Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139382e33372e39362e302f32302d3234203d3e203134393335.roa
File:                     3139382e33372e39362e302f32302d3234203d3e203134393335.roa (raw, json)
Hash identifier:          EmMKOkKQhvM3KYkXUNIRxrZVK1CQ/Q27iBK/jyWBlb8=
Subject key identifier:   B2:83:A6:33:20:54:AC:CB:24:26:45:13:A3:A0:09:FC:6A:CE:F6:D2
Certificate issuer:       /CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4
Certificate serial:       0DC6B79407529AC129EE207F7DE1673C55562F40
Authority key identifier: 62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139382e33372e39362e302f32302d3234203d3e203134393335.roa
Signing time:             Mon 30 Oct 2023 12:04:02 +0000
ROA not before:           Mon 30 Oct 2023 11:59:02 +0000
ROA not after:            Mon 28 Oct 2024 12:04:02 +0000
asID:                     14935
IP address blocks:        198.37.96.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/e203869d-6b95-465f-b4dc-088a5a2103fc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/e203869d-6b95-465f-b4dc-088a5a2103fc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 24 Apr 2024 20:39:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:c6:b7:94:07:52:9a:c1:29:ee:20:7f:7d:e1:67:3c:55:56:2f:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4
        Validity
            Not Before: Oct 30 11:59:02 2023 GMT
            Not After : Oct 28 12:04:02 2024 GMT
        Subject: CN=B283A6332054ACCB24264513A3A009FC6ACEF6D2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:b8:02:9c:03:f1:68:99:d0:99:55:ac:66:e2:
                    b6:5d:1a:5c:d3:3e:d1:d5:f5:64:c6:91:a2:fa:fb:
                    51:9b:bd:fa:54:33:9c:55:fa:3b:32:b6:1b:8c:f0:
                    e3:b6:01:dd:40:e7:e5:25:79:66:d1:77:ed:1d:41:
                    4c:95:dc:28:b5:52:5b:db:11:f3:5e:b4:5b:b7:d8:
                    a8:23:2a:45:db:36:a3:f6:95:95:54:a7:9b:4c:75:
                    6c:db:c4:5d:75:a5:56:60:8f:b6:de:fc:6f:88:b5:
                    60:74:26:40:58:f3:48:88:19:7d:a5:7f:dd:2d:fe:
                    5b:63:3e:09:8f:46:05:86:92:59:c9:75:2e:33:17:
                    0c:b3:07:19:a5:71:5d:9f:40:19:2d:db:4d:6a:d2:
                    a6:e3:45:90:1a:81:e9:07:90:8d:77:69:f1:86:fd:
                    be:e5:de:da:db:94:81:d2:17:3c:6a:a8:c6:8b:31:
                    39:ff:8e:49:f8:4a:5f:ce:2f:1c:1e:d1:ef:d1:c4:
                    1e:39:1d:34:fa:9b:99:69:88:74:ac:de:63:8a:eb:
                    51:a3:35:6a:e4:c8:cc:d2:8f:cb:60:74:c9:0c:13:
                    fe:65:67:ec:ff:cc:82:37:02:46:f3:b0:66:fd:33:
                    6c:be:86:cb:9c:6a:a0:79:91:2b:43:76:53:a1:f2:
                    08:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:83:A6:33:20:54:AC:CB:24:26:45:13:A3:A0:09:FC:6A:CE:F6:D2
            X509v3 Authority Key Identifier:
                keyid:62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139382e33372e39362e302f32302d3234203d3e203134393335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.37.96.0/20

