Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf91fb4c970192d786cefb171a/0/3139382e3137352e3136392e302f32342d3234203d3e20323133393930.roa
File:                     3139382e3137352e3136392e302f32342d3234203d3e20323133393930.roa (raw, json)
Hash identifier:          U5SVzt+vCIdfwwHv2du0krtSzrTYqUmjdsINtMlOk60=
Subject key identifier:   37:8C:30:B7:9A:4E:79:CA:5A:5F:3B:8B:34:B5:6C:90:4F:67:F8:2F
Certificate issuer:       /CN=215c6e6aaf9507c6d72a63f2edad9200a43dffd19007c125b6
Certificate serial:       18EC90810D97E5EE5FC388D584B183D45C6CC395
Authority key identifier: 1F:EA:38:F4:99:69:C1:A2:23:C0:B0:77:5E:64:FF:9C:4F:E5:04:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/14cc8f83-07a3-438f-8c3d-046fdc6f7861/215c6e6aaf9507c6d72a63f2edad9200a43dffd19007c125b6.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf91fb4c970192d786cefb171a/0/3139382e3137352e3136392e302f32342d3234203d3e20323133393930.roa
Signing time:             Tue 29 Oct 2024 09:07:38 +0000
ROA not before:           Tue 29 Oct 2024 09:02:38 +0000
ROA not after:            Tue 28 Oct 2025 09:07:38 +0000
asID:                     213990
IP address blocks:        198.175.169.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf91fb4c970192d786cefb171a/0/1FEA38F49969C1A223C0B0775E64FF9C4FE504E4.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf91fb4c970192d786cefb171a/0/1FEA38F49969C1A223C0B0775E64FF9C4FE504E4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/14cc8f83-07a3-438f-8c3d-046fdc6f7861/215c6e6aaf9507c6d72a63f2edad9200a43dffd19007c125b6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/14cc8f83-07a3-438f-8c3d-046fdc6f7861/14cc8f83-07a3-438f-8c3d-046fdc6f7861.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/14cc8f83-07a3-438f-8c3d-046fdc6f7861/14cc8f83-07a3-438f-8c3d-046fdc6f7861.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/14cc8f83-07a3-438f-8c3d-046fdc6f7861.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 22:19:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:ec:90:81:0d:97:e5:ee:5f:c3:88:d5:84:b1:83:d4:5c:6c:c3:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=215c6e6aaf9507c6d72a63f2edad9200a43dffd19007c125b6
        Validity
            Not Before: Oct 29 09:02:38 2024 GMT
            Not After : Oct 28 09:07:38 2025 GMT
        Subject: CN=378C30B79A4E79CA5A5F3B8B34B56C904F67F82F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:6c:2e:10:d9:26:fe:1a:0a:ba:bc:f2:fd:2c:
                    a9:96:dd:4d:5d:63:19:3a:be:9f:bd:e6:18:78:64:
                    a1:8b:ef:1f:9d:c5:bf:b9:88:0d:6b:e3:8f:dc:85:
                    e3:2a:73:6c:7c:ff:c6:8e:df:00:93:0c:97:72:fb:
                    3f:19:47:f9:27:87:60:11:9f:3e:d8:85:e0:47:58:
                    95:5f:40:2e:21:2e:e8:b4:d1:31:e0:ac:85:21:e6:
                    d6:f3:cd:0a:17:eb:b9:fb:1a:57:3e:f5:79:e7:69:
                    99:49:79:dc:64:bf:e8:8c:34:1a:a4:b3:a2:1a:c0:
                    00:59:c2:41:b7:fd:12:9b:6e:5c:65:d6:e1:5a:30:
                    42:d4:80:74:95:88:86:6d:79:91:c5:c1:5d:df:a2:
                    42:e9:99:dd:ce:63:b8:ce:ea:aa:96:40:c8:20:c2:
                    ca:12:47:ab:41:16:94:59:32:3a:b0:07:1f:4c:77:
                    61:d4:c1:40:51:8c:81:4e:6c:7a:69:3b:10:aa:29:
                    29:70:87:7d:2e:b5:b5:6a:06:29:b1:8c:63:5c:de:
                    2f:2f:fa:53:1a:76:8a:b8:4e:da:d8:80:c1:5f:3a:
                    69:5e:23:e0:b6:de:bf:04:07:fb:03:85:b9:ba:a0:
                    c2:9c:29:94:81:47:57:2b:74:ff:c0:a3:8a:ed:1f:
                    c8:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:8C:30:B7:9A:4E:79:CA:5A:5F:3B:8B:34:B5:6C:90:4F:67:F8:2F
            X509v3 Authority Key Identifier:
                keyid:1F:EA:38:F4:99:69:C1:A2:23:C0:B0:77:5E:64:FF:9C:4F:E5:04:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf91fb4c970192d786cefb171a/0/1FEA38F49969C1A223C0B0775E64FF9C4FE504E4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/14cc8f83-07a3-438f-8c3d-046fdc6f7861/215c6e6aaf9507c6d72a63f2edad9200a43dffd19007c125b6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf91fb4c970192d786cefb171a/0/3139382e3137352e3136392e302f32342d3234203d3e20323133393930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.175.169.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8e:a0:68:f9:c3:6d:ff:52:93:cc:6f:e9:10:02:15:f8:09:df:
         33:41:75:64:ca:90:bf:e7:9a:ec:22:e5:c7:1e:e5:f1:93:a0:
         a9:6f:8e:88:fb:08:76:db:00:5c:84:dc:f1:00:e7:f1:e9:82:
         05:9a:29:5c:7b:04:72:f9:f1:4a:35:5c:c9:a6:bd:37:39:de:
         71:c6:64:ff:30:77:f3:76:7e:c0:80:b4:76:46:b9:7e:5e:a9:
         65:61:f3:af:e7:70:fb:1b:f7:70:eb:ec:05:f6:d6:9c:40:d0:
         b2:11:ea:d8:74:03:b6:2e:9a:e6:0b:e4:5a:9a:75:4a:c0:c0:
         15:bb:96:c2:fd:0b:b8:71:4c:27:05:be:e9:e6:9e:35:c8:b4:
         74:e2:09:27:4d:c4:58:1b:f4:8f:5e:82:27:d9:21:3b:00:42:
         03:7e:1e:8f:68:ed:49:b8:ff:3b:2e:68:a7:dc:41:00:4b:06:
         14:d3:4b:ae:e6:c5:19:71:f7:c0:7e:9d:42:da:8d:55:13:4c:
         60:65:86:5a:93:ea:25:54:66:80:03:7a:86:1e:11:72:af:77:
         e1:c4:63:cc:d0:37:78:e6:dd:a0:95:eb:0e:e0:98:24:7c:fb:
         d9:08:94:a5:05:43:59:8c:64:6b:80:32:44:20:6c:13:8e:64:
         f1:e0:d2:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:03:25 2024 by rpki-client on console-fra.rpki-client.org