Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/3231362e3132322e3131322e302f32322d3234203d3e2037393232.roa
File:                     3231362e3132322e3131322e302f32322d3234203d3e2037393232.roa (raw, json)
Hash identifier:          iG4kRqSbr3vk+NM9Iwg/hZtpTojOk3s2oK7wQ1PymKE=
Subject key identifier:   9A:09:96:E7:CA:01:B2:AB:7F:B0:B1:F5:44:83:C8:09:F7:D2:CE:EE
Certificate issuer:       /CN=718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c
Certificate serial:       34006132B96356E7C722D2CCD7CF4F8112F1BC31
Authority key identifier: 1D:1D:EB:CD:9F:2E:82:12:22:15:3A:C9:EF:50:37:6A:31:59:CB:90
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/3231362e3132322e3131322e302f32322d3234203d3e2037393232.roa
Signing time:             Mon 13 May 2024 15:20:44 +0000
ROA not before:           Mon 13 May 2024 15:15:44 +0000
ROA not after:            Mon 12 May 2025 15:20:44 +0000
asID:                     7922
IP address blocks:        216.122.112.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/1D1DEBCD9F2E821222153AC9EF50376A3159CB90.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/1D1DEBCD9F2E821222153AC9EF50376A3159CB90.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/f0b1b436-193c-4209-a695-f168f9f2b3b0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/f0b1b436-193c-4209-a695-f168f9f2b3b0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 21:55:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:00:61:32:b9:63:56:e7:c7:22:d2:cc:d7:cf:4f:81:12:f1:bc:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c
        Validity
            Not Before: May 13 15:15:44 2024 GMT
            Not After : May 12 15:20:44 2025 GMT
        Subject: CN=9A0996E7CA01B2AB7FB0B1F54483C809F7D2CEEE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:95:ea:eb:57:b7:16:3f:e9:68:fe:9c:7a:fa:
                    c6:70:b2:4f:86:9d:58:4b:d0:c3:d0:5d:60:76:23:
                    2d:35:c4:35:da:51:fd:92:07:e4:2d:38:f0:60:b0:
                    9d:8e:51:8b:9d:1e:8d:45:e9:10:00:77:99:2d:83:
                    ce:ef:63:b7:60:2b:fd:38:5e:69:2a:89:de:60:a1:
                    c5:fe:e9:4f:be:bb:01:f1:d0:81:2d:e9:e0:0a:29:
                    39:a3:ee:f2:f9:6f:50:5b:8a:74:58:ee:30:eb:d7:
                    8a:77:e0:46:2f:25:20:49:51:fb:dd:22:0a:77:ee:
                    b8:89:d0:81:0f:9c:3a:66:3a:68:b4:96:f4:31:1c:
                    aa:d0:c0:66:2c:64:12:e6:09:56:74:fc:73:02:a9:
                    da:e9:bf:27:15:38:86:9f:4a:de:2b:1f:67:77:ae:
                    8f:11:7c:8a:36:c2:29:e1:80:be:d8:83:ba:9d:61:
                    78:20:d5:cc:d1:6f:86:cb:5c:d1:fb:74:81:ce:7e:
                    b1:2a:2d:79:a0:e6:f1:a9:fd:dd:63:21:36:3d:4b:
                    24:12:7a:98:08:e1:a1:d0:10:55:13:7e:56:1b:68:
                    42:39:ae:7e:52:07:e1:af:82:a4:44:34:62:32:ac:
                    c6:ec:f4:39:58:da:9e:6e:b1:5f:96:3b:30:21:a6:
                    e8:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:09:96:E7:CA:01:B2:AB:7F:B0:B1:F5:44:83:C8:09:F7:D2:CE:EE
            X509v3 Authority Key Identifier:
                keyid:1D:1D:EB:CD:9F:2E:82:12:22:15:3A:C9:EF:50:37:6A:31:59:CB:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/1D1DEBCD9F2E821222153AC9EF50376A3159CB90.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/3231362e3132322e3131322e302f32322d3234203d3e2037393232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.122.112.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0e:39:bd:a5:9e:60:fe:d5:1c:21:8e:da:36:54:6a:5f:3e:b8:
         23:a4:e3:1d:09:1d:5c:1a:ec:bc:ec:22:31:b3:6c:ca:bd:ed:
         2d:08:ae:31:88:57:a8:41:60:53:f7:f9:bb:d1:88:77:c4:d0:
         ee:9d:35:35:97:3b:d9:91:67:af:b9:71:4a:dc:b9:50:7f:c2:
         26:fe:f0:3d:39:a5:ed:3a:63:64:a0:0f:be:f6:c8:40:f1:52:
         3f:ab:c3:ca:41:a0:65:c8:62:6f:31:e0:36:91:40:4a:d5:93:
         b9:ae:00:23:ee:17:cc:1b:c9:45:77:db:19:9a:df:af:ea:1a:
         78:21:d5:fe:20:a4:dd:0a:dd:c7:ff:b4:f3:47:71:8a:dc:4c:
         52:aa:14:a5:aa:dd:55:67:18:ea:e8:5a:7f:77:27:9f:dc:a0:
         fe:22:c2:e2:ea:0b:ec:27:4a:23:95:20:5a:40:e3:3d:d2:e4:
         8a:8c:f9:99:67:78:94:ed:73:3f:aa:05:1b:19:d2:d6:91:cd:
         ce:b1:48:af:2b:17:3f:d3:df:7d:1e:dc:ae:4f:ce:54:26:6f:
         a5:2d:f8:43:94:40:2a:24:d8:ed:3c:ee:61:12:a3:c3:ed:99:
         c5:d0:55:94:4b:f8:18:c8:d2:b3:59:b7:21:6c:2b:dc:8b:b5:
         c3:20:ca:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:34:58 2024 by rpki-client on console-ams.rpki-client.org