Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139382e33372e39362e302f32312d3234203d3e203137323136.roa
File:                     3139382e33372e39362e302f32312d3234203d3e203137323136.roa (raw, json)
Hash identifier:          RQdnieRK4mDR0b2S4PqYntTMI3UlzTIz1b/c/o4jYNs=
Subject key identifier:   82:49:85:FD:36:E5:0F:C5:7B:FF:A3:44:EF:81:48:1B:91:F5:C0:93
Certificate issuer:       /CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4
Certificate serial:       1FCE9071CE1B5894FBE9C2D03AB722571D92CF0E
Authority key identifier: 62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139382e33372e39362e302f32312d3234203d3e203137323136.roa
Signing time:             Mon 30 Oct 2023 12:03:59 +0000
ROA not before:           Mon 30 Oct 2023 11:58:59 +0000
ROA not after:            Mon 28 Oct 2024 12:03:59 +0000
asID:                     17216
IP address blocks:        198.37.96.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/e203869d-6b95-465f-b4dc-088a5a2103fc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/e203869d-6b95-465f-b4dc-088a5a2103fc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 26 Apr 2024 08:50:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:ce:90:71:ce:1b:58:94:fb:e9:c2:d0:3a:b7:22:57:1d:92:cf:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4
        Validity
            Not Before: Oct 30 11:58:59 2023 GMT
            Not After : Oct 28 12:03:59 2024 GMT
        Subject: CN=824985FD36E50FC57BFFA344EF81481B91F5C093
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:06:2b:20:dc:15:a5:e8:47:12:9d:71:af:b6:
                    71:f8:f7:1e:51:3b:87:69:17:e1:29:c0:31:24:eb:
                    68:47:f0:3c:9a:3d:70:f2:7a:48:f0:82:aa:ef:1c:
                    c3:9d:c4:da:ce:75:75:e7:1c:d4:0e:18:9f:9a:df:
                    f5:62:29:01:45:ad:ab:dd:c6:83:58:96:9e:dd:c8:
                    8b:48:6a:72:25:64:3f:47:52:ae:1b:ce:23:21:89:
                    c8:3f:34:df:71:66:df:14:0c:ea:47:d8:cf:f5:50:
                    1b:55:89:c4:fb:5a:ba:69:c4:19:ef:11:c9:8a:32:
                    1d:08:72:42:35:8f:f6:b2:f9:4a:32:b4:93:47:e5:
                    26:2c:22:2b:8d:e8:3c:85:a4:5b:19:bb:66:10:ba:
                    07:2d:f2:ef:6f:01:8d:c2:45:3d:b6:ce:9b:1e:6e:
                    65:ef:95:2f:ab:9a:3c:22:ed:0c:a3:19:cc:e8:6d:
                    7f:d3:78:b9:ad:e4:99:5f:d5:04:ec:05:d1:13:df:
                    ed:91:be:4d:2c:a4:4f:87:f0:2e:25:1f:78:3e:8a:
                    17:56:2c:a8:75:13:81:e2:6c:19:3a:9e:90:c6:af:
                    89:41:db:44:3b:5b:54:32:a3:75:98:40:cb:e2:99:
                    5e:f5:d0:e4:47:6c:8a:79:05:68:e5:92:57:ff:87:
                    dc:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:49:85:FD:36:E5:0F:C5:7B:FF:A3:44:EF:81:48:1B:91:F5:C0:93
            X509v3 Authority Key Identifier:
                keyid:62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139382e33372e39362e302f32312d3234203d3e203137323136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.37.96.0/21

    Signature Algorithm: sha256WithRSAEncryption
         17:d1:af:e9:69:24:33:e5:53:00:35:90:af:f2:4b:c4:ef:07:
         f5:cf:e4:45:e4:45:ce:ab:55:2c:2c:0a:64:3e:09:58:20:fa:
         45:37:28:8a:ab:96:3e:36:c2:8d:c3:aa:00:74:2a:3e:1c:ff:
         03:2c:aa:c2:31:d2:23:0d:ce:43:af:88:59:03:32:d4:f1:9e:
         cb:75:b2:e9:6b:5e:c5:38:d0:b7:07:59:e1:ea:c5:20:41:a2:
         6c:3a:10:0f:6a:23:1a:0c:59:7a:47:ae:8f:6c:a6:c0:8d:2c:
         48:90:ff:38:37:48:01:9a:19:29:5c:4d:8c:97:8e:5b:64:6e:
         5d:9f:49:63:7c:88:a6:e3:67:4f:85:11:70:8a:3c:5a:0e:23:
         e0:d1:e8:3f:32:d7:eb:76:0d:be:6e:90:a0:a6:13:33:0a:75:
         fe:0d:6b:41:9c:0f:17:96:f5:ff:06:4b:47:0f:65:a4:fa:84:
         6b:b0:5b:b0:a5:dd:69:7c:6f:c1:78:87:9e:6f:ed:c7:ef:e2:
         dc:ec:23:f3:9a:3a:91:b9:cb:74:07:3b:a1:8a:59:81:43:bf:
         d6:44:fb:da:ce:64:25:03:0c:1b:44:bf:91:2c:3c:14:9a:3f:
         58:41:c8:c3:a1:e7:cc:99:2d:3d:1b:97:cb:5a:7a:2d:2d:67:
         83:8c:6a:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 07:20:24 2024 by rpki-client on console-ams.rpki-client.org