Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139332e3134392e3232352e302f32342d3234203d3e2037303138.roa
File:                     3139332e3134392e3232352e302f32342d3234203d3e2037303138.roa (raw, json)
Hash identifier:          S9fmlmcg5Er/nIBpFjDfvNdsaUTJJ4Dy6iTIL0wMiXU=
Subject key identifier:   78:BF:F3:7C:16:02:8D:7A:CD:06:06:97:6D:27:A4:A6:04:3D:3B:94
Certificate issuer:       /CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4
Certificate serial:       5B7DF1BA7BF2C4731848F814E39AAA8E40BCC5F7
Authority key identifier: 62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139332e3134392e3232352e302f32342d3234203d3e2037303138.roa
Signing time:             Wed 09 Oct 2024 13:49:01 +0000
ROA not before:           Wed 09 Oct 2024 13:44:01 +0000
ROA not after:            Wed 08 Oct 2025 13:49:01 +0000
asID:                     7018
IP address blocks:        193.149.225.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/e203869d-6b95-465f-b4dc-088a5a2103fc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/e203869d-6b95-465f-b4dc-088a5a2103fc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 06:14:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:7d:f1:ba:7b:f2:c4:73:18:48:f8:14:e3:9a:aa:8e:40:bc:c5:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4
        Validity
            Not Before: Oct  9 13:44:01 2024 GMT
            Not After : Oct  8 13:49:01 2025 GMT
        Subject: CN=78BFF37C16028D7ACD0606976D27A4A6043D3B94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:f0:6b:9c:4b:ac:47:7b:50:b5:74:fc:1b:4e:
                    24:12:34:52:65:e7:a9:8b:5f:3a:fb:85:87:33:5e:
                    4f:58:b2:73:39:08:87:25:7d:e1:52:94:65:09:e9:
                    db:4a:5d:f6:6c:cd:11:31:54:88:c6:91:63:01:1f:
                    e8:2f:3d:6f:37:62:97:4a:8b:f8:f5:40:4d:6d:a2:
                    5b:db:a7:42:0a:2d:00:bb:d7:15:86:04:d5:8a:d8:
                    67:9e:b8:72:58:27:ee:4d:b5:fe:e6:29:3f:14:61:
                    01:af:30:01:e8:51:df:9b:3c:62:6e:40:43:61:11:
                    6f:ef:77:c6:8b:ce:76:0e:ed:18:a6:d3:5e:5b:9d:
                    26:d5:98:39:8e:a4:c7:c6:e5:41:3e:e3:3e:9b:5d:
                    e1:e2:e3:d6:01:da:0c:f8:e3:6e:0f:15:d7:9d:b5:
                    87:49:61:f5:b0:43:2d:e9:c6:67:97:d4:64:47:56:
                    e3:1a:01:3f:7c:1d:a1:67:c5:95:f6:e4:a9:3c:ad:
                    6f:2f:d9:01:fe:17:89:6b:b1:a6:6b:f9:4a:b4:5e:
                    12:d8:b3:f1:46:71:db:56:de:c9:03:d3:c3:a3:38:
                    c5:39:8c:00:cf:88:7b:80:9c:48:44:b7:a9:62:52:
                    c8:89:61:2b:7e:0e:85:18:a8:0a:d4:05:eb:95:86:
                    88:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:BF:F3:7C:16:02:8D:7A:CD:06:06:97:6D:27:A4:A6:04:3D:3B:94
            X509v3 Authority Key Identifier:
