Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139352e37382e35342e302f32342d3234203d3e20313734.roa
File:                     3139352e37382e35342e302f32342d3234203d3e20313734.roa (raw, json)
Hash identifier:          BrUrADJqDDBOMROkx7sgCFxh6KTipva6LVcDU5qfbGA=
Subject key identifier:   D8:F7:5C:20:B5:9F:94:FF:89:D7:85:A9:C9:53:5F:BA:B0:55:8C:19
Certificate issuer:       /CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4
Certificate serial:       1CA64FBBA397605D27956883CA467D982A7E535B
Authority key identifier: 62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139352e37382e35342e302f32342d3234203d3e20313734.roa
Signing time:             Mon 30 Sep 2024 12:49:00 +0000
ROA not before:           Mon 30 Sep 2024 12:44:00 +0000
ROA not after:            Mon 29 Sep 2025 12:49:00 +0000
asID:                     174
IP address blocks:        195.78.54.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/e203869d-6b95-465f-b4dc-088a5a2103fc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/e203869d-6b95-465f-b4dc-088a5a2103fc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 13:28:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:a6:4f:bb:a3:97:60:5d:27:95:68:83:ca:46:7d:98:2a:7e:53:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4
        Validity
            Not Before: Sep 30 12:44:00 2024 GMT
            Not After : Sep 29 12:49:00 2025 GMT
        Subject: CN=D8F75C20B59F94FF89D785A9C9535FBAB0558C19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:e5:2b:92:1b:5f:6b:3f:2f:40:23:fe:e4:60:
                    92:1f:83:cd:8b:e1:e5:d6:36:60:b8:ee:2e:5c:58:
                    0c:cf:9d:6a:db:2d:0e:f2:2d:9f:e0:60:e5:a6:56:
                    52:1a:f5:8b:24:3f:28:98:bc:58:20:63:97:6a:0e:
                    44:c4:70:f5:46:78:8f:9f:6b:8d:7d:b7:c1:38:9c:
                    f9:d5:be:5b:63:d7:2a:34:8d:66:ec:73:f4:24:db:
                    ea:ae:ac:2c:61:a7:d1:56:26:8e:6d:38:6b:ad:d9:
                    dc:9b:7e:cd:ca:af:27:02:8f:be:de:68:4e:44:35:
                    b5:42:21:69:2d:d0:cb:b7:59:28:98:eb:dc:79:78:
                    dd:93:2d:40:bf:88:52:e8:30:d8:cb:c6:74:77:60:
                    63:1d:20:3f:f1:b6:64:25:bf:f4:07:a1:ff:19:03:
                    bd:b2:e9:c6:f9:51:41:e2:64:0a:ab:8e:96:33:27:
                    05:1b:44:f0:7d:27:b0:2a:93:fe:14:f5:ea:5b:ec:
                    b6:c9:6a:15:9c:7d:10:45:7c:81:fc:a2:73:ff:40:
                    8f:4d:12:dd:1d:4e:5c:69:d8:6a:8c:ad:1e:ea:48:
                    a3:50:24:15:2d:29:da:29:14:1c:a2:fb:ed:ce:ee:
                    d7:c8:27:34:0a:3c:3c:91:c1:6c:ad:40:ba:f5:b8:
                    76:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:F7:5C:20:B5:9F:94:FF:89:D7:85:A9:C9:53:5F:BA:B0:55:8C:19
            X509v3 Authority Key Identifier:
                keyid:62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139352e37382e35342e302f32342d3234203d3e20313734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.78.54.0/24

    Signature Algorithm: sha256WithRSAEncryption
         57:7e:a3:82:17:35:dc:57:fd:3e:22:1b:57:7d:c8:97:bb:ea:
         a8:ff:d3:a9:fd:a2:bf:f4:24:dc:68:a7:c7:03:fc:b8:eb:92:
         20:7a:f4:5f:df:50:65:89:74:61:c7:5d:a5:75:27:3f:25:4e:
         23:38:c5:b7:f9:64:6f:73:31:4c:f0:d4:12:ed:e1:37:5b:83:
         cd:95:4d:30:eb:44:97:8f:a3:da:e7:bd:d8:d1:ee:ec:17:1c:
         8a:48:bf:69:97:91:2f:14:05:8b:9f:ae:ac:f9:90:05:16:e4:
         ac:64:4e:0e:8a:e1:d2:3b:e3:5a:e9:0e:35:be:82:ad:fb:41:
         f1:f6:68:43:8f:0d:33:4f:19:4e:83:ae:28:be:65:44:22:3d:
         2b:ff:cf:a5:1e:c3:83:5a:5e:67:96:8d:2e:17:f9:df:33:c9:
         43:b4:0d:6d:29:d6:a0:36:83:c9:3d:7f:5a:42:3b:7c:6d:78:
         ec:34:34:92:49:b4:2e:66:f8:db:1e:8a:58:c3:f0:2e:4a:bf:
         e8:8c:fc:19:d2:fa:26:65:e9:0b:51:2e:af:11:ba:ac:3d:a6:
         e3:27:5d:67:96:5f:d7:98:c4:e1:29:fc:1d:02:0a:e3:95:70:
         ef:ed:07:a5:b2:23:76:31:06:e2:be:3b:3d:b3:a3:a8:01:dc:
         e2:26:dd:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 13:18:46 2024 by rpki-client on console-fra.rpki-client.org