Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139332e3138382e312e302f32342d3234203d3e20323132323338.roa
File:                     3139332e3138382e312e302f32342d3234203d3e20323132323338.roa (raw, json)
Hash identifier:          36GtqzN7oQa5kN2nX2xVUN4UA3vY8fAo4ycdU/eBKr0=
Subject key identifier:   BB:1C:F1:14:89:C7:89:FC:6A:DE:3E:57:6C:6C:27:66:8B:73:6F:4A
Certificate issuer:       /CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4
Certificate serial:       3631CBD1CD85AB5DDEB1E202CBB625835EEDA0C3
Authority key identifier: 62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139332e3138382e312e302f32342d3234203d3e20323132323338.roa
Signing time:             Mon 30 Oct 2023 12:04:03 +0000
ROA not before:           Mon 30 Oct 2023 11:59:03 +0000
ROA not after:            Mon 28 Oct 2024 12:04:03 +0000
asID:                     212238
IP address blocks:        193.188.1.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/e203869d-6b95-465f-b4dc-088a5a2103fc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/e203869d-6b95-465f-b4dc-088a5a2103fc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 27 Apr 2024 01:47:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:31:cb:d1:cd:85:ab:5d:de:b1:e2:02:cb:b6:25:83:5e:ed:a0:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4
        Validity
            Not Before: Oct 30 11:59:03 2023 GMT
            Not After : Oct 28 12:04:03 2024 GMT
        Subject: CN=BB1CF11489C789FC6ADE3E576C6C27668B736F4A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:ae:fe:88:99:a4:6d:b1:92:6a:00:cc:a4:01:
                    cc:d7:fe:0d:c3:fe:2f:e3:ef:91:80:cb:31:0f:3f:
                    06:71:c9:5b:29:69:b5:f0:11:1f:c8:88:54:23:97:
                    63:e4:2e:7a:0f:32:91:d3:48:29:b5:81:05:4c:ce:
                    ef:42:16:ce:0d:91:73:a8:92:12:0f:fa:db:a1:16:
                    80:23:80:af:19:82:0d:68:03:15:c0:62:b7:4e:15:
                    b8:e7:53:28:49:54:c8:36:a3:9d:03:a9:7b:97:8c:
                    06:fc:66:d5:f4:45:50:0c:fb:6f:c6:36:e3:b4:21:
                    af:81:e6:59:05:a6:a4:3e:c9:26:a7:1a:ee:0d:7f:
                    de:40:58:00:7d:ff:7c:f4:90:94:fd:f5:70:b8:48:
                    bb:5c:4d:56:9a:70:fd:96:64:fc:de:20:29:2e:2f:
                    30:e4:1e:b5:c4:b4:f8:a2:7a:b5:40:fe:77:ec:a2:
                    0b:9e:a3:e8:39:8e:83:f5:d9:10:7b:15:26:71:06:
                    31:a6:2e:57:44:13:2a:ef:c6:36:01:7b:73:91:f7:
                    e2:be:70:57:2e:08:00:b0:ce:16:b3:75:98:17:57:
                    71:6f:1d:3a:47:81:db:79:de:63:e6:95:7c:1d:a2:
                    8e:70:72:21:2f:05:55:3b:5a:52:e2:c7:f9:81:e7:
                    7d:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:1C:F1:14:89:C7:89:FC:6A:DE:3E:57:6C:6C:27:66:8B:73:6F:4A
            X509v3 Authority Key Identifier:
                keyid:62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139332e3138382e312e302f32342d3234203d3e20323132323338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.188.1.0/24

