Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139382e33372e39362e302f32302d3234203d3e203137323136.roa
File:                     3139382e33372e39362e302f32302d3234203d3e203137323136.roa (raw, json)
Hash identifier:          Pwu+IY8cM4iVuJpR1hwOFU3e83sX8Oq3js39IypvaKY=
Subject key identifier:   ED:EA:C6:80:08:7C:AF:A3:AB:8C:F2:BB:10:53:7A:A1:77:A9:2C:A5
Certificate issuer:       /CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4
Certificate serial:       57BA74EB324943F0B6816F44A775FE91202AD3A5
Authority key identifier: 62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139382e33372e39362e302f32302d3234203d3e203137323136.roa
Signing time:             Mon 30 Sep 2024 12:49:00 +0000
ROA not before:           Mon 30 Sep 2024 12:44:00 +0000
ROA not after:            Mon 29 Sep 2025 12:49:00 +0000
asID:                     17216
IP address blocks:        198.37.96.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/e203869d-6b95-465f-b4dc-088a5a2103fc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/e203869d-6b95-465f-b4dc-088a5a2103fc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 13:28:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:ba:74:eb:32:49:43:f0:b6:81:6f:44:a7:75:fe:91:20:2a:d3:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4
        Validity
            Not Before: Sep 30 12:44:00 2024 GMT
            Not After : Sep 29 12:49:00 2025 GMT
        Subject: CN=EDEAC680087CAFA3AB8CF2BB10537AA177A92CA5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:1b:17:ab:b4:1e:90:0e:f4:b8:9a:1e:6d:a7:
                    89:8d:92:6c:9b:e5:42:dd:25:bf:d4:a7:66:5e:7b:
                    bd:9a:77:6d:10:93:31:8e:41:26:6d:30:3d:0d:f4:
                    49:37:3d:eb:60:dc:d3:82:e2:e3:e0:e6:e1:17:b5:
                    c3:03:4d:0d:1c:0b:d4:5c:5e:45:6b:9e:70:96:0c:
                    d2:2a:98:4f:65:72:73:1a:ed:62:ea:13:5e:8f:41:
                    f8:e9:f8:90:79:7e:b3:ac:cd:ea:07:89:f1:f9:a3:
                    af:4f:c3:83:ed:5c:53:92:87:92:69:f9:c4:4e:1f:
                    3f:2c:03:08:6d:9c:b4:13:b7:cb:f0:94:00:e8:3d:
                    07:db:17:5f:e6:4a:57:15:0e:9b:a0:f3:e0:43:bc:
                    05:3c:50:99:54:e1:0c:d2:1e:21:09:7c:7b:73:3f:
                    38:77:b4:27:e6:8f:e6:55:56:53:04:ce:99:8d:2f:
                    bf:99:57:07:4a:f8:cf:0d:e8:ab:73:e9:8c:79:07:
                    ab:6c:02:c6:30:af:66:70:f9:65:7a:37:90:be:fd:
                    9d:ef:c6:90:20:48:40:55:a0:4d:c5:63:42:d8:5a:
                    d9:20:d9:eb:9c:78:55:a7:ac:20:2b:e0:35:75:35:
                    19:ef:04:64:90:7d:0f:a5:ce:2a:d8:29:85:22:01:
                    9f:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:EA:C6:80:08:7C:AF:A3:AB:8C:F2:BB:10:53:7A:A1:77:A9:2C:A5
            X509v3 Authority Key Identifier:
                keyid:62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139382e33372e39362e302f32302d3234203d3e203137323136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.37.96.0/20

    Signature Algorithm: sha256WithRSAEncryption
         69:a7:bd:ed:b8:0b:08:a1:22:2c:9b:30:07:6d:c8:e4:7e:e8:
         c3:d5:2b:55:53:0c:3b:67:d1:e5:b7:b4:3c:cc:cb:02:77:62:
         e6:d8:5a:7c:18:72:f0:6e:7e:54:e9:a0:03:4e:6f:de:9d:d3:
         09:0f:20:d5:98:87:59:b0:5f:c7:75:dd:52:6d:d9:df:5a:11:
         fb:46:45:7f:21:06:cd:4d:31:3e:88:32:c8:88:90:8a:44:3c:
         71:30:27:0d:f3:93:6e:b2:e1:7d:f7:eb:45:f4:8c:9b:71:58:
         78:07:91:db:18:af:ed:d2:5c:4b:3d:ce:f6:ae:24:26:e3:a5:
         56:10:e3:b5:9b:5c:e4:21:d2:48:44:26:6f:15:73:0e:0c:fd:
         8e:33:7c:a3:f9:03:5e:d1:57:f5:36:b8:e2:78:62:69:b3:3c:
         43:7c:58:76:62:bd:1d:d3:90:05:b2:50:00:5d:cd:7e:55:f0:
         c1:f6:08:ce:76:53:37:fd:3a:94:e9:e9:c2:ca:83:53:32:e8:
         52:f1:af:69:65:91:1b:49:18:01:15:b3:84:62:f6:2f:17:9d:
         1e:93:00:19:cb:bb:0f:24:d6:e5:b0:09:02:ea:5a:c4:d3:4a:
         cd:f2:04:a7:a5:9e:2d:82:1e:55:a7:3f:1a:e4:13:9c:95:18:
         e5:23:35:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 13:39:41 2024 by rpki-client on console-ams.rpki-client.org