323339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.109.165.0/24

    Signature Algorithm: sha256WithRSAEncryption
         27:91:d8:8a:18:1f:73:7f:60:51:57:cb:9c:0f:18:ee:55:e5:
         a6:94:0c:fa:1d:e5:e4:e6:63:f4:0d:20:d6:42:67:11:5f:e3:
         8c:fa:80:f8:07:04:97:89:f5:f6:ec:fa:e6:44:0b:44:2d:46:
         81:7a:8f:77:7e:a5:43:25:eb:35:5a:6f:37:47:e4:0c:d7:88:
         67:c8:2e:d2:b7:b1:b1:25:0f:40:67:a7:4e:b9:24:67:82:9c:
         25:2b:81:53:27:86:7e:cf:c2:29:00:e7:91:4b:c9:a6:38:ec:
         f8:9c:61:1a:ca:18:9f:58:27:0f:fe:7c:31:24:df:68:d1:d9:
         09:4c:8e:a7:3d:e0:2f:bc:65:6a:a6:db:27:e7:8b:91:51:ae:
         44:0f:ac:31:ec:b5:a5:e2:7f:7f:54:5a:ba:07:a9:a5:54:2e:
         6d:82:58:2f:31:82:cf:b5:4e:a2:bf:6f:ae:7f:2c:f4:e2:e1:
         fb:e5:b7:8e:bc:95:59:09:ff:17:4f:e6:c8:99:25:45:e3:16:
         0d:02:0e:75:41:e8:05:12:6a:29:a3:af:b0:16:4b:e9:b8:73:
         11:aa:cd:0e:4b:8d:12:a1:8e:3b:ef:4b:d0:f7:a2:8d:cc:57:
         44:e1:3d:61:e1:45:05:76:80:2e:1f:c9:69:ad:43:7b:69:26:
         b0:c8:f1:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 19:57:56 2024 by rpki-client on console-ams.rpki-client.org