Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139332e3134392e3232352e302f32342d3234203d3e2037303138.roa
File:                     3139332e3134392e3232352e302f32342d3234203d3e2037303138.roa (raw, json)
Hash identifier:          vF+Ofp45lXXPoo+PvR5+SXAn70FHJO65eA8AKfMKNOM=
Subject key identifier:   DE:A5:EB:28:AE:64:CB:6D:DA:F3:71:E0:00:52:3D:76:53:8F:2D:4E
Certificate issuer:       /CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4
Certificate serial:       57AB65F8484DA8F6A61E973BF9B1678A29F15B0F
Authority key identifier: 62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139332e3134392e3232352e302f32342d3234203d3e2037303138.roa
Signing time:             Wed 08 Nov 2023 12:55:59 +0000
ROA not before:           Wed 08 Nov 2023 12:50:59 +0000
ROA not after:            Wed 06 Nov 2024 12:55:59 +0000
asID:                     7018
IP address blocks:        193.149.225.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/e203869d-6b95-465f-b4dc-088a5a2103fc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/e203869d-6b95-465f-b4dc-088a5a2103fc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 28 Mar 2024 18:20:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:ab:65:f8:48:4d:a8:f6:a6:1e:97:3b:f9:b1:67:8a:29:f1:5b:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4
        Validity
            Not Before: Nov  8 12:50:59 2023 GMT
            Not After : Nov  6 12:55:59 2024 GMT
        Subject: CN=DEA5EB28AE64CB6DDAF371E000523D76538F2D4E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:2d:c9:91:79:fd:fa:70:e2:40:10:1e:ba:46:
                    cc:42:73:7a:b6:8a:03:0b:90:43:db:77:27:af:2f:
                    83:40:16:a8:55:da:0b:6a:62:84:92:47:de:26:35:
                    c1:6c:2f:61:29:e4:d5:d6:61:bd:e2:7b:a1:a6:96:
                    d6:0a:da:1c:a9:7f:f7:70:67:a9:7a:0f:bc:bf:69:
                    6c:4c:e3:1a:3b:84:33:d1:c8:9a:eb:fd:82:15:23:
                    1a:31:fc:54:f7:69:46:f8:dc:21:54:5a:c1:cb:7a:
                    56:fe:fd:c1:b3:69:f4:ca:53:0c:b2:4f:78:d1:07:
                    02:5e:e9:b1:84:3e:65:89:ad:bb:22:82:d2:99:3a:
                    81:92:62:ba:be:b4:19:13:1a:87:a2:f1:48:b9:fd:
                    91:84:fe:c5:53:e6:17:ee:37:67:40:5c:3f:27:4e:
                    b5:43:0f:95:a5:f5:78:15:91:c6:4b:d6:da:d4:4f:
                    5a:9e:94:9a:fc:32:61:13:a7:60:f1:16:c2:34:c4:
                    7f:a9:61:f5:ef:4a:3c:ec:28:2d:a9:48:21:02:d2:
                    6b:a6:3a:28:83:da:2e:8c:a2:99:3c:ae:e4:22:43:
                    de:f6:a7:4c:7c:8b:da:d8:a6:43:1a:f1:5a:04:d3:
                    8f:ee:de:05:8c:be:95:7e:1e:9a:57:fc:37:55:f6:
                    ad:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:A5:EB:28:AE:64:CB:6D:DA:F3:71:E0:00:52:3D:76:53:8F:2D:4E
            X509v3 Authority Key Identifier:
                keyid:62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139332e3134392e3232352e302f32342d3234203d3e2037303138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.149.225.0/24

    Signature Algorithm: sha256WithRSAEncryption
         75:5f:7f:43:34:72:4c:44:07:08:78:f4:2d:15:99:68:4a:a0:
         2d:56:ba:9d:11:69:c6:9c:c0:63:66:66:4a:3d:07:3a:a5:e1:
         75:68:ac:fb:6b:ed:eb:da:fc:a5:42:d3:5e:b0:69:88:06:b4:
         8d:1c:4e:72:0b:03:98:c1:0d:8b:e1:dd:45:ae:03:ec:2c:5d:
         1c:eb:19:88:96:fc:59:55:77:40:6a:86:e1:08:12:d2:5d:e4:
         d1:b0:35:f0:ef:9a:4a:18:ac:9a:cb:fa:0a:89:ac:00:9e:08:
         5b:a1:1d:ee:d5:ee:ea:8d:64:af:7b:3f:df:c3:72:05:65:ae:
         15:39:a4:16:dd:22:b6:22:25:56:2c:4a:2b:00:8b:2a:ee:54:
         e0:b1:77:ff:e6:d8:ef:3b:d7:f3:fc:6b:3f:1e:40:3a:ec:20:
         e1:c0:2a:4a:de:c2:90:f1:55:55:4e:cc:56:05:24:7c:72:6e:
         c8:aa:00:5a:c1:b3:0d:bb:15:5a:99:76:5a:4a:a8:c1:90:1f:
         5f:1e:99:f0:46:61:7c:ef:6f:e4:73:45:a8:24:dd:34:20:16:
         cc:bf:11:82:79:2a:04:01:44:d1:ef:7f:bd:4b:58:f8:23:2d:
         4e:ca:1a:81:bc:dc:1d:bd:18:b5:6b:1d:8b:12:5b:d5:b0:7c:
         be:8f:45:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 27 15:58:48 2024 by rpki-client on console-fra.rpki-client.org