Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8fded1a0019006e97cb128ef/0/3231362e3135312e3136342e302f32332d3233203d3e20333936333536.roa
File:                     3231362e3135312e3136342e302f32332d3233203d3e20333936333536.roa (raw, json)
Hash identifier:          /b5IzbI4W0nxdnrjr01mCcyDJ0XJTbGQZhG6cU2wxX4=
Subject key identifier:   51:ED:06:C3:C8:81:0D:14:F1:74:29:4E:03:28:DF:CB:97:1C:C2:44
Certificate issuer:       /CN=7e2bb4e56cdfe2f40f824abdccd9b523466eccddb306c90c5b
Certificate serial:       22F2FEB0DC4865EC6DB0E323E20C475BCC928515
Authority key identifier: C3:A3:D9:17:F4:39:9B:C2:6C:0A:68:77:18:2B:EA:3C:D9:FE:F4:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/efa01acb-51ec-4048-8589-d09390791aed/7e2bb4e56cdfe2f40f824abdccd9b523466eccddb306c90c5b.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8fded1a0019006e97cb128ef/0/3231362e3135312e3136342e302f32332d3233203d3e20333936333536.roa
Signing time:             Tue 25 Jun 2024 15:39:11 +0000
ROA not before:           Tue 25 Jun 2024 15:34:11 +0000
ROA not after:            Tue 24 Jun 2025 15:39:11 +0000
asID:                     396356
IP address blocks:        216.151.164.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade8fded1a0019006e97cb128ef/0/C3A3D917F4399BC26C0A6877182BEA3CD9FEF402.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade8fded1a0019006e97cb128ef/0/C3A3D917F4399BC26C0A6877182BEA3CD9FEF402.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/efa01acb-51ec-4048-8589-d09390791aed/7e2bb4e56cdfe2f40f824abdccd9b523466eccddb306c90c5b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/efa01acb-51ec-4048-8589-d09390791aed/efa01acb-51ec-4048-8589-d09390791aed.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/efa01acb-51ec-4048-8589-d09390791aed/efa01acb-51ec-4048-8589-d09390791aed.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/efa01acb-51ec-4048-8589-d09390791aed.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 03 Jul 2024 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:f2:fe:b0:dc:48:65:ec:6d:b0:e3:23:e2:0c:47:5b:cc:92:85:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e2bb4e56cdfe2f40f824abdccd9b523466eccddb306c90c5b
        Validity
            Not Before: Jun 25 15:34:11 2024 GMT
            Not After : Jun 24 15:39:11 2025 GMT
        Subject: CN=51ED06C3C8810D14F174294E0328DFCB971CC244
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:02:7d:a0:0d:46:d1:1b:38:a0:c9:af:90:97:
                    29:48:9f:eb:62:56:56:96:8e:f8:c8:27:0e:bf:e0:
                    d8:81:70:1b:e5:0e:06:e9:75:9b:ca:24:70:90:56:
                    59:df:3f:b5:5a:26:c1:62:2b:4e:d9:f3:d5:6f:00:
                    d9:a0:cf:ad:d5:0b:e7:79:d4:2b:37:38:b9:69:b3:
                    4a:1c:e3:8c:d6:b8:67:f9:18:a7:f5:67:89:84:4a:
                    df:46:6f:48:d3:4d:dd:36:37:f1:80:3f:57:fb:84:
                    29:4e:73:d8:78:a9:24:d9:26:90:5f:85:4b:61:d8:
                    7a:76:9f:6b:31:84:ba:e7:6b:39:40:56:35:f0:d2:
                    0f:3f:43:1d:3c:9a:4a:a4:ae:79:85:38:9c:5f:95:
                    fd:15:0e:c2:7b:4f:94:77:4a:a7:8e:21:1b:44:56:
                    55:20:ec:ab:fa:d1:7d:63:61:b9:0e:b4:fc:5b:b2:
                    b9:52:6b:49:ec:e3:4d:8b:70:ed:74:48:60:06:00:
                    2a:4c:64:4a:8a:07:60:7e:92:69:50:81:fd:72:aa:
                    86:d1:32:0d:7f:2f:cb:dc:39:a3:a5:52:b6:1e:da:
                    33:e0:0c:40:13:b2:69:be:5c:92:39:2e:d7:7e:45:
                    4b:af:ee:f3:ec:e4:ef:f4:01:a2:72:ee:22:63:8f:
