Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139382e33372e3130342e302f32312d3234203d3e203137323136.roa
File:                     3139382e33372e3130342e302f32312d3234203d3e203137323136.roa (raw, json)
Hash identifier:          iyUAwmwtHBmQkQlewSZnpPP4uB5Ik+zdVP39DtHLmoQ=
Subject key identifier:   6F:14:DF:C5:F0:6E:F5:06:0D:92:86:AB:A4:CF:12:36:4D:1C:68:61
Certificate issuer:       /CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4
Certificate serial:       33F4F5C6775DEAFC5522BE011FB911D0075217F8
Authority key identifier: 62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139382e33372e3130342e302f32312d3234203d3e203137323136.roa
Signing time:             Mon 30 Oct 2023 12:04:03 +0000
ROA not before:           Mon 30 Oct 2023 11:59:03 +0000
ROA not after:            Mon 28 Oct 2024 12:04:03 +0000
asID:                     17216
IP address blocks:        198.37.104.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/e203869d-6b95-465f-b4dc-088a5a2103fc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/e203869d-6b95-465f-b4dc-088a5a2103fc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 20 Apr 2024 06:29:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:f4:f5:c6:77:5d:ea:fc:55:22:be:01:1f:b9:11:d0:07:52:17:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4
        Validity
            Not Before: Oct 30 11:59:03 2023 GMT
            Not After : Oct 28 12:04:03 2024 GMT
        Subject: CN=6F14DFC5F06EF5060D9286ABA4CF12364D1C6861
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:b3:8c:69:04:5c:48:0b:0f:44:79:6c:e7:08:
                    5d:59:66:e9:5c:41:2c:e6:4b:5c:fa:6c:2c:f1:fe:
                    14:04:fb:26:70:72:dd:f4:7a:50:72:45:e3:3d:27:
                    09:95:cf:46:d7:a7:3a:1e:86:16:4e:14:55:19:bb:
                    dd:22:b7:3a:58:64:3d:ac:dc:4e:b2:64:e1:45:61:
                    0d:26:ac:fb:8c:87:44:be:61:50:f7:aa:9a:92:7f:
                    df:b8:d1:b0:67:e0:72:90:c0:06:d0:ef:39:f3:40:
                    11:28:e2:76:3d:f2:cb:60:a0:97:4d:3f:ef:d7:84:
                    6a:a9:61:69:b8:0e:43:71:68:03:97:c6:ca:72:be:
                    ff:73:78:d2:b2:aa:ff:c1:62:ed:96:8b:d1:80:59:
                    45:c2:63:c2:12:c7:20:5f:b3:4a:68:06:f2:f5:e6:
                    7e:8d:80:05:90:a3:f1:23:79:f7:1c:98:f9:74:82:
                    99:af:ec:48:a8:ff:f2:6c:06:a9:92:d6:d4:ad:e3:
                    9f:41:dc:0c:ae:1e:52:94:0d:d4:8b:e2:ab:67:9a:
                    a5:62:56:7e:61:1b:58:bd:0f:c2:17:25:45:ff:3d:
                    6a:3a:2e:4e:1e:2e:cc:83:0d:73:09:d7:26:58:0d:
                    10:2a:b2:d1:93:d0:5a:a4:c6:2c:3f:c7:8c:7f:b7:
                    c4:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:14:DF:C5:F0:6E:F5:06:0D:92:86:AB:A4:CF:12:36:4D:1C:68:61
            X509v3 Authority Key Identifier:
                keyid:62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139382e33372e3130342e302f32312d3234203d3e203137323136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.37.104.0/21

    Signature Algorithm: sha256WithRSAEncryption
         74:ae:f4:a5:49:5f:41:d0:06:7b:2c:2b:6d:75:d9:fa:5b:4a:
         ad:be:d3:51:05:d6:31:01:c6:8c:2a:a6:2f:21:83:d4:54:d5:
         02:af:3d:38:2c:b9:ad:48:23:4f:16:db:a0:94:12:8d:81:6a:
         a4:ce:9d:a1:34:fd:bc:3b:8b:e8:f4:f7:76:ba:32:33:dd:6d:
         38:30:c6:3e:0f:15:67:70:d5:c2:f9:e1:16:fc:2f:91:dd:02:
         6f:3c:1b:3f:77:3c:ca:b9:af:b0:21:54:cf:62:4d:23:74:a5:
         d7:68:3e:d4:64:b4:f9:f2:2d:51:87:a1:69:15:5f:04:0c:d5:
         38:81:b0:0d:dc:02:24:4f:f5:f4:4d:22:1c:f1:63:cf:b8:d9:
         0a:41:8f:ea:98:81:5a:61:ee:72:a0:a9:c0:aa:08:0c:98:48:
         cb:40:98:cd:02:cc:36:e7:db:90:de:99:3d:a3:ca:2a:5e:5a:
         e4:5e:e9:1c:ea:6f:c5:9b:72:92:7a:6e:2f:b0:cb:62:34:66:
         9a:3d:83:17:39:22:88:92:7d:e4:5f:c7:df:51:e1:1d:af:2a:
         af:21:3a:33:eb:f1:e3:49:da:e5:13:76:89:65:a3:90:75:7a:
         ab:8b:63:11:79:4d:e1:cc:e3:12:d3:f7:b9:78:62:5f:ce:59:
         ca:5c:7a:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 19 06:28:02 2024 by rpki-client on console-fra.rpki-client.org