Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139332e3138382e3139352e302f32342d3234203d3e20333936333536.roa
File:                     3139332e3138382e3139352e302f32342d3234203d3e20333936333536.roa (raw, json)
Hash identifier:          +SfK6VznNQ192sgM3DutHVHpVBXgsJoWpT9vz7UGvbM=
Subject key identifier:   D7:55:E0:6C:9F:D7:BD:EC:E6:1D:FF:AA:3B:82:40:49:5F:E5:9F:C4
Certificate issuer:       /CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4
Certificate serial:       78F3EAC796E56A8EA5764CBA51014893E40BB522
Authority key identifier: 62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139332e3138382e3139352e302f32342d3234203d3e20333936333536.roa
Signing time:             Mon 10 Jun 2024 11:55:02 +0000
ROA not before:           Mon 10 Jun 2024 11:50:02 +0000
ROA not after:            Mon 09 Jun 2025 11:55:02 +0000
asID:                     396356
IP address blocks:        193.188.195.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/e203869d-6b95-465f-b4dc-088a5a2103fc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/e203869d-6b95-465f-b4dc-088a5a2103fc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:f3:ea:c7:96:e5:6a:8e:a5:76:4c:ba:51:01:48:93:e4:0b:b5:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4
        Validity
            Not Before: Jun 10 11:50:02 2024 GMT
            Not After : Jun  9 11:55:02 2025 GMT
        Subject: CN=D755E06C9FD7BDECE61DFFAA3B8240495FE59FC4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:9f:61:aa:77:be:59:fd:74:5a:52:71:88:ff:
                    2b:f2:d1:45:e1:56:f6:9e:59:f1:07:fa:7d:be:29:
                    de:11:16:57:e9:85:bf:b7:4d:37:1b:cd:c4:26:12:
                    87:c7:a5:de:2a:ad:a6:56:d4:d9:e6:f9:c5:ac:57:
                    a2:e1:15:d1:e3:18:f4:9f:18:65:bc:28:4f:56:aa:
                    e1:48:46:e8:5e:a9:32:67:2a:fb:39:f3:c0:4d:22:
                    8e:e3:bc:c7:37:db:8b:72:6a:0c:9d:5f:c7:3b:1b:
                    00:8c:14:a0:64:6f:3f:9b:e2:e9:74:d4:bf:ce:a0:
                    83:29:75:be:09:09:31:90:08:4d:b7:4a:fa:5f:b7:
                    38:8a:eb:87:98:e8:8c:a0:43:ff:f8:e4:8b:6e:85:
                    a0:32:53:e1:be:5f:23:94:08:06:20:00:85:d3:36:
                    6f:50:a6:2a:6c:98:0d:00:7c:87:26:9f:35:a7:35:
                    a3:bc:ca:a9:25:43:53:f3:32:22:71:14:f8:84:ba:
                    e7:f5:c5:41:21:d8:3e:5f:69:fb:2c:f7:2f:89:48:
                    90:3f:c5:00:ef:94:51:73:10:95:1a:f5:6d:17:12:
                    e2:fa:2d:20:21:d9:6c:c1:54:eb:bb:cf:b4:68:bf:
                    6b:2e:4f:44:7f:7e:82:88:41:e2:d6:14:8c:c7:0d:
                    a6:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:55:E0:6C:9F:D7:BD:EC:E6:1D:FF:AA:3B:82:40:49:5F:E5:9F:C4
            X509v3 Authority Key Identifier:
                keyid:62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139332e3138382e3139352e302f32342d3234203d3e20333936333536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.188.195.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7f:22:43:c7:ab:fe:ac:9a:c9:86:10:c6:38:3f:bb:2d:5b:20:
         00:bf:c0:1e:6f:ab:e7:6e:a6:46:e6:cf:52:78:55:c8:4a:65:
         12:9c:90:85:f8:32:80:df:d9:79:89:e4:f5:13:c5:e9:df:8a:
         43:e3:c9:a7:18:35:22:c5:e9:17:15:fe:5b:08:46:c0:96:08:
         ef:68:1c:eb:4d:12:fa:37:aa:70:b6:43:d7:71:c7:d7:a5:56:
         79:14:e6:cc:fb:74:2d:d3:ac:a9:bc:ac:41:b9:db:fc:27:2c:
         4b:99:82:d1:42:13:23:aa:76:25:c9:af:e8:ba:97:c0:4c:96:
         04:03:f0:13:70:e6:85:14:41:27:65:5f:c3:83:c3:ab:7f:b7:
         eb:30:fa:ba:4d:ca:ae:d5:30:ef:10:7e:74:ae:fd:aa:d6:cb:
         d5:95:02:cc:5c:77:c5:df:4e:11:36:fe:59:ff:25:f5:99:0e:
         c3:b4:5b:84:1b:32:cb:27:42:8c:fa:45:68:90:21:5d:a2:b4:
         89:21:7c:26:be:88:24:fa:40:b4:df:6d:db:fb:0e:82:7b:5a:
         b6:0c:80:3c:ee:88:64:4c:3d:f0:cf:6d:b5:75:21:48:b2:dd:
         21:28:a3:7b:69:43:0c:45:7c:a1:49:d8:86:f9:40:52:53:ae:
         6e:66:01:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 11:34:41 2024 by rpki-client on console-fra.rpki-client.org