Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/3231362e3132322e3131362e302f32322d3234203d3e2037393232.roa
File:                     3231362e3132322e3131362e302f32322d3234203d3e2037393232.roa (raw, json)
Hash identifier:          Gk8LOygfOltPdgBr5Hh/NenfVh4fLgyEvDPdm7kdO8Q=
Subject key identifier:   01:AF:0C:4C:8D:4A:EC:11:08:7D:95:93:23:07:23:C3:8B:08:18:86
Certificate issuer:       /CN=718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c
Certificate serial:       7D8E6138476EEA04659033C0DB770556C7FB6095
Authority key identifier: 1D:1D:EB:CD:9F:2E:82:12:22:15:3A:C9:EF:50:37:6A:31:59:CB:90
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/3231362e3132322e3131362e302f32322d3234203d3e2037393232.roa
Signing time:             Mon 13 May 2024 15:20:44 +0000
ROA not before:           Mon 13 May 2024 15:15:44 +0000
ROA not after:            Mon 12 May 2025 15:20:44 +0000
asID:                     7922
IP address blocks:        216.122.116.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/1D1DEBCD9F2E821222153AC9EF50376A3159CB90.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/1D1DEBCD9F2E821222153AC9EF50376A3159CB90.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/f0b1b436-193c-4209-a695-f168f9f2b3b0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/f0b1b436-193c-4209-a695-f168f9f2b3b0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 21:55:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:8e:61:38:47:6e:ea:04:65:90:33:c0:db:77:05:56:c7:fb:60:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c
        Validity
            Not Before: May 13 15:15:44 2024 GMT
            Not After : May 12 15:20:44 2025 GMT
        Subject: CN=01AF0C4C8D4AEC11087D9593230723C38B081886
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:65:de:34:33:bb:10:56:dc:ff:b9:9e:5f:86:
                    97:39:7d:a5:f5:48:e2:06:47:43:17:d6:7b:01:57:
                    6f:64:5c:1a:dd:b8:28:d2:c7:45:c1:1f:ec:d7:67:
                    d3:b5:ed:25:18:40:5e:44:12:04:00:c8:0a:f7:a9:
                    05:82:c5:80:50:8a:5e:a7:f3:ff:b9:33:e0:f1:05:
                    0a:c2:c9:18:0b:2c:58:7e:5d:7f:57:8f:c8:33:f2:
                    3c:2c:a0:b4:a2:18:d3:7b:d1:3f:20:21:55:24:f8:
                    4c:14:ba:09:85:4d:6c:86:78:ab:44:53:17:5f:6e:
                    53:4d:72:23:01:b6:7e:c0:fe:23:9b:bc:e7:9f:31:
                    0a:e2:a9:71:7a:66:89:ae:d9:47:ee:31:e5:1e:b5:
                    74:cb:9b:f8:fa:28:21:ce:54:ff:15:b3:22:8f:82:
                    03:5d:20:4d:71:83:f0:86:7f:47:46:da:7e:ac:85:
                    6a:8b:86:a2:1a:c9:15:8c:b9:7d:6b:8b:da:c8:16:
                    24:df:8b:13:c9:9e:0d:38:cb:52:9d:b9:b8:65:76:
                    ac:6a:41:5c:4d:d1:1a:7a:65:b4:1f:f1:43:cc:b5:
                    b4:aa:4c:2b:cd:93:b1:63:4f:fe:56:ce:69:12:a1:
                    c0:2c:7f:1a:6c:2c:d1:08:9b:a8:b1:67:b9:84:fb:
                    b0:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:AF:0C:4C:8D:4A:EC:11:08:7D:95:93:23:07:23:C3:8B:08:18:86
            X509v3 Authority Key Identifier:
                keyid:1D:1D:EB:CD:9F:2E:82:12:22:15:3A:C9:EF:50:37:6A:31:59:CB:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/1D1DEBCD9F2E821222153AC9EF50376A3159CB90.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/3231362e3132322e3131362e302f32322d3234203d3e2037393232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.122.116.0/22

    Signature Algorithm: sha256WithRSAEncryption
         14:43:e7:f0:78:15:03:0d:dc:a4:e0:ef:36:65:a5:d2:9d:c2:
         38:e3:92:59:f1:d7:3d:63:7e:26:6f:7d:2e:7a:f2:fc:aa:28:
         a3:85:29:24:2d:bc:50:5e:8e:f4:62:49:ae:bf:f3:b5:45:81:
         90:e7:b4:e1:98:00:b1:d8:ec:fe:15:93:29:2d:b0:66:0d:d0:
         ea:4c:04:96:cf:b4:dc:07:99:cf:92:9c:25:2d:b4:57:53:d4:
         d6:19:a9:98:76:54:12:13:6b:88:f4:64:db:18:c2:37:f1:b0:
         24:c4:a6:98:9c:16:89:2c:f9:b6:2a:07:0b:f6:ca:51:18:a9:
         8f:9f:66:74:65:f1:78:78:2e:c8:da:d3:d6:a6:10:14:c4:92:
         fc:6c:f5:6a:0c:0b:19:b0:1f:d4:07:33:4f:72:d8:9e:9c:5e:
         18:83:26:12:8f:55:e1:e8:1c:8e:c2:e7:19:76:3b:72:6f:2c:
         09:58:ed:c9:e1:42:a3:99:02:23:f6:9b:d0:b7:8a:08:cb:68:
         11:76:97:4d:a7:b9:5d:e9:92:97:31:7f:c9:65:04:40:ad:8d:
         b6:4f:a3:29:ac:db:6a:23:86:07:6e:33:95:d7:ee:a8:c1:be:
         25:17:58:26:17:fb:c9:b1:e6:a6:c1:fd:73:a6:2b:bc:05:86:
         c9:ee:3d:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:34:58 2024 by rpki-client on console-ams.rpki-client.org