Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139332e32392e3138392e302f32342d3234203d3e20323132333834.roa
File:                     3139332e32392e3138392e302f32342d3234203d3e20323132333834.roa (raw, json)
Hash identifier:          8mnM07q+f5X8HW9r3yer9zGMg8uzWTla9/92j+Ptn8w=
Subject key identifier:   66:CD:2A:B5:CE:0A:55:32:D8:5E:DC:8D:0F:59:3D:88:6C:03:1B:EE
Certificate issuer:       /CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4
Certificate serial:       75D911EEB20C9ABF5C503059A524238A278813FE
Authority key identifier: 62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139332e32392e3138392e302f32342d3234203d3e20323132333834.roa
Signing time:             Tue 25 Jun 2024 13:24:46 +0000
ROA not before:           Tue 25 Jun 2024 13:19:46 +0000
ROA not after:            Tue 24 Jun 2025 13:24:46 +0000
asID:                     212384
IP address blocks:        193.29.189.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/e203869d-6b95-465f-b4dc-088a5a2103fc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/e203869d-6b95-465f-b4dc-088a5a2103fc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:d9:11:ee:b2:0c:9a:bf:5c:50:30:59:a5:24:23:8a:27:88:13:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4
        Validity
            Not Before: Jun 25 13:19:46 2024 GMT
            Not After : Jun 24 13:24:46 2025 GMT
        Subject: CN=66CD2AB5CE0A5532D85EDC8D0F593D886C031BEE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:d2:3b:9c:1a:d5:37:0a:37:cb:5a:f8:bd:23:
                    bd:4c:3c:26:c3:d1:02:34:26:32:2a:c4:7f:44:22:
                    c3:52:9b:19:ce:85:c6:9a:22:62:3a:4f:3f:b0:db:
                    09:8e:89:03:4c:a7:91:02:07:d8:0a:1a:22:aa:a4:
                    6a:36:2b:20:1e:e1:5e:de:6f:9b:7b:11:a3:95:fb:
                    4d:9f:ae:a0:02:23:41:47:a8:b9:70:4b:d9:8f:04:
                    e7:82:0a:c9:73:1e:bd:0d:16:d0:18:7e:24:6a:07:
                    84:2a:1e:64:d8:20:d3:ce:2c:d2:7e:42:b1:69:bc:
                    a5:87:ef:58:18:da:c5:ae:b9:01:ad:66:b7:fe:64:
                    df:ef:80:ad:a2:47:9e:fc:56:ef:48:e0:da:d6:3c:
                    f6:ef:ef:52:e0:fc:94:25:f2:39:6b:c4:75:18:e4:
                    83:ec:24:18:37:22:6e:c2:79:b4:87:63:e0:fd:58:
                    f9:c1:93:68:59:00:a8:cc:cf:48:53:80:91:bd:68:
                    a1:19:25:55:a6:bf:d1:e6:62:d9:e4:62:32:46:3c:
                    71:7b:5b:ec:20:b4:67:1d:ac:c7:ca:07:63:7e:59:
                    6c:b9:ef:e0:e8:6c:0c:7d:68:0e:11:67:a6:ba:2b:
                    c4:f0:9c:7a:7c:0a:c6:19:4e:c3:86:a9:94:43:a5:
                    67:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:CD:2A:B5:CE:0A:55:32:D8:5E:DC:8D:0F:59:3D:88:6C:03:1B:EE
            X509v3 Authority Key Identifier:
                keyid:62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139332e32392e3138392e302f32342d3234203d3e20323132333834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.29.189.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6e:be:2a:d0:f9:c9:78:4b:8b:9c:11:8a:0b:66:be:6b:a5:80:
         1b:7d:5b:b7:57:fb:20:32:50:50:ef:94:8d:ec:0e:8a:28:4c:
         ac:69:27:7b:7b:04:d9:4b:56:54:88:df:a8:3f:5c:76:da:67:
         49:c4:17:12:19:50:79:38:23:47:4c:1c:e5:77:cb:1c:cf:cc:
         85:07:af:78:b2:cc:a1:c6:df:73:5b:67:38:e1:56:60:0f:82:
         65:87:9b:45:18:49:3b:2f:f5:dc:ca:7d:2e:bd:15:89:9d:e4:
         d5:53:48:49:2a:82:f0:50:b2:af:f0:d6:24:7c:88:bb:6d:78:
         f0:f0:d1:99:61:e8:5c:1f:9f:cd:e6:71:48:ec:8c:1c:b4:69:
         71:83:9c:18:ec:a1:93:ca:ee:6f:14:67:e5:82:40:c5:cb:5b:
         5f:fd:27:99:c2:7d:01:09:ff:03:82:43:ed:5b:2d:4e:81:9b:
         62:c2:cb:0e:53:80:f3:7a:89:44:dd:b0:13:d8:aa:ac:86:43:
         bb:f9:76:cd:f8:8f:ba:84:22:c3:fa:07:30:1c:ab:c0:f6:79:
         00:ab:af:29:fb:a7:a8:76:20:9b:4a:51:e5:4e:16:98:95:56:
         a3:a5:3e:30:75:2d:33:ab:a8:0a:6e:0c:05:8f:b5:f6:27:54:
         ef:c3:71:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 11:34:41 2024 by rpki-client on console-fra.rpki-client.org