Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/3231362e3234372e3130362e302f32342d3234203d3e2039303039.roa
File:                     3231362e3234372e3130362e302f32342d3234203d3e2039303039.roa (raw, json)
Hash identifier:          Wl4p+6J3d85cDbaJ8sYLswWohPtXIiBgkrct18Ms6wU=
Subject key identifier:   D3:B3:A4:49:B4:84:DD:2E:F5:21:1D:3F:B3:A0:3C:F6:CA:1D:8E:AF
Certificate issuer:       /CN=718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c
Certificate serial:       120D20E7F28CC3C7C5FBF654B2F1DD0F8D2D3D90
Authority key identifier: 1D:1D:EB:CD:9F:2E:82:12:22:15:3A:C9:EF:50:37:6A:31:59:CB:90
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/3231362e3234372e3130362e302f32342d3234203d3e2039303039.roa
Signing time:             Thu 19 Oct 2023 13:09:55 +0000
ROA not before:           Thu 19 Oct 2023 13:04:55 +0000
ROA not after:            Thu 17 Oct 2024 13:09:55 +0000
asID:                     9009
IP address blocks:        216.247.106.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/1D1DEBCD9F2E821222153AC9EF50376A3159CB90.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/1D1DEBCD9F2E821222153AC9EF50376A3159CB90.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/f0b1b436-193c-4209-a695-f168f9f2b3b0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/f0b1b436-193c-4209-a695-f168f9f2b3b0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 29 Apr 2024 02:48:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:0d:20:e7:f2:8c:c3:c7:c5:fb:f6:54:b2:f1:dd:0f:8d:2d:3d:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c
        Validity
            Not Before: Oct 19 13:04:55 2023 GMT
            Not After : Oct 17 13:09:55 2024 GMT
        Subject: CN=D3B3A449B484DD2EF5211D3FB3A03CF6CA1D8EAF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:32:1b:b7:ec:16:a3:c0:69:64:65:1f:85:0f:
                    c5:bf:dd:f9:3d:45:f1:08:35:3c:d8:65:38:00:45:
                    e0:ec:72:7f:aa:cc:82:d5:fd:15:3c:03:d1:44:5f:
                    64:e5:eb:c6:99:70:57:e3:2d:e6:90:b4:55:09:f5:
                    0d:53:84:61:94:ab:37:ee:1a:a8:4d:98:69:9d:ba:
                    2d:cf:d7:e6:14:69:37:e2:3d:46:a7:b2:c3:99:de:
                    76:cc:b6:e4:9c:32:ac:5e:bc:92:20:41:e6:a2:98:
                    18:77:0f:f0:04:d9:f4:b9:08:ee:33:ae:37:bd:dd:
                    f7:97:c4:db:b3:8f:98:23:b5:7f:98:8a:42:b5:91:
                    f1:52:98:34:42:93:a5:f4:ea:f7:c0:98:3f:e2:8c:
                    2a:5c:a7:1f:b4:ee:b9:d2:9f:20:99:15:7b:b0:d1:
                    89:79:d9:d6:78:33:1e:97:1f:23:21:9e:82:cb:50:
                    f5:a2:7e:d0:50:48:9f:af:25:3e:a3:2c:f4:1f:5b:
                    9c:2f:f9:d7:1e:5d:b3:2f:5c:84:64:57:7e:1b:b3:
                    42:05:c4:a9:7c:e4:7f:aa:c3:4a:dd:8a:ca:78:78:
                    86:48:0e:03:7f:1a:90:fb:60:f7:41:56:54:aa:b3:
                    ec:02:84:16:c8:a2:08:4b:d3:2a:c4:5f:df:b7:01:
                    ad:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:B3:A4:49:B4:84:DD:2E:F5:21:1D:3F:B3:A0:3C:F6:CA:1D:8E:AF
            X509v3 Authority Key Identifier:
                keyid:1D:1D:EB:CD:9F:2E:82:12:22:15:3A:C9:EF:50:37:6A:31:59:CB:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/1D1DEBCD9F2E821222153AC9EF50376A3159CB90.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/3231362e3234372e3130362e302f32342d3234203d3e2039303039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.247.106.0/24

    Signature Algorithm: sha256WithRSAEncryption
         69:25:f7:a5:1d:b5:c4:a8:70:fb:1e:dd:87:24:8a:8e:c7:36:
         ee:13:41:8f:7a:09:0c:27:3e:00:ea:96:d5:5a:03:f8:c1:cb:
         0f:0e:17:28:28:c7:7d:65:00:c0:98:0f:cf:97:fb:c8:8b:1e:
         df:8c:cf:1e:3b:ac:04:b4:c5:01:a7:41:eb:e5:6e:e3:39:79:
         f0:f9:c6:2d:2d:69:f7:b9:c6:54:3c:94:1b:25:03:11:8e:42:
         f2:26:8b:4b:5b:7d:2a:27:9e:c0:59:9f:d1:6b:7e:62:c8:c5:
         a5:4e:08:a4:91:69:5d:ef:f6:fe:78:69:72:42:e3:d7:33:e8:
         d8:49:36:42:e1:6b:86:df:bf:68:9d:c0:d5:33:e1:a8:4e:4e:
         94:97:54:69:74:8b:f9:bf:ad:37:bd:18:86:d2:41:53:f1:fd:
         b7:19:72:7d:87:71:ae:09:fa:4d:d9:16:a6:9b:68:af:95:3e:
         63:21:25:d1:95:82:40:16:60:ab:65:38:a5:48:2d:18:0e:54:
         93:fa:2a:de:b5:5a:dd:05:e7:99:a6:5a:5b:b9:99:51:64:e1:
         a8:52:c5:0a:f2:09:00:de:80:bc:bf:aa:3d:1b:f9:41:2f:69:
         9d:a0:ac:c1:3f:fd:10:69:4f:27:54:5d:60:6b:4e:8e:9d:2d:
         02:82:15:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 00:01:21 2024 by rpki-client on console-ams.rpki-client.org