Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/3231362e3132322e3132342e302f32322d3232203d3e203333343930.roa
File:                     3231362e3132322e3132342e302f32322d3232203d3e203333343930.roa (raw, json)
Hash identifier:          q5V52Ja0StiQyaEOUHk2Ag9s/7oLsUURFvn1N9kibKs=
Subject key identifier:   2C:BF:3D:E4:5B:EB:E2:99:CD:98:C5:BA:76:46:22:CD:03:9D:F3:3D
Certificate issuer:       /CN=718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c
Certificate serial:       74BDCF51BC8DAFEACFFB6B2919275BFEE9A8146C
Authority key identifier: 1D:1D:EB:CD:9F:2E:82:12:22:15:3A:C9:EF:50:37:6A:31:59:CB:90
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/3231362e3132322e3132342e302f32322d3232203d3e203333343930.roa
Signing time:             Tue 23 Jul 2024 14:50:59 +0000
ROA not before:           Tue 23 Jul 2024 14:45:59 +0000
ROA not after:            Tue 22 Jul 2025 14:50:59 +0000
asID:                     33490
IP address blocks:        216.122.124.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/1D1DEBCD9F2E821222153AC9EF50376A3159CB90.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/1D1DEBCD9F2E821222153AC9EF50376A3159CB90.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/f0b1b436-193c-4209-a695-f168f9f2b3b0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/f0b1b436-193c-4209-a695-f168f9f2b3b0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 19:03:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:bd:cf:51:bc:8d:af:ea:cf:fb:6b:29:19:27:5b:fe:e9:a8:14:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c
        Validity
            Not Before: Jul 23 14:45:59 2024 GMT
            Not After : Jul 22 14:50:59 2025 GMT
        Subject: CN=2CBF3DE45BEBE299CD98C5BA764622CD039DF33D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:3a:ec:6b:39:69:11:f4:26:d6:63:75:2f:22:
                    1b:40:c6:76:fd:7f:35:a1:b8:42:3f:cc:05:84:b9:
                    f6:b7:b3:28:d0:db:36:40:51:19:e6:56:58:8b:cf:
                    6d:a9:de:e5:31:ae:e1:17:3e:6b:05:92:d8:61:83:
                    8d:53:d3:20:dd:73:59:75:b3:f1:8d:43:e1:8d:81:
                    6b:fa:9b:98:9e:63:2f:ad:4b:1c:8b:59:36:ed:a0:
                    31:cc:1d:5e:87:40:a4:98:84:f8:be:17:29:c4:0c:
                    cc:11:bc:8d:30:18:d9:d7:a9:2a:9e:8a:92:80:69:
                    eb:46:92:74:ee:1a:76:e3:e4:92:5d:d8:26:ef:23:
                    79:e4:33:aa:65:e9:14:47:61:e5:ca:68:98:a1:8e:
                    12:99:f4:7b:6c:6f:51:10:1a:b7:a1:16:ad:6b:b3:
                    1d:23:3b:c1:9b:dc:4f:73:35:ef:70:06:65:e0:c5:
                    ea:a7:4a:2e:e2:af:54:37:3c:f0:a6:de:67:6d:1a:
                    af:92:5c:e4:37:a9:34:cf:25:c9:9c:a0:ac:60:55:
                    80:70:c2:e6:9f:cf:2b:9e:ee:51:95:d0:8d:79:ad:
                    81:85:ac:93:15:99:9f:7f:d4:58:1a:95:3c:41:7b:
                    da:2e:12:ec:ba:4c:a6:ff:57:26:7b:52:c1:5e:ce:
                    f9:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:BF:3D:E4:5B:EB:E2:99:CD:98:C5:BA:76:46:22:CD:03:9D:F3:3D
            X509v3 Authority Key Identifier:
                keyid:1D:1D:EB:CD:9F:2E:82:12:22:15:3A:C9:EF:50:37:6A:31:59:CB:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/1D1DEBCD9F2E821222153AC9EF50376A3159CB90.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/3231362e3132322e3132342e302f32322d3232203d3e203333343930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.122.124.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ae:62:8d:5f:e9:71:5c:eb:9c:e8:a3:44:d2:cd:59:4c:f3:81:
         28:ff:63:55:f5:f4:70:92:c6:c6:48:2d:f0:63:b3:3d:b6:50:
         3a:e0:4a:d8:f2:ce:25:ee:6e:a4:31:1f:ad:62:d1:86:09:de:
         5e:fe:91:12:e7:67:88:76:b9:1c:d6:0a:22:18:36:b8:86:4b:
         7d:6e:9b:9e:e4:e0:6f:d4:03:95:19:d9:43:42:fc:19:56:e7:
         21:01:4e:78:ef:7e:96:29:25:1e:d3:f6:c1:54:1a:9e:eb:57:
         dc:59:b7:d5:c9:43:32:ef:c7:69:ec:ba:ab:11:3e:6d:74:6d:
         72:cc:db:bd:a6:a7:43:d1:9d:26:ad:ca:74:2c:dc:56:bc:26:
         53:6c:bd:8e:08:36:28:77:ab:3f:ce:9b:32:65:39:fb:b7:98:
         f0:ea:32:f7:76:9c:54:10:59:4a:aa:4e:8c:2b:0f:19:a4:2c:
         ee:b9:40:38:7a:33:26:4b:9f:8b:cc:94:bc:eb:60:38:07:45:
         21:77:e6:b0:98:ac:b4:1a:05:92:92:50:0f:05:c0:ff:21:af:
         7e:3b:38:a1:5c:4a:ba:50:39:d0:9d:37:39:00:26:18:de:33:
         b0:fb:bb:73:bf:5c:8e:34:31:ec:13:f2:20:54:e8:d4:dc:5c:
         f7:d0:30:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 18:45:14 2024 by rpki-client on console-ams.rpki-client.org