Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139332e38342e3131312e302f32342d3234203d3e20313430393032.roa
File:                     3139332e38342e3131312e302f32342d3234203d3e20313430393032.roa (raw, json)
Hash identifier:          AMYnilEMA9wlHFe/MDmrmB11ck4Fy5Q2G40ngkrpg0U=
Subject key identifier:   D8:5C:43:3B:4D:A2:C4:48:BA:2F:16:B1:4B:1C:75:16:E0:1B:47:A7
Certificate issuer:       /CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4
Certificate serial:       44A477DC95479AA69B740595CDF552A2BD5F06B1
Authority key identifier: 62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139332e38342e3131312e302f32342d3234203d3e20313430393032.roa
Signing time:             Thu 26 Sep 2024 08:48:59 +0000
ROA not before:           Thu 26 Sep 2024 08:43:59 +0000
ROA not after:            Thu 25 Sep 2025 08:48:59 +0000
asID:                     140902
IP address blocks:        193.84.111.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/e203869d-6b95-465f-b4dc-088a5a2103fc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/e203869d-6b95-465f-b4dc-088a5a2103fc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:28:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:a4:77:dc:95:47:9a:a6:9b:74:05:95:cd:f5:52:a2:bd:5f:06:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4
        Validity
            Not Before: Sep 26 08:43:59 2024 GMT
            Not After : Sep 25 08:48:59 2025 GMT
        Subject: CN=D85C433B4DA2C448BA2F16B14B1C7516E01B47A7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:5c:63:da:1d:ce:2b:86:cc:d5:91:50:9c:7c:
                    47:2d:c7:b9:1e:9c:16:c3:ee:e2:dd:36:73:46:24:
                    06:95:d7:78:44:74:97:10:e4:80:b3:87:e8:8a:de:
                    2f:ac:29:15:db:1a:ca:21:3e:3c:8e:48:b5:23:e2:
                    9d:2d:c8:8c:56:8b:7e:66:86:0b:be:d6:80:f8:c5:
                    73:7f:77:0e:35:14:70:66:bc:ca:39:ba:86:72:6a:
                    6a:06:2a:a9:5c:41:a0:58:00:ca:55:15:e9:2f:4e:
                    3a:5e:8f:7b:c7:bb:a2:8b:3a:54:13:9a:85:2a:6a:
                    d8:73:ac:4c:47:47:72:05:64:ec:32:c5:6d:ac:a0:
                    22:22:74:35:56:17:00:10:d5:9e:30:9d:e8:13:56:
                    68:35:6b:0c:3f:71:01:2d:14:02:11:19:61:14:5e:
                    f4:7f:f1:df:45:c8:f3:3f:10:cd:2b:f2:c1:08:b7:
                    09:ca:3c:30:19:f4:06:8b:f5:fc:26:7e:c6:aa:e8:
                    fd:15:ae:b5:6a:c3:d6:f5:3a:92:0a:81:4a:a8:96:
                    4b:c5:fc:3f:15:82:f2:48:30:4f:9d:85:eb:ac:92:
                    28:4a:4c:95:05:77:b6:98:28:90:23:8c:c8:ba:94:
                    26:e5:02:7c:62:1d:3a:6a:8d:3c:6a:77:e7:0a:cf:
                    e5:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:5C:43:3B:4D:A2:C4:48:BA:2F:16:B1:4B:1C:75:16:E0:1B:47:A7
            X509v3 Authority Key Identifier:
                keyid:62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139332e38342e3131312e302f32342d3234203d3e20313430393032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.84.111.0/24

    Signature Algorithm: sha256WithRSAEncryption
         84:ca:51:6f:d6:04:12:5c:ac:72:a3:f7:b9:60:9e:1b:51:69:
         73:22:37:ed:07:35:f6:40:6a:0a:c9:46:56:49:d3:68:52:92:
         c7:a3:c7:15:cd:8d:da:f3:dc:89:0c:04:26:61:c0:23:8c:c6:
         38:9d:69:d0:f1:bc:15:51:87:98:e5:01:6e:30:ba:87:eb:fb:
         4d:a0:b6:fe:90:f0:a0:a0:26:15:66:d3:b2:e9:15:c9:9a:b0:
         a1:7c:81:58:3f:2b:66:65:98:78:23:61:ac:0d:65:a1:69:f7:
         00:ee:07:13:30:28:fe:ef:6e:b5:a2:86:8f:4c:ed:e3:dc:81:
         78:a6:10:d8:a5:85:f4:de:27:35:8b:29:ae:c1:68:a3:6a:9a:
         3d:e7:75:03:b7:7f:a3:f2:73:bc:ad:b5:86:3c:b4:85:7c:83:
         23:06:1c:88:a5:4d:47:a3:b4:1b:41:e5:d0:05:50:18:1a:2f:
         f3:7d:26:1e:39:55:ee:c4:e7:ec:58:ec:c8:b7:85:6f:3e:3e:
         0a:d1:a3:9f:63:26:a5:77:02:e8:5d:77:6a:c4:23:7f:e5:d4:
         83:39:c5:bb:81:56:2e:49:51:ac:9c:19:c3:eb:19:37:45:53:
         9b:5f:6d:46:96:61:8b:8c:a5:f4:20:6d:05:e7:89:bc:eb:5e:
         4e:8d:1e:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 06:57:49 2024 by rpki-client on console-fra.rpki-client.org