Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139332e3232372e3132392e302f32342d3234203d3e20333937343233.roa
File:                     3139332e3232372e3132392e302f32342d3234203d3e20333937343233.roa (raw, json)
Hash identifier:          JGcNcmvnqPoR6ExHzjVX/WJw9AYjq+RWwbhvahBLH+Q=
Subject key identifier:   3E:10:25:F6:5B:20:79:F7:DF:3B:E0:0C:99:0D:9B:0C:21:5E:50:AB
Certificate issuer:       /CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4
Certificate serial:       41E869AAF2EB4227BA866A09CC3383A9ED9153DD
Authority key identifier: 62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139332e3232372e3132392e302f32342d3234203d3e20333937343233.roa
Signing time:             Wed 10 Jan 2024 15:31:21 +0000
ROA not before:           Wed 10 Jan 2024 15:26:21 +0000
ROA not after:            Wed 08 Jan 2025 15:31:21 +0000
asID:                     397423
IP address blocks:        193.227.129.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/e203869d-6b95-465f-b4dc-088a5a2103fc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/e203869d-6b95-465f-b4dc-088a5a2103fc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Nov 2024 13:25:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:e8:69:aa:f2:eb:42:27:ba:86:6a:09:cc:33:83:a9:ed:91:53:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4
        Validity
            Not Before: Jan 10 15:26:21 2024 GMT
            Not After : Jan  8 15:31:21 2025 GMT
        Subject: CN=3E1025F65B2079F7DF3BE00C990D9B0C215E50AB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:0c:61:61:4d:cf:ef:e7:64:83:4d:74:e7:14:
                    45:95:0a:1b:24:2b:09:58:ed:14:d0:81:06:fd:09:
                    f7:53:59:d5:53:15:f8:44:9b:4b:ee:78:55:8f:21:
                    c7:0d:92:96:39:5f:b9:e7:69:ba:f5:b6:60:3c:1e:
                    59:15:72:fe:f8:c7:e4:0c:9c:ca:a1:85:b3:49:e9:
                    38:6f:d4:f9:31:93:7c:10:d4:d4:99:85:f3:c2:2a:
                    39:92:19:99:25:95:c0:cb:e1:0d:e8:43:23:90:62:
                    d2:b3:9d:f4:e6:f1:f1:c0:1f:43:6c:f6:85:73:bb:
                    fe:ee:ea:79:3e:47:a5:f7:c0:99:7c:d6:f6:7b:46:
                    ef:c9:2b:0d:da:2e:a9:04:9a:b3:7c:14:5d:74:a2:
                    72:ec:06:25:0a:dc:ca:98:5f:43:72:22:b9:c2:0c:
                    80:f8:ad:9b:5a:e3:c3:cf:8f:27:f8:11:d1:ff:0c:
                    20:26:f2:3d:95:ca:1b:90:00:4b:9a:2b:d2:8d:1f:
                    30:e1:08:2a:9d:06:e0:0b:d2:45:cc:fa:0d:0e:ac:
                    f3:f4:09:e7:11:41:c1:4d:62:43:13:99:f8:88:9f:
                    97:c4:ca:92:86:30:bb:a7:e7:ec:d2:cb:5a:4d:e3:
                    7f:59:d4:39:4d:36:53:ba:e0:2e:ef:2c:35:c3:68:
                    24:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:10:25:F6:5B:20:79:F7:DF:3B:E0:0C:99:0D:9B:0C:21:5E:50:AB
            X509v3 Authority Key Identifier:
                keyid:62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139332e3232372e3132392e302f32342d3234203d3e20333937343233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.227.129.0/24

    Signature Algorithm: sha256WithRSAEncryption
         18:62:10:f1:be:09:e5:de:96:e3:b1:29:7a:14:17:66:72:8d:
         f7:45:9d:22:7a:2a:62:7c:1c:75:d8:0e:c8:eb:b8:bc:84:40:
         17:fc:28:90:f4:f0:01:b9:a0:d8:32:b8:9c:29:2d:38:d7:ed:
         12:aa:8e:2a:bd:a9:c6:60:68:23:e9:45:1d:b1:e7:1b:1b:ff:
         eb:57:70:0c:6f:97:05:71:f7:f3:be:4e:8f:5c:33:1d:08:78:
         fd:dd:3d:26:6d:d9:bf:1a:68:45:b5:a9:9b:fb:8b:84:32:95:
         10:b2:dc:db:e5:51:b9:56:07:c7:4b:28:dd:ca:c0:e7:7e:17:
         dc:0a:e4:2a:10:a3:cd:7e:f2:3a:8e:dc:67:50:46:1c:85:b2:
         a4:35:b1:14:72:4b:ba:2b:d4:1d:ff:86:9d:cc:2d:80:83:13:
         52:9e:c5:31:43:a0:36:a4:b7:0b:ee:b8:f6:fe:0a:0a:9f:ea:
         ab:e5:a0:f1:72:05:4f:f1:ad:ab:7f:8f:ea:ae:f6:82:1c:f2:
         d4:e5:85:90:2e:0a:19:fe:12:0f:c2:b3:0c:46:55:fd:63:ef:
         7f:0e:84:bb:07:44:a2:29:45:3b:3f:e1:ec:cb:41:f9:b2:7f:
         75:79:1a:89:f9:f8:35:e7:53:6f:c3:c5:7c:a5:eb:26:f2:d5:
         d9:bd:b7:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 13:27:07 2024 by rpki-client on console-ams.rpki-client.org