Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139342e33342e3133392e302f32342d3234203d3e203133323133.roa
File:                     3139342e33342e3133392e302f32342d3234203d3e203133323133.roa (raw, json)
Hash identifier:          cug/j9TvQlS56cVw6ykpQS+rhoIK548A/COudYV+QJo=
Subject key identifier:   FB:28:87:C5:C8:C9:19:14:63:D6:CC:19:90:85:D9:A0:CA:F2:4E:27
Certificate issuer:       /CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4
Certificate serial:       102D0F40392061559BF09DC9227A0A7E9BBB3378
Authority key identifier: 62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139342e33342e3133392e302f32342d3234203d3e203133323133.roa
Signing time:             Fri 24 May 2024 13:50:13 +0000
ROA not before:           Fri 24 May 2024 13:45:13 +0000
ROA not after:            Fri 23 May 2025 13:50:13 +0000
asID:                     13213
IP address blocks:        194.34.139.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/e203869d-6b95-465f-b4dc-088a5a2103fc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/e203869d-6b95-465f-b4dc-088a5a2103fc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 13:28:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:2d:0f:40:39:20:61:55:9b:f0:9d:c9:22:7a:0a:7e:9b:bb:33:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4
        Validity
            Not Before: May 24 13:45:13 2024 GMT
            Not After : May 23 13:50:13 2025 GMT
        Subject: CN=FB2887C5C8C9191463D6CC199085D9A0CAF24E27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:65:35:6f:d5:1c:eb:67:21:dd:63:6f:7a:eb:
                    02:45:ad:96:37:dc:e4:40:e3:c4:90:94:13:7c:7b:
                    f9:da:fd:aa:62:63:6a:62:22:df:1f:0e:63:74:ec:
                    52:0d:60:6e:32:fe:00:30:d7:4e:fc:9b:80:3d:63:
                    ad:a4:f6:55:11:ba:38:f9:50:f6:5b:70:54:74:21:
                    df:3c:5a:d5:f2:88:54:06:cc:3c:55:ef:42:34:e3:
                    c7:c7:ce:2b:98:48:5a:42:cd:9b:0c:08:a6:11:21:
                    72:ff:bb:37:1d:a3:9e:77:57:87:1b:fb:57:aa:06:
                    28:45:4c:23:c0:c7:16:b2:98:d5:d3:cf:b6:06:da:
                    ee:c8:bf:b5:4c:33:cb:ea:5f:fb:31:c6:28:47:a1:
                    80:95:f4:da:0f:d9:1c:c5:cc:c4:fe:f1:20:80:e3:
                    ba:2c:45:c8:e9:ad:7d:1c:68:21:d6:e7:bd:4f:53:
                    c8:17:ba:82:f9:1b:bd:44:02:89:e1:bd:88:5e:72:
                    c5:e7:94:7a:74:c6:74:45:df:99:a8:c4:af:9a:42:
                    e1:65:c1:8c:aa:93:9e:2c:ac:4d:36:76:03:4b:ce:
                    a3:ce:28:f5:bf:07:71:c3:49:8f:92:79:2d:da:7c:
                    9a:1a:d5:6b:e2:e5:7c:56:7a:d6:e8:fe:63:68:e3:
                    c3:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:28:87:C5:C8:C9:19:14:63:D6:CC:19:90:85:D9:A0:CA:F2:4E:27
            X509v3 Authority Key Identifier:
                keyid:62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139342e33342e3133392e302f32342d3234203d3e203133323133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.34.139.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3e:3b:6c:bf:4b:62:92:82:83:fb:1b:94:f3:a7:18:d6:87:30:
         fb:c8:bc:1b:47:71:9b:3a:94:20:a6:2c:55:2e:ff:3e:72:af:
         a8:c9:ce:92:a0:06:00:21:f7:24:80:a5:01:9f:e5:f5:99:65:
         23:c0:4b:40:45:f1:e8:5a:c4:4a:4d:72:ee:54:56:bb:2e:2c:
         f5:4a:46:bf:8b:bb:74:2c:f1:b1:07:e4:65:b3:cd:12:6f:cd:
         7d:f0:81:27:2c:ef:14:93:47:04:6a:29:83:8a:03:9f:4a:6f:
         9c:bb:ca:6e:31:e1:2d:a3:ab:c2:7b:12:a3:89:c7:81:e2:8e:
         92:e0:36:8d:e8:67:a1:54:fe:47:52:d4:4a:8a:5f:06:5b:72:
         8f:61:63:86:99:f3:aa:3c:cd:27:89:5d:96:49:e7:59:ee:1d:
         66:65:63:e1:a3:e3:dd:d1:c8:01:ab:76:87:93:6d:c3:94:9c:
         44:68:e3:05:64:16:56:b2:f5:08:e2:b2:3f:d1:30:6a:5b:0c:
         58:3e:63:8b:8c:23:25:46:f6:84:31:e7:a4:04:69:c7:62:f3:
         d3:d6:b6:a1:20:73:98:47:e8:56:3a:13:c6:c6:c3:70:bb:92:
         ce:ce:fe:e7:4d:05:6b:3e:92:b5:f6:a7:76:f2:c3:c0:c7:f0:
         72:47:49:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 13:18:46 2024 by rpki-client on console-fra.rpki-client.org