Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139382e33372e3131322e302f32302d3234203d3e203430363736.roa
File:                     3139382e33372e3131322e302f32302d3234203d3e203430363736.roa (raw, json)
Hash identifier:          4us1r5tbwQGIBMV+Zg68DRCiPahGam1Kppgtfb7vTPg=
Subject key identifier:   9B:D1:36:16:EB:5A:25:EC:6D:A2:FB:AD:94:1F:52:EB:06:75:4F:0D
Certificate issuer:       /CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4
Certificate serial:       077197EBFFD941E639A43F1E224DA3F3A19CFB75
Authority key identifier: 62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139382e33372e3131322e302f32302d3234203d3e203430363736.roa
Signing time:             Wed 14 Aug 2024 11:20:53 +0000
ROA not before:           Wed 14 Aug 2024 11:15:53 +0000
ROA not after:            Wed 13 Aug 2025 11:20:53 +0000
asID:                     40676
IP address blocks:        198.37.112.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/e203869d-6b95-465f-b4dc-088a5a2103fc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/e203869d-6b95-465f-b4dc-088a5a2103fc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 13:28:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:71:97:eb:ff:d9:41:e6:39:a4:3f:1e:22:4d:a3:f3:a1:9c:fb:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4
        Validity
            Not Before: Aug 14 11:15:53 2024 GMT
            Not After : Aug 13 11:20:53 2025 GMT
        Subject: CN=9BD13616EB5A25EC6DA2FBAD941F52EB06754F0D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:e1:e2:3b:7c:fc:89:33:c6:9f:85:86:54:2d:
                    0c:1b:a4:0f:83:85:e7:5c:2e:bc:05:a7:4c:e7:e5:
                    86:28:af:37:58:fc:63:6a:d2:ce:2d:db:0b:3a:60:
                    a9:0b:22:9b:ae:48:03:56:21:b9:a0:7b:4f:73:c1:
                    76:02:69:97:54:ee:50:9e:36:0c:5d:63:4a:f0:c3:
                    3f:53:ab:fd:3d:43:09:0f:6c:00:9a:ec:67:95:2a:
                    f2:c8:ff:87:9c:f2:36:e7:dc:28:50:a1:5b:38:a9:
                    2a:88:f9:4b:c1:fe:0c:0c:6d:0f:db:9c:2a:b4:62:
                    8d:51:c8:1e:99:d1:1f:3e:e2:72:0f:f4:25:bc:fd:
                    94:c9:94:4b:de:77:0c:e6:2c:5c:c4:fd:20:78:d5:
                    47:4b:3c:82:a3:36:e7:e7:b7:ef:a6:3a:3c:ff:d3:
                    36:f4:66:fb:b9:df:3c:3d:13:ce:4f:c6:7d:9e:3b:
                    a9:53:25:70:a6:f3:f1:af:6b:61:ea:b9:75:ed:a2:
                    30:bf:c1:08:d1:e3:4b:33:1f:cb:66:1d:67:96:60:
                    b7:0f:00:6f:88:e3:44:9c:af:fb:38:fc:c6:43:59:
                    bd:f2:c5:34:3e:8f:2d:5c:75:ce:7e:9c:45:bb:ae:
                    fb:b2:51:e5:bc:ab:2b:af:e1:2e:58:1f:fe:0c:c0:
                    cd:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:D1:36:16:EB:5A:25:EC:6D:A2:FB:AD:94:1F:52:EB:06:75:4F:0D
            X509v3 Authority Key Identifier:
                keyid:62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139382e33372e3131322e302f32302d3234203d3e203430363736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.37.112.0/20

    Signature Algorithm: sha256WithRSAEncryption
         6a:52:83:5b:bb:1f:9b:07:8f:50:bb:7e:d4:1d:f4:66:19:f1:
         cc:05:7b:31:2c:44:52:72:f0:e7:bc:08:4b:13:ae:ce:6e:dc:
         cd:b8:3c:b2:57:db:24:bc:cf:04:14:91:33:fb:5a:98:57:89:
         65:e7:87:2e:d0:d1:c3:b6:a2:70:9f:4d:f8:33:44:f3:62:8e:
         44:b7:49:5d:da:e5:66:db:ab:a5:4b:74:14:1e:bc:1c:86:aa:
         56:40:4b:fe:17:ab:73:c8:77:1a:e5:f8:f3:45:af:c2:9a:4e:
         48:60:a5:e6:78:99:e4:3b:df:d4:a7:03:63:70:b4:45:17:c6:
         89:12:57:6a:ab:e4:0a:e4:64:bb:53:60:28:42:d7:78:2c:36:
         39:04:83:ef:84:19:d5:0d:8b:21:0a:0a:cc:93:61:1d:2a:16:
         7d:a0:4d:ed:60:16:7c:92:ab:82:a4:8f:16:4a:5a:8b:00:d6:
         a0:d3:b1:ab:2d:eb:6d:ec:e4:02:0f:0b:82:db:eb:05:f5:80:
         06:6c:cc:d0:92:3b:e2:b0:9d:d6:62:b0:d5:ed:15:3a:06:a9:
         f8:ba:19:c4:08:b0:64:de:7f:d5:2a:67:16:05:57:01:59:0d:
         f8:af:a1:8f:2b:69:8a:ef:62:ca:e2:a3:21:77:c8:08:ab:6c:
         01:ec:0b:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 13:18:46 2024 by rpki-client on console-fra.rpki-client.org