Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139332e3138362e3235332e302f32342d3234203d3e203138323239.roa
File:                     3139332e3138362e3235332e302f32342d3234203d3e203138323239.roa (raw, json)
Hash identifier:          iAYQ2jKX0dWHXb81pXmWvIzuYOeknpMPGtoOt2VC7A8=
Subject key identifier:   3B:7A:F1:B1:CF:DD:F0:83:CE:3F:E0:F8:5A:94:ED:A4:5B:27:14:AF
Certificate issuer:       /CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4
Certificate serial:       1EE09C57FE518A7C4D63E5ECA034AA3E0850158D
Authority key identifier: 62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139332e3138362e3235332e302f32342d3234203d3e203138323239.roa
Signing time:             Fri 24 Nov 2023 10:45:59 +0000
ROA not before:           Fri 24 Nov 2023 10:40:59 +0000
ROA not after:            Fri 22 Nov 2024 10:45:59 +0000
asID:                     18229
IP address blocks:        193.186.253.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/e203869d-6b95-465f-b4dc-088a5a2103fc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/e203869d-6b95-465f-b4dc-088a5a2103fc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 06 May 2024 16:11:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:e0:9c:57:fe:51:8a:7c:4d:63:e5:ec:a0:34:aa:3e:08:50:15:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4
        Validity
            Not Before: Nov 24 10:40:59 2023 GMT
            Not After : Nov 22 10:45:59 2024 GMT
        Subject: CN=3B7AF1B1CFDDF083CE3FE0F85A94EDA45B2714AF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:81:4d:0b:e9:1d:56:10:29:e5:60:41:40:7a:
                    26:1f:db:f3:43:92:2b:d4:ac:3b:cc:ae:4e:b2:d7:
                    07:a4:32:ea:f1:28:59:b1:1b:ba:31:91:6e:d0:32:
                    52:03:9d:4c:fd:3f:11:64:14:c5:42:72:99:39:c5:
                    ba:71:48:5d:0d:be:b4:02:43:3e:11:f8:f8:74:b2:
                    72:c5:b7:0d:7f:2b:bd:55:e2:9e:d9:a5:33:88:c0:
                    48:a5:86:d8:2e:e5:93:dc:33:c2:72:e4:57:23:89:
                    1f:98:da:f0:09:cc:44:1f:47:8d:87:26:be:b0:a8:
                    19:f1:9d:0f:da:ed:79:86:cf:37:71:3b:2d:f5:88:
                    3a:4e:48:4e:7d:34:d9:1a:1a:c6:be:22:4b:ec:08:
                    f9:27:b9:fe:ef:cb:15:9c:3a:9c:5d:9c:62:81:f8:
                    9d:5c:3f:0f:88:fa:c2:4f:47:3b:6a:03:48:ab:0f:
                    06:8b:7e:6f:c2:3a:c9:1c:7c:a8:9d:5b:5c:a3:5d:
                    f1:63:77:e2:91:d1:e5:77:af:7b:54:a1:a9:9c:41:
                    81:c1:b6:b1:84:f0:24:b3:b5:d4:ed:95:5a:63:1d:
                    96:c5:3b:df:19:a7:86:50:76:0b:36:cd:62:23:d2:
                    d2:62:5a:f4:a9:78:a8:df:3f:e3:75:4c:f0:fa:ff:
                    d4:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:7A:F1:B1:CF:DD:F0:83:CE:3F:E0:F8:5A:94:ED:A4:5B:27:14:AF
            X509v3 Authority Key Identifier:
                keyid:62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139332e3138362e3235332e302f32342d3234203d3e203138323239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.186.253.0/24

    Signature Algorithm: sha256WithRSAEncryption
         85:ae:d6:50:d5:9f:a0:68:eb:5c:a6:8d:f7:ba:ff:2e:dd:ac:
         6e:2a:df:ed:34:11:df:94:b2:06:74:41:f9:b4:9f:cb:e5:20:
         e9:ce:84:a5:25:2e:89:54:31:83:43:c3:42:38:66:62:20:0f:
         3a:c5:ef:13:0f:fa:3f:67:06:aa:c8:10:e4:9a:71:78:81:c9:
         b4:3b:3a:0a:84:bf:d9:e1:85:16:ba:ad:cd:fd:24:04:6a:01:
         0f:88:9e:86:1b:13:b0:d7:24:34:74:6b:bc:ae:58:06:f9:f7:
         10:d7:89:99:54:7e:af:4c:7b:ee:0d:9c:0f:6a:b4:6a:41:0b:
         38:40:68:8a:f1:f6:1e:a6:53:e0:88:40:21:50:7c:7f:8c:98:
         53:28:09:d2:dc:85:8b:6c:c1:33:9b:d8:ca:a4:ce:83:ae:fa:
         e1:c9:2e:1f:90:c7:fb:18:8a:d1:7e:8a:db:d8:32:f2:ae:06:
         6f:e4:92:53:73:55:80:be:a0:2a:94:52:52:fa:2c:0c:29:d8:
         1e:02:63:b2:aa:0a:0c:d3:dd:3d:f8:5d:fc:51:2f:07:ce:1f:
         e7:e7:02:fe:0c:4b:74:8f:6c:ac:4a:d3:a2:2f:59:4b:95:bd:
         a8:5c:fa:18:a1:f3:e9:79:6b:fc:7a:e7:f1:56:08:12:19:cb:
         e0:13:2d:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 14:10:27 2024 by rpki-client on console-ams.rpki-client.org