Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139332e3232372e3132352e302f32342d3234203d3e2039303039.roa
File:                     3139332e3232372e3132352e302f32342d3234203d3e2039303039.roa (raw, json)
Hash identifier:          IJy6B36lg5RhOZfXE2ijlcJFMkqys4HhMwMIKwcmNgY=
Subject key identifier:   8A:9F:7A:BD:7D:24:9C:69:4F:40:00:0F:D9:E7:02:5F:4D:57:75:69
Certificate issuer:       /CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4
Certificate serial:       1CC0750908B5D7A77E7E9CF40BF7E8D344F0E913
Authority key identifier: 62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139332e3232372e3132352e302f32342d3234203d3e2039303039.roa
Signing time:             Wed 17 Jul 2024 13:47:16 +0000
ROA not before:           Wed 17 Jul 2024 13:42:16 +0000
ROA not after:            Wed 16 Jul 2025 13:47:16 +0000
asID:                     9009
IP address blocks:        193.227.125.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/e203869d-6b95-465f-b4dc-088a5a2103fc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/e203869d-6b95-465f-b4dc-088a5a2103fc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 13:28:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:c0:75:09:08:b5:d7:a7:7e:7e:9c:f4:0b:f7:e8:d3:44:f0:e9:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4
        Validity
            Not Before: Jul 17 13:42:16 2024 GMT
            Not After : Jul 16 13:47:16 2025 GMT
        Subject: CN=8A9F7ABD7D249C694F40000FD9E7025F4D577569
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:ac:b4:18:df:8d:4b:32:c3:18:2e:a1:79:52:
                    17:21:07:59:5b:d4:e2:4d:85:f0:00:ac:f8:35:5c:
                    6c:8f:8e:90:ff:f1:bf:06:b8:a7:47:e8:1c:c6:63:
                    e4:07:1b:c8:55:95:e0:dc:8a:76:10:99:1e:b7:98:
                    13:f6:1b:ac:cc:32:2f:48:ad:2f:9d:42:b9:6f:bd:
                    c5:5b:9b:ba:8b:a4:66:ce:50:7d:a0:55:e7:13:72:
                    99:03:c0:86:ef:8d:eb:88:ef:07:02:fb:4a:7e:df:
                    5b:a3:57:6a:0f:c8:e4:1d:e1:79:08:e8:92:8b:cf:
                    02:ab:c1:e0:e6:7b:bd:ed:4d:33:e4:c3:7d:15:8f:
                    28:f5:9a:43:7a:e2:b1:08:b5:c9:23:fb:bd:1a:4f:
                    25:f2:08:65:fa:ab:b8:fc:6c:0d:df:8c:50:54:20:
                    af:cb:9e:3b:96:e1:90:2d:d8:a3:0d:80:d9:51:7b:
                    46:e2:6e:55:9e:ae:bf:81:b0:40:6c:4e:99:bf:d2:
                    33:f1:ad:06:27:26:c4:ab:1f:3e:04:a7:b1:d7:3e:
                    3f:05:79:8b:6b:f2:e4:26:5c:03:c5:6e:69:50:46:
                    63:46:d8:69:8d:1c:82:d6:f0:10:2a:56:8e:98:3b:
                    3b:f0:77:de:e8:cb:6d:ab:50:fd:4c:18:2a:81:a6:
                    87:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:9F:7A:BD:7D:24:9C:69:4F:40:00:0F:D9:E7:02:5F:4D:57:75:69
            X509v3 Authority Key Identifier:
                keyid:62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139332e3232372e3132352e302f32342d3234203d3e2039303039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.227.125.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0f:cb:1a:67:1c:12:6a:e5:3d:3b:9b:a5:f1:0f:d3:ae:ab:86:
         81:7d:6e:60:f8:fe:08:54:c8:e9:09:82:01:91:99:cc:57:28:
         cc:4b:85:4a:35:94:bf:6c:3d:b3:ce:ed:a6:b7:a6:5f:42:f8:
         7f:42:70:74:da:18:d9:db:bd:7b:fb:8b:f9:b6:4c:94:f9:d3:
         72:71:3a:73:33:77:1f:e1:83:a4:2f:57:c1:48:62:f8:ac:84:
         6a:ee:6d:44:6c:c6:83:1b:8e:35:ea:80:c9:40:c2:e2:f1:15:
         b0:62:51:ae:84:2f:6c:58:ff:63:56:46:07:56:e8:b3:d3:c6:
         93:2c:19:2c:bd:be:55:84:8b:9c:47:99:6a:8c:ab:39:c4:6a:
         4f:68:68:44:08:a8:30:70:96:e5:43:a8:10:ba:83:14:e8:dd:
         e9:9b:77:14:46:71:85:ec:98:79:e5:f6:0e:63:d4:84:01:94:
         aa:76:45:da:5e:ae:40:55:b1:a5:e8:62:88:90:eb:36:b4:e0:
         7d:09:26:21:7c:b8:a6:1c:73:d9:59:09:59:c1:b9:22:ae:d3:
         80:7c:df:99:c9:66:a4:4b:9c:aa:c7:06:5b:a0:fc:d9:ea:cb:
         3b:e8:1e:30:f9:fc:89:1b:cc:2e:7b:a3:51:89:ce:05:74:21:
         66:75:60:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 13:18:46 2024 by rpki-client on console-fra.rpki-client.org