Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139382e33372e3131322e302f32302d3234203d3e203533333430.roa
File:                     3139382e33372e3131322e302f32302d3234203d3e203533333430.roa (raw, json)
Hash identifier:          ZIGw32zc3bVdZidba5amymFZ2E+Lrf+4nESC8VVcLW0=
Subject key identifier:   BF:72:E2:4A:3A:DA:91:71:CA:E3:95:BA:CE:7A:BA:0F:2D:AC:5A:CF
Certificate issuer:       /CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4
Certificate serial:       06A70D00760A9D813287099CB5AF889799D05864
Authority key identifier: 62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139382e33372e3131322e302f32302d3234203d3e203533333430.roa
Signing time:             Wed 14 Aug 2024 14:29:59 +0000
ROA not before:           Wed 14 Aug 2024 14:24:59 +0000
ROA not after:            Wed 13 Aug 2025 14:29:59 +0000
asID:                     53340
IP address blocks:        198.37.112.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/e203869d-6b95-465f-b4dc-088a5a2103fc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/e203869d-6b95-465f-b4dc-088a5a2103fc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 13:28:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:a7:0d:00:76:0a:9d:81:32:87:09:9c:b5:af:88:97:99:d0:58:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4
        Validity
            Not Before: Aug 14 14:24:59 2024 GMT
            Not After : Aug 13 14:29:59 2025 GMT
        Subject: CN=BF72E24A3ADA9171CAE395BACE7ABA0F2DAC5ACF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:5a:52:2f:11:81:6e:8f:bd:4e:75:dd:61:c9:
                    11:6f:34:a4:7e:6a:86:45:8c:b7:09:99:17:6f:ad:
                    97:72:18:86:44:6f:7e:6e:ad:c7:ca:b3:3d:d8:30:
                    ea:0c:f5:00:ba:1e:17:71:21:7c:ac:61:28:58:da:
                    92:ae:af:e4:d5:c5:29:cb:4f:b1:1d:35:bd:4b:11:
                    ef:92:04:26:9d:44:5d:8a:e9:68:62:7e:a3:d7:7d:
                    f6:8c:46:3a:56:be:40:af:43:16:f8:b2:77:f9:aa:
                    79:19:d7:64:98:f8:72:38:27:a3:e5:35:b1:b4:05:
                    51:e2:ff:a7:27:b5:6c:34:01:21:b7:91:86:95:d9:
                    ac:b3:5d:0c:8d:bb:b4:03:e7:8c:6b:d3:46:11:f3:
                    83:ef:86:9b:17:27:98:5a:1f:8e:be:95:11:81:ed:
                    4a:d7:98:23:9c:55:49:89:25:03:fa:df:33:08:9d:
                    33:72:66:49:27:57:fa:60:ea:65:93:ad:02:73:1a:
                    1f:bf:5e:47:23:13:8d:0b:ce:ae:c8:ac:57:38:93:
                    f7:bd:2e:d2:0a:2b:f1:0a:90:6e:7a:2b:b5:3d:34:
                    db:e9:99:e5:16:57:ef:bf:fd:be:da:e0:c9:b3:c4:
                    7a:39:13:8f:59:e4:de:07:a0:76:d4:ed:7e:b1:bb:
                    84:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:72:E2:4A:3A:DA:91:71:CA:E3:95:BA:CE:7A:BA:0F:2D:AC:5A:CF
            X509v3 Authority Key Identifier:
                keyid:62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139382e33372e3131322e302f32302d3234203d3e203533333430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.37.112.0/20

