Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139322e3130392e3136352e302f32342d3234203d3e20333935333734.roa
File:                     3139322e3130392e3136352e302f32342d3234203d3e20333935333734.roa (raw, json)
Hash identifier:          DOv7nlwdeP8UVZQQwq/L7daQOkmjO5jbRYZgaMTMSyg=
Subject key identifier:   C2:D8:5A:DA:E1:27:A7:6C:79:BF:C5:31:6B:92:18:2E:55:C2:1A:7D
Certificate issuer:       /CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4
Certificate serial:       3220889C97A627A220C2FC111F2574A319634445
Authority key identifier: 62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139322e3130392e3136352e302f32342d3234203d3e20333935333734.roa
Signing time:             Wed 06 Nov 2024 02:32:04 +0000
ROA not before:           Wed 06 Nov 2024 02:27:04 +0000
ROA not after:            Wed 05 Nov 2025 02:32:04 +0000
asID:                     395374
IP address blocks:        192.109.165.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/e203869d-6b95-465f-b4dc-088a5a2103fc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/e203869d-6b95-465f-b4dc-088a5a2103fc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:28:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:20:88:9c:97:a6:27:a2:20:c2:fc:11:1f:25:74:a3:19:63:44:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4
        Validity
            Not Before: Nov  6 02:27:04 2024 GMT
            Not After : Nov  5 02:32:04 2025 GMT
        Subject: CN=C2D85ADAE127A76C79BFC5316B92182E55C21A7D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:84:b2:2f:bc:45:3a:03:b4:b2:42:cb:46:98:
                    52:1d:1e:75:bb:b9:83:f4:64:9f:8a:d3:58:2b:e8:
                    5e:00:0f:8f:b7:42:55:09:b7:44:c7:75:2b:2b:f5:
                    6b:a2:35:2c:34:64:66:c2:b9:0c:cb:3d:26:81:39:
                    4b:f8:90:a6:fa:9a:2c:fe:c2:aa:0a:e0:9d:e9:41:
                    6d:82:dd:29:8e:09:1e:7f:d9:81:0d:27:94:b6:04:
                    1d:45:de:07:47:09:1d:d0:b3:2d:ed:70:5c:e9:37:
                    c8:b9:b0:5d:db:13:e2:bd:0f:5a:ed:d3:e9:79:65:
                    1d:96:e3:f3:24:b6:73:e7:87:d5:9b:a7:95:91:88:
                    34:e2:ab:e0:2a:96:fc:31:4e:7c:a2:da:16:58:53:
                    a1:1e:38:40:36:19:5c:ce:54:d5:d9:f9:68:53:49:
                    70:4d:f7:5d:62:c5:c0:10:b8:09:57:0f:95:96:64:
                    46:f9:ec:a7:9a:9a:ec:13:52:c0:fa:a2:9d:12:68:
                    e6:d7:0e:df:9e:07:e0:c4:0a:6f:58:d3:06:01:f3:
                    07:9f:6c:77:f3:22:57:21:20:9a:1d:38:63:af:be:
                    cd:46:9f:a3:ff:a1:a8:f5:c7:8c:e7:60:2b:de:ba:
                    91:77:b3:91:9b:59:21:af:4f:28:c9:d5:87:e7:f5:
                    b0:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:D8:5A:DA:E1:27:A7:6C:79:BF:C5:31:6B:92:18:2E:55:C2:1A:7D
            X509v3 Authority Key Identifier:
