Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139382e33372e3130342e302f32312d3234203d3e203137323136.roa
File:                     3139382e33372e3130342e302f32312d3234203d3e203137323136.roa (raw, json)
Hash identifier:          tfuy2YH2YfCY9nGvjDnVbKLoqEsSXRjyUAzD9k0Nzy0=
Subject key identifier:   90:B4:90:A8:07:24:69:75:E8:FB:07:F3:C2:BA:42:47:B6:B8:A6:D9
Certificate issuer:       /CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4
Certificate serial:       39ADA8C25F1C085ABF4B829FAE2408AFF17A2056
Authority key identifier: 62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139382e33372e3130342e302f32312d3234203d3e203137323136.roa
Signing time:             Mon 30 Sep 2024 12:49:00 +0000
ROA not before:           Mon 30 Sep 2024 12:44:00 +0000
ROA not after:            Mon 29 Sep 2025 12:49:00 +0000
asID:                     17216
IP address blocks:        198.37.104.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/e203869d-6b95-465f-b4dc-088a5a2103fc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/e203869d-6b95-465f-b4dc-088a5a2103fc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 13:28:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:ad:a8:c2:5f:1c:08:5a:bf:4b:82:9f:ae:24:08:af:f1:7a:20:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4
        Validity
            Not Before: Sep 30 12:44:00 2024 GMT
            Not After : Sep 29 12:49:00 2025 GMT
        Subject: CN=90B490A807246975E8FB07F3C2BA4247B6B8A6D9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:9a:29:0f:a1:37:ab:03:ac:97:65:4b:99:bb:
                    f6:c2:72:d6:75:b0:1d:44:d3:c3:f0:f5:20:01:2d:
                    78:94:28:cb:69:73:3c:4e:4d:08:07:f6:a1:16:07:
                    37:ff:9a:10:34:1c:36:d4:42:87:0b:80:e1:e5:ee:
                    d1:ab:9e:b0:ba:b3:27:28:ed:77:19:11:b9:6b:c4:
                    3b:2f:99:a0:0d:f8:18:4f:c1:7f:b9:b9:84:52:31:
                    eb:11:7a:20:37:5c:df:c5:24:01:96:02:b9:ae:61:
                    11:4f:c6:48:6e:1c:5d:f1:0c:dd:37:da:1a:d6:e8:
                    05:77:03:6f:37:00:c4:47:6f:54:ad:fe:ac:99:b2:
                    ce:f8:ac:be:45:f6:4a:a1:5e:f4:e2:a1:63:4f:a7:
                    0d:5c:de:2e:4d:4d:c8:b6:0a:f9:3e:e5:81:02:f5:
                    d7:81:63:b1:4c:34:3e:88:c1:b5:d5:bf:fd:29:db:
                    bd:fe:e0:29:aa:06:c8:76:af:c7:3a:53:76:a1:cb:
                    45:b1:d9:bf:55:e9:b7:bd:84:7c:c9:06:e4:5f:0e:
                    d2:c1:4b:fe:f3:a8:12:ad:0b:f2:3c:45:1a:16:d2:
                    72:e7:c5:fa:fb:10:21:8f:f9:69:3c:95:85:4f:d9:
                    72:bc:9b:84:83:84:d2:f6:17:bd:bd:a6:e0:7e:4c:
                    c1:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:B4:90:A8:07:24:69:75:E8:FB:07:F3:C2:BA:42:47:B6:B8:A6:D9
            X509v3 Authority Key Identifier:
                keyid:62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139382e33372e3130342e302f32312d3234203d3e203137323136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.37.104.0/21

    Signature Algorithm: sha256WithRSAEncryption
         b2:9b:1b:18:87:db:d7:b1:d5:64:b4:e4:b0:d0:43:28:5b:4d:
         12:55:41:36:e0:bd:5a:8e:d0:4c:26:9f:09:96:ed:8a:6c:5e:
         26:7e:20:cb:9b:d1:2c:74:fd:fd:ec:d9:f3:c3:44:89:c8:80:
         bc:eb:57:b0:b3:52:34:c5:3e:e7:a6:1f:d2:ea:1a:5e:c3:e4:
         7b:23:66:54:48:29:70:62:7c:7f:b0:c2:1b:04:97:5f:07:b4:
         ab:23:25:fd:1f:fa:0f:1c:30:43:dc:53:1e:50:93:d3:42:27:
         8e:02:4d:d6:37:8e:9e:e0:49:ff:f1:c8:2a:8b:d4:88:d3:67:
         27:04:7a:75:6d:eb:20:5b:c3:17:48:45:95:4c:e5:a9:d6:86:
         1c:54:93:6e:f8:cc:df:ae:d5:10:31:5e:f1:04:ac:f0:05:3a:
         f6:72:50:f5:55:c1:5d:e7:4f:f3:31:a5:34:95:e2:89:3e:a3:
         5f:c6:a3:c9:13:8f:22:c8:49:cd:cf:eb:65:a9:74:99:53:d3:
         97:75:d6:84:f6:63:5f:f3:b9:79:f3:bf:8f:ae:04:2a:72:42:
         30:89:9c:73:42:45:f0:18:4e:15:aa:41:e8:97:e9:9d:54:65:
         6e:4e:2c:8b:7d:10:ea:95:1a:2c:f5:c6:44:53:b9:e8:43:99:
         15:a0:95:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 13:18:46 2024 by rpki-client on console-fra.rpki-client.org