Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/3231362e3234372e3130362e302f32342d3234203d3e2039303039.roa
File:                     3231362e3234372e3130362e302f32342d3234203d3e2039303039.roa (raw, json)
Hash identifier:          PWz1goShFRy5TH8aPX4c+FhP3Yr9TyZsT5vcAD/d0ws=
Subject key identifier:   DD:B2:40:4E:84:86:A5:91:EF:C1:36:E3:46:23:85:F7:08:C7:B1:18
Certificate issuer:       /CN=718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c
Certificate serial:       33F6F767C08F90558CB1860E68052B9C1BD273CF
Authority key identifier: 1D:1D:EB:CD:9F:2E:82:12:22:15:3A:C9:EF:50:37:6A:31:59:CB:90
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/3231362e3234372e3130362e302f32342d3234203d3e2039303039.roa
Signing time:             Thu 19 Sep 2024 13:48:59 +0000
ROA not before:           Thu 19 Sep 2024 13:43:59 +0000
ROA not after:            Thu 18 Sep 2025 13:48:59 +0000
asID:                     9009
IP address blocks:        216.247.106.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/1D1DEBCD9F2E821222153AC9EF50376A3159CB90.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/1D1DEBCD9F2E821222153AC9EF50376A3159CB90.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/f0b1b436-193c-4209-a695-f168f9f2b3b0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/f0b1b436-193c-4209-a695-f168f9f2b3b0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 22 Sep 2024 01:06:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:f6:f7:67:c0:8f:90:55:8c:b1:86:0e:68:05:2b:9c:1b:d2:73:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c
        Validity
            Not Before: Sep 19 13:43:59 2024 GMT
            Not After : Sep 18 13:48:59 2025 GMT
        Subject: CN=DDB2404E8486A591EFC136E3462385F708C7B118
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:14:5d:bd:21:99:6b:0f:79:8e:53:11:06:39:
                    61:06:7d:f5:92:8b:2e:4c:c4:ad:70:b6:b8:3f:8f:
                    77:0e:2b:64:17:ca:75:a1:24:34:e6:52:1d:ee:6b:
                    ac:f7:6f:29:fc:b4:cf:15:ff:4b:23:a7:60:a7:80:
                    ed:f3:76:e7:46:1f:29:54:23:03:56:55:da:54:6f:
                    1e:df:fd:ec:6b:f7:61:4b:57:b5:33:c9:c1:68:ee:
                    70:70:f7:d3:9a:29:69:ab:9a:54:f8:e7:91:b0:ab:
                    61:f9:fb:4b:67:36:d1:c5:e3:90:7d:3f:12:74:4b:
                    76:f9:15:62:95:bb:df:dc:59:4d:41:63:da:ac:94:
                    e6:e1:8f:fe:79:f4:61:42:40:60:82:84:10:8a:5e:
                    8d:a3:5a:8f:0d:57:b1:c4:d3:15:69:05:5f:bc:87:
                    62:b9:1f:5b:48:19:06:0d:98:a6:61:c2:2d:53:a1:
                    44:a0:16:44:3d:2c:15:e0:af:b9:34:30:57:80:a4:
                    81:43:70:69:d7:0e:70:d0:76:4c:46:8c:01:ba:f1:
                    e5:b0:54:e9:bf:58:2c:7b:0b:ed:ed:22:7d:14:5f:
                    7f:2a:fb:0d:71:81:b5:d5:7c:56:21:a8:aa:9a:84:
                    b6:45:5d:7c:76:f3:2e:41:24:27:6a:74:da:87:1d:
                    83:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:B2:40:4E:84:86:A5:91:EF:C1:36:E3:46:23:85:F7:08:C7:B1:18
            X509v3 Authority Key Identifier:
                keyid:1D:1D:EB:CD:9F:2E:82:12:22:15:3A:C9:EF:50:37:6A:31:59:CB:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/1D1DEBCD9F2E821222153AC9EF50376A3159CB90.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/3231362e3234372e3130362e302f32342d3234203d3e2039303039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.247.106.0/24

    Signature Algorithm: sha256WithRSAEncryption
         16:cc:5e:ec:32:0f:c8:18:3e:21:d2:51:44:9c:ff:a7:de:3f:
         79:aa:54:1a:e2:ed:df:d9:3b:09:d0:1b:6e:15:2a:74:c0:3a:
         63:c2:7a:9f:04:02:48:f6:e9:33:61:d5:26:d0:c2:23:dc:cb:
         b7:19:7c:e1:c6:e8:68:e3:69:85:20:e7:47:58:59:26:20:b0:
         25:33:12:41:18:27:77:5e:91:46:35:93:15:a6:09:d2:22:59:
         b0:a2:cb:f3:58:31:c1:78:58:c5:1b:f3:95:16:ba:e0:93:8e:
         a8:5a:9f:e3:6f:17:fc:80:31:55:6c:69:e3:61:95:cb:f3:50:
         5b:5b:64:ad:7e:cf:b9:31:43:b5:36:45:df:93:11:4c:c5:bb:
         8d:46:8f:58:c9:04:90:72:10:da:69:53:5f:01:58:ae:60:d1:
         4d:19:3c:50:0f:68:23:12:62:d5:34:ac:c2:55:bd:c5:f3:db:
         ca:3b:c3:5a:b9:1f:f3:b7:dd:f8:ee:d9:df:50:77:bc:44:fd:
         34:02:d8:66:7c:81:bf:fb:23:6a:9e:b4:91:b2:2b:ff:c6:88:
         ea:39:55:e4:36:66:88:d3:b8:76:dc:df:bb:a0:8f:91:f6:f3:
         9f:43:04:0c:81:2c:b1:23:a1:2a:0a:d7:ff:a7:3d:ce:5b:1f:
         6e:8a:2d:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 21 00:25:25 2024 by rpki-client on console-fra.rpki-client.org