Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139382e33372e3131302e302f32342d3234203d3e203533333430.roa
File:                     3139382e33372e3131302e302f32342d3234203d3e203533333430.roa (raw, json)
Hash identifier:          6LVGUIlV5XjRNKDJLZ1cqpEYD3hGAmiUSAfJO88lMtw=
Subject key identifier:   D9:94:B7:25:5F:69:D5:67:0B:57:23:8A:FF:DE:F7:64:96:3B:AC:4B
Certificate issuer:       /CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4
Certificate serial:       28386495781AE6C199AED697A8EB63BBD376F1D9
Authority key identifier: 62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139382e33372e3131302e302f32342d3234203d3e203533333430.roa
Signing time:             Mon 30 Sep 2024 12:49:00 +0000
ROA not before:           Mon 30 Sep 2024 12:44:00 +0000
ROA not after:            Mon 29 Sep 2025 12:49:00 +0000
asID:                     53340
IP address blocks:        198.37.110.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/e203869d-6b95-465f-b4dc-088a5a2103fc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/e203869d-6b95-465f-b4dc-088a5a2103fc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 07 Dec 2024 21:29:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:38:64:95:78:1a:e6:c1:99:ae:d6:97:a8:eb:63:bb:d3:76:f1:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4
        Validity
            Not Before: Sep 30 12:44:00 2024 GMT
            Not After : Sep 29 12:49:00 2025 GMT
        Subject: CN=D994B7255F69D5670B57238AFFDEF764963BAC4B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:55:82:20:59:b2:8e:3d:f9:14:4a:d5:7e:a7:
                    29:44:36:95:cf:e0:1b:c4:ec:98:7c:72:b5:83:9c:
                    67:52:ca:62:fe:cb:0e:d2:2e:ee:06:66:a6:a9:b8:
                    1a:bb:12:23:5a:e0:aa:25:f7:27:48:fa:44:85:8c:
                    72:88:fe:17:b3:10:ae:b7:ad:db:9a:54:2c:25:7b:
                    ef:a7:f8:ad:d5:99:41:bf:2b:37:59:85:55:76:c1:
                    8c:25:79:31:be:ab:00:4a:b5:51:c9:4d:c7:15:a6:
                    49:b4:ef:7b:f6:24:28:5a:b0:57:8a:24:9d:aa:91:
                    44:f8:4d:c2:f2:4c:72:b2:94:b2:91:bc:44:d8:d5:
                    19:cd:d2:6c:76:eb:fb:2c:66:40:f8:03:60:02:33:
                    9b:d3:46:63:1b:5b:57:d8:90:28:19:85:ef:4c:6f:
                    60:cf:da:dd:c4:56:47:c3:8d:9c:cd:d9:84:76:f3:
                    22:66:4c:9b:23:9d:96:45:01:e2:ea:58:bb:12:71:
                    48:0b:5b:37:cb:03:97:fe:37:79:1f:9b:15:be:f3:
                    7f:c2:e0:a2:09:07:b5:1e:b7:89:82:b7:fb:cc:9f:
                    4b:67:d8:7c:e3:3b:c0:ae:69:27:95:d9:10:0d:e9:
                    21:28:d1:76:fa:8c:73:19:69:5e:0d:5a:f7:d4:e1:
                    c2:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:94:B7:25:5F:69:D5:67:0B:57:23:8A:FF:DE:F7:64:96:3B:AC:4B
            X509v3 Authority Key Identifier:
                keyid:62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139382e33372e3131302e302f32342d3234203d3e203533333430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.37.110.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0f:ab:e4:42:77:1f:a3:a6:c7:2b:a3:a0:5a:6c:f4:3d:8f:8c:
         06:17:43:f8:20:b5:cb:8f:b9:3a:34:75:de:86:3e:56:c5:c6:
         62:53:80:9c:7c:10:d5:10:45:44:ab:3d:1a:42:2b:5b:d7:06:
         04:e6:91:64:a4:7b:7c:a3:00:7a:8a:89:a1:bb:4f:37:ac:43:
         70:58:cb:78:7c:cb:e9:80:7c:38:82:c6:26:af:10:1c:24:31:
         1f:7b:6f:ac:b8:13:60:e7:e6:72:3a:25:ae:7f:df:15:a4:2e:
         1a:f0:d4:a3:8a:b4:cf:aa:a9:e8:f4:5f:ee:8f:30:bf:a6:8e:
         aa:82:7a:49:31:53:ce:22:60:73:cf:af:42:d1:f3:90:20:3c:
         1a:2d:64:30:89:ef:0e:0f:b9:70:ca:ca:00:73:db:83:47:0d:
         da:a7:a7:4f:8b:0d:bb:a1:75:e6:e7:58:e4:78:aa:10:e0:ee:
         49:7c:ff:47:af:c5:da:7e:9c:e0:6b:f3:aa:3a:3c:53:45:ae:
         cb:78:c7:91:55:ce:97:63:65:65:fa:af:41:1b:76:a5:39:66:
         ff:06:50:fa:b7:c2:a2:e0:00:d2:b3:dc:0b:03:8d:da:f2:07:
         a9:f6:ac:31:44:6e:10:55:7b:59:cc:18:fa:6e:fc:04:b6:bf:
         dc:c2:88:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 6 23:44:53 2024 by rpki-client on console-ams.rpki-client.org