Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139382e33372e39362e302f32302d3234203d3e20333937333733.roa
File:                     3139382e33372e39362e302f32302d3234203d3e20333937333733.roa (raw, json)
Hash identifier:          Bip5nAmbRFXJ8EHKgHP0BPs1TPjL5tZm9TY02LceU2o=
Subject key identifier:   14:DA:5D:EA:0B:CB:55:EB:1A:51:ED:04:15:B0:06:4D:60:87:DD:39
Certificate issuer:       /CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4
Certificate serial:       448FA333626E8DA914FF5D115A7A584120C02348
Authority key identifier: 62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139382e33372e39362e302f32302d3234203d3e20333937333733.roa
Signing time:             Mon 30 Sep 2024 12:49:00 +0000
ROA not before:           Mon 30 Sep 2024 12:44:00 +0000
ROA not after:            Mon 29 Sep 2025 12:49:00 +0000
asID:                     397373
IP address blocks:        198.37.96.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/e203869d-6b95-465f-b4dc-088a5a2103fc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/e203869d-6b95-465f-b4dc-088a5a2103fc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 13:28:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:8f:a3:33:62:6e:8d:a9:14:ff:5d:11:5a:7a:58:41:20:c0:23:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4
        Validity
            Not Before: Sep 30 12:44:00 2024 GMT
            Not After : Sep 29 12:49:00 2025 GMT
        Subject: CN=14DA5DEA0BCB55EB1A51ED0415B0064D6087DD39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:6e:2f:06:77:e7:23:47:0d:a9:a5:ae:d5:4c:
                    79:45:a5:29:77:2b:db:18:1c:2f:1a:14:7a:12:d8:
                    ac:2c:7a:5a:2b:37:a0:b9:b3:8b:52:7e:2a:47:32:
                    b1:7f:0b:b0:5f:bf:69:73:bc:99:ea:92:18:c6:0f:
                    fc:00:cb:8e:64:24:8c:4d:f5:59:c0:d5:e1:e3:0b:
                    7a:a0:95:9d:f1:c6:1c:e6:0a:5c:eb:ed:bb:da:d2:
                    56:ba:d9:38:ef:c1:3e:9e:f4:8d:fc:52:ef:57:b8:
                    7c:0e:88:10:21:31:d9:56:92:5f:a0:bf:c1:36:91:
                    11:d9:df:2e:ad:71:31:a9:88:a8:43:2b:51:e8:ba:
                    31:e5:48:0f:48:06:71:41:77:5a:02:ab:5f:7d:dd:
                    73:c3:11:f1:52:94:fb:62:3b:01:e7:c3:49:9f:e7:
                    03:55:35:02:b6:36:2d:76:f1:7d:40:fc:26:ec:47:
                    a1:b3:45:a2:40:54:94:24:e8:5f:5f:07:df:81:a7:
                    35:1b:05:1c:bc:27:ff:af:79:29:7f:70:40:a8:69:
                    c8:c3:ab:2a:7d:8e:96:58:4a:89:a7:53:52:54:98:
                    d9:b3:b1:3b:cb:58:48:24:19:86:80:44:e9:7e:be:
                    ed:91:95:3d:39:d8:9a:5b:9c:ab:5f:eb:39:03:e2:
                    32:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:DA:5D:EA:0B:CB:55:EB:1A:51:ED:04:15:B0:06:4D:60:87:DD:39
            X509v3 Authority Key Identifier:
                keyid:62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139382e33372e39362e302f32302d3234203d3e20333937333733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.37.96.0/20

    Signature Algorithm: sha256WithRSAEncryption
         b8:7c:ff:94:14:62:e1:29:52:61:35:ae:3c:3e:65:2d:df:ae:
         f3:08:86:5c:fe:0c:e7:ee:a4:c9:64:d3:3d:0c:c9:e8:f8:e4:
         e2:00:d9:6a:0b:74:38:23:19:d0:1b:24:17:bb:d2:b2:d5:a3:
         0d:cd:6e:01:c9:b7:fc:5b:98:b8:97:92:ea:8b:b9:d7:41:77:
         76:ce:e1:64:b1:ab:99:93:f4:10:1e:bb:db:56:92:44:d5:b7:
         90:55:87:30:4c:71:67:ce:8b:36:30:38:37:c0:a2:b6:f4:31:
         a8:77:6d:37:8f:f4:21:40:fa:7f:68:8a:5a:6e:ce:5d:6e:5c:
         62:cc:46:f2:08:d6:c6:52:2a:ec:ed:86:14:bd:06:7d:4b:ea:
         ef:d8:e4:ad:c7:6b:80:2e:bb:9b:9b:6d:4b:ea:1f:6f:58:c3:
         36:42:d8:42:03:10:9f:bd:74:d2:50:55:6f:1d:58:17:08:d2:
         af:23:a0:7d:9c:83:b2:7e:2d:64:e9:92:81:15:64:20:0c:b1:
         c8:3d:cc:c6:0f:33:19:59:b4:2c:82:60:f2:96:a7:d3:71:44:
         5e:31:79:74:1d:0c:4e:0b:ca:39:11:60:d9:41:a6:ae:52:35:
         9e:bd:05:7f:13:8b:c5:d0:42:24:1a:5f:8e:7d:11:47:8a:34:
         2e:40:39:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 13:18:46 2024 by rpki-client on console-fra.rpki-client.org