Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139382e33372e3131322e302f32302d3234203d3e203134393335.roa
File:                     3139382e33372e3131322e302f32302d3234203d3e203134393335.roa (raw, json)
Hash identifier:          8pex+t1gJfUOwKmx3fvh3bOYJGqIM4zTcwc5wodqQK4=
Subject key identifier:   9B:9B:02:6A:9D:09:E2:2C:4F:87:19:93:58:95:20:C3:FD:39:0F:E4
Certificate issuer:       /CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4
Certificate serial:       469A1DC4C5006B447B0796B98A5B047A62F9A2F7
Authority key identifier: 62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139382e33372e3131322e302f32302d3234203d3e203134393335.roa
Signing time:             Wed 14 Aug 2024 14:29:07 +0000
ROA not before:           Wed 14 Aug 2024 14:24:07 +0000
ROA not after:            Wed 13 Aug 2025 14:29:07 +0000
asID:                     14935
IP address blocks:        198.37.112.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/e203869d-6b95-465f-b4dc-088a5a2103fc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/e203869d-6b95-465f-b4dc-088a5a2103fc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 13:28:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:9a:1d:c4:c5:00:6b:44:7b:07:96:b9:8a:5b:04:7a:62:f9:a2:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4
        Validity
            Not Before: Aug 14 14:24:07 2024 GMT
            Not After : Aug 13 14:29:07 2025 GMT
        Subject: CN=9B9B026A9D09E22C4F871993589520C3FD390FE4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:c0:48:ec:c3:f0:c4:a3:b1:3f:e1:a4:11:ac:
                    30:96:63:09:50:36:84:b7:f0:cd:44:22:7b:d7:93:
                    c1:d7:27:66:76:94:72:b0:16:66:25:87:5a:33:32:
                    23:1c:96:75:45:37:96:ff:de:f4:b3:7e:88:94:be:
                    6a:f5:e0:d5:3f:c4:c8:5e:73:39:08:cb:e3:2c:f5:
                    63:a4:27:4d:2c:21:0e:85:ca:f2:51:cd:a3:95:be:
                    b9:d8:34:46:41:74:34:e4:85:ad:f7:ef:3b:15:7d:
                    0b:4c:ec:bf:54:72:06:9f:03:e8:18:93:97:1c:66:
                    fa:55:e9:42:b5:ce:02:d8:f3:91:9e:ed:c4:0b:8b:
                    2d:d0:12:6c:a5:d8:3d:4d:37:61:97:97:c8:d6:05:
                    f1:7f:d0:17:32:71:1a:6e:ff:69:94:28:3c:15:b5:
                    54:11:3f:d3:fc:ae:61:57:b5:c3:a9:ca:ca:12:0b:
                    d3:c8:b9:4b:24:04:ec:a3:e6:d4:f7:12:37:cf:66:
                    4f:a1:ec:5f:19:0e:9d:89:1d:18:58:a5:ce:38:ac:
                    23:77:0e:c8:3b:75:b2:17:fc:74:12:78:df:32:dd:
                    d2:ff:46:ad:0c:92:ae:63:94:e7:91:e1:17:af:82:
                    d9:e6:df:1f:11:02:41:68:49:a2:96:ad:f8:43:e3:
                    4d:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:9B:02:6A:9D:09:E2:2C:4F:87:19:93:58:95:20:C3:FD:39:0F:E4
            X509v3 Authority Key Identifier:
                keyid:62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139382e33372e3131322e302f32302d3234203d3e203134393335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.37.112.0/20

