Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139332e32392e34322e302f32342d3234203d3e2039303039.roa
File:                     3139332e32392e34322e302f32342d3234203d3e2039303039.roa (raw, json)
Hash identifier:          zyY8vdOpRMwkpayjBUPRNTNlSmTbHMocPpOGIsLvEIM=
Subject key identifier:   54:7E:87:A1:3C:6C:5B:E0:63:59:E9:A5:F1:E2:15:93:7C:7A:22:B5
Certificate issuer:       /CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4
Certificate serial:       2FD47DAB30BA29538CF452E732EBAFD54BDF347F
Authority key identifier: 62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139332e32392e34322e302f32342d3234203d3e2039303039.roa
Signing time:             Tue 21 May 2024 08:14:38 +0000
ROA not before:           Tue 21 May 2024 08:09:38 +0000
ROA not after:            Tue 20 May 2025 08:14:38 +0000
asID:                     9009
IP address blocks:        193.29.42.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/e203869d-6b95-465f-b4dc-088a5a2103fc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/e203869d-6b95-465f-b4dc-088a5a2103fc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 13:28:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:d4:7d:ab:30:ba:29:53:8c:f4:52:e7:32:eb:af:d5:4b:df:34:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4
        Validity
            Not Before: May 21 08:09:38 2024 GMT
            Not After : May 20 08:14:38 2025 GMT
        Subject: CN=547E87A13C6C5BE06359E9A5F1E215937C7A22B5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:b7:27:81:e1:b6:16:a9:72:0d:6b:23:13:8e:
                    5b:f8:aa:13:3b:1f:a0:85:ab:9f:e5:e0:55:e9:2a:
                    b9:60:62:2a:60:ea:6c:ae:41:13:41:33:3e:9c:25:
                    f9:c7:7a:93:ea:bc:3c:79:97:b8:d7:78:4a:95:1b:
                    14:cd:c8:46:57:4c:87:26:ed:f2:dd:7e:91:97:9f:
                    14:a4:97:a7:89:30:58:9d:87:dc:d0:59:d6:19:7d:
                    84:ca:a9:9e:d4:28:23:f0:4b:ae:ce:60:18:1b:91:
                    4b:2b:d7:6d:1f:75:43:3d:ee:21:ed:4a:70:86:88:
                    85:cb:d4:49:ef:98:44:ec:53:21:44:e3:f2:26:1d:
                    6a:0f:1d:8c:12:42:be:f3:50:ab:94:91:c7:6d:05:
                    51:d0:98:fe:27:b3:b5:59:2c:96:e6:45:1b:50:51:
                    6b:89:77:50:39:34:15:a7:23:1a:07:33:13:81:c4:
                    62:50:ec:fd:ec:39:59:c4:4d:b6:90:22:60:9c:8b:
                    f5:fc:c4:72:23:40:f8:0e:0a:ac:10:3f:59:db:6e:
                    88:13:0c:6a:67:e1:ac:6d:bd:8d:c7:0e:81:eb:54:
                    6a:46:0c:8b:9c:8f:d4:ce:cc:f1:f2:d0:a7:f0:16:
                    62:0d:7d:27:8e:83:98:47:ac:77:f2:1f:2a:99:8b:
                    12:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:7E:87:A1:3C:6C:5B:E0:63:59:E9:A5:F1:E2:15:93:7C:7A:22:B5
            X509v3 Authority Key Identifier:
                keyid:62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139332e32392e34322e302f32342d3234203d3e2039303039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.29.42.0/24

    Signature Algorithm: sha256WithRSAEncryption
         35:4d:05:9a:59:8f:1b:93:97:84:a4:0c:a5:d9:c5:16:6a:f8:
         75:2d:67:47:33:bb:3b:54:ff:65:40:ad:c8:2f:ba:33:47:37:
         0f:5d:e4:17:46:5f:ee:30:1c:c3:82:a2:87:c0:aa:fc:f0:87:
         05:45:0d:01:92:14:cd:bc:39:f3:e7:6d:20:13:96:c8:19:ba:
         fa:94:25:d4:b2:75:7a:28:9f:b1:5c:10:94:87:2d:24:1d:e1:
         a8:33:21:f7:d8:46:b5:a2:f4:8e:40:b6:8b:b7:62:0a:2a:20:
         87:f8:33:11:c3:29:82:2b:f0:d1:12:2c:ba:95:b7:e9:62:31:
         bb:e4:58:86:89:bf:3c:4a:b1:37:d4:be:f4:b9:dd:35:e8:2a:
         9d:9e:23:f0:f7:30:f6:cf:06:3b:4c:ba:52:a4:98:6b:1d:4b:
         c2:21:89:51:93:bc:ae:8c:8a:a9:91:dc:db:b3:c3:87:a0:1e:
         f1:3f:b5:ec:70:ce:cf:29:4b:c1:68:f3:1d:b0:f1:92:e6:1a:
         62:e8:dc:16:45:66:6e:1b:57:0a:6a:83:8c:fb:b2:2e:db:1f:
         72:68:4c:d9:5d:86:93:f4:0a:01:22:47:c2:e8:7f:a2:ba:ca:
         33:e0:7a:e6:ba:3d:bb:a0:2a:3e:76:0b:5a:8f:4d:ae:e0:0a:
         d7:fb:33:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 13:39:41 2024 by rpki-client on console-ams.rpki-client.org