Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/3231362e3234372e3130352e302f32342d3234203d3e20333939313232.roa
File:                     3231362e3234372e3130352e302f32342d3234203d3e20333939313232.roa (raw, json)
Hash identifier:          UsGm8rWooYrTT+AA5K0hr/XCa06u0s2pTaqVAZ8IUU4=
Subject key identifier:   FB:55:AC:AA:EA:1B:1C:EA:F4:EF:CA:35:AB:50:75:B3:C1:77:B0:FE
Certificate issuer:       /CN=718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c
Certificate serial:       5EC174117199680EB232FEF19D746A638BC10707
Authority key identifier: 1D:1D:EB:CD:9F:2E:82:12:22:15:3A:C9:EF:50:37:6A:31:59:CB:90
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/3231362e3234372e3130352e302f32342d3234203d3e20333939313232.roa
Signing time:             Mon 30 Sep 2024 12:48:59 +0000
ROA not before:           Mon 30 Sep 2024 12:43:59 +0000
ROA not after:            Mon 29 Sep 2025 12:48:59 +0000
asID:                     399122
IP address blocks:        216.247.105.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/1D1DEBCD9F2E821222153AC9EF50376A3159CB90.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/1D1DEBCD9F2E821222153AC9EF50376A3159CB90.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/f0b1b436-193c-4209-a695-f168f9f2b3b0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/f0b1b436-193c-4209-a695-f168f9f2b3b0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 21:55:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:c1:74:11:71:99:68:0e:b2:32:fe:f1:9d:74:6a:63:8b:c1:07:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c
        Validity
            Not Before: Sep 30 12:43:59 2024 GMT
            Not After : Sep 29 12:48:59 2025 GMT
        Subject: CN=FB55ACAAEA1B1CEAF4EFCA35AB5075B3C177B0FE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:73:02:59:6c:68:8d:b5:a6:dc:17:7d:88:62:
                    75:71:4d:4d:97:7b:a6:c3:42:fc:7f:a0:e4:33:5e:
                    a4:8e:0e:d1:fc:05:22:fc:46:32:11:96:18:01:dc:
                    11:cf:ca:ea:39:38:80:7e:29:09:77:e9:45:7c:cd:
                    3c:81:90:f6:79:e2:30:a8:e8:ec:f2:ae:dd:75:6d:
                    13:46:7f:a6:f5:01:29:5e:5f:a6:3d:4d:b2:e4:bb:
                    4b:72:dc:73:1c:b3:71:2b:7c:74:fb:4e:92:49:5e:
                    a7:fb:83:e8:2e:11:08:6c:63:91:47:7e:fb:aa:f1:
                    c0:05:a1:2c:7b:bc:3e:eb:cb:23:d6:95:7c:39:1e:
                    9f:80:34:c9:b5:c6:9a:ea:be:b7:1f:e3:36:22:32:
                    ce:07:6e:33:5f:5c:3f:e8:98:35:82:8b:18:24:a6:
                    a6:2d:33:ee:a0:aa:9a:19:d5:8f:6a:97:6e:18:11:
                    ad:a5:a3:2f:5d:a8:d6:89:de:d1:5c:8b:f0:68:7f:
                    74:1f:5e:26:43:db:dd:6d:e8:be:35:f5:ed:85:76:
                    21:04:55:d9:30:91:8e:dc:42:8e:9f:42:61:76:7a:
                    5a:cc:39:2a:aa:4a:cb:89:94:8d:fb:f3:11:08:11:
                    be:33:80:2e:6e:87:92:2e:f3:29:72:9f:1f:22:f6:
                    71:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:55:AC:AA:EA:1B:1C:EA:F4:EF:CA:35:AB:50:75:B3:C1:77:B0:FE
            X509v3 Authority Key Identifier:
                keyid:1D:1D:EB:CD:9F:2E:82:12:22:15:3A:C9:EF:50:37:6A:31:59:CB:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/1D1DEBCD9F2E821222153AC9EF50376A3159CB90.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/3231362e3234372e3130352e302f32342d3234203d3e20333939313232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.247.105.0/24

    Signature Algorithm: sha256WithRSAEncryption
         64:19:6b:f8:cb:78:34:b9:65:fe:52:6c:cf:65:39:80:49:ff:
         7d:6b:dd:37:be:71:60:b5:8e:82:b8:5b:ab:96:2c:03:f0:3d:
         6f:8a:ae:61:26:15:7c:2c:60:d0:c3:d4:3e:de:32:20:7b:10:
         c2:37:3d:fd:3c:e1:4f:1a:57:bc:c2:9d:91:08:d6:33:da:c2:
         90:e7:76:fb:c7:03:51:2f:c0:19:46:a6:0b:c0:68:1f:50:53:
         b3:13:92:42:23:bc:57:09:7a:5c:e4:97:38:3b:cf:65:ac:54:
         58:cd:d4:11:14:9a:cb:4a:4e:62:4d:97:43:17:a7:fd:7f:2f:
         97:00:8b:70:bb:12:68:26:f6:22:51:86:2a:d6:5b:0e:a3:33:
         65:23:0b:7e:dd:bd:4f:d8:72:57:3d:e7:31:d8:6d:b3:b6:6f:
         37:ea:64:33:8a:93:81:5f:3c:c9:e3:b6:9f:aa:a1:6e:00:9b:
         62:c3:f4:6e:f2:d2:c7:07:9d:84:4f:21:96:96:bd:23:eb:0d:
         a9:cb:85:df:26:9f:db:34:82:61:be:74:1e:9b:d4:8f:e1:df:
         06:bc:0c:f6:3a:39:3e:98:e0:d7:02:99:9a:66:51:2b:9f:9c:
         08:07:46:89:fd:03:b7:54:e1:29:d5:20:f8:d8:e8:a3:c5:70:
         78:0b:e9:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:34:39 2024 by rpki-client on console-fra.rpki-client.org