Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139332e382e3230332e302f32342d3234203d3e20313430393032.roa
File:                     3139332e382e3230332e302f32342d3234203d3e20313430393032.roa (raw, json)
Hash identifier:          t8mOieXPHBoKBns7IKsqGz+TG3JxT/wSOLSljL4YtRQ=
Subject key identifier:   49:A2:44:3E:F8:2D:97:9B:08:92:51:DF:DA:69:88:00:77:B9:13:7B
Certificate issuer:       /CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4
Certificate serial:       2C156B0FBD031B49ABEF0A06046A7C3579A0CCA1
Authority key identifier: 62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139332e382e3230332e302f32342d3234203d3e20313430393032.roa
Signing time:             Thu 26 Sep 2024 08:48:59 +0000
ROA not before:           Thu 26 Sep 2024 08:43:59 +0000
ROA not after:            Thu 25 Sep 2025 08:48:59 +0000
asID:                     140902
IP address blocks:        193.8.203.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/e203869d-6b95-465f-b4dc-088a5a2103fc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/e203869d-6b95-465f-b4dc-088a5a2103fc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:28:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:15:6b:0f:bd:03:1b:49:ab:ef:0a:06:04:6a:7c:35:79:a0:cc:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4
        Validity
            Not Before: Sep 26 08:43:59 2024 GMT
            Not After : Sep 25 08:48:59 2025 GMT
        Subject: CN=49A2443EF82D979B089251DFDA69880077B9137B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:77:5b:f8:b8:2e:cb:6b:5e:49:b8:99:7d:8d:
                    5d:25:51:9e:14:f6:c9:7e:aa:90:a0:b8:77:dc:f7:
                    10:4f:f7:ea:03:d7:fe:05:3f:f0:33:ef:c6:b8:32:
                    14:cf:aa:ff:fd:c1:8f:00:c1:bb:05:b9:d5:c9:f9:
                    4e:f8:86:6c:51:40:0f:c8:8b:58:b5:4d:ac:20:42:
                    dc:00:27:d8:2c:4d:83:5b:49:c5:97:dc:5e:ec:08:
                    71:f1:61:12:32:d3:11:47:05:cd:d1:58:83:a0:69:
                    24:5c:0f:d0:28:52:10:9f:af:30:26:b0:14:c8:11:
                    61:b0:f6:13:ae:8e:b7:6f:82:cd:a5:1c:c3:30:d2:
                    31:cf:05:c4:bc:a7:da:5f:a8:0c:bb:7d:d7:be:be:
                    de:87:a9:9f:dd:de:87:fa:da:37:26:13:c6:14:c3:
                    84:f8:8c:e0:33:8c:31:2c:35:45:4b:55:44:d6:f4:
                    b9:b8:c7:be:e6:a2:c4:c6:f7:e5:3f:e8:e5:b5:e7:
                    9b:93:58:e1:68:11:a1:99:ed:ce:6f:b9:9f:08:98:
                    6d:f8:36:02:95:8d:e1:da:4e:35:74:ee:09:53:25:
                    c3:7f:cd:64:c5:9d:9e:c6:29:6c:a1:24:4b:72:6f:
                    d7:dd:ec:70:3c:e0:1b:00:3b:49:e9:41:35:93:cc:
                    21:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:A2:44:3E:F8:2D:97:9B:08:92:51:DF:DA:69:88:00:77:B9:13:7B
            X509v3 Authority Key Identifier:
                keyid:62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139332e382e3230332e302f32342d3234203d3e20313430393032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.8.203.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7d:31:6a:4d:72:e2:7b:0e:a4:f9:dd:86:40:74:6b:7d:4f:3f:
         60:bb:03:82:7e:8b:ab:0a:a0:06:52:cf:ee:70:dd:e5:9f:0c:
         01:d9:cb:90:a5:2e:86:03:a8:fb:51:57:67:f9:d4:dc:cb:84:
         17:4f:55:c9:ba:b4:ba:fb:4a:20:f2:d5:7c:29:9f:69:a7:c5:
         84:d1:11:14:6e:4b:50:44:0d:f8:48:f2:fb:06:90:57:48:89:
         7b:5c:16:d2:aa:04:81:3d:cd:e2:e1:37:18:9d:52:c3:2d:71:
         f5:0c:24:05:3e:af:5e:c4:28:b1:52:44:c1:57:d9:bf:20:c6:
         fc:b7:bb:82:e8:1f:ff:20:83:4e:83:af:56:08:18:4e:b9:b1:
         32:94:4e:7d:b5:2d:a3:40:ce:a3:d4:29:85:9f:d0:d0:9a:ca:
         44:b4:28:bd:c4:e4:09:b6:ae:f1:21:be:96:1a:bc:6e:ce:8b:
         c7:9c:2a:54:12:81:21:09:ca:37:36:38:23:a6:4c:63:3b:82:
         aa:51:b6:19:6d:dd:57:84:f7:a6:09:19:41:5e:72:c6:36:f9:
         69:10:00:21:9a:33:5a:97:2f:d3:89:dc:72:5b:ee:39:98:70:
         0c:8e:3b:f7:24:58:4d:45:43:55:e8:74:63:55:bb:bb:87:fb:
         42:e3:42:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 06:57:49 2024 by rpki-client on console-fra.rpki-client.org