                    da:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:ED:06:C3:C8:81:0D:14:F1:74:29:4E:03:28:DF:CB:97:1C:C2:44
            X509v3 Authority Key Identifier:
                keyid:C3:A3:D9:17:F4:39:9B:C2:6C:0A:68:77:18:2B:EA:3C:D9:FE:F4:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8fded1a0019006e97cb128ef/0/C3A3D917F4399BC26C0A6877182BEA3CD9FEF402.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/efa01acb-51ec-4048-8589-d09390791aed/7e2bb4e56cdfe2f40f824abdccd9b523466eccddb306c90c5b.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8fded1a0019006e97cb128ef/0/3231362e3135312e3136342e302f32332d3233203d3e20333936333536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.151.164.0/23

    Signature Algorithm: sha256WithRSAEncryption
         91:7b:f9:78:4a:6c:af:0e:35:9d:3d:21:7b:e2:1f:66:cd:b2:
         9f:21:99:78:4c:c7:e8:e5:a3:e5:12:b5:42:1b:95:fb:4b:8f:
         39:46:f7:c7:ec:80:2b:c3:ff:42:84:a0:ad:4c:af:ea:87:08:
         74:e7:d7:cc:2c:13:92:c4:70:03:70:1c:0e:41:33:9b:78:f1:
         25:2b:df:73:4d:aa:49:70:3f:73:85:a8:46:59:0f:72:25:b3:
         ad:34:ba:1b:54:a2:a4:ec:21:f1:09:f6:99:cb:99:fb:b6:57:
         38:c1:91:8a:b0:97:da:d5:22:e1:90:71:87:66:61:c5:f3:af:
         0e:8a:4a:d0:2b:5d:28:f3:e3:e4:a8:09:da:95:1c:01:99:67:
         dc:5d:57:3f:3c:55:c1:d9:51:14:89:41:b2:e8:92:c6:61:50:
         e0:27:b8:fc:34:7e:92:74:76:2e:a1:e9:41:27:18:d4:88:dd:
         b4:2b:60:b1:73:9f:80:73:da:c1:79:91:1c:7a:4f:0b:f7:06:
         ea:a1:f5:d8:d8:bd:54:89:be:f9:96:f4:73:d7:db:ae:68:bc:
         b3:df:35:47:1d:e2:64:94:de:7c:37:42:bb:9d:84:b0:ff:9c:
         ea:56:d3:80:e8:1f:1c:88:cd:4f:f0:ac:72:7f:78:4a:14:45:
         48:c3:26:7b
-----BEGIN CERTIFICATE-----
MIIFtjCCBJ6gAwIBAgIUIvL+sNxIZextsOMj4gxHW8yShRUwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyN2UyYmI0ZTU2Y2RmZTJmNDBmODI0YWJkY2NkOWI1MjM0
NjZlY2NkZGIzMDZjOTBjNWIwHhcNMjQwNjI1MTUzNDExWhcNMjUwNjI0MTUzOTEx
WjAzMTEwLwYDVQQDEyg1MUVEMDZDM0M4ODEwRDE0RjE3NDI5NEUwMzI4REZDQjk3
MUNDMjQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArgJ9oA1G0Rs4
oMmvkJcpSJ/rYlZWlo74yCcOv+DYgXAb5Q4G6XWbyiRwkFZZ3z+1WibBYitO2fPV
bwDZoM+t1QvnedQrNzi5abNKHOOM1rhn+Rin9WeJhErfRm9I003dNjfxgD9X+4Qp
TnPYeKkk2SaQX4VLYdh6dp9rMYS652s5QFY18NIPP0MdPJpKpK55hTicX5X9FQ7C
e0+Ud0qnjiEbRFZVIOyr+tF9Y2G5DrT8W7K5UmtJ7ONNi3DtdEhgBgAqTGRKigdg
fpJpUIH9cqqG0TINfy/L3DmjpVK2Htoz4AxAE7JpvlySOS7XfkVLr+7z7OTv9AGi
cu4iY4/aLwIDAQABo4ICtjCCArIwHQYDVR0OBBYEFFHtBsPIgQ0U8XQpTgMo38uX
HMJEMB8GA1UdIwQYMBaAFMOj2Rf0OZvCbApodxgr6jzZ/vQCMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlOGZkZWQxYTAwMTkwMDZlOTdjYjEyOGVmLzAv
QzNBM0Q5MTdGNDM5OUJDMjZDMEE2ODc3MTgyQkVBM0NEOUZFRjQwMi5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNmVhZDA3M2MtYjlmMC00NTIzLWIzOWUtYTNjN2Rh
Yjk3YzI1L2VmYTAxYWNiLTUxZWMtNDA0OC04NTg5LWQwOTM5MDc5MWFlZC83ZTJi
YjRlNTZjZGZlMmY0MGY4MjRhYmRjY2Q5YjUyMzQ2NmVjY2RkYjMwNmM5MGM1Yi5j
ZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZThmZGVkMWEwMDE5MDA2
ZTk3Y2IxMjhlZi8wLzMyMzEzNjJlMzEzNTMxMmUzMTM2MzQyZTMwMmYzMjMzMmQz
MjMzMjAzZDNlMjAzMzM5MzYzMzM1MzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAHYl6QwDQYJKoZIhvcN
AQELBQADggEBAJF7+XhKbK8ONZ09IXviH2bNsp8hmXhMx+jlo+UStUIblftLjzlG
98fsgCvD/0KEoK1Mr+qHCHTn18wsE5LEcANwHA5BM5t48SUr33NNqklwP3OFqEZZ
D3Ils600uhtUoqTsIfEJ9pnLmfu2VzjBkYqwl9rVIuGQcYdmYcXzrw6KStArXSjz
4+SoCdqVHAGZZ9xdVz88VcHZURSJQbLoksZhUOAnuPw0fpJ0di6h6UEnGNSI3bQr
YLFzn4Bz2sF5kRx6Twv3Buqh9djYvVSJvvmW9HPX265ovLPfNUcd4mSU3nw3Qrud
hLD/nOpW04DoHxyIzU/wrHJ/eEoURUjDJns=
-----END CERTIFICATE-----
Generated at Tue Jul 2 15:26:25 2024 by rpki-client on console-fra.rpki-client.org