Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139382e33372e39362e302f32302d3234203d3e20333937333733.roa
File:                     3139382e33372e39362e302f32302d3234203d3e20333937333733.roa (raw, json)
Hash identifier:          0z7GJMkP86z5n1LkRQWZi1iBQx1JjzhvXzGDMwZdBf8=
Subject key identifier:   94:DA:6C:EC:33:75:0F:54:0A:A4:3D:2D:FE:98:FC:56:F3:5C:90:35
Certificate issuer:       /CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4
Certificate serial:       382D58A2363CBF55EB8B76EDFE9CCCF5369146DC
Authority key identifier: 62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139382e33372e39362e302f32302d3234203d3e20333937333733.roa
Signing time:             Mon 28 Nov 2022 11:29:17 +0000
ROA not before:           Mon 28 Nov 2022 11:24:17 +0000
ROA not after:            Mon 27 Nov 2023 11:29:17 +0000
asID:                     397373
IP address blocks:        198.37.96.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/e203869d-6b95-465f-b4dc-088a5a2103fc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/e203869d-6b95-465f-b4dc-088a5a2103fc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 15 Mar 2023 20:20:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:2d:58:a2:36:3c:bf:55:eb:8b:76:ed:fe:9c:cc:f5:36:91:46:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4
        Validity
            Not Before: Nov 28 11:24:17 2022 GMT
            Not After : Nov 27 11:29:17 2023 GMT
        Subject: CN=94DA6CEC33750F540AA43D2DFE98FC56F35C9035
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:71:4a:2b:26:91:cc:6e:0b:f1:f7:bc:b8:83:
                    cf:47:99:e7:f6:bc:43:09:34:5f:55:ee:f7:b9:6d:
                    97:71:44:31:da:b3:d2:18:c2:15:83:65:e0:1c:0b:
                    0a:5b:4b:85:06:44:f6:8b:70:c8:a1:f5:ba:16:28:
                    f5:ca:e5:0d:7e:50:ce:36:5c:99:dd:99:17:e2:31:
                    eb:c9:64:17:88:d0:8a:68:a8:24:7f:42:28:90:a5:
                    1d:64:5d:49:da:6b:51:9c:9c:49:6b:80:e3:81:86:
                    69:df:d3:8e:94:16:e1:12:3e:b3:92:70:e3:52:0d:
                    6a:ec:5d:65:d5:53:8c:29:40:0e:e8:9f:7b:3d:49:
                    4f:21:cb:b5:41:53:ee:93:1c:b1:fb:39:d3:8b:07:
                    66:23:e0:f2:fd:72:a1:c5:e1:47:b7:37:9b:f7:a0:
                    ee:bc:34:42:e2:fd:96:50:77:f6:62:91:02:7a:f9:
                    79:a2:76:02:bb:f9:8e:a1:0e:e5:4b:a5:ad:55:a3:
                    48:dd:0c:87:ec:ff:76:fc:e1:25:5f:61:a1:a8:23:
                    f6:62:d3:50:0c:71:66:63:62:42:a4:c0:7c:13:78:
                    1c:f8:f6:c2:1d:13:d2:cb:1d:b2:a0:9e:08:e0:a8:
                    00:a4:27:23:ea:f8:0c:da:83:88:36:88:e0:b0:64:
                    00:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                94:DA:6C:EC:33:75:0F:54:0A:A4:3D:2D:FE:98:FC:56:F3:5C:90:35
            X509v3 Authority Key Identifier: 
                keyid:62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.crl

            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139382e33372e39362e302f32302d3234203d3e20333937333733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.37.96.0/20

    Signature Algorithm: sha256WithRSAEncryption
         01:c8:a6:6b:7f:90:c8:9e:b7:06:b4:25:c7:a8:cf:f5:a2:fc:
         be:17:eb:ba:8e:cb:dd:da:82:3f:dd:51:07:2d:14:60:9c:ed:
         d2:b9:5c:63:5d:4d:0b:ed:44:c7:cc:f1:e2:98:4a:b0:a3:fa:
         42:ba:cc:a1:3c:46:aa:2e:a3:66:74:0c:1b:c3:54:56:98:ae:
         54:da:2c:db:ef:92:2a:1a:d5:ff:0e:de:a6:54:79:a3:f3:98:
         e9:f2:0e:4e:8e:9a:d5:b1:62:2a:85:72:93:c4:7e:84:47:0d:
         a4:de:37:31:65:51:ae:c1:bf:02:96:74:31:32:31:91:b8:26:
         6e:65:cc:8c:92:70:0f:94:84:83:14:7a:45:58:5d:c0:47:d2:
         bc:15:97:aa:99:04:b8:a5:81:0f:13:1a:a1:79:2b:2c:2b:42:
         33:9d:d9:cf:a3:95:6b:20:c3:19:e8:9a:4e:4c:c1:b9:4c:02:
         9c:5a:e2:56:84:02:f0:65:69:db:c4:3b:9e:df:00:07:5e:7d:
         eb:d9:63:c7:26:15:3c:c7:ba:21:3f:26:30:7c:1a:bd:8c:72:
         e4:9b:1a:2f:92:65:36:6b:44:bb:13:23:18:8b:c1:de:a0:fb:
         d9:d7:fd:88:af:69:36:7c:96:27:36:24:45:8d:bb:6f:78:50:
         27:53:0d:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 15 11:42:39 2023 by rpki-client on console-ams.rpki-client.org