                keyid:62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139322e3130392e3136352e302f32342d3234203d3e20333935333734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.109.165.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5e:12:94:44:11:4c:15:01:21:f3:15:5e:b0:c2:25:36:98:24:
         f3:ae:9c:7c:83:b7:c4:13:01:81:73:e9:6e:f2:7d:37:85:58:
         2c:39:98:c0:41:81:5f:45:ba:02:42:58:9d:52:b7:53:c2:23:
         8f:f0:81:c8:32:09:55:fd:32:40:5f:16:10:5d:08:7f:78:56:
         51:4d:90:73:bb:a2:ad:bc:5d:85:8c:56:b9:39:c4:95:9f:13:
         e4:3d:75:90:3c:ee:2f:d9:19:ae:3b:e8:dd:1e:69:ab:53:0c:
         cb:f6:7e:00:ba:4c:d2:c2:a0:47:6d:46:af:01:27:ed:66:ce:
         32:ab:f7:2b:8a:8c:d6:2a:fc:64:82:a3:76:8b:2e:42:f2:4f:
         66:6d:1d:10:a1:ce:80:80:8a:f9:24:5e:5c:a7:df:c9:e6:e1:
         5e:9f:b5:1f:a1:52:37:6a:d7:b1:33:5f:76:2f:b6:a9:e8:07:
         49:73:e8:cd:43:7f:69:61:9e:ca:ce:26:34:13:3c:e9:2e:64:
         8c:aa:40:54:75:2c:5e:55:fd:af:b7:bb:cb:d9:c3:5a:94:e9:
         c5:66:bd:a4:81:1c:b7:c9:cf:77:f5:a5:4e:34:49:c9:a2:6a:
         6a:0a:a0:5d:b0:98:98:6c:3f:01:6a:cf:27:ce:fb:94:d0:ea:
         b4:e0:d8:85
-----BEGIN CERTIFICATE-----
MIIFtjCCBJ6gAwIBAgIUMiCInJemJ6IgwvwRHyV0oxljREUwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMWYyMmNmMDc1NzFlY2JhYjZkNDYwYTFmM2I2YzVkNjE5
N2QwOTgzNjQzYTU0ZDJlZDQwHhcNMjQxMTA2MDIyNzA0WhcNMjUxMTA1MDIzMjA0
WjAzMTEwLwYDVQQDEyhDMkQ4NUFEQUUxMjdBNzZDNzlCRkM1MzE2QjkyMTgyRTU1
QzIxQTdEMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9ISyL7xFOgO0
skLLRphSHR51u7mD9GSfitNYK+heAA+Pt0JVCbdEx3UrK/VrojUsNGRmwrkMyz0m
gTlL+JCm+pos/sKqCuCd6UFtgt0pjgkef9mBDSeUtgQdRd4HRwkd0LMt7XBc6TfI
ubBd2xPivQ9a7dPpeWUdluPzJLZz54fVm6eVkYg04qvgKpb8MU58otoWWFOhHjhA
NhlczlTV2floU0lwTfddYsXAELgJVw+VlmRG+eynmprsE1LA+qKdEmjm1w7fngfg
xApvWNMGAfMHn2x38yJXISCaHThjr77NRp+j/6Go9ceM52Ar3rqRd7ORm1khr08o
ydWH5/WwCwIDAQABo4ICtjCCArIwHQYDVR0OBBYEFMLYWtrhJ6dseb/FMWuSGC5V
whp9MB8GA1UdIwQYMBaAFGK0t02IaU0zyBBuijO8FJ6zkE/rMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmODE0M2JmNjIwMTgxZWNkMzdkYWM3MmYxLzEv
NjJCNEI3NEQ4ODY5NEQzM0M4MTA2RThBMzNCQzE0OUVCMzkwNEZFQi5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi
MGI4NDE1L2UyMDM4NjlkLTZiOTUtNDY1Zi1iNGRjLTA4OGE1YTIxMDNmYy8xZjIy
Y2YwNzU3MWVjYmFiNmQ0NjBhMWYzYjZjNWQ2MTk3ZDA5ODM2NDNhNTRkMmVkNC5j
ZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjgxNDNiZjYyMDE4MWVj
ZDM3ZGFjNzJmMS8xLzMxMzkzMjJlMzEzMDM5MmUzMTM2MzUyZTMwMmYzMjM0MmQz
MjM0MjAzZDNlMjAzMzM5MzUzMzM3MzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADAbaUwDQYJKoZIhvcN
AQELBQADggEBAF4SlEQRTBUBIfMVXrDCJTaYJPOunHyDt8QTAYFz6W7yfTeFWCw5
mMBBgV9FugJCWJ1St1PCI4/wgcgyCVX9MkBfFhBdCH94VlFNkHO7oq28XYWMVrk5
xJWfE+Q9dZA87i/ZGa476N0eaatTDMv2fgC6TNLCoEdtRq8BJ+1mzjKr9yuKjNYq
/GSCo3aLLkLyT2ZtHRChzoCAivkkXlyn38nm4V6ftR+hUjdq17EzX3YvtqnoB0lz
6M1Df2lhnsrOJjQTPOkuZIyqQFR1LF5V/a+3u8vZw1qU6cVmvaSBHLfJz3f1pU40
ScmiamoKoF2wmJhsPwFqzyfO+5TQ6rTg2IU=
-----END CERTIFICATE-----
Generated at Fri Nov 22 06:57:49 2024 by rpki-client on console-fra.rpki-client.org