Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/3231362e3234372e3130392e302f32342d3234203d3e203436353337.roa
File:                     3231362e3234372e3130392e302f32342d3234203d3e203436353337.roa (raw, json)
Hash identifier:          ihql+cr4d8cfjhBtIgMzBuS88MPvAiZ4cPvYd5TOSRA=
Subject key identifier:   9C:EC:3C:69:4B:AD:17:A1:AA:A6:06:EF:DB:C4:49:C6:31:1D:40:D0
Certificate issuer:       /CN=718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c
Certificate serial:       56A25DC399EF804C772EA77006B722898E5515AC
Authority key identifier: 1D:1D:EB:CD:9F:2E:82:12:22:15:3A:C9:EF:50:37:6A:31:59:CB:90
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/3231362e3234372e3130392e302f32342d3234203d3e203436353337.roa
Signing time:             Mon 30 Oct 2023 12:03:55 +0000
ROA not before:           Mon 30 Oct 2023 11:58:55 +0000
ROA not after:            Mon 28 Oct 2024 12:03:55 +0000
asID:                     46537
IP address blocks:        216.247.109.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/1D1DEBCD9F2E821222153AC9EF50376A3159CB90.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/1D1DEBCD9F2E821222153AC9EF50376A3159CB90.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/f0b1b436-193c-4209-a695-f168f9f2b3b0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/f0b1b436-193c-4209-a695-f168f9f2b3b0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 May 2024 17:52:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:a2:5d:c3:99:ef:80:4c:77:2e:a7:70:06:b7:22:89:8e:55:15:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c
        Validity
            Not Before: Oct 30 11:58:55 2023 GMT
            Not After : Oct 28 12:03:55 2024 GMT
        Subject: CN=9CEC3C694BAD17A1AAA606EFDBC449C6311D40D0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:e9:da:67:61:0a:b3:c6:93:f9:bb:db:ff:00:
                    22:1f:3b:71:e6:f7:a0:e6:36:de:73:93:58:ef:67:
                    59:a7:2a:bc:e4:49:00:84:b2:ee:f1:b4:50:75:65:
                    80:2c:2a:d0:de:62:4f:25:cb:d2:45:63:58:b4:a3:
                    58:d2:79:2e:4a:b6:71:9d:5b:cb:4c:7a:52:15:37:
                    72:6f:06:a9:3f:5b:35:1d:b0:b2:4b:bf:b6:4e:47:
                    1c:f6:ec:49:9b:09:c7:33:5a:99:2e:7d:e1:32:7a:
                    9f:fc:23:ab:78:e1:22:48:b1:ec:0b:b0:6d:4a:bb:
                    eb:cc:8f:bf:b2:a0:3d:27:32:b5:33:41:5d:4c:be:
                    c7:1a:48:b0:99:36:d1:6d:23:77:4d:7a:f3:c6:62:
                    14:a7:8b:b5:3d:7d:4b:53:ce:e4:55:3b:1f:27:1c:
                    39:82:d0:14:71:34:4c:0e:ac:a7:58:ab:cd:d1:4a:
                    be:34:1b:fd:f2:a1:d8:26:6d:d6:7c:de:59:f3:91:
                    a3:1e:24:f0:9a:de:12:77:1c:ee:31:42:a9:61:cf:
                    21:5c:45:c4:c7:dd:f1:5e:e1:bd:ed:80:fd:5b:42:
                    14:f8:23:c1:d9:8c:88:14:8c:a7:89:8c:c0:cd:21:
                    ef:f1:9b:a8:c2:3c:64:aa:0d:c6:3b:e6:ec:ae:1c:
                    98:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:EC:3C:69:4B:AD:17:A1:AA:A6:06:EF:DB:C4:49:C6:31:1D:40:D0
            X509v3 Authority Key Identifier:
                keyid:1D:1D:EB:CD:9F:2E:82:12:22:15:3A:C9:EF:50:37:6A:31:59:CB:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/1D1DEBCD9F2E821222153AC9EF50376A3159CB90.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/3231362e3234372e3130392e302f32342d3234203d3e203436353337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.247.109.0/24

    Signature Algorithm: sha256WithRSAEncryption
         17:49:83:04:60:b2:57:47:b1:b8:e7:fe:ff:46:db:11:16:3b:
         8c:86:a7:ed:06:6c:d2:9e:62:93:8d:20:a4:a1:99:c3:a8:27:
         4f:0e:2f:e2:18:a0:07:b5:ce:62:9d:7a:3f:3e:cc:da:2a:ab:
         92:6d:26:af:b5:9c:ca:01:09:3b:a2:a4:ed:6b:82:86:15:c0:
         e0:f4:6f:85:d9:70:a5:02:af:ea:a7:9e:bf:45:10:6a:a7:86:
         77:3a:fe:b7:53:80:7f:d1:ca:7f:2e:ae:aa:2e:11:f4:df:28:
         1f:2c:0f:3a:9c:2d:ed:e4:14:d8:0a:5e:63:e9:f0:8b:03:e9:
         86:ec:84:c6:8c:f5:25:be:af:21:5b:0c:76:95:55:6f:5c:7a:
         88:50:34:0d:c9:9c:e3:21:01:7b:f7:6a:99:88:7d:b4:6b:03:
         0b:59:ac:a1:e9:fc:ba:49:e5:a5:a1:02:ec:7b:a1:50:60:b0:
         fb:65:9c:aa:72:7b:26:91:9f:11:43:bc:39:6e:95:6b:c4:c3:
         56:67:32:0d:13:34:0a:8a:88:1a:42:e2:b5:d8:7c:86:0d:34:
         73:1f:51:5f:37:02:1c:4d:3d:e7:5f:3b:19:00:db:d8:54:75:
         f4:9c:8b:a8:c2:f9:22:7e:ed:0e:f1:ab:a7:cf:99:18:63:cf:
         51:ba:ba:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 22 20:07:14 2024 by rpki-client on console-ams.rpki-client.org