    Signature Algorithm: sha256WithRSAEncryption
         05:de:57:5d:32:71:4a:3d:04:9c:0a:36:0e:c7:a3:95:cc:55:
         ff:58:56:bb:2d:99:f3:31:38:9b:21:a7:cd:66:c8:fd:8c:c1:
         86:a3:8b:19:6c:c0:1c:d3:13:8f:0b:e5:42:f9:2b:91:08:1c:
         c1:7a:b4:e9:cf:fd:75:fb:d3:12:f8:c4:ed:2f:71:f2:7f:5e:
         91:dc:1b:9d:f4:d7:6f:fa:f8:b2:17:77:f2:80:e0:c5:e2:6b:
         9e:19:32:86:0f:5e:bc:d9:7e:77:51:29:1a:f6:f5:b9:d9:5d:
         b1:5f:4c:37:cb:c2:15:5d:6c:80:72:e7:51:36:a2:2a:fc:30:
         42:78:48:8f:c2:08:05:d0:ed:73:59:57:c0:3d:6d:c0:0c:d9:
         bd:68:e6:e1:f1:6b:a3:6f:26:a8:65:81:dd:e1:67:29:b2:0e:
         91:20:2b:21:8a:ba:7b:9e:11:df:06:0a:8e:ef:4c:05:88:cb:
         5a:cd:fa:a9:2d:57:4f:49:2e:71:f6:08:e5:10:5a:ba:cd:ec:
         05:54:ec:a8:fa:81:fa:13:b3:4d:d2:63:0f:81:3f:d8:f5:e7:
         f2:3c:c9:6e:4a:9f:74:17:5c:28:6e:84:a2:e5:d4:38:b7:43:
         bb:a8:da:30:ac:1e:e1:3c:b2:9c:ed:f0:1e:9b:81:f2:0f:ac:
         96:fe:ad:ec
-----BEGIN CERTIFICATE-----
MIIFsjCCBJqgAwIBAgIURpodxMUAa0R7B5a5ilsEemL5ovcwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMWYyMmNmMDc1NzFlY2JhYjZkNDYwYTFmM2I2YzVkNjE5
N2QwOTgzNjQzYTU0ZDJlZDQwHhcNMjQwODE0MTQyNDA3WhcNMjUwODEzMTQyOTA3
WjAzMTEwLwYDVQQDEyg5QjlCMDI2QTlEMDlFMjJDNEY4NzE5OTM1ODk1MjBDM0ZE
MzkwRkU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAucBI7MPwxKOx
P+GkEawwlmMJUDaEt/DNRCJ715PB1ydmdpRysBZmJYdaMzIjHJZ1RTeW/970s36I
lL5q9eDVP8TIXnM5CMvjLPVjpCdNLCEOhcryUc2jlb652DRGQXQ05IWt9+87FX0L
TOy/VHIGnwPoGJOXHGb6VelCtc4C2PORnu3EC4st0BJspdg9TTdhl5fI1gXxf9AX
MnEabv9plCg8FbVUET/T/K5hV7XDqcrKEgvTyLlLJATso+bU9xI3z2ZPoexfGQ6d
iR0YWKXOOKwjdw7IO3WyF/x0EnjfMt3S/0atDJKuY5TnkeEXr4LZ5t8fEQJBaEmi
lq34Q+NNgQIDAQABo4ICsjCCAq4wHQYDVR0OBBYEFJubAmqdCeIsT4cZk1iVIMP9
OQ/kMB8GA1UdIwQYMBaAFGK0t02IaU0zyBBuijO8FJ6zkE/rMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmODE0M2JmNjIwMTgxZWNkMzdkYWM3MmYxLzEv
NjJCNEI3NEQ4ODY5NEQzM0M4MTA2RThBMzNCQzE0OUVCMzkwNEZFQi5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi
MGI4NDE1L2UyMDM4NjlkLTZiOTUtNDY1Zi1iNGRjLTA4OGE1YTIxMDNmYy8xZjIy
Y2YwNzU3MWVjYmFiNmQ0NjBhMWYzYjZjNWQ2MTk3ZDA5ODM2NDNhNTRkMmVkNC5j
ZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjgxNDNiZjYyMDE4MWVj
ZDM3ZGFjNzJmMS8xLzMxMzkzODJlMzMzNzJlMzEzMTMyMmUzMDJmMzIzMDJkMzIz
NDIwM2QzZTIwMzEzNDM5MzMzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO
AjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBMYlcDANBgkqhkiG9w0BAQsF
AAOCAQEABd5XXTJxSj0EnAo2DsejlcxV/1hWuy2Z8zE4myGnzWbI/YzBhqOLGWzA
HNMTjwvlQvkrkQgcwXq06c/9dfvTEvjE7S9x8n9ekdwbnfTXb/r4shd38oDgxeJr
nhkyhg9evNl+d1EpGvb1udldsV9MN8vCFV1sgHLnUTaiKvwwQnhIj8IIBdDtc1lX
wD1twAzZvWjm4fFro28mqGWB3eFnKbIOkSArIYq6e54R3wYKju9MBYjLWs36qS1X
T0kucfYI5RBaus3sBVTsqPqB+hOzTdJjD4E/2PXn8jzJbkqfdBdcKG6EouXUOLdD
u6jaMKwe4TyynO3wHpuB8g+slv6t7A==
-----END CERTIFICATE-----
Generated at Thu Nov 21 13:18:46 2024 by rpki-client on console-fra.rpki-client.org