                keyid:62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139332e3134392e3232352e302f32342d3234203d3e2037303138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.149.225.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8d:4f:0e:12:2c:3e:65:a6:cb:d8:9c:f0:d1:2b:f0:1b:dd:67:
         9d:51:fb:7a:9b:4a:a6:74:18:d5:98:61:ea:d5:53:fc:d6:44:
         b8:44:b1:6a:40:f8:83:08:6b:ff:60:b0:38:69:65:26:82:97:
         ce:d0:ee:f6:74:2c:cb:1d:c6:57:5c:2d:8b:36:91:01:e3:70:
         26:a0:ba:79:54:01:fb:8c:8e:f3:26:33:55:7f:14:2c:3f:e8:
         4e:61:2f:47:2b:ed:41:64:da:5d:f6:38:14:3a:26:ec:4c:a4:
         bb:09:59:3e:66:05:d8:1e:3e:c5:7d:03:fa:35:0e:1c:1c:04:
         d8:05:74:8f:6d:3d:25:99:dc:3f:36:c6:73:dd:a9:84:71:3c:
         76:34:03:ed:9b:fd:5e:62:35:ac:33:cf:da:2d:2c:23:6f:0c:
         7e:01:8e:80:3b:34:af:2d:4c:ec:63:a4:95:2d:1d:9e:18:e8:
         b4:bf:7f:8c:16:11:b7:ec:73:3f:7b:5a:9e:27:b6:68:c3:b8:
         ee:25:90:ee:c6:ba:a1:66:6d:0d:40:1a:63:45:5f:fa:cb:a9:
         9f:70:7d:43:91:3f:af:5d:00:30:cd:fb:b2:42:c9:b4:24:db:
         b5:68:08:b0:56:b3:b0:b1:ec:a3:39:5d:38:11:1f:7e:ad:2c:
         ad:d2:6a:57
-----BEGIN CERTIFICATE-----
MIIFsjCCBJqgAwIBAgIUW33xunvyxHMYSPgU45qqjkC8xfcwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMWYyMmNmMDc1NzFlY2JhYjZkNDYwYTFmM2I2YzVkNjE5
N2QwOTgzNjQzYTU0ZDJlZDQwHhcNMjQxMDA5MTM0NDAxWhcNMjUxMDA4MTM0OTAx
WjAzMTEwLwYDVQQDEyg3OEJGRjM3QzE2MDI4RDdBQ0QwNjA2OTc2RDI3QTRBNjA0
M0QzQjk0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtfBrnEusR3tQ
tXT8G04kEjRSZeepi186+4WHM15PWLJzOQiHJX3hUpRlCenbSl32bM0RMVSIxpFj
AR/oLz1vN2KXSov49UBNbaJb26dCCi0Au9cVhgTVithnnrhyWCfuTbX+5ik/FGEB
rzAB6FHfmzxibkBDYRFv73fGi852Du0YptNeW50m1Zg5jqTHxuVBPuM+m13h4uPW
AdoM+ONuDxXXnbWHSWH1sEMt6cZnl9RkR1bjGgE/fB2hZ8WV9uSpPK1vL9kB/heJ
a7Gma/lKtF4S2LPxRnHbVt7JA9PDozjFOYwAz4h7gJxIRLepYlLIiWErfg6FGKgK
1AXrlYaIjQIDAQABo4ICsjCCAq4wHQYDVR0OBBYEFHi/83wWAo16zQYGl20npKYE
PTuUMB8GA1UdIwQYMBaAFGK0t02IaU0zyBBuijO8FJ6zkE/rMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmODE0M2JmNjIwMTgxZWNkMzdkYWM3MmYxLzEv
NjJCNEI3NEQ4ODY5NEQzM0M4MTA2RThBMzNCQzE0OUVCMzkwNEZFQi5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi
MGI4NDE1L2UyMDM4NjlkLTZiOTUtNDY1Zi1iNGRjLTA4OGE1YTIxMDNmYy8xZjIy
Y2YwNzU3MWVjYmFiNmQ0NjBhMWYzYjZjNWQ2MTk3ZDA5ODM2NDNhNTRkMmVkNC5j
ZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjgxNDNiZjYyMDE4MWVj
ZDM3ZGFjNzJmMS8xLzMxMzkzMzJlMzEzNDM5MmUzMjMyMzUyZTMwMmYzMjM0MmQz
MjM0MjAzZDNlMjAzNzMwMzEzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO
AjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMGV4TANBgkqhkiG9w0BAQsF
AAOCAQEAjU8OEiw+ZabL2Jzw0SvwG91nnVH7eptKpnQY1Zhh6tVT/NZEuESxakD4
gwhr/2CwOGllJoKXztDu9nQsyx3GV1wtizaRAeNwJqC6eVQB+4yO8yYzVX8ULD/o
TmEvRyvtQWTaXfY4FDom7EykuwlZPmYF2B4+xX0D+jUOHBwE2AV0j209JZncPzbG
c92phHE8djQD7Zv9XmI1rDPP2i0sI28MfgGOgDs0ry1M7GOklS0dnhjotL9/jBYR
t+xzP3tanie2aMO47iWQ7sa6oWZtDUAaY0Vf+supn3B9Q5E/r10AMM37skLJtCTb
tWgIsFazsLHsozldOBEffq0srdJqVw==
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:28:16 2025 by rpki-client