Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139332e38342e3131312e302f32342d3234203d3e20323134343131.roa
File:                     3139332e38342e3131312e302f32342d3234203d3e20323134343131.roa (raw, json)
Hash identifier:          WihfBhCiKyDstqTiggNITWypD5t/fdjyW/njXCYyh3M=
Subject key identifier:   21:79:98:0F:C4:6D:82:7C:21:79:A0:F5:3E:5C:D4:05:B9:E8:D3:CC
Certificate issuer:       /CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4
Certificate serial:       0AFD1FD9613FFE52B911DC981B8AF42DF6DFF371
Authority key identifier: 62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139332e38342e3131312e302f32342d3234203d3e20323134343131.roa
Signing time:             Sat 30 Nov 2024 08:02:41 +0000
ROA not before:           Sat 30 Nov 2024 07:57:41 +0000
ROA not after:            Sat 29 Nov 2025 08:02:41 +0000
asID:                     214411
IP address blocks:        193.84.111.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/e203869d-6b95-465f-b4dc-088a5a2103fc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/e203869d-6b95-465f-b4dc-088a5a2103fc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Apr 2025 12:43:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:fd:1f:d9:61:3f:fe:52:b9:11:dc:98:1b:8a:f4:2d:f6:df:f3:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4
        Validity
            Not Before: Nov 30 07:57:41 2024 GMT
            Not After : Nov 29 08:02:41 2025 GMT
        Subject: CN=2179980FC46D827C2179A0F53E5CD405B9E8D3CC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:6d:b8:a1:84:a9:80:53:d4:ab:8e:29:3a:62:
                    1c:a8:5c:62:06:0e:63:30:fc:ae:48:48:4a:84:8d:
                    3a:c0:5e:3a:43:bc:ad:8b:e8:76:95:80:c5:9a:b2:
                    ba:43:80:f5:c6:16:6d:c8:83:d8:d1:a0:7d:3e:30:
                    df:39:39:f0:c2:4f:bc:f2:dc:bd:2f:32:f0:e7:58:
                    eb:1f:14:f3:5c:b3:e6:45:fd:92:db:c4:6d:ff:96:
                    da:10:4a:11:58:17:fc:95:b4:4d:ad:78:e2:39:a5:
                    2a:97:bc:a3:9a:31:5c:e9:e8:16:4b:af:ff:35:bd:
                    99:70:ff:b2:36:77:67:6a:d4:0f:47:af:a8:63:11:
                    20:a5:4b:2a:c8:18:73:43:2d:08:31:8b:b2:78:ae:
                    25:0e:0d:6e:bf:82:e2:e5:d3:31:4c:62:ab:10:89:
                    9c:bf:66:70:8d:c7:f1:74:4f:40:04:83:2b:be:39:
                    6e:79:ea:8b:95:4e:57:c3:70:75:ca:dd:3e:e0:63:
                    e9:ca:48:5d:0b:20:e5:62:c2:19:14:25:e7:7b:df:
                    e8:31:60:3a:b6:69:55:cb:bb:ea:e7:b5:b6:ba:92:
                    22:00:0c:be:0a:f8:ee:b1:cc:7e:1e:36:9f:b1:47:
                    e2:e3:e3:80:d9:9d:41:6c:a1:aa:03:9d:e3:14:da:
                    ce:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:79:98:0F:C4:6D:82:7C:21:79:A0:F5:3E:5C:D4:05:B9:E8:D3:CC
            X509v3 Authority Key Identifier:
                keyid:62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139332e38342e3131312e302f32342d3234203d3e20323134343131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.84.111.0/24

    Signature Algorithm: sha256WithRSAEncryption
         52:fa:45:84:19:87:df:b7:c9:dd:fc:7e:76:35:bb:ba:73:98:
         b8:3a:4c:d2:56:9b:44:c4:a1:54:12:14:ca:23:49:50:0d:b7:
         ba:59:69:42:7f:dc:d2:6f:ca:49:17:77:32:19:8d:d2:6c:63:
         77:74:df:80:11:56:c1:bc:48:b8:13:28:29:88:e8:fc:f3:f4:
         cb:fc:bf:a9:d9:18:47:cb:59:b2:55:6c:d4:b1:fe:da:3b:cd:
         3d:43:2b:58:df:29:72:fa:1a:3f:ce:36:ce:ee:c7:f2:eb:90:
         b5:8a:5d:13:d1:d7:1b:cd:32:ab:0e:5b:91:0a:58:2c:af:04:
         0c:dc:2d:8e:66:a9:d9:f7:3f:76:b5:1a:4c:26:00:f0:c0:52:
         57:82:ef:1e:a3:38:0c:01:00:16:3d:b3:38:0c:82:84:c3:7b:
         ce:a2:99:8b:3c:cc:4d:6e:60:cb:96:20:7a:a7:db:0a:71:4e:
         f5:c2:e2:cb:59:37:01:4a:cc:1a:b1:98:c1:3f:07:12:35:fe:
         ea:bb:1c:22:3b:bf:14:e6:87:fd:4b:b1:ba:42:dd:63:24:44:
         ec:da:b7:e3:ea:ff:a3:ed:73:78:b2:5a:0e:fb:87:d5:69:89:
         25:5f:eb:9d:43:05:03:80:d7:60:27:93:43:e1:1d:61:ad:4c:
         3d:f7:21:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 15:34:11 2025 by rpki-client