    Signature Algorithm: sha256WithRSAEncryption
         a6:03:23:a3:ee:3a:d1:0e:1b:2e:4a:35:33:e2:57:c1:29:28:
         4d:33:e3:70:5b:c6:c7:4c:b5:98:3e:7e:f3:27:b9:72:28:6f:
         a9:29:0f:9b:a7:c0:33:17:60:f0:d5:99:37:df:ab:5a:c8:00:
         04:d0:1d:ec:1d:c8:a6:bc:15:93:e0:af:c0:b8:9f:ab:31:d2:
         ae:6a:15:fc:6a:55:8d:72:75:82:2c:92:91:4d:6a:22:9c:77:
         af:33:a8:d0:a0:e5:bd:b0:0b:42:3f:7c:8f:93:72:45:6c:48:
         9f:96:74:4a:c2:15:fc:21:ca:75:b8:32:a5:70:38:c2:e2:15:
         56:6c:ce:5f:86:0f:31:64:cc:82:ea:02:8a:50:eb:ac:14:45:
         44:1e:5d:63:6f:1d:c0:07:3a:fc:90:93:8c:bb:0c:8d:f9:fd:
         77:ac:f2:89:58:6b:10:78:9d:c8:f8:ea:6c:31:2f:ba:06:fe:
         ba:17:eb:44:63:a7:fc:80:d1:c4:da:e6:4b:27:07:56:d7:33:
         5c:b7:b0:e0:e9:08:66:1d:87:f9:11:4c:17:3a:fe:01:34:ee:
         38:06:13:a7:e9:78:65:e1:c3:1f:53:54:ba:cc:c9:02:db:2a:
         0b:ef:22:23:46:68:93:7e:dc:5d:11:79:88:a4:93:8e:51:9c:
         cd:20:82:9f
-----BEGIN CERTIFICATE-----
MIIFsDCCBJigAwIBAgIUDca3lAdSmsEp7iB/feFnPFVWL0AwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMWYyMmNmMDc1NzFlY2JhYjZkNDYwYTFmM2I2YzVkNjE5
N2QwOTgzNjQzYTU0ZDJlZDQwHhcNMjMxMDMwMTE1OTAyWhcNMjQxMDI4MTIwNDAy
WjAzMTEwLwYDVQQDEyhCMjgzQTYzMzIwNTRBQ0NCMjQyNjQ1MTNBM0EwMDlGQzZB
Q0VGNkQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwbgCnAPxaJnQ
mVWsZuK2XRpc0z7R1fVkxpGi+vtRm736VDOcVfo7MrYbjPDjtgHdQOflJXlm0Xft
HUFMldwotVJb2xHzXrRbt9ioIypF2zaj9pWVVKebTHVs28RddaVWYI+23vxviLVg
dCZAWPNIiBl9pX/dLf5bYz4Jj0YFhpJZyXUuMxcMswcZpXFdn0AZLdtNatKm40WQ
GoHpB5CNd2nxhv2+5d7a25SB0hc8aqjGizE5/45J+Epfzi8cHtHv0cQeOR00+puZ
aYh0rN5jiutRozVq5MjM0o/LYHTJDBP+ZWfs/8yCNwJG87Bm/TNsvobLnGqgeZEr
Q3ZTofII/QIDAQABo4ICsDCCAqwwHQYDVR0OBBYEFLKDpjMgVKzLJCZFE6OgCfxq
zvbSMB8GA1UdIwQYMBaAFGK0t02IaU0zyBBuijO8FJ6zkE/rMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmODE0M2JmNjIwMTgxZWNkMzdkYWM3MmYxLzEv
NjJCNEI3NEQ4ODY5NEQzM0M4MTA2RThBMzNCQzE0OUVCMzkwNEZFQi5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi
MGI4NDE1L2UyMDM4NjlkLTZiOTUtNDY1Zi1iNGRjLTA4OGE1YTIxMDNmYy8xZjIy
Y2YwNzU3MWVjYmFiNmQ0NjBhMWYzYjZjNWQ2MTk3ZDA5ODM2NDNhNTRkMmVkNC5j
ZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjgxNDNiZjYyMDE4MWVj
ZDM3ZGFjNzJmMS8xLzMxMzkzODJlMzMzNzJlMzkzNjJlMzAyZjMyMzAyZDMyMzQy
MDNkM2UyMDMxMzQzOTMzMzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBATGJWAwDQYJKoZIhvcNAQELBQAD
ggEBAKYDI6PuOtEOGy5KNTPiV8EpKE0z43BbxsdMtZg+fvMnuXIob6kpD5unwDMX
YPDVmTffq1rIAATQHewdyKa8FZPgr8C4n6sx0q5qFfxqVY1ydYIskpFNaiKcd68z
qNCg5b2wC0I/fI+TckVsSJ+WdErCFfwhynW4MqVwOMLiFVZszl+GDzFkzILqAopQ
66wURUQeXWNvHcAHOvyQk4y7DI35/Xes8olYaxB4ncj46mwxL7oG/roX60Rjp/yA
0cTa5ksnB1bXM1y3sODpCGYdh/kRTBc6/gE07jgGE6fpeGXhwx9TVLrMyQLbKgvv
IiNGaJN+3F0ReYikk45RnM0ggp8=
-----END CERTIFICATE-----
Generated at Tue Apr 23 21:40:41 2024 by rpki-client on console-ams.rpki-client.org