Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139352e37382e35372e302f32342d3234203d3e203231373433.roa
File:                     3139352e37382e35372e302f32342d3234203d3e203231373433.roa (raw, json)
Hash identifier:          wzIVyM63Vg37GnC9Zn9S/g/znHgBoCab7yzZPMyTOIw=
Subject key identifier:   F4:51:08:D4:17:56:EA:6F:B3:D9:F7:E5:42:50:51:21:30:81:DA:79
Certificate issuer:       /CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4
Certificate serial:       54F601399D573ADD41B89ACD05758B35A026BA64
Authority key identifier: 62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139352e37382e35372e302f32342d3234203d3e203231373433.roa
Signing time:             Mon 15 Apr 2024 15:16:04 +0000
ROA not before:           Mon 15 Apr 2024 15:11:04 +0000
ROA not after:            Mon 14 Apr 2025 15:16:04 +0000
asID:                     21743
IP address blocks:        195.78.57.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/e203869d-6b95-465f-b4dc-088a5a2103fc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/e203869d-6b95-465f-b4dc-088a5a2103fc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:28:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:f6:01:39:9d:57:3a:dd:41:b8:9a:cd:05:75:8b:35:a0:26:ba:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4
        Validity
            Not Before: Apr 15 15:11:04 2024 GMT
            Not After : Apr 14 15:16:04 2025 GMT
        Subject: CN=F45108D41756EA6FB3D9F7E5425051213081DA79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:a1:cd:70:85:e6:8b:dc:f4:c4:d4:d5:1c:bc:
                    f8:fe:56:45:74:6f:55:e3:3f:56:ed:ca:fd:b3:2c:
                    e1:65:1e:9b:eb:a4:32:19:df:65:8d:3d:49:c3:b8:
                    55:df:22:42:86:3f:1a:cb:ff:9d:e1:89:9d:d0:40:
                    57:d2:f6:b6:91:2b:02:32:ef:fd:f5:ce:6d:67:f7:
                    c3:05:03:7f:15:e5:97:78:da:ff:69:0b:c8:ca:20:
                    7f:ce:d2:f3:90:2f:ef:13:20:98:de:8a:8f:7b:15:
                    7c:9d:66:31:a9:31:94:e6:24:9a:e7:53:35:26:04:
                    e7:df:ca:dd:50:27:b7:b9:b1:20:9c:97:f7:18:99:
                    e1:d0:6d:59:3d:c0:91:fc:5c:f4:6e:c1:d3:16:45:
                    5c:d4:6f:7d:9f:49:16:47:39:56:71:33:34:f1:92:
                    a8:79:9d:44:90:5f:76:6a:b2:cc:0a:c5:f5:6e:30:
                    cb:b5:c8:c0:e4:b5:89:bb:6c:69:6a:2f:da:21:f7:
                    b1:97:40:37:62:5d:6d:01:63:3c:bb:9b:53:45:6f:
                    24:78:74:ac:63:4e:0c:e8:e6:57:5e:85:d2:70:30:
                    e3:dd:22:f4:36:71:d4:a1:f8:2e:50:02:df:91:b6:
                    ab:0a:12:34:a4:21:0a:b9:8d:57:6b:51:62:cf:1a:
                    f9:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:51:08:D4:17:56:EA:6F:B3:D9:F7:E5:42:50:51:21:30:81:DA:79
            X509v3 Authority Key Identifier:
                keyid:62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139352e37382e35372e302f32342d3234203d3e203231373433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.78.57.0/24

    Signature Algorithm: sha256WithRSAEncryption
         76:a5:4a:86:33:5d:60:b2:4c:72:13:4f:a1:54:fd:de:74:46:
         cf:f3:79:7a:a2:51:54:3a:d4:7f:db:e0:97:e8:58:12:0d:e4:
         50:f2:80:fe:3a:05:c2:7b:9f:04:55:4b:06:c6:67:66:56:b1:
         44:6c:4a:39:c0:9a:31:90:4c:c1:37:b8:d4:37:b0:8f:b7:03:
         ea:c5:ca:87:ad:4c:24:63:8d:5e:68:78:06:e8:05:a5:e2:11:
         a5:32:bf:78:78:35:1e:8c:ba:52:79:d0:11:11:4f:32:75:f8:
         a9:6d:7c:de:b6:50:63:42:b5:6a:3d:28:9a:06:5d:38:dc:27:
         0c:5a:bf:0f:90:a2:da:d9:18:71:de:94:1f:86:3f:70:78:4e:
         a7:71:f2:34:f5:63:f7:66:cb:9a:8d:21:d8:f6:1d:4e:75:ee:
         09:29:79:72:3c:70:5b:8a:ff:68:9e:a3:2f:b7:9b:f3:9b:a6:
         25:a8:eb:29:80:ba:db:73:3c:6b:f3:6b:fe:0f:f3:78:30:aa:
         b4:76:43:ef:d7:76:7d:96:6d:8d:d3:f2:36:61:09:1a:09:e3:
         6a:d6:1c:17:2b:4b:2d:37:22:4c:36:84:93:58:ea:3e:14:2c:
         e0:e4:2c:94:0d:a5:a8:7a:9c:f1:e6:d4:79:65:58:89:f2:4f:
         54:9a:d3:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 06:57:49 2024 by rpki-client on console-fra.rpki-client.org