Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139382e33372e39362e302f32302d3234203d3e203137323136.roa
File:                     3139382e33372e39362e302f32302d3234203d3e203137323136.roa (raw, json)
Hash identifier:          S8Opf40rgGH4uE5tBkCbwY9bzGsfLjhmo7UQGRa/hFI=
Subject key identifier:   85:28:D4:20:3E:57:5C:82:25:82:AD:D0:FB:D2:CB:4A:81:C9:41:60
Certificate issuer:       /CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4
Certificate serial:       168ED6FB777BB43BFB7B3E0862EF96F34B9D22A8
Authority key identifier: 62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139382e33372e39362e302f32302d3234203d3e203137323136.roa
Signing time:             Mon 30 Oct 2023 12:04:01 +0000
ROA not before:           Mon 30 Oct 2023 11:59:01 +0000
ROA not after:            Mon 28 Oct 2024 12:04:01 +0000
asID:                     17216
IP address blocks:        198.37.96.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/e203869d-6b95-465f-b4dc-088a5a2103fc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/e203869d-6b95-465f-b4dc-088a5a2103fc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 26 Apr 2024 08:50:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:8e:d6:fb:77:7b:b4:3b:fb:7b:3e:08:62:ef:96:f3:4b:9d:22:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4
        Validity
            Not Before: Oct 30 11:59:01 2023 GMT
            Not After : Oct 28 12:04:01 2024 GMT
        Subject: CN=8528D4203E575C822582ADD0FBD2CB4A81C94160
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:85:ff:d6:6f:03:65:2e:fa:fd:71:23:fb:90:
                    de:6b:be:b3:cd:b2:39:46:80:c8:9f:21:89:7b:f3:
                    47:9e:48:38:dd:b9:71:c1:b4:5b:1e:d7:cb:22:e8:
                    40:8a:20:92:7d:ea:75:f1:b9:6f:f5:db:08:4c:fe:
                    5b:f5:7a:19:41:98:a6:f2:dd:ac:09:21:c3:f6:2a:
                    d1:ce:7f:05:19:10:e4:f9:d5:17:46:28:60:65:79:
                    18:1a:ae:91:cd:20:76:5b:ce:71:ca:92:b1:4e:f8:
                    4d:f9:f6:83:c1:fe:39:63:3a:4c:ae:9e:51:69:1a:
                    31:03:27:c2:29:df:1d:d6:f6:26:d3:57:e1:b1:8f:
                    58:ef:d8:ba:dc:38:e3:97:6d:ad:7a:09:ea:cd:f4:
                    bf:8b:2d:42:7b:dd:69:70:4d:50:f3:71:92:1c:31:
                    9b:c3:28:af:d9:59:d7:6d:f1:7d:65:04:87:bf:1c:
                    da:27:bf:3a:ff:9d:af:a3:97:31:ff:76:09:ec:d2:
                    dd:04:8b:96:40:28:47:35:1d:8a:5c:e5:e8:6a:b4:
                    52:84:40:ae:63:28:ce:93:d6:7d:56:7f:78:1e:6b:
                    a9:9e:63:ad:de:88:4a:db:f4:e1:7f:7b:c5:cb:93:
                    2d:af:2b:ab:05:d8:b7:c9:c9:da:5b:39:dc:15:b2:
                    ca:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:28:D4:20:3E:57:5C:82:25:82:AD:D0:FB:D2:CB:4A:81:C9:41:60
            X509v3 Authority Key Identifier:
                keyid:62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139382e33372e39362e302f32302d3234203d3e203137323136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.37.96.0/20

    Signature Algorithm: sha256WithRSAEncryption
         36:7f:c2:1a:8e:e0:1e:b2:86:a8:b1:48:c7:34:a7:bf:72:02:
         e0:b2:41:52:44:a0:83:98:4c:33:ad:6d:69:5b:3e:10:4e:40:
         f3:22:4b:66:0c:34:f9:75:48:8d:21:87:02:2c:15:2d:31:23:
         37:b7:c7:06:fd:3b:8f:b9:d8:39:90:79:d9:45:6c:ab:42:31:
         75:45:e5:21:b1:5b:55:ff:a4:22:25:45:c5:76:5f:e9:62:b5:
         d1:67:f1:2a:0d:8d:98:0d:c4:c7:a7:7b:19:9b:b0:76:7f:b6:
         27:f7:a8:8f:63:d1:fa:83:6f:ca:0f:81:25:be:b5:25:83:9a:
         2a:17:0e:d3:3f:89:35:87:0f:7c:31:47:f6:5d:43:2c:e2:6c:
         da:52:5b:97:9d:ef:33:f7:29:3b:25:a6:10:7c:1c:56:8b:db:
         49:86:84:a8:ee:e7:b2:6e:f1:97:f1:0d:7d:cd:46:30:72:b4:
         eb:a6:dc:0c:49:70:ca:9b:52:d9:bc:dc:c4:ff:e2:61:70:a9:
         f9:f0:1f:10:f5:db:17:b7:fa:03:cb:1b:b5:a1:d6:3c:60:63:
         07:01:0f:2f:d5:b4:0b:2a:dd:5f:9f:57:80:02:b5:85:a2:64:
         ca:f4:40:74:a7:8c:e4:0d:67:b0:7b:69:11:0e:d0:98:d8:6f:
         81:b4:a1:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 06:37:49 2024 by rpki-client on console-fra.rpki-client.org