Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139332e3138362e3235332e302f32342d3234203d3e20313332323434.roa
File:                     3139332e3138362e3235332e302f32342d3234203d3e20313332323434.roa (raw, json)
Hash identifier:          bE48TZKkaWzvuxesO5cJMH+qUFvKD91kn0scpHvOV+c=
Subject key identifier:   65:B7:65:BB:FC:27:34:58:A0:E9:39:35:30:53:04:6C:05:68:F8:EE
Certificate issuer:       /CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4
Certificate serial:       5E00F26BFD5C84B37645B6C8D2EF7856752A0E3C
Authority key identifier: 62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139332e3138362e3235332e302f32342d3234203d3e20313332323434.roa
Signing time:             Fri 24 Nov 2023 10:45:59 +0000
ROA not before:           Fri 24 Nov 2023 10:40:59 +0000
ROA not after:            Fri 22 Nov 2024 10:45:59 +0000
asID:                     132244
IP address blocks:        193.186.253.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/e203869d-6b95-465f-b4dc-088a5a2103fc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/e203869d-6b95-465f-b4dc-088a5a2103fc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 28 Apr 2024 11:05:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:00:f2:6b:fd:5c:84:b3:76:45:b6:c8:d2:ef:78:56:75:2a:0e:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4
        Validity
            Not Before: Nov 24 10:40:59 2023 GMT
            Not After : Nov 22 10:45:59 2024 GMT
        Subject: CN=65B765BBFC273458A0E939353053046C0568F8EE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:c6:9e:21:41:1c:9e:c6:b8:41:0a:5a:10:c7:
                    03:a3:31:ed:7d:18:8a:c2:1c:7f:0e:04:8a:db:49:
                    f2:9b:07:95:1a:73:87:95:6c:76:75:6c:48:ce:1f:
                    41:8a:1d:1a:95:12:19:fd:a6:05:b8:1e:a3:1a:b6:
                    fd:34:28:c7:44:af:ae:7c:b9:50:b3:53:8f:93:d8:
                    4b:1e:ae:5a:0e:c6:f5:35:11:b0:ca:54:b1:e2:15:
                    29:de:53:8d:48:65:ec:ba:75:02:a3:74:1f:3f:27:
                    aa:33:07:76:54:79:f6:8e:e1:e3:f8:35:e7:22:5c:
                    51:31:20:27:4b:c7:3a:8b:92:43:1b:ed:d5:82:8e:
                    70:6f:7c:5b:9c:3d:52:ad:90:b6:da:49:2c:31:db:
                    19:b0:d4:45:cb:0d:a9:eb:18:5e:20:2b:8b:a0:f5:
                    13:f7:7e:45:99:e3:65:57:44:98:19:3d:62:11:eb:
                    3c:34:be:da:5a:e4:f6:f0:45:99:e4:b2:51:b2:06:
                    ce:2f:06:3a:53:8a:13:ee:31:a5:33:3b:79:08:b9:
                    fd:09:64:4f:d2:4c:23:ad:e9:84:51:63:d4:f1:8c:
                    59:2b:b8:86:95:81:26:73:a0:9f:4a:5f:f8:da:45:
                    80:51:a0:83:97:13:90:cf:6c:75:f8:d9:36:33:8f:
                    07:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:B7:65:BB:FC:27:34:58:A0:E9:39:35:30:53:04:6C:05:68:F8:EE
            X509v3 Authority Key Identifier:
                keyid:62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139332e3138362e3235332e302f32342d3234203d3e20313332323434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.186.253.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0b:54:24:0e:1a:eb:60:9c:6e:2e:ce:06:4c:9c:71:4c:17:11:
         4f:a5:40:d3:f8:e3:be:9a:c8:44:fe:ef:65:db:83:ab:c4:b5:
         5e:48:b5:94:8d:55:b3:4a:43:c9:91:7a:97:d3:bb:5f:b3:18:
         ec:db:78:b6:ea:83:70:69:dc:56:f2:8b:de:9b:53:fb:3f:a3:
         3e:70:fe:d6:43:14:ea:21:3c:e7:18:a5:b2:d5:e9:95:60:b9:
         92:00:fc:5f:fd:91:6f:f0:56:59:14:86:99:92:16:c3:d2:3d:
         75:1f:b0:e6:9a:9a:0f:69:2d:a4:d2:c8:36:44:c5:75:8e:c4:
         51:f9:0e:65:07:fe:b4:c8:19:cf:89:25:da:cf:75:c7:63:ab:
         07:fc:fd:4b:41:2d:69:c3:8f:72:cb:ff:41:8d:7d:a7:74:67:
         41:25:2c:b1:13:56:02:91:92:d0:5d:0e:7a:57:dc:57:a6:f1:
         7d:68:50:de:e8:f1:e6:61:de:6e:75:b6:c0:c7:28:48:3b:66:
         d5:98:5d:00:2b:38:3f:05:c7:dd:0b:ee:4f:34:d1:93:63:19:
         87:37:ea:32:b8:d4:3d:3b:ad:e5:26:9c:0b:57:40:6e:13:8a:
         be:7b:a1:e4:d9:37:fa:99:19:04:d0:51:2f:f9:f5:4d:de:b2:
         47:87:b8:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 13:32:59 2024 by rpki-client on console-ams.rpki-client.org