    Signature Algorithm: sha256WithRSAEncryption
         20:72:5d:02:ed:fe:2c:75:e5:d1:e2:16:91:af:37:84:1e:2d:
         6a:4a:f9:bc:8f:51:7f:87:4b:5b:ae:03:1d:19:33:06:b6:2b:
         22:67:f0:38:14:da:3c:c3:73:78:05:0e:78:7d:ef:75:a7:a7:
         79:94:57:11:62:fd:99:7d:b7:e6:af:0f:7c:18:7b:e9:f3:9f:
         70:ec:7f:95:8b:7d:b9:84:d1:7d:60:df:17:bc:44:77:1e:9b:
         1d:3f:0f:2f:2b:db:6e:a4:6b:c8:3f:ef:0c:ff:c5:0c:75:2c:
         a6:f4:11:6d:b8:8d:cf:23:95:2b:1a:4a:52:21:47:58:cd:ce:
         29:2d:d0:b9:61:51:af:68:d8:88:9c:87:e1:70:ba:ee:76:a1:
         18:77:fb:91:7f:a4:ca:86:f4:87:de:a9:30:7e:7c:39:10:87:
         a5:55:a9:a4:da:f0:af:5d:b8:06:a0:4e:80:be:12:09:97:09:
         5a:e7:df:42:2a:79:0c:4f:e1:b0:bb:cf:b9:a1:68:dd:4c:32:
         da:e5:60:54:91:54:9f:71:67:b3:73:5c:61:29:73:a9:c3:b3:
         02:b9:5d:2d:c8:1d:da:ec:15:28:bd:3f:e3:8a:cd:72:0e:6e:
         a3:9b:ce:75:ff:99:ab:98:d9:34:41:1d:47:28:57:28:08:52:
         0b:25:2e:44
-----BEGIN CERTIFICATE-----
MIIFsjCCBJqgAwIBAgIUNjHL0c2Fq13eseICy7Ylg17toMMwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMWYyMmNmMDc1NzFlY2JhYjZkNDYwYTFmM2I2YzVkNjE5
N2QwOTgzNjQzYTU0ZDJlZDQwHhcNMjMxMDMwMTE1OTAzWhcNMjQxMDI4MTIwNDAz
WjAzMTEwLwYDVQQDEyhCQjFDRjExNDg5Qzc4OUZDNkFERTNFNTc2QzZDMjc2NjhC
NzM2RjRBMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwa7+iJmkbbGS
agDMpAHM1/4Nw/4v4++RgMsxDz8GcclbKWm18BEfyIhUI5dj5C56DzKR00gptYEF
TM7vQhbODZFzqJISD/rboRaAI4CvGYINaAMVwGK3ThW451MoSVTINqOdA6l7l4wG
/GbV9EVQDPtvxjbjtCGvgeZZBaakPskmpxruDX/eQFgAff989JCU/fVwuEi7XE1W
mnD9lmT83iApLi8w5B61xLT4onq1QP537KILnqPoOY6D9dkQexUmcQYxpi5XRBMq
78Y2AXtzkffivnBXLggAsM4Ws3WYF1dxbx06R4Hbed5j5pV8HaKOcHIhLwVVO1pS
4sf5ged9eQIDAQABo4ICsjCCAq4wHQYDVR0OBBYEFLsc8RSJx4n8at4+V2xsJ2aL
c29KMB8GA1UdIwQYMBaAFGK0t02IaU0zyBBuijO8FJ6zkE/rMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmODE0M2JmNjIwMTgxZWNkMzdkYWM3MmYxLzEv
NjJCNEI3NEQ4ODY5NEQzM0M4MTA2RThBMzNCQzE0OUVCMzkwNEZFQi5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi
MGI4NDE1L2UyMDM4NjlkLTZiOTUtNDY1Zi1iNGRjLTA4OGE1YTIxMDNmYy8xZjIy
Y2YwNzU3MWVjYmFiNmQ0NjBhMWYzYjZjNWQ2MTk3ZDA5ODM2NDNhNTRkMmVkNC5j
ZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjgxNDNiZjYyMDE4MWVj
ZDM3ZGFjNzJmMS8xLzMxMzkzMzJlMzEzODM4MmUzMTJlMzAyZjMyMzQyZDMyMzQy
MDNkM2UyMDMyMzEzMjMyMzMzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO
AjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMG8ATANBgkqhkiG9w0BAQsF
AAOCAQEAIHJdAu3+LHXl0eIWka83hB4takr5vI9Rf4dLW64DHRkzBrYrImfwOBTa
PMNzeAUOeH3vdaeneZRXEWL9mX235q8PfBh76fOfcOx/lYt9uYTRfWDfF7xEdx6b
HT8PLyvbbqRryD/vDP/FDHUspvQRbbiNzyOVKxpKUiFHWM3OKS3QuWFRr2jYiJyH
4XC67nahGHf7kX+kyob0h96pMH58ORCHpVWppNrwr124BqBOgL4SCZcJWuffQip5
DE/hsLvPuaFo3Uwy2uVgVJFUn3Fns3NcYSlzqcOzArldLcgd2uwVKL0/44rNcg5u
o5vOdf+Zq5jZNEEdRyhXKAhSCyUuRA==
-----END CERTIFICATE-----
Generated at Fri Apr 26 08:25:20 2024 by rpki-client on console-ams.rpki-client.org