Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139332e38342e3131312e302f32342d3234203d3e20313430393032.roa
File:                     3139332e38342e3131312e302f32342d3234203d3e20313430393032.roa (raw, json)
Hash identifier:          jBTOR8sdUyboC5Frl8xf0tBWkLCdtGyphoIi0mJlzYo=
Subject key identifier:   CD:22:A3:78:A8:AF:63:12:D6:6A:0E:48:B7:52:15:F1:C3:92:CA:7E
Certificate issuer:       /CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4
Certificate serial:       486E9D90BFD3155D9E40B3226846FB482C5C9F18
Authority key identifier: 62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139332e38342e3131312e302f32342d3234203d3e20313430393032.roa
Signing time:             Thu 26 Oct 2023 08:26:07 +0000
ROA not before:           Thu 26 Oct 2023 08:21:07 +0000
ROA not after:            Thu 24 Oct 2024 08:26:07 +0000
asID:                     140902
IP address blocks:        193.84.111.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/e203869d-6b95-465f-b4dc-088a5a2103fc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/e203869d-6b95-465f-b4dc-088a5a2103fc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 05 May 2024 20:10:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:6e:9d:90:bf:d3:15:5d:9e:40:b3:22:68:46:fb:48:2c:5c:9f:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4
        Validity
            Not Before: Oct 26 08:21:07 2023 GMT
            Not After : Oct 24 08:26:07 2024 GMT
        Subject: CN=CD22A378A8AF6312D66A0E48B75215F1C392CA7E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:d1:6b:73:80:b3:d7:10:eb:90:b6:73:61:57:
                    99:ab:2b:40:c3:b5:be:7a:97:81:48:87:c9:fe:91:
                    3f:fc:df:cf:ef:eb:56:c7:cc:6c:55:89:a7:9c:85:
                    59:45:97:92:f0:1a:be:7c:36:4a:45:eb:b9:c4:21:
                    d8:ae:8d:a1:2b:fd:17:e3:92:60:17:4c:4a:0c:a5:
                    c3:e1:35:75:6a:24:98:26:c2:d2:8d:8e:bb:b9:23:
                    0f:97:da:2e:8f:96:e5:df:6f:19:db:73:10:e0:df:
                    10:78:87:80:e9:a3:51:04:9a:57:85:8f:eb:c2:03:
                    72:e2:24:26:44:be:b0:9f:d9:17:e2:49:c8:38:45:
                    46:d7:ca:5e:2f:94:85:45:76:4a:7f:8f:c2:3a:ef:
                    39:ef:3a:55:12:5c:d9:d0:00:0e:fe:5b:95:ab:37:
                    6a:b2:b8:95:05:86:20:23:b1:d9:2f:e8:de:9a:9c:
                    64:67:64:c1:73:0a:87:ac:bc:85:8a:a8:90:58:b4:
                    7c:02:b2:ce:7f:9f:26:51:90:ad:c1:66:13:08:81:
                    20:bf:6e:4b:2d:48:ed:c9:ec:0b:c3:fa:b9:1f:dd:
                    0a:ab:2d:80:36:2e:74:95:26:50:0c:fc:84:b2:ac:
                    eb:55:e8:54:83:77:40:fb:b2:ae:a7:d3:29:14:99:
                    14:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:22:A3:78:A8:AF:63:12:D6:6A:0E:48:B7:52:15:F1:C3:92:CA:7E
            X509v3 Authority Key Identifier:
                keyid:62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139332e38342e3131312e302f32342d3234203d3e20313430393032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.84.111.0/24

