Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/3231362e3234372e3130302e302f32322d3234203d3e203231373433.roa
File:                     3231362e3234372e3130302e302f32322d3234203d3e203231373433.roa (raw, json)
Hash identifier:          ytrVxzwbEJ7xHt8EY4XsEao/5LsknfjoBeSpHrKmnvs=
Subject key identifier:   95:71:8B:77:73:89:FB:CB:52:1C:A2:20:97:83:04:21:33:2A:71:CA
Certificate issuer:       /CN=718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c
Certificate serial:       4C2E45644DCDDDDD6966FAE9476606DBDC0A56E1
Authority key identifier: 1D:1D:EB:CD:9F:2E:82:12:22:15:3A:C9:EF:50:37:6A:31:59:CB:90
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/3231362e3234372e3130302e302f32322d3234203d3e203231373433.roa
Signing time:             Sat 20 Jan 2024 00:06:39 +0000
ROA not before:           Sat 20 Jan 2024 00:01:39 +0000
ROA not after:            Sat 18 Jan 2025 00:06:39 +0000
asID:                     21743
IP address blocks:        216.247.100.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/1D1DEBCD9F2E821222153AC9EF50376A3159CB90.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/1D1DEBCD9F2E821222153AC9EF50376A3159CB90.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/f0b1b436-193c-4209-a695-f168f9f2b3b0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/f0b1b436-193c-4209-a695-f168f9f2b3b0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 19:03:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:2e:45:64:4d:cd:dd:dd:69:66:fa:e9:47:66:06:db:dc:0a:56:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c
        Validity
            Not Before: Jan 20 00:01:39 2024 GMT
            Not After : Jan 18 00:06:39 2025 GMT
        Subject: CN=95718B777389FBCB521CA22097830421332A71CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:42:95:82:0f:c3:2e:6b:5d:c9:1b:10:a6:54:
                    e5:e5:15:b7:42:30:5c:0e:bc:9d:3f:4d:ea:0b:4d:
                    30:a8:f1:6d:90:48:c5:ff:40:52:6c:22:70:74:58:
                    30:6c:c7:32:68:e3:2b:1d:c4:17:42:2d:62:19:7f:
                    d5:52:f5:39:2c:95:9b:8c:ee:d4:c7:c6:f4:e8:73:
                    f7:7e:46:41:65:69:40:39:c4:e0:6f:61:54:53:97:
                    f1:e0:23:3d:d5:38:9a:de:62:80:95:6f:72:76:9f:
                    d8:81:79:be:9c:b2:4e:cf:fe:1d:f9:a4:1d:ca:c7:
                    72:75:9d:2b:e6:92:18:19:b0:64:8b:ad:c0:54:c2:
                    69:65:ce:0d:50:f4:17:22:e6:f6:3e:44:0a:1e:21:
                    e7:20:e1:9d:61:86:ee:db:f2:89:97:17:79:89:cd:
                    68:61:fe:1e:0b:85:49:25:92:0f:c7:16:3a:aa:25:
                    21:34:96:d9:9c:5f:d0:16:c7:22:0d:b9:87:6f:69:
                    7f:5c:24:65:ab:4e:ee:81:90:e8:41:54:87:cd:cc:
                    c4:c3:78:2b:34:ca:26:68:ba:99:f3:b9:dd:66:c9:
                    6a:ef:b5:ba:b6:7a:9b:7c:cd:20:7f:49:46:24:cc:
                    0e:81:42:da:80:8d:42:84:85:72:30:6b:eb:c7:f7:
                    ae:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:71:8B:77:73:89:FB:CB:52:1C:A2:20:97:83:04:21:33:2A:71:CA
            X509v3 Authority Key Identifier:
                keyid:1D:1D:EB:CD:9F:2E:82:12:22:15:3A:C9:EF:50:37:6A:31:59:CB:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/1D1DEBCD9F2E821222153AC9EF50376A3159CB90.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/3231362e3234372e3130302e302f32322d3234203d3e203231373433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.247.100.0/22

    Signature Algorithm: sha256WithRSAEncryption
         d3:38:44:af:7e:8e:46:ac:37:22:bf:67:10:78:5a:f8:ca:6e:
         12:1b:91:84:02:52:9a:98:61:91:24:c5:e2:af:fa:11:1a:66:
         5a:2c:41:dd:00:16:4b:c7:86:c5:ee:7a:ac:77:71:a9:fb:bd:
         f6:88:a4:98:7d:93:af:0a:9e:e1:d2:9d:c4:bf:58:70:62:28:
         14:20:d5:05:da:05:eb:3d:84:a8:1e:1d:be:36:8f:6a:2c:82:
         0a:f9:3b:5b:3e:da:23:d1:64:a3:bd:2c:db:ad:1c:5c:57:92:
         81:2e:c7:d3:30:57:f9:fa:fe:12:ab:c8:2e:cd:75:0a:b0:13:
         12:f5:a1:ce:2b:7b:bd:b9:f4:8a:c7:d1:1e:3e:1a:32:a0:67:
         4f:c5:6a:94:a9:f2:17:c8:c0:b1:8c:25:83:bd:22:bb:23:47:
         34:f8:55:7c:48:ba:45:60:c0:39:5c:00:ed:95:59:06:63:5e:
         cf:2c:3a:c0:f1:15:fc:8e:70:0a:d0:30:87:53:6b:f8:50:7c:
         8d:d0:ae:73:d4:be:ab:2a:04:26:b7:b5:83:1a:c3:d7:b3:4b:
         01:4e:c7:b9:6b:2b:53:8e:be:0f:94:dd:5c:24:d2:e0:b5:63:
         46:b9:6d:1e:9b:a9:0a:4a:79:63:c4:31:20:4d:0e:69:f7:ca:
         a4:e1:fe:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 18:45:14 2024 by rpki-client on console-ams.rpki-client.org