Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/3231362e3234372e3130382e302f32342d3234203d3e20383334.roa
File:                     3231362e3234372e3130382e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier:          eEmzp3nQaLtpM/9vicVqc5rYZl44HA/dIW68IR7mWdE=
Subject key identifier:   01:65:DF:68:B4:CD:1F:8D:EF:87:61:E8:8C:4B:7F:F7:52:60:6B:65
Certificate issuer:       /CN=718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c
Certificate serial:       644B2A4721BC685511D02343D85F1804DD4DE938
Authority key identifier: 1D:1D:EB:CD:9F:2E:82:12:22:15:3A:C9:EF:50:37:6A:31:59:CB:90
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/3231362e3234372e3130382e302f32342d3234203d3e20383334.roa
Signing time:             Thu 11 Apr 2024 10:05:55 +0000
ROA not before:           Thu 11 Apr 2024 10:00:55 +0000
ROA not after:            Thu 10 Apr 2025 10:05:55 +0000
asID:                     834
IP address blocks:        216.247.108.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/1D1DEBCD9F2E821222153AC9EF50376A3159CB90.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/1D1DEBCD9F2E821222153AC9EF50376A3159CB90.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/f0b1b436-193c-4209-a695-f168f9f2b3b0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/f0b1b436-193c-4209-a695-f168f9f2b3b0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 21 Apr 2024 12:24:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:4b:2a:47:21:bc:68:55:11:d0:23:43:d8:5f:18:04:dd:4d:e9:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c
        Validity
            Not Before: Apr 11 10:00:55 2024 GMT
            Not After : Apr 10 10:05:55 2025 GMT
        Subject: CN=0165DF68B4CD1F8DEF8761E88C4B7FF752606B65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:22:54:33:0d:a1:dd:8f:3e:a6:e2:c7:a9:0c:
                    e7:e4:e0:fb:3f:f0:e7:e1:9f:1b:e2:ce:bb:f3:f0:
                    3b:3a:39:e3:99:c4:c8:af:9e:97:09:b9:77:f1:12:
                    42:1f:99:12:e6:13:f9:56:c0:12:72:cf:48:39:4d:
                    10:a7:e6:0f:23:61:c5:aa:00:60:86:c4:c6:e7:fe:
                    03:e3:96:d6:ad:c8:f8:a4:24:e2:a2:b1:6b:ec:d5:
                    87:fa:1b:d1:bb:f6:89:49:5d:5f:da:c9:89:ca:21:
                    d9:5c:58:fc:50:c7:55:27:aa:9f:7b:a4:84:cd:25:
                    d4:bf:fc:1f:27:cd:ce:f4:f7:ae:c8:ca:08:ac:ca:
                    e1:0a:53:64:c2:9b:d4:de:aa:71:31:75:f3:5a:8b:
                    fb:03:91:c0:d9:34:6a:25:25:f3:ff:8a:b1:97:05:
                    a3:4d:4d:8a:77:6d:3d:15:d4:24:11:e5:43:37:d0:
                    95:18:47:19:54:0e:69:22:0b:8c:dc:3e:c3:22:9b:
                    4b:c8:c3:6a:eb:31:4f:23:d2:f7:db:ce:be:e6:4e:
                    0e:fb:74:dd:3b:c7:a2:0c:da:94:29:fa:80:7a:9b:
                    95:90:35:c2:6f:28:f6:ca:f7:5b:70:24:d6:0a:93:
                    40:e3:43:57:6f:22:74:e4:fd:b4:08:84:7a:e6:f7:
                    84:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:65:DF:68:B4:CD:1F:8D:EF:87:61:E8:8C:4B:7F:F7:52:60:6B:65
            X509v3 Authority Key Identifier:
                keyid:1D:1D:EB:CD:9F:2E:82:12:22:15:3A:C9:EF:50:37:6A:31:59:CB:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/1D1DEBCD9F2E821222153AC9EF50376A3159CB90.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/3231362e3234372e3130382e302f32342d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.247.108.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bc:b6:15:c3:ae:15:c0:87:3f:0e:45:89:b7:12:61:aa:36:4d:
         9c:2b:3b:3b:b5:eb:d7:ae:ac:ad:fc:77:7a:f2:f1:f7:47:9d:
         f5:20:7c:c7:e2:2b:6a:6a:9d:19:d4:cd:b7:07:01:f7:25:03:
         83:8e:bf:4d:07:ed:19:ad:07:25:0b:1c:3a:d0:d5:5d:52:57:
         88:50:4f:30:9f:30:a0:51:17:ef:84:a0:26:a2:78:a2:b1:09:
         48:a5:22:7b:2f:4f:7c:f3:47:53:34:78:19:e6:9a:6f:af:2d:
         5d:09:3d:b1:9c:5f:08:77:ed:c5:a0:5b:3e:ca:15:59:aa:e9:
         d1:a0:da:50:ef:9b:c8:ac:b9:2f:b4:0d:67:33:6e:ea:12:4b:
         95:94:3f:9e:5e:ac:f4:98:05:53:1a:68:0f:e8:43:fd:0c:55:
         c2:5e:37:41:76:34:a7:e5:6c:54:b3:5b:18:af:4e:27:c8:74:
         79:44:fd:61:67:e8:00:92:86:6c:20:dd:0a:9d:ca:50:fe:81:
         47:69:68:de:e5:c5:0f:af:95:1a:c2:29:73:3a:12:3c:b7:6c:
         72:f3:44:33:0a:2d:b4:57:b4:13:0a:8d:15:e2:48:44:6e:61:
         bf:02:1c:c7:44:ad:e3:60:63:34:0d:bf:c3:fb:dc:94:5d:9f:
         87:87:25:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 20 11:13:40 2024 by rpki-client on console-fra.rpki-client.org