Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/3139322e3133382e3231302e302f32332d3234203d3e20333936383831.roa
File:                     3139322e3133382e3231302e302f32332d3234203d3e20333936383831.roa (raw, json)
Hash identifier:          B6M1knTF29zaiuJAwM9xLWiwL+0B91gOgDVLbK5cUp4=
Subject key identifier:   15:27:4E:91:E9:46:EB:C5:0F:AD:4D:F3:DF:44:22:AE:2C:FA:72:D9
Certificate issuer:       /CN=eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96
Certificate serial:       2C39904D77D7CF17707C4E35C971F0E7B9CB4107
Authority key identifier: 0F:03:31:2E:E5:9E:3D:E8:27:35:F6:6B:54:94:15:DE:44:64:78:75
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/3139322e3133382e3231302e302f32332d3234203d3e20333936383831.roa
Signing time:             Tue 05 Dec 2023 02:44:20 +0000
ROA not before:           Tue 05 Dec 2023 02:39:20 +0000
ROA not after:            Tue 03 Dec 2024 02:44:20 +0000
asID:                     396881
IP address blocks:        192.138.210.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/0F03312EE59E3DE82735F66B549415DE44647875.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/0F03312EE59E3DE82735F66B549415DE44647875.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/a01e997c-b89e-47c2-8d79-d31e58bc3ca4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/a01e997c-b89e-47c2-8d79-d31e58bc3ca4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 19 Apr 2024 18:42:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:39:90:4d:77:d7:cf:17:70:7c:4e:35:c9:71:f0:e7:b9:cb:41:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96
        Validity
            Not Before: Dec  5 02:39:20 2023 GMT
            Not After : Dec  3 02:44:20 2024 GMT
        Subject: CN=15274E91E946EBC50FAD4DF3DF4422AE2CFA72D9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:92:6f:26:0a:ff:d9:6c:87:7d:1b:eb:ab:fb:
                    df:2d:7d:ec:d1:89:69:62:ad:7c:2f:b0:13:da:84:
                    2b:73:d1:25:0e:a8:af:27:b4:cc:0d:a8:d9:c3:a5:
                    e0:e2:eb:a8:38:79:31:f8:47:f6:57:42:b1:be:7b:
                    6d:62:6b:99:4a:35:a4:a7:12:1f:a4:ca:c1:00:5b:
                    ca:d4:df:c7:9a:12:bf:89:4c:78:f9:07:6d:79:42:
                    62:9b:ea:17:7f:d7:a2:49:d5:ef:06:80:bc:ba:00:
                    29:3c:15:b1:01:9b:3f:47:8c:ad:3b:9e:e7:03:63:
                    3b:9f:a2:40:a8:e6:8b:10:53:82:a9:fb:6b:10:9f:
                    a7:c6:18:c5:ab:40:c8:ec:09:03:cd:71:b9:90:ff:
                    d6:35:7a:71:57:f2:f4:be:81:d2:03:af:4b:e3:ea:
                    8c:38:50:c1:67:90:d7:e8:47:ae:3d:e6:e3:c1:c3:
                    34:85:15:2c:8f:98:1c:6b:66:c7:d4:b8:2a:cb:96:
                    b6:26:98:91:74:49:46:49:6b:ad:95:2e:c8:a6:2f:
                    1f:b4:a4:44:70:b2:69:61:9b:c6:67:8c:41:d0:cd:
                    60:2e:3e:d3:25:66:d5:d2:a6:60:a5:44:c4:66:1e:
                    31:46:e4:57:8a:d3:f4:33:5f:ec:c8:cf:83:7f:d0:
                    1d:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:27:4E:91:E9:46:EB:C5:0F:AD:4D:F3:DF:44:22:AE:2C:FA:72:D9
            X509v3 Authority Key Identifier:
                keyid:0F:03:31:2E:E5:9E:3D:E8:27:35:F6:6B:54:94:15:DE:44:64:78:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/0F03312EE59E3DE82735F66B549415DE44647875.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/3139322e3133382e3231302e302f32332d3234203d3e20333936383831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.138.210.0/23

    Signature Algorithm: sha256WithRSAEncryption
         61:74:75:e2:6b:5b:8b:ca:e6:fc:fc:41:c4:7c:7a:20:08:f5:
         89:47:6a:c8:86:ca:25:0d:04:85:67:de:c3:64:3c:7e:10:5c:
         68:ac:f9:d9:d9:c4:fe:15:5b:1e:b7:04:09:34:ab:7b:61:34:
         7c:a4:40:31:68:17:de:6a:88:1c:f2:8f:05:25:c6:21:49:ff:
         ec:f2:a4:81:02:44:a4:4b:cb:12:e9:7f:55:c2:7b:de:77:fe:
         6a:dc:b1:af:d9:e7:17:26:af:d2:bf:59:8d:87:d2:43:75:18:
         34:93:da:92:cc:fb:7a:ab:b0:f5:58:f5:1c:37:94:64:58:1f:
         39:36:19:47:2d:af:e4:24:1a:63:09:34:06:be:f7:ae:e4:20:
         e4:19:6a:43:fa:14:9d:a8:62:9d:8f:38:f8:bf:04:21:b4:f5:
         cc:43:16:bf:a8:ec:c4:8c:34:50:7d:ae:c0:e9:5b:ae:05:49:
         ab:97:f5:32:0b:e1:43:d6:6c:eb:e1:51:79:ed:1e:1f:64:f7:
         2e:d6:dc:f3:a2:42:65:a1:97:73:26:fe:ad:d1:5b:ed:3d:ce:
         ed:93:a2:d4:32:1f:c3:60:eb:d3:0c:70:67:9e:66:50:ec:35:
         a7:4d:1b:99:fe:61:bc:78:89:05:d2:a0:e8:37:05:46:91:89:
         c7:02:7a:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 18 16:10:14 2024 by rpki-client on console-fra.rpki-client.org