Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139382e33372e3131302e302f32342d3234203d3e203533333430.roa
File:                     3139382e33372e3131302e302f32342d3234203d3e203533333430.roa (raw, json)
Hash identifier:          kMchqT7uMT3t7Ad1Zn9btxGYb0nZsfwM54yya+XtjZk=
Subject key identifier:   54:2A:E5:20:A1:4D:7D:96:34:87:4E:9C:37:97:D0:30:E4:02:4E:06
Certificate issuer:       /CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4
Certificate serial:       76984CE541BABD62F566354EA6DCBB14484D3484
Authority key identifier: 62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139382e33372e3131302e302f32342d3234203d3e203533333430.roa
Signing time:             Mon 30 Oct 2023 12:04:00 +0000
ROA not before:           Mon 30 Oct 2023 11:59:00 +0000
ROA not after:            Mon 28 Oct 2024 12:04:00 +0000
asID:                     53340
IP address blocks:        198.37.110.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/e203869d-6b95-465f-b4dc-088a5a2103fc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/e203869d-6b95-465f-b4dc-088a5a2103fc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 28 May 2024 00:57:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:98:4c:e5:41:ba:bd:62:f5:66:35:4e:a6:dc:bb:14:48:4d:34:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4
        Validity
            Not Before: Oct 30 11:59:00 2023 GMT
            Not After : Oct 28 12:04:00 2024 GMT
        Subject: CN=542AE520A14D7D9634874E9C3797D030E4024E06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:d2:00:d3:6a:91:61:11:fb:b8:c4:fd:d2:11:
                    dd:eb:44:fa:52:90:ce:a7:96:e1:df:70:c4:6b:10:
                    6e:cf:03:ee:75:83:18:6f:e3:56:e3:ef:e3:64:16:
                    e3:fd:d2:ac:23:a7:e1:34:bb:f8:a8:40:59:1c:eb:
                    ba:61:ce:80:00:95:48:87:40:7d:a6:61:84:f3:3b:
                    8f:69:08:e6:81:bf:32:26:b2:84:b6:02:a6:07:dd:
                    21:a5:c1:62:53:89:b8:b6:38:81:4d:b7:32:04:f6:
                    d8:63:41:27:f0:12:c5:d1:45:fd:7b:e3:e6:11:c2:
                    cf:fb:4f:59:90:8d:42:d8:99:d0:f4:df:95:b2:ff:
                    ca:d2:93:d0:1d:21:1f:10:e5:11:79:08:e6:24:e7:
                    a8:ab:55:da:5b:a7:2b:c9:54:08:23:28:ba:2b:63:
                    d7:23:f5:bf:b1:17:c9:d8:a5:ee:a5:4f:12:33:b6:
                    25:59:3f:e8:80:38:3e:b7:ac:06:46:ff:0d:4d:50:
                    c8:a9:bf:9c:a6:96:37:ce:a2:cb:84:39:3a:36:ae:
                    23:ec:cc:7c:21:be:70:98:99:63:49:e1:53:0f:cb:
                    8a:b8:78:4c:7b:10:ed:a0:35:98:f1:7b:d3:9b:f2:
                    1c:58:ed:15:63:92:01:70:8b:c7:ae:bb:9b:ec:81:
                    4e:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:2A:E5:20:A1:4D:7D:96:34:87:4E:9C:37:97:D0:30:E4:02:4E:06
            X509v3 Authority Key Identifier:
                keyid:62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139382e33372e3131302e302f32342d3234203d3e203533333430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.37.110.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4e:00:19:dd:76:18:80:7e:e0:db:3e:99:2a:4c:31:94:fc:3b:
         c0:55:5a:7b:ec:d7:b4:be:b0:2f:f3:1a:20:1b:72:0a:95:91:
         f7:19:3b:a2:20:ab:9a:62:90:52:8b:6b:82:74:a0:fd:67:d9:
         d3:84:84:9a:e1:22:39:a0:3a:a8:28:43:3a:04:98:2b:d6:6a:
         ec:96:45:b3:fc:20:ab:6c:71:ab:70:33:35:a0:b1:03:20:3a:
         b7:34:4a:68:ad:95:21:5a:8e:ea:95:92:26:84:bc:df:38:aa:
         ba:a7:64:49:c3:dc:bb:3d:ec:ec:47:60:b8:5b:c2:76:10:34:
         0d:bd:17:0f:1d:8c:98:a0:97:55:87:d2:11:79:c2:3d:f4:ed:
         f7:10:bf:c9:0f:cd:c0:91:99:80:f6:80:00:00:1b:2e:e2:d9:
         8a:b0:6c:dd:23:ec:39:d1:c9:d9:a6:56:d9:e9:b8:2a:02:4a:
         89:d2:8e:ac:b5:d2:c9:a0:4f:79:7d:8d:ee:24:81:9a:69:41:
         fc:1d:1e:4d:5d:47:96:99:af:44:d7:a6:04:13:f3:8c:89:e2:
         0e:c8:ee:f7:bb:14:c8:b6:fe:55:ee:fc:c2:e2:8a:fe:b6:c8:
         30:f5:67:2c:9b:67:02:5c:fe:89:aa:d3:a8:88:46:28:21:ee:
         e2:37:0b:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 27 01:33:37 2024 by rpki-client on console-fra.rpki-client.org