    Signature Algorithm: sha256WithRSAEncryption
         97:36:8a:fb:dc:4e:12:30:30:6b:01:99:80:7e:c3:3f:69:74:
         d4:d6:8b:92:11:6b:02:1f:23:3c:2d:88:ec:9b:92:bd:d0:51:
         cc:ae:f9:8b:8f:76:0a:5e:b5:df:6a:c6:60:9c:68:3b:a6:8c:
         0f:3f:1f:0a:99:e1:ec:4f:2c:5e:c5:7a:ce:ad:0f:e8:67:5e:
         cf:e1:32:09:fb:05:a3:80:aa:4c:52:2f:72:e4:8a:0b:b9:53:
         0d:65:8a:44:4b:0e:28:d7:16:a6:59:1e:81:6a:70:49:00:10:
         4b:1d:13:95:ed:57:9c:9f:11:6e:5c:9f:96:cf:d6:00:1a:49:
         5d:40:1c:c4:43:f2:81:8e:fc:ee:5a:9f:78:9d:72:5b:b4:2a:
         b5:be:cf:16:0e:37:35:34:27:e6:67:f6:10:01:5d:67:9b:52:
         68:63:68:94:47:e2:30:f0:e8:12:6e:ae:c0:b1:2c:c2:83:83:
         bf:ad:5a:74:9b:7e:15:ca:09:ff:b2:ae:2b:5b:c7:6c:6e:db:
         57:33:80:a5:93:68:29:9f:7b:3e:20:cb:ef:19:f2:c9:98:80:
         28:8c:99:bb:73:f9:f6:b5:32:e9:56:0f:f4:58:f2:da:38:c0:
         7e:13:51:33:15:91:65:d4:cc:5e:c1:e8:b2:46:4d:94:5d:57:
         93:59:4b:f2
-----BEGIN CERTIFICATE-----
MIIFsjCCBJqgAwIBAgIUBqcNAHYKnYEyhwmcta+Il5nQWGQwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMWYyMmNmMDc1NzFlY2JhYjZkNDYwYTFmM2I2YzVkNjE5
N2QwOTgzNjQzYTU0ZDJlZDQwHhcNMjQwODE0MTQyNDU5WhcNMjUwODEzMTQyOTU5
WjAzMTEwLwYDVQQDEyhCRjcyRTI0QTNBREE5MTcxQ0FFMzk1QkFDRTdBQkEwRjJE
QUM1QUNGMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAllpSLxGBbo+9
TnXdYckRbzSkfmqGRYy3CZkXb62XchiGRG9+bq3HyrM92DDqDPUAuh4XcSF8rGEo
WNqSrq/k1cUpy0+xHTW9SxHvkgQmnURdiuloYn6j1332jEY6Vr5Ar0MW+LJ3+ap5
GddkmPhyOCej5TWxtAVR4v+nJ7VsNAEht5GGldmss10Mjbu0A+eMa9NGEfOD74ab
FyeYWh+OvpURge1K15gjnFVJiSUD+t8zCJ0zcmZJJ1f6YOplk60Ccxofv15HIxON
C86uyKxXOJP3vS7SCivxCpBueiu1PTTb6ZnlFlfvv/2+2uDJs8R6OROPWeTeB6B2
1O1+sbuE7QIDAQABo4ICsjCCAq4wHQYDVR0OBBYEFL9y4ko62pFxyuOVus56ug8t
rFrPMB8GA1UdIwQYMBaAFGK0t02IaU0zyBBuijO8FJ6zkE/rMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmODE0M2JmNjIwMTgxZWNkMzdkYWM3MmYxLzEv
NjJCNEI3NEQ4ODY5NEQzM0M4MTA2RThBMzNCQzE0OUVCMzkwNEZFQi5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi
MGI4NDE1L2UyMDM4NjlkLTZiOTUtNDY1Zi1iNGRjLTA4OGE1YTIxMDNmYy8xZjIy
Y2YwNzU3MWVjYmFiNmQ0NjBhMWYzYjZjNWQ2MTk3ZDA5ODM2NDNhNTRkMmVkNC5j
ZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjgxNDNiZjYyMDE4MWVj
ZDM3ZGFjNzJmMS8xLzMxMzkzODJlMzMzNzJlMzEzMTMyMmUzMDJmMzIzMDJkMzIz
NDIwM2QzZTIwMzUzMzMzMzQzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO
AjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBMYlcDANBgkqhkiG9w0BAQsF
AAOCAQEAlzaK+9xOEjAwawGZgH7DP2l01NaLkhFrAh8jPC2I7JuSvdBRzK75i492
Cl6132rGYJxoO6aMDz8fCpnh7E8sXsV6zq0P6Gdez+EyCfsFo4CqTFIvcuSKC7lT
DWWKREsOKNcWplkegWpwSQAQSx0Tle1XnJ8Rblyfls/WABpJXUAcxEPygY787lqf
eJ1yW7Qqtb7PFg43NTQn5mf2EAFdZ5tSaGNolEfiMPDoEm6uwLEswoODv61adJt+
FcoJ/7KuK1vHbG7bVzOApZNoKZ97PiDL7xnyyZiAKIyZu3P59rUy6VYP9Fjy2jjA
fhNRMxWRZdTMXsHoskZNlF1Xk1lL8g==
-----END CERTIFICATE-----
Generated at Thu Nov 21 13:18:46 2024 by rpki-client on console-fra.rpki-client.org