Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139342e33332e3134392e302f32342d3234203d3e203133323133.roa
File:                     3139342e33332e3134392e302f32342d3234203d3e203133323133.roa (raw, json)
Hash identifier:          BQONQV0fFsPS993X0zhQ2CHza5xNfJNMrERReb/q6DM=
Subject key identifier:   EC:36:F9:B0:5E:8F:BA:B1:3F:3E:B4:93:B5:54:D7:B0:99:AC:9B:74
Certificate issuer:       /CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4
Certificate serial:       01C9D479DE1AF1E85A92B185094617BADEA7F3E2
Authority key identifier: 62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139342e33332e3134392e302f32342d3234203d3e203133323133.roa
Signing time:             Fri 24 May 2024 13:50:11 +0000
ROA not before:           Fri 24 May 2024 13:45:11 +0000
ROA not after:            Fri 23 May 2025 13:50:11 +0000
asID:                     13213
IP address blocks:        194.33.149.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/e203869d-6b95-465f-b4dc-088a5a2103fc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/e203869d-6b95-465f-b4dc-088a5a2103fc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 13:28:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:c9:d4:79:de:1a:f1:e8:5a:92:b1:85:09:46:17:ba:de:a7:f3:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4
        Validity
            Not Before: May 24 13:45:11 2024 GMT
            Not After : May 23 13:50:11 2025 GMT
        Subject: CN=EC36F9B05E8FBAB13F3EB493B554D7B099AC9B74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:9e:a4:63:6c:3a:2c:56:07:3a:f4:f7:6d:73:
                    21:29:9b:0e:f1:51:a2:37:a6:3b:13:2c:db:1c:cf:
                    c2:af:c5:73:87:44:42:8a:4a:4b:ed:8a:6b:93:1f:
                    13:e5:66:21:9f:e0:06:a9:db:52:79:b4:f3:28:8e:
                    4f:29:f8:2e:6b:0d:ae:3d:b0:d0:21:ac:df:6c:ab:
                    df:1d:ec:c1:02:e7:51:5e:3f:e1:46:0c:44:6c:bc:
                    d9:5c:09:7f:43:c6:40:ec:24:e4:6c:c2:52:84:61:
                    2e:24:fa:47:3c:04:a9:b5:b5:89:8f:01:cc:3a:a1:
                    25:0d:8d:e8:0c:e0:a2:ae:6f:4d:94:bb:3b:ef:92:
                    3c:80:b1:77:f1:fb:b0:93:41:82:10:14:0b:c8:e9:
                    1e:24:23:1f:ad:74:bd:39:ca:b5:19:b5:e6:48:ef:
                    42:36:bb:79:4c:54:84:b4:b1:5c:4f:c0:fe:58:4e:
                    cf:d2:cc:02:9f:55:1d:1b:16:02:4b:b1:6a:c7:43:
                    f0:60:15:86:10:3a:8b:68:81:15:19:6c:12:f7:67:
                    b5:9d:63:79:1b:52:9e:62:21:9e:82:9d:e3:c1:9f:
                    e8:10:c8:89:41:d4:ce:f2:f7:16:fe:75:5d:69:30:
                    20:ab:fd:2b:a9:4e:2e:db:8c:33:03:be:71:0d:72:
                    3d:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:36:F9:B0:5E:8F:BA:B1:3F:3E:B4:93:B5:54:D7:B0:99:AC:9B:74
            X509v3 Authority Key Identifier:
                keyid:62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139342e33332e3134392e302f32342d3234203d3e203133323133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.33.149.0/24

    Signature Algorithm: sha256WithRSAEncryption
         16:15:2c:6c:88:0e:19:66:99:03:dc:05:72:62:3e:04:27:af:
         f2:74:81:ac:09:0b:b1:82:cb:3e:5f:a2:fa:33:9f:91:36:2e:
         2a:62:6d:fd:c1:f3:e6:dd:b5:3c:44:30:ee:0e:e8:ad:8c:2b:
         74:0b:96:1b:1b:c0:cb:10:99:01:8c:f8:1a:c5:46:c1:c2:ce:
         a7:83:59:6b:f2:6c:60:32:f6:11:f3:91:2c:f2:b7:69:51:e5:
         bf:44:c0:17:22:a3:76:38:8f:60:58:ac:71:16:9a:87:e4:e7:
         cf:32:7d:4f:40:1b:0d:70:3b:e7:e9:38:2b:5b:64:c7:67:29:
         85:41:68:b7:08:7a:3a:47:a7:51:6d:7b:78:bf:44:cc:4f:03:
         13:4b:77:79:fb:02:26:5b:6e:42:50:c4:2d:c0:c8:b8:f7:9b:
         92:de:51:a5:8f:73:62:ab:86:21:53:28:3a:fb:7b:cb:92:46:
         a6:a2:82:15:c4:79:ed:69:2d:88:cf:e5:27:9c:65:3a:bc:80:
         d0:4b:f1:83:bf:fa:05:89:40:b1:ef:e7:b9:4f:2c:f4:04:76:
         60:0f:b6:37:11:86:89:04:00:11:97:47:d6:50:90:af:3e:26:
         59:f8:16:54:6b:ee:23:ac:26:85:80:05:65:86:65:08:31:1d:
         70:9c:02:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 13:39:41 2024 by rpki-client on console-ams.rpki-client.org