Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139332e382e3230332e302f32342d3234203d3e20313430393032.roa
File:                     3139332e382e3230332e302f32342d3234203d3e20313430393032.roa (raw, json)
Hash identifier:          VC2D3APS6F4SJbjhNpD4UId8T9J1uJ2dlvl2N+gSNt8=
Subject key identifier:   E3:99:16:CA:65:E0:F5:42:B7:29:72:88:A3:C7:FD:F2:27:B1:64:EA
Certificate issuer:       /CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4
Certificate serial:       1A0C683D4E5C096B7BA0680C010D07A6C7C905ED
Authority key identifier: 62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139332e382e3230332e302f32342d3234203d3e20313430393032.roa
Signing time:             Thu 26 Oct 2023 08:26:08 +0000
ROA not before:           Thu 26 Oct 2023 08:21:08 +0000
ROA not after:            Thu 24 Oct 2024 08:26:08 +0000
asID:                     140902
IP address blocks:        193.8.203.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/e203869d-6b95-465f-b4dc-088a5a2103fc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/e203869d-6b95-465f-b4dc-088a5a2103fc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 06 May 2024 16:11:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:0c:68:3d:4e:5c:09:6b:7b:a0:68:0c:01:0d:07:a6:c7:c9:05:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4
        Validity
            Not Before: Oct 26 08:21:08 2023 GMT
            Not After : Oct 24 08:26:08 2024 GMT
        Subject: CN=E39916CA65E0F542B7297288A3C7FDF227B164EA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:07:f4:d9:3d:33:88:23:5c:74:62:2a:f2:0d:
                    a6:49:7d:68:58:d5:78:96:1e:14:8e:57:95:db:3e:
                    0f:cb:3f:87:89:ec:a7:54:98:d9:fb:0d:8d:2f:8e:
                    f2:7a:4c:ea:53:e7:ad:4b:41:5a:2c:92:e8:eb:62:
                    cb:3d:95:24:16:70:49:ae:2b:2f:f2:30:48:c4:e4:
                    00:4e:21:27:c3:7f:09:a8:30:05:70:a6:45:2f:2f:
                    49:c1:e3:18:7a:f0:64:88:2b:98:ea:04:b0:5c:01:
                    5c:5c:2f:55:66:7a:d0:13:7e:8b:a4:0a:0a:a0:4c:
                    72:ea:82:ec:d0:e9:1e:a4:57:c2:da:33:98:3f:30:
                    7b:b0:08:be:46:20:a3:69:8a:51:a7:96:fb:3b:fa:
                    51:09:7b:f9:23:33:73:57:10:06:20:1c:63:e4:d5:
                    cf:b6:6e:a3:69:65:a9:ca:d4:64:c6:27:95:ef:3f:
                    1f:f6:29:02:0c:f3:28:b3:e8:cc:cb:95:f4:4e:5e:
                    c2:f1:8d:25:98:1f:ca:aa:90:6d:01:e1:8d:a1:dc:
                    0b:86:cb:32:d8:10:72:9a:82:52:64:f1:35:be:67:
                    57:69:fd:a2:ec:8c:ca:a6:87:bb:dc:b6:2a:2c:b7:
                    66:80:18:68:5e:c3:20:9e:b9:56:ca:7c:8a:42:63:
                    77:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:99:16:CA:65:E0:F5:42:B7:29:72:88:A3:C7:FD:F2:27:B1:64:EA
            X509v3 Authority Key Identifier:
                keyid:62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139332e382e3230332e302f32342d3234203d3e20313430393032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.8.203.0/24

