Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139352e37382e35352e302f32342d3234203d3e203633323634.roa
File:                     3139352e37382e35352e302f32342d3234203d3e203633323634.roa (raw, json)
Hash identifier:          GesPxv0iHGXJDopRzUjCOdjIv5K/gqFE9PwC2GjW/hY=
Subject key identifier:   E0:7B:08:71:C6:60:CE:A0:85:CD:DB:0D:73:3B:C7:2A:57:F5:66:67
Certificate issuer:       /CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4
Certificate serial:       155CEAEAF768E7D9E10300DB8A81EE8648731C90
Authority key identifier: 62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139352e37382e35352e302f32342d3234203d3e203633323634.roa
Signing time:             Mon 13 May 2024 14:19:25 +0000
ROA not before:           Mon 13 May 2024 14:14:25 +0000
ROA not after:            Mon 12 May 2025 14:19:25 +0000
asID:                     63264
IP address blocks:        195.78.55.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/e203869d-6b95-465f-b4dc-088a5a2103fc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/e203869d-6b95-465f-b4dc-088a5a2103fc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:28:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:5c:ea:ea:f7:68:e7:d9:e1:03:00:db:8a:81:ee:86:48:73:1c:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4
        Validity
            Not Before: May 13 14:14:25 2024 GMT
            Not After : May 12 14:19:25 2025 GMT
        Subject: CN=E07B0871C660CEA085CDDB0D733BC72A57F56667
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:00:69:82:dd:85:05:e0:62:92:05:8b:41:0a:
                    42:b8:ff:32:34:91:d7:75:01:88:5f:d2:46:a0:61:
                    18:b6:cd:0e:c5:90:bc:5e:1b:d4:cd:72:8f:1f:7b:
                    54:c6:d4:72:9a:07:80:58:ad:fc:58:b4:99:c9:18:
                    b8:0d:be:14:00:76:7f:2e:51:2a:b6:d7:ff:cd:37:
                    6a:1a:c9:69:e4:e1:27:ae:05:2d:d5:a4:c2:0c:9c:
                    ac:a9:39:7c:fa:b1:51:ab:7a:b1:f5:df:7e:0e:e6:
                    f0:81:0c:60:f2:84:0c:36:b2:a9:a1:1c:ac:b0:b2:
                    8a:16:a0:34:2f:ec:0b:3f:e9:de:f9:60:36:84:c5:
                    0a:1b:d7:bc:f0:9b:68:ba:6c:a1:f0:52:f8:e5:be:
                    a5:26:24:24:02:4e:a3:13:d9:91:da:3e:b6:bf:00:
                    c3:c7:38:ad:93:20:53:0f:70:c5:a5:be:83:7f:3f:
                    ec:72:5a:f3:99:97:d8:a6:8a:58:75:f0:2d:ad:ae:
                    01:c9:83:3f:2b:10:c1:18:7c:65:af:1a:88:83:ab:
                    42:af:7b:87:1c:24:59:58:fd:f7:f4:fa:a0:8d:2b:
                    88:57:70:f5:64:ea:c5:8f:4e:9f:27:cb:2c:60:87:
                    b6:46:df:22:18:ba:04:e1:bf:c1:63:e6:e6:5c:d0:
                    f8:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:7B:08:71:C6:60:CE:A0:85:CD:DB:0D:73:3B:C7:2A:57:F5:66:67
            X509v3 Authority Key Identifier:
                keyid:62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139352e37382e35352e302f32342d3234203d3e203633323634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.78.55.0/24

    Signature Algorithm: sha256WithRSAEncryption
         99:85:e4:39:db:2d:5f:93:8b:9c:25:15:81:1f:13:1b:b6:67:
         f8:05:d9:a2:f0:d4:cf:9c:5d:90:59:7a:06:13:3b:e1:58:8b:
         d9:1c:df:2b:3e:8b:8e:f4:c8:50:5d:7a:4c:fe:e6:c2:9c:49:
         21:11:bc:7b:23:b1:f6:bd:f9:be:c5:3a:67:da:48:b9:cf:20:
         3a:dc:10:90:6e:cb:1f:41:d5:26:e5:78:c2:35:f8:5f:16:97:
         d1:3a:ca:f3:ec:10:e0:63:e9:0c:50:44:4a:25:ef:e3:9d:90:
         dd:ac:99:77:d7:26:e6:e9:cc:88:3f:e4:18:fd:77:1f:d7:cb:
         ec:ff:46:11:5b:5e:c5:66:ea:c3:72:74:fb:47:16:c4:78:03:
         30:a4:83:0c:8b:30:4f:79:3c:2d:cc:6d:2e:b5:e6:fc:c2:2f:
         12:8c:30:7f:8e:b8:3d:5e:a3:52:e0:d5:6b:28:a9:64:0e:7e:
         cd:a7:bf:28:d4:99:00:0c:5a:ac:df:db:76:68:be:02:23:04:
         f9:42:45:be:42:81:4f:d6:60:93:50:1a:1d:01:fe:0d:37:32:
         64:e4:87:ff:a2:85:c3:30:ad:bc:1a:16:17:4c:d2:45:9f:09:
         f1:4e:f2:ce:c3:07:0f:41:f9:a0:db:86:8a:f6:f9:5b:1c:0d:
         2f:29:81:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 06:35:49 2024 by rpki-client on console-ams.rpki-client.org