Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf91fb4c970192d786cefb171a/0/3139382e3137352e3136382e302f32342d3234203d3e20323133393930.roa
File:                     3139382e3137352e3136382e302f32342d3234203d3e20323133393930.roa (raw, json)
Hash identifier:          +Jj2/Gnbjtw4gtSLZx0zT24mI7Pq9NXCb7R331h4qcc=
Subject key identifier:   58:B8:03:3F:1E:D5:4E:9D:C6:00:1B:9F:17:5A:D4:5E:6E:4E:F6:6B
Certificate issuer:       /CN=215c6e6aaf9507c6d72a63f2edad9200a43dffd19007c125b6
Certificate serial:       7B6A8656CF4EE09B1913E1DE2C2887DFE12623FA
Authority key identifier: 1F:EA:38:F4:99:69:C1:A2:23:C0:B0:77:5E:64:FF:9C:4F:E5:04:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/14cc8f83-07a3-438f-8c3d-046fdc6f7861/215c6e6aaf9507c6d72a63f2edad9200a43dffd19007c125b6.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf91fb4c970192d786cefb171a/0/3139382e3137352e3136382e302f32342d3234203d3e20323133393930.roa
Signing time:             Tue 29 Oct 2024 09:07:36 +0000
ROA not before:           Tue 29 Oct 2024 09:02:36 +0000
ROA not after:            Tue 28 Oct 2025 09:07:36 +0000
asID:                     213990
IP address blocks:        198.175.168.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf91fb4c970192d786cefb171a/0/1FEA38F49969C1A223C0B0775E64FF9C4FE504E4.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf91fb4c970192d786cefb171a/0/1FEA38F49969C1A223C0B0775E64FF9C4FE504E4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/14cc8f83-07a3-438f-8c3d-046fdc6f7861/215c6e6aaf9507c6d72a63f2edad9200a43dffd19007c125b6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/14cc8f83-07a3-438f-8c3d-046fdc6f7861/14cc8f83-07a3-438f-8c3d-046fdc6f7861.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/14cc8f83-07a3-438f-8c3d-046fdc6f7861/14cc8f83-07a3-438f-8c3d-046fdc6f7861.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/14cc8f83-07a3-438f-8c3d-046fdc6f7861.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 22:19:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:6a:86:56:cf:4e:e0:9b:19:13:e1:de:2c:28:87:df:e1:26:23:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=215c6e6aaf9507c6d72a63f2edad9200a43dffd19007c125b6
        Validity
            Not Before: Oct 29 09:02:36 2024 GMT
            Not After : Oct 28 09:07:36 2025 GMT
        Subject: CN=58B8033F1ED54E9DC6001B9F175AD45E6E4EF66B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:bd:ba:6e:a9:41:83:35:ae:6b:67:aa:b8:18:
                    35:32:aa:e4:e3:84:1d:45:02:74:17:50:54:85:af:
                    ba:ca:e1:e0:0f:d5:cb:66:e4:47:00:ad:cb:be:3c:
                    a2:6a:ff:30:2d:ce:54:b1:a0:34:ef:d0:d0:a7:73:
                    e6:93:6e:b2:9c:2e:68:df:c6:17:22:4e:e6:b9:9f:
                    ae:c2:17:e7:ec:83:e5:8b:11:ad:b1:ef:d0:3d:35:
                    96:ad:38:32:59:3e:2e:4a:46:df:cb:05:04:06:3d:
                    7f:cf:0f:b1:50:ab:64:17:f9:d6:8b:9b:d0:49:98:
                    67:04:44:5a:d8:ab:49:8a:4f:57:2a:79:b2:7e:e2:
                    c2:5f:24:49:a9:4b:e6:5b:5a:a3:93:06:4e:ea:6c:
                    cd:24:39:5f:b3:da:15:ee:90:80:bb:d9:1d:c8:87:
                    6a:e5:45:9c:45:e3:45:8e:00:6c:f2:fc:75:5c:d2:
                    3f:41:da:cd:8a:97:63:f8:45:f2:20:d8:e4:e3:e5:
                    47:f5:b1:27:81:a5:52:e8:cf:d0:cc:4d:d7:43:46:
                    69:81:af:a6:16:d6:c4:06:6d:e3:14:13:6e:e5:47:
                    77:5e:e2:2b:9f:3c:27:59:71:e7:55:30:34:d8:8a:
                    9e:c0:6b:3b:ea:c2:e4:6c:ff:79:58:bc:3c:d7:9d:
                    c0:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:B8:03:3F:1E:D5:4E:9D:C6:00:1B:9F:17:5A:D4:5E:6E:4E:F6:6B
            X509v3 Authority Key Identifier:
                keyid:1F:EA:38:F4:99:69:C1:A2:23:C0:B0:77:5E:64:FF:9C:4F:E5:04:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf91fb4c970192d786cefb171a/0/1FEA38F49969C1A223C0B0775E64FF9C4FE504E4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/14cc8f83-07a3-438f-8c3d-046fdc6f7861/215c6e6aaf9507c6d72a63f2edad9200a43dffd19007c125b6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf91fb4c970192d786cefb171a/0/3139382e3137352e3136382e302f32342d3234203d3e20323133393930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.175.168.0/24

    Signature Algorithm: sha256WithRSAEncryption
         77:0d:48:7b:f7:6e:69:98:44:72:f0:8f:92:6f:00:4b:71:31:
         01:49:c0:4a:fd:a7:a4:2c:96:a6:9b:b2:08:17:5d:c5:7a:f8:
         50:a2:fd:7f:d9:0d:8d:05:9d:3a:f0:ea:1e:85:b6:65:56:31:
         2b:b5:43:eb:5c:3f:8e:2e:b0:e7:19:17:8e:84:a6:4d:68:90:
         67:32:d5:7e:32:81:2a:eb:cb:64:48:99:8d:91:09:ad:c9:69:
         ac:e9:e3:90:d5:c6:e7:a1:7b:6e:c6:c6:70:5b:91:14:32:c3:
         65:49:1a:cf:bb:62:1f:f0:42:a3:4d:f5:36:4d:aa:b5:61:38:
         e8:d3:84:6c:f1:a1:20:4f:ba:b4:d3:05:91:e5:cd:57:fa:0b:
         e3:a6:f2:a8:4a:fe:15:e7:b0:cb:51:77:92:33:7c:7c:2d:28:
         00:cd:44:68:78:c8:33:91:ab:1f:e6:1e:2f:bb:38:76:54:35:
         de:da:69:80:07:e8:cc:e3:a1:f7:34:a5:d0:0e:a8:46:66:1d:
         95:fa:85:52:59:29:c6:0e:5e:49:81:71:69:c7:b8:58:58:11:
         00:3e:0c:af:10:e2:ca:51:ad:b3:30:1d:6c:92:cc:2e:75:4c:
         6b:aa:a8:0b:7c:0f:a0:7a:f6:a7:ce:dd:9a:9a:5d:02:e1:74:
         46:78:27:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:03:25 2024 by rpki-client on console-fra.rpki-client.org