Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139332e3134392e3232352e302f32342d3234203d3e20333938343635.roa
File:                     3139332e3134392e3232352e302f32342d3234203d3e20333938343635.roa (raw, json)
Hash identifier:          fgeFHO3PTs4B960EW0h5CCCQ4qZHJ681+E4+9dwi9SI=
Subject key identifier:   E9:22:CA:95:9E:61:AA:3A:DE:92:92:E1:5F:03:2B:C5:7D:4F:A0:08
Certificate issuer:       /CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4
Certificate serial:       6BA4B43BE962B38A4FFCDC3EAE291C0D6EAFF312
Authority key identifier: 62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139332e3134392e3232352e302f32342d3234203d3e20333938343635.roa
Signing time:             Wed 09 Oct 2024 13:49:01 +0000
ROA not before:           Wed 09 Oct 2024 13:44:01 +0000
ROA not after:            Wed 08 Oct 2025 13:49:01 +0000
asID:                     398465
IP address blocks:        193.149.225.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/e203869d-6b95-465f-b4dc-088a5a2103fc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/e203869d-6b95-465f-b4dc-088a5a2103fc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:28:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:a4:b4:3b:e9:62:b3:8a:4f:fc:dc:3e:ae:29:1c:0d:6e:af:f3:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4
        Validity
            Not Before: Oct  9 13:44:01 2024 GMT
            Not After : Oct  8 13:49:01 2025 GMT
        Subject: CN=E922CA959E61AA3ADE9292E15F032BC57D4FA008
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:59:9b:eb:45:ea:f6:eb:78:cb:45:01:24:5c:
                    45:5f:d1:4e:16:2a:c5:43:1b:67:d3:d9:5b:96:c2:
                    55:bf:c3:8f:e6:f2:1a:91:5a:6e:0c:d5:76:8b:66:
                    9c:11:14:61:67:ad:83:30:e2:a0:56:e7:b8:81:34:
                    cc:71:fa:ff:85:20:16:9b:5d:7e:21:b5:e7:5c:f9:
                    fd:9f:67:ba:78:d5:95:bb:26:39:f2:04:42:17:a9:
                    69:44:0c:c6:53:43:a8:70:7b:7b:d6:de:ac:13:c7:
                    f5:4a:76:7a:0d:9b:3a:c3:cc:ac:7b:ce:41:96:b2:
                    36:f3:3b:b2:b8:14:cc:dd:22:0d:89:80:e1:20:2b:
                    4d:8f:6f:a7:f5:fa:3e:2f:d0:be:ec:3e:b4:58:9e:
                    a5:6f:3b:ca:2f:36:6e:60:3a:e1:c6:2e:4a:53:f2:
                    85:31:98:6b:2c:58:11:89:00:1a:18:a1:ba:5d:34:
                    6a:8e:2d:b1:2a:5a:4b:43:12:bf:c3:d9:67:de:41:
                    eb:21:be:6b:41:1c:d1:ab:93:59:4c:17:7b:03:b6:
                    e7:3c:3c:2d:ba:78:53:7e:56:97:03:66:a7:74:bf:
                    4b:69:d4:8d:f3:76:e3:03:4e:9e:ba:54:c2:ed:84:
                    94:11:2d:55:92:61:fc:57:53:f6:a1:85:ee:05:2f:
                    5e:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:22:CA:95:9E:61:AA:3A:DE:92:92:E1:5F:03:2B:C5:7D:4F:A0:08
            X509v3 Authority Key Identifier:
                keyid:62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139332e3134392e3232352e302f32342d3234203d3e20333938343635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.149.225.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ab:0e:60:ac:47:a5:6f:fc:90:9d:27:43:b6:da:f8:07:df:ba:
         e7:7a:44:4a:4a:56:02:94:fb:01:90:50:4c:b0:c9:dd:ea:7f:
         4b:6c:d9:91:62:b9:55:67:01:31:3e:9c:56:f4:93:f6:f0:99:
         40:6f:11:7d:72:cb:e3:85:b7:ed:89:cb:8e:4e:74:b7:7a:47:
         99:7c:32:49:a3:3d:6f:52:ba:56:a9:a1:f7:fe:1b:39:9e:e9:
         2a:dd:41:63:44:c1:e5:34:6a:77:39:30:23:35:34:67:35:ba:
         d1:13:97:8a:0c:64:e7:96:d0:6e:a5:89:96:ac:2d:fc:30:ab:
         13:8e:4c:01:64:6f:fc:35:4c:85:61:3f:34:75:da:31:dd:2a:
         34:86:7a:1b:97:00:5f:e0:98:07:d8:59:2f:4b:2e:7d:e0:68:
         13:a2:95:c0:21:db:35:2b:43:26:48:87:81:86:22:de:4b:d8:
         c4:37:13:b3:0b:d9:e8:4f:68:70:47:5a:b5:17:05:70:eb:9d:
         06:11:2b:22:d4:af:35:1d:3b:40:fd:a9:f7:7b:0d:43:c5:5f:
         5c:87:f7:47:95:11:3a:25:1a:b4:4b:84:67:50:5c:8d:56:91:
         f2:81:66:ea:25:da:af:6c:9b:94:a9:5a:a4:8b:79:fe:32:8c:
         19:ee:38:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 06:35:49 2024 by rpki-client on console-ams.rpki-client.org