Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/38392e3230372e3137362e302f32322d3234203d3e203631333137.roa
File:                     38392e3230372e3137362e302f32322d3234203d3e203631333137.roa (raw, json)
Hash identifier:          u7RsgqYqlyL9PDsHnXgbyRy1kObHqG7OjpLDI889w5o=
Subject key identifier:   3D:4E:FA:0F:48:48:5C:9C:C6:A1:AB:0C:63:7F:D4:6A:A2:6F:82:D9
Certificate issuer:       /CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4
Certificate serial:       1B64D34FB3F94976726A2676F47F34381A134092
Authority key identifier: 62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/38392e3230372e3137362e302f32322d3234203d3e203631333137.roa
Signing time:             Mon 21 Oct 2024 15:49:02 +0000
ROA not before:           Mon 21 Oct 2024 15:44:02 +0000
ROA not after:            Mon 20 Oct 2025 15:49:02 +0000
asID:                     61317
IP address blocks:        89.207.176.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/e203869d-6b95-465f-b4dc-088a5a2103fc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/e203869d-6b95-465f-b4dc-088a5a2103fc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 13:28:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:64:d3:4f:b3:f9:49:76:72:6a:26:76:f4:7f:34:38:1a:13:40:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4
        Validity
            Not Before: Oct 21 15:44:02 2024 GMT
            Not After : Oct 20 15:49:02 2025 GMT
        Subject: CN=3D4EFA0F48485C9CC6A1AB0C637FD46AA26F82D9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:96:fa:d0:22:f5:02:48:e8:04:c1:ef:8d:dd:
                    49:86:9f:f2:3d:9a:06:9f:2d:da:7d:89:eb:60:cb:
                    8b:75:13:f8:1b:db:53:b9:67:17:3e:33:b4:20:a0:
                    ae:97:90:f9:21:fa:f7:83:07:21:ef:68:17:6f:12:
                    d8:ee:fc:65:af:bc:a2:da:4d:13:d5:7d:21:d7:ac:
                    ee:ab:26:69:a5:28:06:49:1f:2a:cc:23:60:ce:b3:
                    72:98:e0:55:d2:f0:e1:76:05:f0:66:a1:99:f5:e7:
                    6e:8f:28:f9:e8:61:34:2f:33:8b:01:ab:1c:ed:c7:
                    22:60:40:29:7d:5c:b0:fb:64:9c:bc:43:67:44:c4:
                    40:a5:53:16:5a:92:38:f0:55:4c:44:7f:58:06:48:
                    86:0c:63:39:e5:dc:44:67:d3:f3:99:31:2f:00:2a:
                    09:6c:51:53:f4:97:65:35:4c:39:3a:cd:bd:a8:ac:
                    42:63:ee:bc:dd:34:81:11:a9:59:a0:12:52:01:09:
                    1f:05:8f:fe:ae:b4:54:4a:99:78:27:dd:0b:b4:0f:
                    fe:05:31:76:16:0e:b2:7e:26:0d:f4:ab:f7:36:bc:
                    64:41:3a:8b:6b:27:0e:af:46:78:fd:b9:4c:58:23:
                    e3:7a:5b:8d:48:33:e5:0a:3a:95:49:fd:5f:b3:ba:
                    9f:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:4E:FA:0F:48:48:5C:9C:C6:A1:AB:0C:63:7F:D4:6A:A2:6F:82:D9
            X509v3 Authority Key Identifier:
                keyid:62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/38392e3230372e3137362e302f32322d3234203d3e203631333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  89.207.176.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7c:22:3a:e1:e1:6e:bd:4d:ae:8b:ee:15:d2:1f:55:a5:15:7b:
         f7:2e:5e:0b:f3:ae:84:a0:0b:45:02:87:87:d6:ec:ab:b3:28:
         5c:68:ee:b0:31:da:e1:94:b0:35:76:ca:d0:02:37:62:76:61:
         05:12:d8:1e:33:6c:ae:f8:bb:8a:e3:be:d1:f0:a7:63:40:79:
         e9:3e:74:ea:e4:0a:78:e4:80:ec:6a:a9:57:b1:31:92:29:7e:
         05:90:60:d5:7f:0d:6e:4f:06:d5:54:2c:ed:ec:ca:73:d4:88:
         cc:a8:f3:d4:64:20:76:82:be:6a:5d:09:8d:be:b3:bf:ee:83:
         8f:11:83:4e:79:90:be:05:d1:f5:d4:f1:2f:e0:b1:1b:67:3b:
         10:2e:c7:2e:c0:2f:e3:35:a6:1e:26:31:c6:2d:38:3c:de:ea:
         3b:a8:99:e4:fb:33:1e:11:84:11:eb:5b:62:25:50:4a:3b:07:
         31:db:6a:fc:91:ea:64:3c:e8:7d:a5:a6:ab:8e:45:16:92:b8:
         67:54:c9:53:f8:b6:fd:bb:47:8b:7e:9a:79:fe:5d:97:2f:07:
         37:be:41:25:79:bc:38:72:de:84:03:b5:43:6f:6a:6a:cd:c0:
         d2:34:04:c1:17:59:80:45:d2:68:df:15:b0:98:19:8b:20:c9:
         6d:21:ca:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 13:18:46 2024 by rpki-client on console-fra.rpki-client.org