Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139382e33372e39362e302f32302d3234203d3e20333937343233.roa
File:                     3139382e33372e39362e302f32302d3234203d3e20333937343233.roa (raw, json)
Hash identifier:          3zfJc2VCV2TkAonfd0vTSmK5gZtxjuYYS8ty58LPdso=
Subject key identifier:   78:90:AB:F1:D4:90:A1:9D:DF:3F:CF:5F:CE:11:40:F4:2C:C7:1A:34
Certificate issuer:       /CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4
Certificate serial:       2BDEC16810A9828383D7F22B05D69F30E4AEEC84
Authority key identifier: 62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139382e33372e39362e302f32302d3234203d3e20333937343233.roa
Signing time:             Mon 30 Sep 2024 12:49:00 +0000
ROA not before:           Mon 30 Sep 2024 12:44:00 +0000
ROA not after:            Mon 29 Sep 2025 12:49:00 +0000
asID:                     397423
IP address blocks:        198.37.96.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/e203869d-6b95-465f-b4dc-088a5a2103fc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/e203869d-6b95-465f-b4dc-088a5a2103fc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 13:28:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:de:c1:68:10:a9:82:83:83:d7:f2:2b:05:d6:9f:30:e4:ae:ec:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4
        Validity
            Not Before: Sep 30 12:44:00 2024 GMT
            Not After : Sep 29 12:49:00 2025 GMT
        Subject: CN=7890ABF1D490A19DDF3FCF5FCE1140F42CC71A34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:89:24:1d:f8:12:0d:65:ea:b5:04:64:7d:54:
                    f8:a5:11:70:94:25:68:1b:44:da:e5:17:9a:47:fb:
                    f9:14:22:c2:e2:54:cf:d3:ca:7f:1e:de:da:f8:76:
                    d4:52:fd:c5:e2:f0:17:fb:56:19:dd:ca:ac:f8:d5:
                    68:b6:04:6d:ad:2a:f8:4e:44:35:01:34:de:c8:79:
                    3b:0a:fb:f1:70:3a:c3:5d:d7:d0:2f:ee:58:88:cf:
                    8d:a9:70:26:fb:5b:6f:2e:b1:be:df:20:86:5a:00:
                    a4:c8:a1:ea:93:d1:34:4e:2a:25:39:3c:fd:2e:21:
                    a8:a6:73:e7:db:9f:5e:71:35:2d:4e:7f:4e:b8:ea:
                    de:d7:fd:b3:5c:91:72:2b:2f:88:8f:b9:c0:1f:62:
                    bd:97:2c:4d:22:b0:50:75:69:b2:30:03:5f:8b:e2:
                    b4:6a:5c:06:b4:d2:9d:1c:43:35:6d:b1:b5:e5:8a:
                    23:ef:46:6f:e1:28:93:5e:4c:a2:48:62:71:bc:29:
                    b4:a7:ad:d2:d3:88:7c:44:fe:09:69:7f:7c:0a:9f:
                    df:b5:e2:e5:92:03:c8:3c:1e:62:99:63:ca:4f:62:
                    da:3b:71:9b:b8:ea:64:b6:39:45:de:50:7c:e5:ff:
                    33:7e:2c:7a:8f:11:10:7a:0f:d4:44:2a:af:04:41:
                    76:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:90:AB:F1:D4:90:A1:9D:DF:3F:CF:5F:CE:11:40:F4:2C:C7:1A:34
            X509v3 Authority Key Identifier:
                keyid:62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139382e33372e39362e302f32302d3234203d3e20333937343233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.37.96.0/20

    Signature Algorithm: sha256WithRSAEncryption
         75:c2:e4:ab:5c:61:80:e4:35:12:d9:b7:bd:3c:0d:2c:25:14:
         74:e4:95:d0:a8:1f:e2:53:cf:f6:72:83:2c:ae:fb:90:c0:82:
         a8:65:88:27:c6:ab:d4:03:b9:37:08:d1:db:83:8a:56:73:48:
         b2:aa:b6:ac:b4:ef:be:8e:09:55:85:44:42:f6:5f:76:0e:15:
         2a:59:bd:80:07:cf:d9:82:0b:e9:1f:3d:a7:d4:69:96:33:28:
         04:dc:eb:0f:34:be:57:e0:d5:7c:bc:b9:09:22:49:3a:22:4d:
         df:80:de:e3:64:a1:ca:67:1c:01:4a:93:14:ef:20:a3:85:12:
         e1:50:97:30:9d:1d:88:df:45:eb:c2:db:bf:df:1c:b1:a9:e8:
         e6:47:a6:95:dd:8c:7c:22:36:e3:8b:fb:79:f0:08:95:99:a8:
         15:29:bf:96:69:b0:0e:64:94:ad:a2:a3:98:c8:56:b6:1f:df:
         05:3c:7a:0a:d4:13:db:be:d5:df:f2:c8:26:10:c0:c3:c8:a1:
         95:da:92:21:9f:c0:b0:48:85:be:5c:8b:81:87:7d:1c:68:47:
         cf:98:b6:c1:76:bc:ef:0d:dc:47:d7:eb:d2:2b:49:44:f9:dc:
         03:2b:1b:73:4b:26:9e:36:84:b8:96:4b:f1:ff:1b:d3:df:da:
         50:71:6a:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 13:18:46 2024 by rpki-client on console-fra.rpki-client.org