    Signature Algorithm: sha256WithRSAEncryption
         83:1d:99:00:b2:3c:54:81:f4:fc:a7:ed:3d:df:e5:88:42:3b:
         65:bc:79:bd:bb:c1:81:2c:29:01:3b:1d:18:c6:50:cf:25:17:
         b7:60:80:12:04:d0:32:f4:06:14:e8:33:9f:8c:19:13:33:54:
         22:88:2e:03:14:b3:92:04:f4:63:ab:d1:09:91:62:e6:3e:a9:
         7a:62:8d:ba:c2:0e:75:a9:04:af:20:6d:8d:d8:dc:fd:1f:f3:
         82:14:1b:93:6c:ee:2b:a4:91:2d:4f:62:0d:c5:20:00:a9:da:
         c3:76:24:57:ed:5b:f0:9b:98:14:90:0d:56:56:ff:94:5b:58:
         e5:a5:aa:70:1c:37:f3:14:5e:1c:e5:16:cd:11:69:9d:64:e4:
         f4:9b:76:c7:3e:25:ad:d7:57:d1:1f:20:e9:cb:86:d7:45:39:
         6d:f2:bc:0a:52:ce:21:9f:7f:21:2d:a5:fc:01:80:7b:cb:16:
         4f:bd:bc:2a:ea:4b:6a:f9:31:2c:14:53:c9:4d:e0:1f:a8:77:
         06:1c:04:24:ae:da:2d:b4:c0:46:dc:3f:fc:98:f6:8f:19:51:
         f7:78:b1:74:9e:01:b8:61:af:a1:4e:c4:6d:d8:8c:f4:e9:ac:
         ea:e6:40:b9:b4:af:c6:a6:05:11:d5:b7:86:40:8b:b9:f9:e1:
         cd:75:63:c6
-----BEGIN CERTIFICATE-----
MIIFsjCCBJqgAwIBAgIUGgxoPU5cCWt7oGgMAQ0HpsfJBe0wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMWYyMmNmMDc1NzFlY2JhYjZkNDYwYTFmM2I2YzVkNjE5
N2QwOTgzNjQzYTU0ZDJlZDQwHhcNMjMxMDI2MDgyMTA4WhcNMjQxMDI0MDgyNjA4
WjAzMTEwLwYDVQQDEyhFMzk5MTZDQTY1RTBGNTQyQjcyOTcyODhBM0M3RkRGMjI3
QjE2NEVBMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAogf02T0ziCNc
dGIq8g2mSX1oWNV4lh4UjleV2z4Pyz+HieynVJjZ+w2NL47yekzqU+etS0FaLJLo
62LLPZUkFnBJrisv8jBIxOQATiEnw38JqDAFcKZFLy9JweMYevBkiCuY6gSwXAFc
XC9VZnrQE36LpAoKoExy6oLs0OkepFfC2jOYPzB7sAi+RiCjaYpRp5b7O/pRCXv5
IzNzVxAGIBxj5NXPtm6jaWWpytRkxieV7z8f9ikCDPMos+jMy5X0Tl7C8Y0lmB/K
qpBtAeGNodwLhssy2BBymoJSZPE1vmdXaf2i7IzKpoe73LYqLLdmgBhoXsMgnrlW
ynyKQmN3JQIDAQABo4ICsjCCAq4wHQYDVR0OBBYEFOOZFspl4PVCtylyiKPH/fIn
sWTqMB8GA1UdIwQYMBaAFGK0t02IaU0zyBBuijO8FJ6zkE/rMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmODE0M2JmNjIwMTgxZWNkMzdkYWM3MmYxLzEv
NjJCNEI3NEQ4ODY5NEQzM0M4MTA2RThBMzNCQzE0OUVCMzkwNEZFQi5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi
MGI4NDE1L2UyMDM4NjlkLTZiOTUtNDY1Zi1iNGRjLTA4OGE1YTIxMDNmYy8xZjIy
Y2YwNzU3MWVjYmFiNmQ0NjBhMWYzYjZjNWQ2MTk3ZDA5ODM2NDNhNTRkMmVkNC5j
ZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjgxNDNiZjYyMDE4MWVj
ZDM3ZGFjNzJmMS8xLzMxMzkzMzJlMzgyZTMyMzAzMzJlMzAyZjMyMzQyZDMyMzQy
MDNkM2UyMDMxMzQzMDM5MzAzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO
AjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMEIyzANBgkqhkiG9w0BAQsF
AAOCAQEAgx2ZALI8VIH0/KftPd/liEI7Zbx5vbvBgSwpATsdGMZQzyUXt2CAEgTQ
MvQGFOgzn4wZEzNUIoguAxSzkgT0Y6vRCZFi5j6pemKNusIOdakEryBtjdjc/R/z
ghQbk2zuK6SRLU9iDcUgAKnaw3YkV+1b8JuYFJANVlb/lFtY5aWqcBw38xReHOUW
zRFpnWTk9Jt2xz4lrddX0R8g6cuG10U5bfK8ClLOIZ9/IS2l/AGAe8sWT728KupL
avkxLBRTyU3gH6h3BhwEJK7aLbTARtw//Jj2jxlR93ixdJ4BuGGvoU7EbdiM9Oms
6uZAubSvxqYFEdW3hkCLufnhzXVjxg==
-----END CERTIFICATE-----
Generated at Sun May 5 15:14:20 2024 by rpki-client on console-fra.rpki-client.org