Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139382e33372e39362e302f32312d3234203d3e203137323136.roa
File:                     3139382e33372e39362e302f32312d3234203d3e203137323136.roa (raw, json)
Hash identifier:          AthWSkZuhyNp416WYZoLZjEFu6zcTDoz3/G4j0jFyOo=
Subject key identifier:   06:DE:E2:AF:AF:7C:75:2F:F0:EF:E6:6A:61:D7:3C:74:CD:C3:BD:76
Certificate issuer:       /CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4
Certificate serial:       7B68530B898867283C6884457963DA86A96B9D61
Authority key identifier: 62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139382e33372e39362e302f32312d3234203d3e203137323136.roa
Signing time:             Mon 30 Sep 2024 12:49:00 +0000
ROA not before:           Mon 30 Sep 2024 12:44:00 +0000
ROA not after:            Mon 29 Sep 2025 12:49:00 +0000
asID:                     17216
IP address blocks:        198.37.96.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/e203869d-6b95-465f-b4dc-088a5a2103fc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/e203869d-6b95-465f-b4dc-088a5a2103fc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 13:28:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:68:53:0b:89:88:67:28:3c:68:84:45:79:63:da:86:a9:6b:9d:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4
        Validity
            Not Before: Sep 30 12:44:00 2024 GMT
            Not After : Sep 29 12:49:00 2025 GMT
        Subject: CN=06DEE2AFAF7C752FF0EFE66A61D73C74CDC3BD76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:3a:03:33:d3:8e:ff:4d:e3:6f:cd:b6:83:df:
                    8e:20:01:54:48:63:a4:39:6e:ac:3c:b2:c2:11:5b:
                    c8:e4:6a:99:6e:7a:c6:5c:d7:ee:c3:05:ff:66:25:
                    47:18:ef:37:50:68:0b:b9:c3:f5:98:8f:ed:59:75:
                    4f:5b:8a:7a:39:ae:53:2b:f5:9c:b9:b1:92:10:e5:
                    7a:bb:52:d8:d6:5a:60:6d:89:e0:36:42:fb:8a:ed:
                    c0:a1:c8:66:0c:ef:31:d5:0e:a6:dd:67:47:76:22:
                    d6:84:9c:93:97:da:5b:5e:8d:1e:bc:d7:14:c7:45:
                    4e:dd:2f:ec:48:ad:26:28:61:b7:48:d1:98:ea:43:
                    ea:7c:84:9d:ef:d3:14:f7:61:28:fe:12:4a:a2:c0:
                    f6:c8:f0:0b:ff:5a:d6:19:29:6e:b1:7c:0b:bd:13:
                    84:f4:be:0c:28:fc:33:bc:d7:9e:ab:53:18:44:e6:
                    75:2b:51:73:09:e9:c0:50:2a:f0:97:03:29:ca:f3:
                    d1:85:82:f2:79:c6:ff:27:2c:d9:64:40:77:ac:e7:
                    2a:0f:73:3b:84:3b:37:a0:e2:12:f3:bc:d1:e1:04:
                    f7:b0:67:8f:3a:09:68:1b:ae:f0:03:f7:67:4a:f2:
                    95:f7:f9:ba:24:b7:dc:69:7f:84:5d:85:ba:38:3f:
                    cc:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:DE:E2:AF:AF:7C:75:2F:F0:EF:E6:6A:61:D7:3C:74:CD:C3:BD:76
            X509v3 Authority Key Identifier:
                keyid:62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139382e33372e39362e302f32312d3234203d3e203137323136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.37.96.0/21

    Signature Algorithm: sha256WithRSAEncryption
         4a:5b:dd:8b:68:05:1e:34:c6:85:ba:19:d4:cf:ed:3c:09:7c:
         48:7f:17:b9:2b:2e:95:8a:c5:a6:21:21:00:84:f8:5a:f7:63:
         f3:e7:9d:7a:b8:85:1b:60:20:f1:11:fb:26:de:e2:4a:d3:81:
         27:a1:b1:56:f9:67:17:0c:1f:30:07:9e:f0:3d:e2:b1:64:6e:
         4c:b0:1e:f7:fb:a3:8f:a5:89:df:ad:2e:27:a6:14:53:96:4f:
         44:20:b2:70:87:91:6a:d3:84:a5:eb:37:81:14:cc:6d:04:ae:
         be:cf:3b:76:05:3e:89:a8:75:74:dc:c4:ea:5a:e1:9e:c5:03:
         7d:78:f4:49:42:7e:a8:b0:5f:7a:bd:20:05:ef:db:a6:7b:73:
         e6:64:f4:1a:d4:d0:d8:3b:3f:54:39:91:12:7a:c8:a5:ad:fa:
         94:89:47:36:b3:76:bd:90:a2:3b:48:76:82:bf:93:6d:3e:9f:
         18:38:05:91:5a:57:b3:08:b5:75:92:40:f7:b0:41:2b:1c:1a:
         0e:cd:01:40:72:b5:97:95:08:d1:4d:41:1a:02:62:2c:97:65:
         6e:58:85:a3:10:e4:1b:e1:a0:7a:52:02:4f:0b:85:eb:0e:66:
         0d:51:12:09:1d:6a:1e:11:7e:71:c3:6a:a6:2d:b0:12:13:5a:
         18:fd:8c:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 13:39:41 2024 by rpki-client on console-ams.rpki-client.org