Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139332e32392e3235312e302f32342d3234203d3e20323132323338.roa
File:                     3139332e32392e3235312e302f32342d3234203d3e20323132323338.roa (raw, json)
Hash identifier:          +uERO12lnDhLzKtdRv3OmJMwHIZVEI9Zq2PbnKSTG+8=
Subject key identifier:   39:BB:0C:33:D3:F7:86:5A:DD:43:CB:4F:48:2A:F6:6D:43:4A:86:06
Certificate issuer:       /CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4
Certificate serial:       59E1B0487D098626DEEE09C4218BE3C0098E835A
Authority key identifier: 62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139332e32392e3235312e302f32342d3234203d3e20323132323338.roa
Signing time:             Mon 30 Sep 2024 12:49:00 +0000
ROA not before:           Mon 30 Sep 2024 12:44:00 +0000
ROA not after:            Mon 29 Sep 2025 12:49:00 +0000
asID:                     212238
IP address blocks:        193.29.251.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/e203869d-6b95-465f-b4dc-088a5a2103fc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/e203869d-6b95-465f-b4dc-088a5a2103fc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 13:28:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:e1:b0:48:7d:09:86:26:de:ee:09:c4:21:8b:e3:c0:09:8e:83:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4
        Validity
            Not Before: Sep 30 12:44:00 2024 GMT
            Not After : Sep 29 12:49:00 2025 GMT
        Subject: CN=39BB0C33D3F7865ADD43CB4F482AF66D434A8606
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:3a:14:65:e3:5a:78:5f:eb:1b:5d:f0:23:2c:
                    14:19:e3:85:c9:92:81:6e:35:4b:bf:46:7c:99:ee:
                    37:f3:5e:84:a8:88:95:32:6b:cc:90:b3:20:bc:3c:
                    df:4f:92:fb:7e:42:df:4f:27:b8:ff:f3:3f:4f:dd:
                    75:e7:56:db:f9:18:b2:30:8e:73:cf:78:35:86:ce:
                    74:6f:bb:d4:07:32:eb:6b:52:98:9a:01:aa:31:15:
                    1f:b9:2e:57:c5:4f:94:97:2c:34:b7:d3:24:d2:c4:
                    0a:fc:8f:ae:ec:b4:11:88:1c:69:d0:ea:e9:42:d6:
                    86:04:bf:68:78:e5:e3:83:f0:fa:92:5e:dc:49:45:
                    be:df:a0:73:87:1b:2a:aa:80:9b:eb:ab:51:44:d1:
                    8b:00:ca:4d:b7:61:3e:55:37:b7:4c:db:fe:b1:0f:
                    1e:6f:92:2b:bf:d1:2b:31:33:2a:a0:4f:57:2a:ab:
                    3a:36:d8:7c:43:c4:45:67:25:bd:66:31:ad:e1:0a:
                    78:7c:a1:2c:87:4b:05:f1:6b:90:9b:79:f2:f3:d8:
                    99:35:24:cb:89:fa:c6:4c:a2:50:ec:db:7b:d9:75:
                    69:2a:e5:04:05:1e:ab:16:e4:31:57:fa:98:d8:2b:
                    ca:1f:d1:6d:49:34:64:4e:d9:cd:85:b7:e1:ab:7d:
                    88:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:BB:0C:33:D3:F7:86:5A:DD:43:CB:4F:48:2A:F6:6D:43:4A:86:06
            X509v3 Authority Key Identifier:
                keyid:62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139332e32392e3235312e302f32342d3234203d3e20323132323338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.29.251.0/24

    Signature Algorithm: sha256WithRSAEncryption
         29:22:ff:35:6f:9d:eb:6e:d6:b9:87:70:d2:1e:10:10:f9:37:
         2b:26:48:9e:fa:e4:eb:96:cd:30:83:6a:2a:99:eb:16:a8:11:
         cc:3d:9b:d1:f3:3f:a7:bb:2f:1f:e7:1d:80:bc:23:de:3a:ce:
         31:66:12:60:a1:5d:97:7b:23:57:b2:85:21:0d:17:07:ba:8d:
         71:64:e7:a0:a5:76:fd:86:85:ca:94:03:9f:56:61:7d:0d:f2:
         0c:71:20:7d:a6:ee:73:85:b8:e9:fb:a6:b7:03:53:8e:fa:de:
         06:2d:b5:86:2b:2a:7e:68:6c:96:70:88:a9:d4:ac:80:ed:92:
         aa:dc:14:58:c4:28:a8:33:4c:6f:98:7e:e6:3c:0c:eb:8a:90:
         83:bb:51:00:f6:a8:38:b9:53:74:d2:ec:56:2d:c0:41:aa:82:
         1d:68:dc:10:d2:81:b7:11:f4:8c:d2:cb:81:6c:d1:1a:d4:3b:
         25:52:1b:d5:79:23:f8:f6:ee:50:6d:0d:c9:93:d3:48:e7:a0:
         bd:d0:db:ae:7f:4f:f5:79:33:1e:d2:47:1e:37:93:11:2e:4f:
         77:92:80:58:de:cf:0a:e4:7e:ed:09:f3:9b:fe:c6:71:01:17:
         3f:51:1a:a9:3f:f5:31:f8:ee:b2:55:54:55:ed:09:e6:58:69:
         23:2a:c1:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 13:39:41 2024 by rpki-client on console-ams.rpki-client.org