Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139382e33372e39362e302f32302d3234203d3e20333937333733.roa
File:                     3139382e33372e39362e302f32302d3234203d3e20333937333733.roa (raw, json)
Hash identifier:          nwgdKt8Kphd5xi0YBFIgwroUyhr2+dq22QZgLiFaU9M=
Subject key identifier:   8D:45:4D:7A:80:1F:AA:1F:D9:41:D5:CA:B0:E9:18:17:84:55:D8:EE
Certificate issuer:       /CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4
Certificate serial:       14C8779316313EDBEE3365903CB1912BFB3FF35A
Authority key identifier: 62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139382e33372e39362e302f32302d3234203d3e20333937333733.roa
Signing time:             Mon 30 Oct 2023 12:03:59 +0000
ROA not before:           Mon 30 Oct 2023 11:58:59 +0000
ROA not after:            Mon 28 Oct 2024 12:03:59 +0000
asID:                     397373
IP address blocks:        198.37.96.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/e203869d-6b95-465f-b4dc-088a5a2103fc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/e203869d-6b95-465f-b4dc-088a5a2103fc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 20 Apr 2024 06:29:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:c8:77:93:16:31:3e:db:ee:33:65:90:3c:b1:91:2b:fb:3f:f3:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4
        Validity
            Not Before: Oct 30 11:58:59 2023 GMT
            Not After : Oct 28 12:03:59 2024 GMT
        Subject: CN=8D454D7A801FAA1FD941D5CAB0E918178455D8EE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:74:b8:a8:ae:6a:b6:aa:96:b0:bf:9c:73:e2:
                    16:42:93:16:ac:15:69:d2:6b:3a:cc:82:58:be:76:
                    4f:e5:0d:19:89:60:1d:f9:7f:73:08:9c:d1:36:c8:
                    63:cf:c2:1d:ea:97:cf:4d:5a:45:5b:d6:9b:28:f1:
                    0b:01:f5:a2:29:6e:2f:66:f4:80:2d:30:0e:cb:ed:
                    61:d3:ab:a6:e9:e8:44:45:25:73:8d:30:e6:e5:d1:
                    de:0c:cc:97:72:08:a0:9b:99:78:84:3e:1b:a0:32:
                    6f:7a:6d:63:79:de:32:4c:38:bd:f7:7f:d8:bc:86:
                    74:f4:e1:90:dc:bb:6f:b6:fe:87:d8:50:0a:d3:30:
                    cb:45:99:0c:26:a1:12:50:d9:64:32:34:27:c4:5d:
                    ba:e5:b3:6a:ae:f1:3d:70:cf:64:c9:e3:98:ee:cd:
                    3c:8b:7b:90:6a:72:0e:86:e5:e4:b5:aa:4a:31:b8:
                    22:20:c5:68:44:31:2a:f6:a2:2b:6f:20:67:90:a4:
                    31:8f:ec:6b:e1:39:d2:3b:a0:af:a5:c5:df:85:9f:
                    0c:6b:73:72:7f:1b:bb:a4:1e:4c:7e:06:45:95:1c:
                    73:a8:72:17:4c:9e:06:2a:cd:43:be:e7:b8:1e:5c:
                    8d:7d:10:3f:38:1f:d6:b9:7d:01:e9:12:6b:9f:63:
                    b6:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:45:4D:7A:80:1F:AA:1F:D9:41:D5:CA:B0:E9:18:17:84:55:D8:EE
            X509v3 Authority Key Identifier:
                keyid:62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139382e33372e39362e302f32302d3234203d3e20333937333733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.37.96.0/20

    Signature Algorithm: sha256WithRSAEncryption
         4b:aa:da:30:43:b6:b9:08:25:b3:bd:66:dd:6e:90:fa:00:bf:
         d1:82:39:f7:8f:af:4c:34:62:5b:e3:d1:d6:78:14:19:14:15:
         4b:a1:ab:80:28:5a:3c:20:84:4b:bd:6f:0c:54:6a:04:10:34:
         17:70:0d:4d:30:97:ce:11:3d:08:e2:65:b4:29:12:7b:6c:f7:
         b0:fc:95:2a:c7:96:d5:52:f6:8f:82:b6:3f:f5:fb:e5:a1:56:
         5f:89:8f:79:76:fd:9d:22:4e:6a:b3:ea:9e:ef:b7:92:77:4c:
         2a:7f:8c:ed:a9:f0:a7:0e:e6:f4:ef:ab:71:60:2f:89:3b:00:
         50:2c:20:13:ae:c6:4f:92:cc:0f:cf:5a:77:96:da:ee:4a:9b:
         06:6a:f9:9e:60:69:80:ab:d9:ac:14:bb:ff:6b:a6:e3:22:0f:
         dd:1b:13:79:61:bc:79:32:b1:4e:79:2b:e8:9f:aa:79:15:e9:
         9f:af:1e:a7:cc:1f:b5:2f:c5:49:5e:89:18:3c:ac:fe:f9:ae:
         5d:ad:8e:e9:16:78:d1:ad:cb:aa:2e:8d:41:42:1b:b1:35:eb:
         04:db:56:f3:e3:fc:ed:50:09:ab:21:99:28:15:22:a5:b3:9a:
         70:4c:03:99:d0:1f:77:53:d4:3d:ff:18:dd:ee:3f:fc:73:14:
         8c:ce:da:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 19 06:28:02 2024 by rpki-client on console-fra.rpki-client.org