Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/3231362e3234372e3130342e302f32342d3234203d3e20313430393032.roa
File:                     3231362e3234372e3130342e302f32342d3234203d3e20313430393032.roa (raw, json)
Hash identifier:          HKeGe9ZqsSUUyHAIy+WfbmgOP3faWltA6NYBiXR7YtA=
Subject key identifier:   E7:72:83:6C:C6:CD:AC:33:AF:D1:D1:00:AB:7B:BA:1F:EE:65:64:AD
Certificate issuer:       /CN=718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c
Certificate serial:       6A65B5C31DEADDBAC39AE1D6C25D81F9B1EE54D0
Authority key identifier: 1D:1D:EB:CD:9F:2E:82:12:22:15:3A:C9:EF:50:37:6A:31:59:CB:90
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/3231362e3234372e3130342e302f32342d3234203d3e20313430393032.roa
Signing time:             Thu 26 Oct 2023 08:26:06 +0000
ROA not before:           Thu 26 Oct 2023 08:21:06 +0000
ROA not after:            Thu 24 Oct 2024 08:26:06 +0000
asID:                     140902
IP address blocks:        216.247.104.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/1D1DEBCD9F2E821222153AC9EF50376A3159CB90.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/1D1DEBCD9F2E821222153AC9EF50376A3159CB90.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/f0b1b436-193c-4209-a695-f168f9f2b3b0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/f0b1b436-193c-4209-a695-f168f9f2b3b0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 29 Apr 2024 02:48:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:65:b5:c3:1d:ea:dd:ba:c3:9a:e1:d6:c2:5d:81:f9:b1:ee:54:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c
        Validity
            Not Before: Oct 26 08:21:06 2023 GMT
            Not After : Oct 24 08:26:06 2024 GMT
        Subject: CN=E772836CC6CDAC33AFD1D100AB7BBA1FEE6564AD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:8b:c3:97:4e:a8:05:4e:9a:fb:76:c4:a8:f1:
                    55:8d:fa:23:6a:dc:02:61:76:11:5b:30:79:b8:9a:
                    d8:44:50:f3:dd:9d:44:b9:7d:95:ce:50:45:ca:78:
                    9f:b3:dd:7f:59:cc:95:6f:e7:71:ce:80:33:0f:40:
                    5f:09:eb:be:6d:1f:4d:cb:85:69:8b:a8:7f:16:2c:
                    c9:6b:cd:d4:44:e6:0c:02:52:51:2b:5f:4a:e0:bf:
                    b3:db:6e:fd:64:70:78:c7:fc:d0:30:c4:f0:0a:6e:
                    17:7b:f3:2e:05:3e:ff:f9:f9:74:63:92:23:f3:0e:
                    92:4b:48:a7:6c:f7:9c:4b:d1:ad:11:d7:6a:bf:4d:
                    f7:11:ec:0a:a0:52:b6:f7:97:9d:d3:73:2d:f2:6e:
                    8a:80:af:e0:00:f0:4c:af:b9:22:51:a9:fa:b2:55:
                    72:c2:ba:90:7b:70:5a:82:41:52:e7:86:46:66:9d:
                    7a:48:93:8d:37:52:83:fb:ea:65:3b:4a:2b:d6:04:
                    f6:37:44:15:a9:73:e5:e4:8c:15:f6:7c:d4:53:d9:
                    48:2c:1a:69:32:2b:65:6e:fa:52:2b:2c:48:ee:dc:
                    a7:3f:3c:2c:35:7c:79:5d:0d:85:4d:50:e5:69:a1:
                    c5:0e:f3:58:ba:5e:18:3a:53:53:bb:9f:ed:ec:67:
                    24:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:72:83:6C:C6:CD:AC:33:AF:D1:D1:00:AB:7B:BA:1F:EE:65:64:AD
            X509v3 Authority Key Identifier:
                keyid:1D:1D:EB:CD:9F:2E:82:12:22:15:3A:C9:EF:50:37:6A:31:59:CB:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/1D1DEBCD9F2E821222153AC9EF50376A3159CB90.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/3231362e3234372e3130342e302f32342d3234203d3e20313430393032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.247.104.0/24

    Signature Algorithm: sha256WithRSAEncryption
         63:e8:c7:29:28:6a:44:49:de:f1:c7:71:75:f2:15:34:e9:7f:
         6f:f1:e2:e0:2a:de:f2:9e:23:93:f0:ac:a9:b7:ff:5b:ce:90:
         78:53:ae:94:77:ee:e6:92:69:4b:16:ea:25:06:49:1d:d4:d9:
         68:24:85:20:97:99:c3:de:dd:f2:42:6f:29:48:d1:fd:a2:66:
         32:c2:53:0f:9d:6c:20:ed:bf:7d:39:2f:c3:4a:80:87:6e:19:
         56:b0:b7:ec:30:af:52:d3:b9:33:4f:51:de:0b:65:0a:d1:cf:
         55:1b:15:9e:b6:0f:f1:94:f1:d2:f4:bb:3f:ca:1c:0b:cb:03:
         2e:6f:f5:b5:90:dc:d6:62:92:cd:f5:61:36:d9:55:0d:79:6f:
         4e:56:c3:bc:78:ed:97:a6:09:3d:7f:53:26:2e:6b:bd:7a:60:
         6c:6c:06:bd:f5:c5:d6:c8:f6:81:2f:c0:cd:55:57:ab:ae:c1:
         c1:2d:79:e4:76:fc:cf:17:8d:f8:bb:07:85:0d:c2:f5:0a:b4:
         7a:74:30:c7:cb:fe:73:f6:df:5e:2d:7f:cb:71:dd:49:c9:ac:
         71:ca:76:55:28:0b:e6:b1:3a:90:93:57:cd:af:f1:ce:2f:67:
         18:3b:f3:f9:15:7e:f7:51:0c:cb:04:f2:5c:6d:5f:67:09:ed:
         70:3d:69:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 00:01:21 2024 by rpki-client on console-ams.rpki-client.org