Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139352e37382e35352e302f32342d3234203d3e20343031343934.roa
File:                     3139352e37382e35352e302f32342d3234203d3e20343031343934.roa (raw, json)
Hash identifier:          h6Femkq8JCkjIwcGzpCFislM6032OQhPDolpIT6N3oc=
Subject key identifier:   13:92:3D:80:FF:61:81:65:FD:8B:9C:B6:C2:39:8B:EB:87:9A:6A:1C
Certificate issuer:       /CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4
Certificate serial:       3DEC1F43AA960441F4C10605A9A1EACB53C3D52B
Authority key identifier: 62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139352e37382e35352e302f32342d3234203d3e20343031343934.roa
Signing time:             Sat 14 Dec 2024 14:13:09 +0000
ROA not before:           Sat 14 Dec 2024 14:08:09 +0000
ROA not after:            Sat 13 Dec 2025 14:13:09 +0000
asID:                     401494
IP address blocks:        195.78.55.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/e203869d-6b95-465f-b4dc-088a5a2103fc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/e203869d-6b95-465f-b4dc-088a5a2103fc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Feb 2025 10:10:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:ec:1f:43:aa:96:04:41:f4:c1:06:05:a9:a1:ea:cb:53:c3:d5:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4
        Validity
            Not Before: Dec 14 14:08:09 2024 GMT
            Not After : Dec 13 14:13:09 2025 GMT
        Subject: CN=13923D80FF618165FD8B9CB6C2398BEB879A6A1C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:88:a5:07:2b:2b:df:86:60:49:da:88:7d:37:
                    bd:e8:7c:1d:a9:d1:1c:57:d1:e5:f3:03:04:d2:d7:
                    82:b2:54:af:5b:98:21:a1:73:1c:96:02:f7:87:a5:
                    d3:cf:72:0d:25:38:f2:95:fd:64:38:6d:ac:96:46:
                    84:90:39:94:4b:67:5b:b1:13:de:57:cc:a4:ea:19:
                    a4:a9:7d:25:40:97:48:51:47:81:04:da:80:e8:46:
                    57:d8:31:bd:0a:9c:9c:c5:a7:3c:71:6f:00:11:26:
                    0e:68:67:39:a8:6d:ba:73:5a:50:08:07:47:9a:6f:
                    69:33:50:0a:25:17:45:6d:e9:57:b9:58:59:e0:44:
                    d0:48:0b:31:1e:c6:cd:97:84:2f:73:92:1e:f6:7b:
                    df:04:5e:cf:cd:6d:cf:d4:a9:39:4d:d6:09:77:45:
                    2e:01:24:1a:2f:b1:db:20:42:80:1a:c1:23:89:f4:
                    38:c7:96:36:23:ff:a4:14:34:9a:53:09:06:93:3d:
                    c1:6a:0e:b0:67:1c:18:29:46:5c:9f:98:cd:b3:99:
                    90:d6:69:d6:bc:2f:3f:11:3e:60:49:7c:ca:4e:17:
                    13:c9:b8:a1:14:0e:68:12:7a:60:5a:07:b0:2a:3a:
                    60:f5:25:26:7c:2d:24:4a:46:13:26:ab:6d:57:1a:
                    1e:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:92:3D:80:FF:61:81:65:FD:8B:9C:B6:C2:39:8B:EB:87:9A:6A:1C
            X509v3 Authority Key Identifier:
                keyid:62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139352e37382e35352e302f32342d3234203d3e20343031343934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.78.55.0/24

    Signature Algorithm: sha256WithRSAEncryption
         29:fe:12:84:fb:9a:72:10:5f:ba:60:33:76:75:db:0f:08:ad:
         01:5c:9c:95:e9:f3:87:82:40:35:8b:71:a7:0f:8a:7b:af:04:
         d7:b8:e0:b9:95:b9:9d:f8:9d:1e:92:56:71:ce:ec:c9:77:14:
         73:3f:63:87:f3:02:a7:3e:9f:46:83:cb:e0:26:7d:18:db:5f:
         2b:c7:2f:39:66:da:b9:eb:88:10:17:26:8d:65:bc:8f:dc:72:
         be:e8:96:fa:06:5e:4b:42:0f:1c:42:5f:52:5b:7b:67:99:69:
         af:c2:8a:d3:36:0f:b5:ee:04:b5:01:02:f1:04:d6:b5:fc:7e:
         80:40:76:cc:24:ab:90:91:f0:0a:3a:c7:4b:0e:9b:c5:e0:7b:
         31:fd:f5:34:7b:6e:39:2e:d5:32:5a:2c:45:1c:61:34:62:f3:
         5a:1e:37:b8:24:fa:a6:96:e3:1b:0e:de:70:77:b5:2f:02:cc:
         12:1c:d4:2f:ff:64:3f:84:3a:ef:6c:ff:bc:d1:f7:e1:b2:e8:
         45:52:c0:3c:db:39:8c:6d:b3:c2:22:2d:bb:1b:3a:6d:d6:c3:
         9c:b0:ad:5f:eb:04:aa:8e:7b:81:c4:b4:1f:a1:45:08:63:00:
         1e:b9:47:84:e7:82:e8:32:af:ca:0d:f1:2c:3c:35:6c:0e:57:
         e2:48:2d:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 14:49:50 2025 by rpki-client