Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139332e32392e3235312e302f32342d3234203d3e20323132323338.roa
File:                     3139332e32392e3235312e302f32342d3234203d3e20323132323338.roa (raw, json)
Hash identifier:          4sScaRKb2iWBZ1rtjsXCfKy+Et/FGyGwTrHSTrqxr4I=
Subject key identifier:   51:F4:4C:E5:6B:27:32:9C:52:A7:A1:04:05:12:C4:B7:81:5E:C7:68
Certificate issuer:       /CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4
Certificate serial:       3537ACF9E0591B4970B3301F3821193E674B814A
Authority key identifier: 62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139332e32392e3235312e302f32342d3234203d3e20323132323338.roa
Signing time:             Mon 30 Oct 2023 12:04:01 +0000
ROA not before:           Mon 30 Oct 2023 11:59:01 +0000
ROA not after:            Mon 28 Oct 2024 12:04:01 +0000
asID:                     212238
IP address blocks:        193.29.251.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/e203869d-6b95-465f-b4dc-088a5a2103fc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/e203869d-6b95-465f-b4dc-088a5a2103fc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 25 Apr 2024 14:11:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:37:ac:f9:e0:59:1b:49:70:b3:30:1f:38:21:19:3e:67:4b:81:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4
        Validity
            Not Before: Oct 30 11:59:01 2023 GMT
            Not After : Oct 28 12:04:01 2024 GMT
        Subject: CN=51F44CE56B27329C52A7A1040512C4B7815EC768
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:91:2e:58:83:fe:98:8c:c7:c5:19:ad:56:a0:
                    31:a2:b5:94:e7:4f:74:db:64:b8:be:8f:6e:b1:e9:
                    81:cb:a0:44:aa:c3:aa:0d:87:49:8d:5a:bb:ca:8c:
                    1b:1b:3a:bb:8a:a3:c1:9a:0e:72:d0:09:25:d8:3c:
                    14:62:c7:ea:57:1b:7b:18:53:8f:8b:2e:4e:bb:64:
                    40:06:a0:7f:c4:1e:6c:95:0d:69:a3:e3:ab:4f:6c:
                    d1:28:4d:e9:9e:a6:ef:ac:53:b4:a0:64:15:ce:7d:
                    4b:04:24:f8:85:77:4c:d1:90:e9:ca:86:56:bd:03:
                    e2:44:69:75:84:f7:b7:68:13:73:51:ea:2f:d4:d0:
                    b9:f5:4b:55:ba:c6:9c:6b:68:c9:f0:88:23:2b:d2:
                    04:99:87:3f:e6:c6:27:5d:9c:be:a3:43:ce:6e:16:
                    dc:16:21:41:4f:fa:58:5d:59:3b:6f:4a:55:e6:fe:
                    eb:b5:0a:d1:8f:56:5c:24:7b:69:e7:bb:52:a4:02:
                    68:7e:07:35:c0:8c:58:ca:6a:fb:91:30:04:10:b1:
                    f7:d4:46:76:2d:e0:98:94:5b:40:dd:54:87:90:e4:
                    a5:d1:27:02:99:2e:38:75:78:cb:11:67:af:bc:42:
                    96:f7:b4:06:54:c1:c8:54:25:ec:5a:77:cb:a6:da:
                    30:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:F4:4C:E5:6B:27:32:9C:52:A7:A1:04:05:12:C4:B7:81:5E:C7:68
            X509v3 Authority Key Identifier:
                keyid:62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139332e32392e3235312e302f32342d3234203d3e20323132323338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.29.251.0/24

    Signature Algorithm: sha256WithRSAEncryption
         12:fc:8c:b0:84:79:7b:2c:bd:68:76:48:47:db:fd:e5:06:b3:
         7e:08:2a:c1:82:56:61:07:9c:4f:a8:64:4d:28:89:b1:35:45:
         ec:7c:22:e0:ca:ab:e0:08:a9:d9:64:6f:40:76:65:5b:b3:c0:
         f8:9a:86:45:21:57:fb:d8:a0:48:52:b0:e8:18:f3:6e:e8:8a:
         fa:42:fd:7a:f1:ac:c1:5d:42:e5:68:e2:cd:91:5d:d7:53:ad:
         95:6f:7b:90:23:2f:01:5f:73:27:56:34:ac:33:2d:e2:71:a4:
         8b:13:9a:ea:4d:0e:72:44:78:ad:d1:23:d4:11:7c:eb:0d:c6:
         15:65:d9:dd:75:70:ce:1e:45:03:25:b9:f8:f1:19:f3:78:0c:
         3f:db:4a:6d:ca:61:6b:1b:bd:3f:f9:0d:fa:c7:b1:d0:b8:16:
         0b:9f:25:49:ce:44:3f:bc:b7:fa:c2:31:af:5b:cb:d3:d2:44:
         35:75:8f:10:36:74:28:f7:26:61:f3:55:be:21:3e:73:a8:6a:
         d3:2e:04:b4:0e:4e:da:eb:bd:24:89:d5:a8:2b:17:e1:6a:71:
         dd:d3:77:70:e1:56:8b:00:d6:20:c2:9c:e6:41:ad:bb:8e:f1:
         25:3d:66:58:ea:a4:0e:c1:59:f0:48:ab:75:41:1e:c6:77:ed:
         dd:88:cb:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 24 14:24:56 2024 by rpki-client on console-fra.rpki-client.org