Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/3231362e3234372e3130342e302f32342d3234203d3e20313430393032.roa
File:                     3231362e3234372e3130342e302f32342d3234203d3e20313430393032.roa (raw, json)
Hash identifier:          prSnSI14M/GpJ5lpi2O//vPJafprecaFXOJw+YRqNu8=
Subject key identifier:   25:AA:DB:04:8C:2F:F9:F9:42:67:72:F0:62:D4:0C:BF:F8:1F:A8:A5
Certificate issuer:       /CN=718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c
Certificate serial:       42C6C78E94FD7C27DD8FDD01A2A31964B9C0D364
Authority key identifier: 1D:1D:EB:CD:9F:2E:82:12:22:15:3A:C9:EF:50:37:6A:31:59:CB:90
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/3231362e3234372e3130342e302f32342d3234203d3e20313430393032.roa
Signing time:             Thu 26 Sep 2024 08:48:59 +0000
ROA not before:           Thu 26 Sep 2024 08:43:59 +0000
ROA not after:            Thu 25 Sep 2025 08:48:59 +0000
asID:                     140902
IP address blocks:        216.247.104.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/1D1DEBCD9F2E821222153AC9EF50376A3159CB90.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/1D1DEBCD9F2E821222153AC9EF50376A3159CB90.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/f0b1b436-193c-4209-a695-f168f9f2b3b0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/f0b1b436-193c-4209-a695-f168f9f2b3b0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 21:55:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:c6:c7:8e:94:fd:7c:27:dd:8f:dd:01:a2:a3:19:64:b9:c0:d3:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c
        Validity
            Not Before: Sep 26 08:43:59 2024 GMT
            Not After : Sep 25 08:48:59 2025 GMT
        Subject: CN=25AADB048C2FF9F9426772F062D40CBFF81FA8A5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:83:d8:d7:f8:51:3d:c4:6d:08:fc:6f:8e:0c:
                    12:e9:e4:18:9d:3d:1d:3c:5a:c0:ed:e0:37:32:72:
                    ab:a8:f7:42:47:8c:06:85:40:b1:80:5d:44:88:53:
                    99:3c:17:50:59:df:68:9c:7c:e6:d8:58:05:0a:0b:
                    35:83:23:f2:1b:1d:88:3b:fd:cc:d6:7a:b7:aa:08:
                    e1:c1:48:22:91:65:f1:2d:4d:b5:5d:6b:7f:a5:35:
                    d1:31:8f:3a:12:50:4f:9d:41:31:8d:db:bb:08:dd:
                    d8:91:64:e7:fb:39:38:fd:b4:7e:70:74:51:bc:cd:
                    b6:70:3f:2c:07:2c:ab:4a:b0:9a:89:70:fd:68:98:
                    13:21:1d:bb:1d:5b:74:fc:8e:4e:eb:d2:2e:3e:3c:
                    c0:03:fd:2e:1b:ab:b9:7c:c2:9b:64:4e:b0:34:41:
                    6b:ba:8a:9e:c9:af:03:7f:3f:a0:cf:ba:c5:68:59:
                    5c:d7:e8:8c:65:da:8c:98:d4:61:b4:98:84:88:d3:
                    41:47:55:11:d1:ac:78:0a:7c:d2:47:b3:e5:d1:d2:
                    00:0e:27:7d:ea:53:fd:ba:7b:e1:7d:94:68:a2:40:
                    8e:1b:bf:2d:8b:81:9b:46:2b:0a:34:b7:17:41:d5:
                    9d:fb:23:9a:ce:2f:7d:bb:5f:3e:29:a6:ed:31:5c:
                    c0:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:AA:DB:04:8C:2F:F9:F9:42:67:72:F0:62:D4:0C:BF:F8:1F:A8:A5
            X509v3 Authority Key Identifier:
                keyid:1D:1D:EB:CD:9F:2E:82:12:22:15:3A:C9:EF:50:37:6A:31:59:CB:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/1D1DEBCD9F2E821222153AC9EF50376A3159CB90.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/3231362e3234372e3130342e302f32342d3234203d3e20313430393032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.247.104.0/24

    Signature Algorithm: sha256WithRSAEncryption
         61:cb:6b:82:a6:24:3a:fe:ff:58:c4:1e:32:40:02:ac:7c:d7:
         00:7a:a9:bb:42:c2:da:d9:6c:50:47:18:0f:d7:b4:5f:7d:50:
         13:d2:cb:a2:b8:31:ad:98:05:7b:0c:1f:27:20:03:36:09:b8:
         f1:9a:67:f5:20:c7:82:94:db:fd:1a:af:b0:aa:99:4b:a1:64:
         7d:84:91:53:5c:58:f1:0d:d3:77:e6:09:98:c1:07:c5:17:de:
         f2:de:b1:e1:9f:1d:88:61:08:2b:cb:ae:36:b3:cd:64:4f:6f:
         f9:3b:37:6d:54:ea:13:f2:36:f3:63:cd:fc:34:c3:22:40:89:
         49:9d:f3:b3:25:b3:66:56:89:3f:1e:7b:de:88:63:d5:26:a3:
         4f:e3:3d:71:35:4f:2e:f8:46:cb:90:8b:76:37:58:ff:23:b2:
         7b:6a:10:db:4c:d0:e5:b7:34:dd:37:b8:d5:d1:32:53:b3:c4:
         fc:77:3b:cc:25:6d:78:a5:81:c4:63:32:5a:b1:9c:24:a5:b2:
         62:cb:bb:4c:34:4a:06:df:6a:a1:d6:a9:89:65:26:fe:79:67:
         f9:f0:e4:50:26:15:a1:49:28:4c:17:eb:90:ba:44:fe:e1:6f:
         f4:50:a4:36:95:e1:2e:a3:d8:09:ba:72:5d:1b:52:3f:63:da:
         e3:95:f9:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:34:39 2024 by rpki-client on console-fra.rpki-client.org