Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139332e3138362e3235332e302f32342d3234203d3e203138323239.roa
File:                     3139332e3138362e3235332e302f32342d3234203d3e203138323239.roa (raw, json)
Hash identifier:          GG5canp0NSwcYhG6xJ+5XkU1AZDLd8PtvLI0u/suc98=
Subject key identifier:   77:9C:5D:37:CE:0E:A5:23:C7:C1:EE:7E:94:E3:50:67:DE:5D:CD:44
Certificate issuer:       /CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4
Certificate serial:       57488E96F3344CC48ED521FB3FFAAF6CD8CE192F
Authority key identifier: 62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139332e3138362e3235332e302f32342d3234203d3e203138323239.roa
Signing time:             Fri 25 Oct 2024 10:49:02 +0000
ROA not before:           Fri 25 Oct 2024 10:44:02 +0000
ROA not after:            Fri 24 Oct 2025 10:49:02 +0000
asID:                     18229
IP address blocks:        193.186.253.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/e203869d-6b95-465f-b4dc-088a5a2103fc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/e203869d-6b95-465f-b4dc-088a5a2103fc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:28:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:48:8e:96:f3:34:4c:c4:8e:d5:21:fb:3f:fa:af:6c:d8:ce:19:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4
        Validity
            Not Before: Oct 25 10:44:02 2024 GMT
            Not After : Oct 24 10:49:02 2025 GMT
        Subject: CN=779C5D37CE0EA523C7C1EE7E94E35067DE5DCD44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:1e:c7:23:6f:c9:e1:21:38:4e:76:ef:43:68:
                    55:52:7d:5c:dd:53:34:7b:c7:e3:b5:38:46:22:85:
                    f3:5b:58:b8:0c:4d:95:95:fd:97:1e:88:fe:29:95:
                    93:40:0a:50:03:43:86:1c:d2:42:72:60:04:f7:95:
                    0b:db:6d:2a:ef:d9:84:39:88:cc:2a:82:11:1f:e4:
                    03:e8:8b:11:ea:7a:53:5c:e7:e7:4d:44:e7:bf:34:
                    37:9b:40:ad:87:80:01:99:9f:b6:35:97:b3:98:9e:
                    10:79:b0:d8:d7:b0:45:f7:cd:2b:1d:be:0c:d9:3a:
                    38:fe:f8:a0:94:9d:4c:3c:31:e3:84:b1:da:54:49:
                    b3:b7:ac:a9:bc:61:49:6e:2f:0c:b1:b1:93:b3:0e:
                    e1:31:15:6f:45:07:3c:40:e0:c7:76:b2:1f:fc:c1:
                    67:50:8b:1e:4a:80:8f:df:97:15:85:21:6c:c1:8d:
                    cf:af:da:56:a7:1b:1a:9a:16:ed:51:8c:91:05:fe:
                    88:47:89:99:af:de:37:87:8a:a9:6f:41:28:b0:44:
                    57:69:2a:5d:5f:37:5d:cc:5b:b1:5b:ca:e6:80:74:
                    40:ea:39:9b:3a:5a:7f:09:4b:2b:73:4f:4d:bb:95:
                    5c:e3:9b:ae:26:2b:34:30:a5:7e:74:d5:35:6f:9a:
                    47:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:9C:5D:37:CE:0E:A5:23:C7:C1:EE:7E:94:E3:50:67:DE:5D:CD:44
            X509v3 Authority Key Identifier:
                keyid:62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139332e3138362e3235332e302f32342d3234203d3e203138323239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.186.253.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a7:1a:ef:bf:a3:81:c1:78:67:8a:3f:86:a2:42:78:26:70:bb:
         95:5f:84:50:77:32:8e:c2:4c:b5:a3:2e:06:5b:1b:59:8a:ce:
         c2:77:b2:63:cb:2d:33:5f:00:8e:50:07:46:9e:ea:9b:7a:3d:
         50:4a:07:f9:4b:8b:4d:ac:51:77:5f:e9:25:a5:f5:af:5d:dd:
         b5:86:72:31:82:9d:77:7c:1d:4d:59:4b:f8:44:c5:8c:71:71:
         31:c6:73:9b:14:03:d1:04:1e:fc:7a:8b:f4:1e:65:bf:00:b3:
         69:9f:26:5f:6d:c4:5f:f3:0e:2a:3a:00:28:c2:60:47:69:24:
         54:f8:04:ca:c5:12:6a:61:bc:ea:d8:13:09:0d:7b:bf:6f:88:
         4a:bf:05:c0:b6:a6:c8:db:5b:15:a9:47:ea:d0:90:cf:f3:40:
         e0:31:ab:a0:34:01:a6:7e:e5:3c:48:fb:3d:0f:bc:40:b1:37:
         da:04:ea:f3:0f:c7:02:21:eb:0d:2d:c2:05:30:1c:88:33:e1:
         8d:34:ec:67:73:eb:75:e6:f4:23:00:95:e4:0b:1c:41:95:5f:
         ee:7f:39:7a:39:44:32:56:85:bc:cb:ca:eb:5e:35:f1:4c:f2:
         fc:56:8b:0a:62:a4:d2:f3:da:a2:39:62:40:98:e5:d9:79:18:
         45:f0:fc:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 06:35:49 2024 by rpki-client on console-ams.rpki-client.org