Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139382e33372e3131322e302f32302d3234203d3e20333937333733.roa
File:                     3139382e33372e3131322e302f32302d3234203d3e20333937333733.roa (raw, json)
Hash identifier:          BV3Zp+O7sTvjto4HN4aWDQe9ax3jDRZFGm+ZCOF+U/I=
Subject key identifier:   4D:A8:44:0E:1A:44:8D:6D:86:03:52:5C:B7:3E:81:9C:F2:D6:DA:C1
Certificate issuer:       /CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4
Certificate serial:       4B349B8C7B68252CD1460EF9A4C457C30A997562
Authority key identifier: 62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139382e33372e3131322e302f32302d3234203d3e20333937333733.roa
Signing time:             Wed 14 Aug 2024 11:20:24 +0000
ROA not before:           Wed 14 Aug 2024 11:15:24 +0000
ROA not after:            Wed 13 Aug 2025 11:20:24 +0000
asID:                     397373
IP address blocks:        198.37.112.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/e203869d-6b95-465f-b4dc-088a5a2103fc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/e203869d-6b95-465f-b4dc-088a5a2103fc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 13:28:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:34:9b:8c:7b:68:25:2c:d1:46:0e:f9:a4:c4:57:c3:0a:99:75:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4
        Validity
            Not Before: Aug 14 11:15:24 2024 GMT
            Not After : Aug 13 11:20:24 2025 GMT
        Subject: CN=4DA8440E1A448D6D8603525CB73E819CF2D6DAC1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:6f:40:8a:b7:1a:27:c9:0a:ff:3e:22:ef:00:
                    63:7d:11:2f:4f:0f:16:73:75:9c:ef:46:c2:97:83:
                    41:32:44:18:1d:1c:d3:62:0d:9a:ba:cf:54:7c:53:
                    8a:e5:aa:b5:9b:fa:06:11:bc:25:d8:68:52:eb:71:
                    43:0d:e9:3a:da:d1:13:db:68:65:51:74:9a:4b:34:
                    63:2c:1e:ac:d6:39:d1:d2:a8:4e:bd:75:69:eb:21:
                    b4:9a:1e:ed:71:73:6f:fe:99:59:28:de:20:d7:1e:
                    8c:77:10:08:21:00:df:d0:1a:28:d4:b2:5d:a9:85:
                    b2:11:ad:81:38:11:49:60:2e:14:cc:6b:bb:e1:b9:
                    17:44:ea:92:e5:3c:f6:59:e2:88:bb:1b:a1:f0:be:
                    38:1e:a4:17:9f:c9:0a:e0:0e:3f:9b:04:26:31:98:
                    59:ce:13:ff:f6:0e:9c:d9:4a:de:ce:f7:00:54:2c:
                    35:ff:4a:65:a2:f6:6e:e6:34:86:a4:67:e7:8c:ce:
                    fe:64:18:28:7f:1d:91:7d:e4:83:c9:7a:59:ea:13:
                    4d:2f:4c:ac:38:eb:f1:f1:7e:04:2d:01:ac:94:b1:
                    1e:d1:73:26:37:ff:21:8e:5f:20:11:ac:ed:e7:29:
                    31:e9:e4:1c:3d:6e:8c:ab:39:bc:b9:97:49:b4:ec:
                    72:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:A8:44:0E:1A:44:8D:6D:86:03:52:5C:B7:3E:81:9C:F2:D6:DA:C1
            X509v3 Authority Key Identifier:
                keyid:62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139382e33372e3131322e302f32302d3234203d3e20333937333733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.37.112.0/20

    Signature Algorithm: sha256WithRSAEncryption
         47:b8:07:a0:f0:85:a7:96:0b:40:63:15:9c:14:dc:46:1e:79:
         58:a6:4f:c9:85:2b:fd:16:51:8a:1c:52:d9:26:7c:15:6d:55:
         19:6b:3a:c5:46:24:d6:48:6e:06:c9:50:22:97:12:5a:41:fe:
         77:ae:98:86:11:bd:71:1e:a9:43:e0:be:d7:d2:0b:ce:a7:ea:
         04:9f:c7:bd:bd:a3:02:21:a9:40:eb:1f:46:cc:b2:f3:12:3f:
         24:80:27:e7:f5:c4:71:dd:54:91:37:a6:76:8d:e8:57:39:ac:
         3f:54:93:d4:7c:e0:b7:0e:19:3d:13:24:8c:72:7e:bb:6c:04:
         89:3b:62:bb:89:c6:04:21:f5:91:0d:41:42:12:22:7f:d0:32:
         a9:3c:23:2b:0c:30:f7:b0:e3:b6:7a:55:e0:e2:df:36:84:63:
         f8:ef:e0:a0:f8:94:69:0a:f7:10:f1:03:07:1c:8c:54:0b:91:
         fa:68:d8:8b:f8:6c:42:f0:9a:e8:ac:2d:6c:a3:d4:4a:e8:3c:
         67:05:b4:b1:95:2a:0a:0f:76:20:f1:83:d8:ac:c6:35:0d:9a:
         46:ff:c6:8f:5e:24:a2:a0:9a:3d:6d:aa:ff:24:4b:52:2a:89:
         d7:d3:bc:18:1d:0b:dc:3d:67:ca:5d:68:25:45:8c:3a:10:7d:
         c7:ab:de:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 13:39:41 2024 by rpki-client on console-ams.rpki-client.org