Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/3231362e3234372e3130352e302f32342d3234203d3e20333939313232.roa
File:                     3231362e3234372e3130352e302f32342d3234203d3e20333939313232.roa (raw, json)
Hash identifier:          PmqQKdv4eD9RjDAzMhRWB9Efh72tT8gr+VfONe3cYlk=
Subject key identifier:   11:11:89:2F:20:21:70:52:47:5E:B0:5A:6F:93:7C:68:FD:31:78:54
Certificate issuer:       /CN=718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c
Certificate serial:       3EF067739C212F276F136229E9C0E899C6C0C60A
Authority key identifier: 1D:1D:EB:CD:9F:2E:82:12:22:15:3A:C9:EF:50:37:6A:31:59:CB:90
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/3231362e3234372e3130352e302f32342d3234203d3e20333939313232.roa
Signing time:             Mon 30 Oct 2023 12:03:55 +0000
ROA not before:           Mon 30 Oct 2023 11:58:55 +0000
ROA not after:            Mon 28 Oct 2024 12:03:55 +0000
asID:                     399122
IP address blocks:        216.247.105.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/1D1DEBCD9F2E821222153AC9EF50376A3159CB90.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/1D1DEBCD9F2E821222153AC9EF50376A3159CB90.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/f0b1b436-193c-4209-a695-f168f9f2b3b0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/f0b1b436-193c-4209-a695-f168f9f2b3b0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 29 Apr 2024 02:48:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:f0:67:73:9c:21:2f:27:6f:13:62:29:e9:c0:e8:99:c6:c0:c6:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c
        Validity
            Not Before: Oct 30 11:58:55 2023 GMT
            Not After : Oct 28 12:03:55 2024 GMT
        Subject: CN=1111892F20217052475EB05A6F937C68FD317854
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:6d:24:b7:2f:45:97:53:0d:bb:7c:73:c3:4d:
                    5b:6a:35:2c:7c:cf:21:c3:8d:62:73:1d:fe:49:a8:
                    0e:91:b9:15:be:4d:21:18:c1:bc:05:cb:d5:81:91:
                    99:52:98:69:04:7f:d6:ba:8d:f7:53:73:bf:c0:4a:
                    69:2a:8b:73:06:2d:df:78:1f:24:3b:0d:4c:96:b8:
                    8e:dc:b9:17:fc:f8:27:dc:96:e0:99:1b:24:27:b9:
                    82:af:6e:bc:27:9d:21:ce:6d:72:67:c5:26:d7:9e:
                    fd:98:ba:75:16:cd:35:4c:90:63:44:2d:c9:e2:73:
                    1b:bd:c1:99:4a:a1:f3:ab:1d:0a:df:38:48:0d:05:
                    8a:2e:3e:33:40:c0:f4:28:85:aa:ba:f8:ef:e0:a9:
                    30:99:eb:fa:c7:42:14:0e:f3:b9:e6:de:e4:39:39:
                    97:ea:d6:7d:d6:ee:bf:0d:16:fd:fc:ac:2c:a4:c1:
                    69:6b:38:f3:3c:b9:f9:f8:b5:2b:a9:b7:f4:38:28:
                    9b:ee:be:93:c3:5c:18:ce:cb:6f:ae:c5:c6:50:e0:
                    a5:32:83:5f:2d:30:73:50:51:94:36:bd:09:70:c3:
                    a2:46:8a:84:c2:d2:95:fa:c5:92:34:50:ad:08:60:
                    c5:df:b3:37:74:e4:22:f0:45:1a:6e:42:a2:ec:02:
                    7b:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:11:89:2F:20:21:70:52:47:5E:B0:5A:6F:93:7C:68:FD:31:78:54
            X509v3 Authority Key Identifier:
                keyid:1D:1D:EB:CD:9F:2E:82:12:22:15:3A:C9:EF:50:37:6A:31:59:CB:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/1D1DEBCD9F2E821222153AC9EF50376A3159CB90.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/3231362e3234372e3130352e302f32342d3234203d3e20333939313232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.247.105.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ca:8e:15:7c:c9:74:d9:b9:21:6f:fd:02:86:7b:92:a4:dc:ee:
         5c:d2:8b:9f:21:af:b1:5e:89:87:01:b4:d4:92:40:c1:63:a4:
         26:8a:74:4d:ef:84:52:31:e4:cb:28:54:cc:1c:62:14:ac:5e:
         d4:01:8f:c2:56:6f:b4:e7:ad:54:0f:73:0b:06:52:a9:03:7f:
         55:a4:b2:11:a7:c6:3d:7a:99:3e:cb:ad:7e:09:5c:7e:e3:a1:
         0b:e3:94:63:6e:f9:4b:65:c7:82:d4:c4:55:50:42:e0:12:f7:
         23:6a:3e:ef:0c:e4:b0:1f:5a:2a:f7:b4:2e:94:29:fb:60:96:
         fe:d5:00:c8:a7:f1:a3:d1:4d:7c:b3:69:fd:df:21:2a:ce:5e:
         b3:fe:a6:da:9a:ff:9a:17:df:bf:fb:15:6c:bf:50:9c:ae:85:
         57:65:49:9b:82:87:d2:13:e3:05:2f:59:62:b4:b5:0a:6c:f6:
         45:15:34:0a:95:81:7a:7d:20:c1:5f:87:bc:bd:b9:58:12:7f:
         20:fb:17:9b:60:c3:cb:ee:a4:be:b6:1e:6e:20:4b:8d:86:81:
         83:d3:cc:5e:d7:b0:64:c7:55:f8:31:d2:12:26:2b:8d:78:8d:
         e5:b3:0e:2f:e5:d2:92:99:cd:77:18:8f:0a:c8:8c:6d:0f:7b:
         82:7a:4b:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 00:01:21 2024 by rpki-client on console-ams.rpki-client.org