Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139352e37382e35372e302f32342d3234203d3e20393936.roa
File:                     3139352e37382e35372e302f32342d3234203d3e20393936.roa (raw, json)
Hash identifier:          NbhojVic11hT2eBWrZ/0PAqNLDM6KNTDLjLoHHYdeSg=
Subject key identifier:   1F:A3:E6:E8:CF:FF:52:74:DD:AD:1C:59:AC:51:93:18:E0:58:E0:D9
Certificate issuer:       /CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4
Certificate serial:       708937C190D7DC361E8A0DA7E97B3438300488EB
Authority key identifier: 62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139352e37382e35372e302f32342d3234203d3e20393936.roa
Signing time:             Mon 15 Apr 2024 15:16:04 +0000
ROA not before:           Mon 15 Apr 2024 15:11:04 +0000
ROA not after:            Mon 14 Apr 2025 15:16:04 +0000
asID:                     996
IP address blocks:        195.78.57.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/e203869d-6b95-465f-b4dc-088a5a2103fc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/e203869d-6b95-465f-b4dc-088a5a2103fc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:28:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:89:37:c1:90:d7:dc:36:1e:8a:0d:a7:e9:7b:34:38:30:04:88:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4
        Validity
            Not Before: Apr 15 15:11:04 2024 GMT
            Not After : Apr 14 15:16:04 2025 GMT
        Subject: CN=1FA3E6E8CFFF5274DDAD1C59AC519318E058E0D9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:f5:37:bc:0a:61:0c:84:1a:89:02:9f:24:b2:
                    17:58:88:4c:ce:31:a6:44:88:26:1e:32:aa:e8:b1:
                    e7:ca:4e:14:00:70:18:4b:37:60:66:60:4d:a0:1f:
                    7e:1c:31:4c:f6:15:5a:fb:8b:4d:b4:6e:80:7b:ab:
                    3b:95:6f:10:2d:6f:ce:74:7b:74:0f:4d:41:f0:f3:
                    87:07:b2:5d:e3:93:28:fe:ad:c2:65:95:57:6e:7e:
                    5d:d9:64:ed:a7:62:09:ba:27:64:92:26:be:6b:5c:
                    b3:d4:b6:09:4a:b1:a8:50:25:87:13:e2:95:70:3c:
                    a3:b4:39:c2:33:96:18:92:93:e6:7e:50:74:d0:28:
                    21:68:52:34:df:8f:b7:5b:7f:3b:45:02:e2:d8:7b:
                    10:61:eb:82:24:d9:5c:c4:0e:86:c4:99:ce:db:69:
                    49:c2:02:54:f2:f3:a1:63:c1:8f:43:63:6b:35:60:
                    70:5a:4a:02:6d:07:1d:f6:47:7c:62:60:36:31:9d:
                    72:d1:f0:d4:50:ca:cc:61:ae:95:6b:c2:a1:91:2c:
                    a1:f6:c2:d0:50:71:74:e0:06:d6:42:96:54:88:9d:
                    67:dc:d7:42:a7:75:bb:5c:68:b6:3f:be:6c:0e:dc:
                    04:f5:58:43:5e:5f:f2:f2:93:c8:b4:c9:11:d8:96:
                    2c:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:A3:E6:E8:CF:FF:52:74:DD:AD:1C:59:AC:51:93:18:E0:58:E0:D9
            X509v3 Authority Key Identifier:
                keyid:62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139352e37382e35372e302f32342d3234203d3e20393936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.78.57.0/24

    Signature Algorithm: sha256WithRSAEncryption
         20:8e:87:ff:d1:dd:18:b9:33:7e:84:cf:43:7f:0c:f9:a0:43:
         02:fc:25:6a:c9:12:a7:ab:0c:67:34:66:e9:78:b2:94:b0:b8:
         68:13:26:44:3f:cb:7a:65:63:02:4a:47:a0:6e:bd:3a:4c:1d:
         d6:07:46:bc:0e:bb:48:cc:df:89:67:e3:21:13:40:bf:24:28:
         0d:b3:c7:21:8a:50:66:af:43:e8:49:4a:57:c2:b9:a8:39:d3:
         fc:fb:bd:45:a7:e7:89:16:ce:68:c4:c4:18:91:e3:bf:55:d4:
         0d:8a:39:e6:b5:45:55:ff:58:c1:e1:2f:58:0c:c2:29:ec:80:
         ab:19:f7:78:7d:df:24:c0:3a:0b:19:d8:00:d3:5a:41:4f:36:
         d6:18:bd:8c:aa:73:a9:9f:0c:74:b7:6f:bc:5e:4b:1d:53:67:
         0d:f0:8b:7f:d6:12:1e:07:a4:9c:58:51:c7:2d:ff:1d:08:89:
         b7:94:cb:d6:2a:12:aa:6d:fe:41:3d:5c:b9:84:c4:2d:82:98:
         84:fa:f4:d1:54:bc:dd:1a:6a:f0:70:a2:f4:0a:55:a0:3f:8d:
         f9:28:52:be:83:fc:72:96:74:13:f0:ca:5d:27:64:0b:55:f5:
         08:4e:9f:ba:6d:d6:64:2e:3b:b9:9f:32:2b:f3:e4:49:5d:f8:
         67:0b:38:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 06:57:49 2024 by rpki-client on console-fra.rpki-client.org