Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139332e3138382e312e302f32342d3234203d3e20323132323338.roa
File:                     3139332e3138382e312e302f32342d3234203d3e20323132323338.roa (raw, json)
Hash identifier:          jGIsRI0aMYSbZKlsTcSv5xF9b8/PScAVQ1zl16GQHmA=
Subject key identifier:   FA:E8:84:DF:97:03:B4:A0:F0:3D:56:E4:E5:15:B4:84:BF:4D:9A:13
Certificate issuer:       /CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4
Certificate serial:       07E0881E5F55B3BC209245DC538FEBE54F297DA0
Authority key identifier: 62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139332e3138382e312e302f32342d3234203d3e20323132323338.roa
Signing time:             Mon 30 Sep 2024 12:49:00 +0000
ROA not before:           Mon 30 Sep 2024 12:44:00 +0000
ROA not after:            Mon 29 Sep 2025 12:49:00 +0000
asID:                     212238
IP address blocks:        193.188.1.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/e203869d-6b95-465f-b4dc-088a5a2103fc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/e203869d-6b95-465f-b4dc-088a5a2103fc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 13:28:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:e0:88:1e:5f:55:b3:bc:20:92:45:dc:53:8f:eb:e5:4f:29:7d:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4
        Validity
            Not Before: Sep 30 12:44:00 2024 GMT
            Not After : Sep 29 12:49:00 2025 GMT
        Subject: CN=FAE884DF9703B4A0F03D56E4E515B484BF4D9A13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:d9:cd:24:5c:5c:e6:31:1a:de:a7:53:31:37:
                    31:22:af:8b:a5:f8:e4:12:36:8d:68:83:86:19:5e:
                    0f:59:1d:e0:04:c0:d0:d7:73:72:06:46:12:16:c0:
                    7a:2b:c2:f6:b6:ca:f4:9c:d1:ed:d6:f1:08:85:d9:
                    44:f8:35:3a:95:0c:cd:18:e8:1f:32:1b:d3:f7:47:
                    a0:53:2d:52:fd:07:f5:10:b0:cd:c1:66:cc:bc:95:
                    31:a9:69:02:d6:19:84:6f:d5:af:8f:13:51:ec:bf:
                    b9:ea:83:c4:0f:87:19:e0:09:53:1f:6d:13:b5:8e:
                    44:bb:e4:48:60:8f:4f:c9:7b:fb:27:78:8b:ed:a4:
                    f4:fa:f9:9a:29:09:dc:18:89:2c:9a:67:78:fc:f3:
                    7d:a9:35:e6:3a:b3:55:7e:12:53:8c:74:46:98:fc:
                    fd:c5:93:6d:77:04:e8:b9:a9:99:61:4a:16:f8:90:
                    be:2a:af:bc:ca:c1:3c:97:c6:e6:d1:2d:8e:88:3a:
                    36:05:dc:56:72:3e:6f:2d:fe:6b:8b:5e:53:45:ce:
                    a1:e8:ab:6a:af:27:b4:4e:23:37:6a:28:53:ae:dc:
                    ca:77:e5:74:9c:d9:b3:98:9f:f2:cf:54:27:f7:ab:
                    ab:16:a7:ec:61:bf:82:78:67:e9:8b:a9:cd:2c:f9:
                    33:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:E8:84:DF:97:03:B4:A0:F0:3D:56:E4:E5:15:B4:84:BF:4D:9A:13
            X509v3 Authority Key Identifier:
                keyid:62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139332e3138382e312e302f32342d3234203d3e20323132323338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.188.1.0/24

    Signature Algorithm: sha256WithRSAEncryption
         10:cd:04:e4:6e:4f:bd:dc:9f:2e:cb:c8:2a:84:0a:06:bf:db:
         9d:eb:4e:a8:e3:99:c6:bb:b1:36:33:5c:0b:69:29:b0:c0:78:
         ef:97:88:05:22:0d:29:d8:8c:96:8b:bd:94:4a:1d:3e:be:c2:
         5f:cf:c7:6a:b7:c4:de:01:bc:b8:8c:a3:f0:6c:b0:e9:d1:9c:
         19:0c:a5:e5:b5:1a:5a:dc:21:a6:c5:47:cf:24:60:53:08:f2:
         61:d6:2b:8a:9a:70:07:fa:88:ab:84:c8:30:fc:dd:f6:6b:8a:
         fa:a4:dc:d3:a3:70:d1:8e:e5:c9:f2:74:b4:68:f6:e2:be:b7:
         a4:f1:a7:66:5d:d1:f4:e9:43:a8:dd:ca:e1:9a:db:64:af:ab:
         d2:6e:59:1e:f8:36:3e:9c:d2:db:42:db:a4:3a:ac:0d:da:75:
         70:8e:2e:db:ab:c6:ba:ca:91:92:e4:8b:c4:12:da:9b:1a:86:
         0e:87:35:45:b9:f1:7b:ee:2c:eb:f0:c9:a4:4c:7a:c5:cd:bb:
         b4:99:25:50:53:46:2a:d0:b5:17:c3:71:b9:d8:25:82:4b:f1:
         59:51:50:79:ba:e4:42:e4:08:2c:04:7e:a5:1e:dd:36:55:14:
         60:8a:9b:28:da:fa:c2:bf:9b:5d:94:a0:b7:96:59:ff:07:09:
         0c:aa:d3:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 13:18:46 2024 by rpki-client on console-fra.rpki-client.org