Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/3231362e3234372e3130372e302f32342d3234203d3e20323131343339.roa
File:                     3231362e3234372e3130372e302f32342d3234203d3e20323131343339.roa (raw, json)
Hash identifier:          2P6NNvms914pC36DvqfC5sD7CiMDyi0m9UyZB2Y8hM0=
Subject key identifier:   34:84:FF:49:B3:1A:82:58:82:57:92:4D:93:11:88:38:79:F8:51:CA
Certificate issuer:       /CN=718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c
Certificate serial:       452EC0B6F957458EC38F14F2181BF887A3F85022
Authority key identifier: 1D:1D:EB:CD:9F:2E:82:12:22:15:3A:C9:EF:50:37:6A:31:59:CB:90
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/3231362e3234372e3130372e302f32342d3234203d3e20323131343339.roa
Signing time:             Tue 16 Jan 2024 10:01:12 +0000
ROA not before:           Tue 16 Jan 2024 09:56:12 +0000
ROA not after:            Tue 14 Jan 2025 10:01:12 +0000
asID:                     211439
IP address blocks:        216.247.107.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/1D1DEBCD9F2E821222153AC9EF50376A3159CB90.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/1D1DEBCD9F2E821222153AC9EF50376A3159CB90.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/f0b1b436-193c-4209-a695-f168f9f2b3b0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/f0b1b436-193c-4209-a695-f168f9f2b3b0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 29 Apr 2024 02:48:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:2e:c0:b6:f9:57:45:8e:c3:8f:14:f2:18:1b:f8:87:a3:f8:50:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c
        Validity
            Not Before: Jan 16 09:56:12 2024 GMT
            Not After : Jan 14 10:01:12 2025 GMT
        Subject: CN=3484FF49B31A82588257924D9311883879F851CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:12:be:c1:e9:2c:21:41:54:9d:3d:8e:6c:d7:
                    b9:2a:6b:fd:a7:79:5c:33:cb:07:58:03:9b:58:d1:
                    b0:d8:de:06:9b:2d:bd:c0:e3:7f:0c:c9:3e:cf:95:
                    b6:bf:00:b4:3e:c1:e3:5f:aa:be:16:09:81:03:4d:
                    12:06:ac:c8:26:7b:34:62:39:c1:1e:fa:a4:6d:a4:
                    ef:3a:6b:33:24:00:96:15:22:e7:9f:b4:76:18:b2:
                    83:0b:e1:54:44:05:7c:28:4b:ac:bb:df:3c:ce:6f:
                    c7:71:7e:a0:53:cf:b6:e9:da:e1:69:51:bf:e5:d4:
                    a9:72:7c:18:96:3f:45:8f:08:bc:2e:74:b8:d0:0c:
                    c1:a7:72:49:42:72:16:54:f3:03:93:81:50:5b:1e:
                    a9:7a:32:c8:a6:5b:3d:10:6e:b5:9c:e3:ad:d8:30:
                    94:95:c5:4e:2a:ab:e2:75:a1:fd:2a:b9:61:59:80:
                    e7:7d:38:24:34:ed:cc:54:e1:3e:97:f3:20:0c:f7:
                    5c:38:8b:c7:2f:a9:a6:bf:fb:45:67:4d:e4:c4:0d:
                    c7:c5:b5:2b:ab:eb:08:47:73:5b:02:7b:f9:b6:bd:
                    b2:c2:30:1a:6f:b9:dc:e4:a1:f8:66:c6:bf:6d:a6:
                    bc:43:dd:68:e2:5b:a2:c6:f3:aa:c9:cd:99:05:15:
                    21:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:84:FF:49:B3:1A:82:58:82:57:92:4D:93:11:88:38:79:F8:51:CA
            X509v3 Authority Key Identifier:
                keyid:1D:1D:EB:CD:9F:2E:82:12:22:15:3A:C9:EF:50:37:6A:31:59:CB:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/1D1DEBCD9F2E821222153AC9EF50376A3159CB90.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/3231362e3234372e3130372e302f32342d3234203d3e20323131343339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.247.107.0/24

    Signature Algorithm: sha256WithRSAEncryption
         69:4c:97:67:e2:24:f3:74:d2:9b:c4:1b:01:5d:ea:0b:02:22:
         25:5e:8a:66:85:aa:31:a1:54:36:21:15:15:55:ab:9c:67:d0:
         ea:83:80:1f:a5:c6:09:ca:ed:04:2a:8f:46:da:fb:8f:00:42:
         3e:e4:c3:e9:0f:67:80:7a:03:fe:92:53:33:59:a1:f0:81:a3:
         31:4c:fc:43:aa:97:59:d5:75:d3:95:39:b1:a5:98:30:94:59:
         00:4e:a5:e0:3b:6b:d7:60:1b:ec:de:ff:c4:8a:47:3e:d8:9c:
         b2:ce:52:ff:96:f5:20:b3:68:e2:52:97:b0:b0:66:a7:57:f3:
         10:56:d6:eb:f0:b1:ca:14:ac:46:ae:da:13:e1:8a:36:cc:0a:
         18:49:5b:5f:34:04:86:38:3c:7d:31:86:ac:62:c5:a6:db:b2:
         0a:98:30:52:ff:c1:4a:70:25:ed:75:77:9e:6f:96:59:69:be:
         69:f5:fc:ed:39:22:ab:37:29:ea:dc:53:0e:f3:1e:eb:fe:a5:
         cb:4a:95:e4:cf:16:3e:f8:2e:11:dc:fa:64:5a:35:b4:33:c4:
         a8:78:dd:d0:91:ca:d9:00:63:00:66:a8:83:67:33:15:7b:96:
         2b:b2:19:41:a2:37:b1:9b:96:3b:9d:20:77:ec:e3:6a:d9:99:
         79:a6:f8:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 00:01:21 2024 by rpki-client on console-ams.rpki-client.org