Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/3231362e3234372e3130342e302f32342d3234203d3e203633303233.roa
File:                     3231362e3234372e3130342e302f32342d3234203d3e203633303233.roa (raw, json)
Hash identifier:          6cahG8OmNTH5YwrcG4SdtclcP5IzOInueq8M9j0pivQ=
Subject key identifier:   E3:6F:3E:6C:9C:55:7F:80:7E:14:5C:72:9D:B2:BA:76:96:70:85:AD
Certificate issuer:       /CN=718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c
Certificate serial:       74B9F3F370145D75F3252B112AF7E2E4B3D35499
Authority key identifier: 1D:1D:EB:CD:9F:2E:82:12:22:15:3A:C9:EF:50:37:6A:31:59:CB:90
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/3231362e3234372e3130342e302f32342d3234203d3e203633303233.roa
Signing time:             Fri 29 Nov 2024 21:36:44 +0000
ROA not before:           Fri 29 Nov 2024 21:31:44 +0000
ROA not after:            Fri 28 Nov 2025 21:36:44 +0000
asID:                     63023
IP address blocks:        216.247.104.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/1D1DEBCD9F2E821222153AC9EF50376A3159CB90.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/1D1DEBCD9F2E821222153AC9EF50376A3159CB90.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/f0b1b436-193c-4209-a695-f168f9f2b3b0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/f0b1b436-193c-4209-a695-f168f9f2b3b0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 02:30:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:b9:f3:f3:70:14:5d:75:f3:25:2b:11:2a:f7:e2:e4:b3:d3:54:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c
        Validity
            Not Before: Nov 29 21:31:44 2024 GMT
            Not After : Nov 28 21:36:44 2025 GMT
        Subject: CN=E36F3E6C9C557F807E145C729DB2BA76967085AD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:6d:72:92:a5:4c:96:d8:97:c0:35:44:76:35:
                    ad:13:71:85:0b:f0:4c:85:3c:34:54:21:bf:46:c1:
                    c1:36:38:00:e7:4b:79:b9:40:47:4d:c1:fc:f1:15:
                    7e:89:bd:3f:5b:62:0b:b1:ae:97:fe:55:44:ec:ac:
                    ef:59:1a:2e:bf:ef:ec:a5:6f:59:44:30:22:bf:9e:
                    94:37:8e:e7:d0:5a:f6:3e:e5:22:87:22:05:b0:a4:
                    17:84:97:90:13:51:65:06:74:b6:db:28:2c:d3:59:
                    f9:5c:a6:2b:b9:94:27:c6:5e:1c:40:39:fc:0b:91:
                    3c:8d:02:91:74:eb:8d:45:a1:a4:ca:06:7a:d5:97:
                    72:e9:12:d2:fc:74:7a:23:7e:f5:ad:f1:9b:bc:0d:
                    e9:24:52:ee:b7:82:85:cf:e5:cb:6b:62:f8:6c:1d:
                    4f:c4:92:c7:d6:64:79:82:8e:28:2e:cb:5a:57:85:
                    25:1d:e1:db:b4:45:44:c9:b6:1a:53:b0:43:10:6f:
                    6f:64:6f:eb:79:26:0e:bd:cb:49:03:19:55:f0:38:
                    f0:d8:d1:48:be:97:f2:b4:fe:f4:10:f1:9c:3d:d4:
                    4c:8e:f9:e5:e2:7b:db:67:c7:fb:c5:67:a9:4e:70:
                    ec:90:d0:0b:7b:b2:d1:55:cd:f1:9e:5d:20:12:c8:
                    fa:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:6F:3E:6C:9C:55:7F:80:7E:14:5C:72:9D:B2:BA:76:96:70:85:AD
            X509v3 Authority Key Identifier:
                keyid:1D:1D:EB:CD:9F:2E:82:12:22:15:3A:C9:EF:50:37:6A:31:59:CB:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/1D1DEBCD9F2E821222153AC9EF50376A3159CB90.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/3231362e3234372e3130342e302f32342d3234203d3e203633303233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.247.104.0/24

    Signature Algorithm: sha256WithRSAEncryption
         67:c6:d6:f2:60:bc:6f:a3:75:aa:15:a4:c5:db:40:a3:58:27:
         55:3d:45:0e:f2:0d:aa:2b:66:d3:56:43:bb:c7:9c:5b:27:ad:
         4a:7a:bf:f6:7a:a5:bf:50:0d:f2:04:f2:54:8b:55:2f:26:d8:
         51:96:57:b5:fe:53:6c:99:61:90:15:82:04:de:be:37:dd:82:
         d4:a1:47:99:d2:1d:9e:a2:49:dc:79:67:04:06:cd:fd:27:ae:
         99:98:0c:3e:e9:76:81:50:4e:58:e2:b0:cf:28:4f:8e:b2:cd:
         a3:e8:c5:75:eb:26:50:5a:ce:f7:b6:6d:c1:56:73:d4:eb:a4:
         7c:0e:f5:d2:a7:9c:03:2c:f1:b6:48:8b:84:18:06:73:f8:1e:
         e2:06:a4:7d:1b:05:32:42:d4:86:47:f3:2c:c7:d6:77:9e:c2:
         94:c2:c3:f7:1e:9c:7e:ed:d1:7b:f1:f1:c7:c4:be:e2:1b:ac:
         09:2b:3c:13:a7:6d:2e:12:a2:8e:5c:28:94:1c:b2:f5:f2:fa:
         0c:87:27:e8:d4:86:32:b5:09:41:03:9a:73:04:42:5d:6e:9c:
         47:d2:3b:ee:95:9b:45:93:96:8f:a7:ec:c1:20:5a:a1:00:7a:
         38:d2:cd:5f:22:a4:0f:6b:ef:5c:2f:f3:4c:61:a7:97:3f:5e:
         f4:86:44:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:38:43 2025 by rpki-client