Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139332e3138362e3235332e302f32342d3234203d3e20313332323434.roa
File:                     3139332e3138362e3235332e302f32342d3234203d3e20313332323434.roa (raw, json)
Hash identifier:          KuT+LHdoc3v0MF7YFydBKjwGMUsuOuhNWV6jNjp8DAk=
Subject key identifier:   13:1D:B9:87:8A:CE:15:83:46:3F:12:49:33:67:A4:BF:D2:20:97:93
Certificate issuer:       /CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4
Certificate serial:       3DB8C032FA4C339991AEBFA63553D89451AEDF20
Authority key identifier: 62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139332e3138362e3235332e302f32342d3234203d3e20313332323434.roa
Signing time:             Fri 25 Oct 2024 10:49:02 +0000
ROA not before:           Fri 25 Oct 2024 10:44:02 +0000
ROA not after:            Fri 24 Oct 2025 10:49:02 +0000
asID:                     132244
IP address blocks:        193.186.253.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/e203869d-6b95-465f-b4dc-088a5a2103fc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/e203869d-6b95-465f-b4dc-088a5a2103fc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:28:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:b8:c0:32:fa:4c:33:99:91:ae:bf:a6:35:53:d8:94:51:ae:df:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4
        Validity
            Not Before: Oct 25 10:44:02 2024 GMT
            Not After : Oct 24 10:49:02 2025 GMT
        Subject: CN=131DB9878ACE1583463F12493367A4BFD2209793
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:2c:4e:ab:4a:0a:9e:a2:a2:d5:9a:67:6d:e1:
                    51:31:24:a7:37:69:0e:34:18:9d:6b:48:52:8b:a1:
                    d7:cd:f9:5e:41:c7:37:46:92:80:ee:85:11:84:9d:
                    1f:44:b3:c0:ec:78:27:70:a7:cd:ba:7d:21:0d:7b:
                    4c:07:4d:6c:53:67:94:13:8b:a1:1a:66:80:65:75:
                    a9:2c:91:53:37:ed:7b:93:5e:6d:43:c5:42:bd:10:
                    28:d7:cf:7b:da:92:14:7b:c4:f6:bf:85:ca:2a:3c:
                    4c:17:3c:8f:d0:2f:d0:29:e6:f3:82:84:1a:db:55:
                    21:d7:ef:2d:e1:db:b3:f6:b8:a5:90:8e:83:c8:c0:
                    e3:a5:84:80:37:af:7a:ad:91:9e:91:da:50:d7:2f:
                    da:b7:de:db:69:e7:9b:eb:5a:f9:19:cf:e6:d2:65:
                    fb:39:1c:fd:ef:bf:f0:b9:cc:1f:26:1a:cc:60:88:
                    de:ee:03:6b:c5:32:8f:80:4f:c0:33:7d:bc:c9:74:
                    1d:a2:05:46:b8:f5:27:c3:34:22:11:a5:64:ee:da:
                    08:f4:35:10:7d:89:d8:c6:91:e1:63:cf:b7:e3:12:
                    e0:a8:79:a2:2a:c2:10:3a:44:d7:d5:c3:ab:49:f8:
                    f7:d1:66:41:57:6b:94:e8:7c:51:31:65:e9:a1:35:
                    57:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:1D:B9:87:8A:CE:15:83:46:3F:12:49:33:67:A4:BF:D2:20:97:93
            X509v3 Authority Key Identifier:
                keyid:62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139332e3138362e3235332e302f32342d3234203d3e20313332323434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.186.253.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9b:91:33:a7:77:53:3f:56:70:90:0e:90:81:1d:13:46:f1:d0:
         f3:13:35:50:54:3c:ae:f4:b7:b1:87:c8:1e:ba:b0:86:5c:f3:
         e8:57:f8:9e:74:73:3e:cb:bf:8f:59:d0:64:3c:2b:69:4b:8b:
         c8:53:2f:fd:be:8f:b3:13:2b:2e:56:9b:f5:c7:bf:f4:fe:db:
         f2:d6:b6:c8:4c:f6:ec:f6:97:8a:41:8b:1c:6a:b0:03:4a:5f:
         6e:64:a3:87:ce:0a:c8:06:ed:a8:2d:77:a8:73:ad:e6:52:ff:
         44:44:3c:6a:c0:ee:33:c1:7e:c9:72:25:e8:7e:80:2b:97:48:
         bf:74:9e:be:15:03:6b:2b:9e:0d:9a:ab:59:00:1d:4f:d3:97:
         cb:ef:49:45:77:59:af:56:7e:3d:15:01:bd:28:55:00:c7:6d:
         9a:ff:b3:f2:a3:80:ac:b8:78:77:17:83:8b:de:97:f0:ab:79:
         18:36:fb:3e:9a:a3:26:d0:7c:24:6c:14:d7:a6:95:05:24:97:
         99:67:24:72:da:88:79:80:cd:4c:83:ff:b7:75:8c:8e:39:42:
         6d:07:7c:aa:28:5a:df:3d:5e:27:dd:6c:42:df:b7:ec:06:6f:
         5a:dc:5d:71:b9:a0:39:a8:cd:0e:09:15:af:3f:bc:95:5c:3b:
         48:ac:95:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 06:35:49 2024 by rpki-client on console-ams.rpki-client.org