    Signature Algorithm: sha256WithRSAEncryption
         22:10:c3:25:1f:ae:73:b0:6d:49:5e:aa:56:99:b3:37:84:9b:
         0e:fd:35:9c:9d:2d:9f:a9:d0:87:0e:9a:d7:08:d9:72:3d:56:
         8e:fe:8c:3c:54:fb:1a:02:79:7d:6b:62:b1:53:f5:16:9e:18:
         02:18:86:d9:81:35:ff:bd:68:32:7f:0a:c3:9e:39:6a:94:ed:
         5c:5d:30:db:2e:ad:92:8f:3a:4e:79:64:6f:e1:e9:d9:60:bd:
         4f:09:7a:59:ab:6b:01:f3:ac:b0:15:75:08:ca:60:6c:89:3a:
         65:6d:1e:a4:31:74:e9:e2:33:54:3c:0c:60:eb:72:b9:31:6d:
         32:78:da:39:d5:f0:8f:cc:03:ee:c5:e9:1c:81:0e:da:05:a0:
         e8:bb:03:30:33:59:ed:a6:fc:c0:72:90:79:ee:e6:7f:d9:07:
         e0:9b:ca:9e:b4:e0:48:b0:d1:3b:e8:2b:c1:43:c1:5b:a0:d4:
         26:8c:a1:b4:43:ad:bb:69:ae:e4:aa:a7:8e:c9:ea:16:e9:63:
         9f:9d:86:9c:84:cc:8f:53:45:ca:3b:ba:33:4d:d2:12:e3:8b:
         67:86:09:a7:7b:cb:fd:5d:30:64:30:d8:4a:0c:eb:56:d5:37:
         67:4a:85:a0:fc:1c:b9:81:ef:6a:9b:5a:5c:d0:8d:40:3e:b2:
         c7:18:49:2b
-----BEGIN CERTIFICATE-----
MIIFtDCCBJygAwIBAgIUSG6dkL/TFV2eQLMiaEb7SCxcnxgwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMWYyMmNmMDc1NzFlY2JhYjZkNDYwYTFmM2I2YzVkNjE5
N2QwOTgzNjQzYTU0ZDJlZDQwHhcNMjMxMDI2MDgyMTA3WhcNMjQxMDI0MDgyNjA3
WjAzMTEwLwYDVQQDEyhDRDIyQTM3OEE4QUY2MzEyRDY2QTBFNDhCNzUyMTVGMUMz
OTJDQTdFMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtdFrc4Cz1xDr
kLZzYVeZqytAw7W+epeBSIfJ/pE//N/P7+tWx8xsVYmnnIVZRZeS8Bq+fDZKReu5
xCHYro2hK/0X45JgF0xKDKXD4TV1aiSYJsLSjY67uSMPl9ouj5bl328Z23MQ4N8Q
eIeA6aNRBJpXhY/rwgNy4iQmRL6wn9kX4knIOEVG18peL5SFRXZKf4/COu857zpV
ElzZ0AAO/luVqzdqsriVBYYgI7HZL+jempxkZ2TBcwqHrLyFiqiQWLR8ArLOf58m
UZCtwWYTCIEgv25LLUjtyewLw/q5H90Kqy2ANi50lSZQDPyEsqzrVehUg3dA+7Ku
p9MpFJkU9wIDAQABo4ICtDCCArAwHQYDVR0OBBYEFM0io3ior2MS1moOSLdSFfHD
ksp+MB8GA1UdIwQYMBaAFGK0t02IaU0zyBBuijO8FJ6zkE/rMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmODE0M2JmNjIwMTgxZWNkMzdkYWM3MmYxLzEv
NjJCNEI3NEQ4ODY5NEQzM0M4MTA2RThBMzNCQzE0OUVCMzkwNEZFQi5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi
MGI4NDE1L2UyMDM4NjlkLTZiOTUtNDY1Zi1iNGRjLTA4OGE1YTIxMDNmYy8xZjIy
Y2YwNzU3MWVjYmFiNmQ0NjBhMWYzYjZjNWQ2MTk3ZDA5ODM2NDNhNTRkMmVkNC5j
ZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjgxNDNiZjYyMDE4MWVj
ZDM3ZGFjNzJmMS8xLzMxMzkzMzJlMzgzNDJlMzEzMTMxMmUzMDJmMzIzNDJkMzIz
NDIwM2QzZTIwMzEzNDMwMzkzMDMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwVRvMA0GCSqGSIb3DQEB
CwUAA4IBAQAiEMMlH65zsG1JXqpWmbM3hJsO/TWcnS2fqdCHDprXCNlyPVaO/ow8
VPsaAnl9a2KxU/UWnhgCGIbZgTX/vWgyfwrDnjlqlO1cXTDbLq2SjzpOeWRv4enZ
YL1PCXpZq2sB86ywFXUIymBsiTplbR6kMXTp4jNUPAxg63K5MW0yeNo51fCPzAPu
xekcgQ7aBaDouwMwM1ntpvzAcpB57uZ/2Qfgm8qetOBIsNE76CvBQ8FboNQmjKG0
Q627aa7kqqeOyeoW6WOfnYachMyPU0XKO7ozTdIS44tnhgmne8v9XTBkMNhKDOtW
1TdnSoWg/By5ge9qm1pc0I1APrLHGEkr
-----END CERTIFICATE-----
Generated at Sat May 4 19:57:56 2024 by rpki-client on console-ams.rpki-client.org