Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/3231362e3234372e3130382e302f32342d3234203d3e20323132333834.roa
File:                     3231362e3234372e3130382e302f32342d3234203d3e20323132333834.roa (raw, json)
Hash identifier:          on4pHgJsPCI2niTVKZknYVVb2vKIOiFVhGpoZ9PMcV0=
Subject key identifier:   B1:F8:7D:E8:BF:A2:50:98:34:34:1B:60:41:C1:46:25:80:33:CD:FA
Certificate issuer:       /CN=718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c
Certificate serial:       2AA2EC0CC7DA27A879D1453C9EB80DF821F23D4C
Authority key identifier: 1D:1D:EB:CD:9F:2E:82:12:22:15:3A:C9:EF:50:37:6A:31:59:CB:90
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/3231362e3234372e3130382e302f32342d3234203d3e20323132333834.roa
Signing time:             Tue 25 Jun 2024 13:24:47 +0000
ROA not before:           Tue 25 Jun 2024 13:19:47 +0000
ROA not after:            Tue 24 Jun 2025 13:24:47 +0000
asID:                     212384
IP address blocks:        216.247.108.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/1D1DEBCD9F2E821222153AC9EF50376A3159CB90.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/1D1DEBCD9F2E821222153AC9EF50376A3159CB90.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/f0b1b436-193c-4209-a695-f168f9f2b3b0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/f0b1b436-193c-4209-a695-f168f9f2b3b0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Nov 2024 05:35:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:a2:ec:0c:c7:da:27:a8:79:d1:45:3c:9e:b8:0d:f8:21:f2:3d:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c
        Validity
            Not Before: Jun 25 13:19:47 2024 GMT
            Not After : Jun 24 13:24:47 2025 GMT
        Subject: CN=B1F87DE8BFA2509834341B6041C146258033CDFA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:fd:08:d2:c4:d3:95:35:68:29:02:84:54:af:
                    6c:43:b5:fb:ae:f2:e4:ea:19:24:4b:b9:48:bd:41:
                    80:46:f1:17:d4:d3:f8:e2:bd:61:fb:7a:82:a6:1f:
                    3a:76:5a:f9:3f:76:1a:4e:92:e5:77:17:f7:5b:7e:
                    9e:f3:ac:d2:65:58:9c:fc:45:1d:75:e4:13:93:d7:
                    4d:a7:d7:8c:b5:be:12:ef:3c:f3:f4:02:2f:53:27:
                    90:64:62:67:48:93:e0:df:f6:e7:6a:03:65:2b:fa:
                    3f:f4:35:54:3e:d9:3c:b9:20:7e:28:46:44:1e:9b:
                    2c:0f:f1:4a:a3:bb:5b:31:49:82:7d:f1:b9:3a:ac:
                    6b:70:e2:e1:0d:c2:69:75:e1:ba:8d:3f:d3:7b:3b:
                    c3:d3:a7:06:60:7c:41:0d:38:30:e7:b4:24:a1:65:
                    a7:0c:7a:fe:aa:87:c6:89:b4:13:5a:66:71:22:b7:
                    39:e0:66:8d:a4:17:ab:07:9e:43:44:ee:71:f0:08:
                    c5:23:46:ad:6f:84:0e:d9:28:66:96:02:24:a2:9f:
                    a3:22:32:ee:e3:30:83:fd:79:3b:bd:dc:5e:0b:37:
                    57:f4:61:20:67:de:5e:44:e3:5d:9e:9b:bb:61:53:
                    42:40:cd:dc:79:e0:14:62:b0:df:94:06:d7:3b:be:
                    bf:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:F8:7D:E8:BF:A2:50:98:34:34:1B:60:41:C1:46:25:80:33:CD:FA
            X509v3 Authority Key Identifier:
                keyid:1D:1D:EB:CD:9F:2E:82:12:22:15:3A:C9:EF:50:37:6A:31:59:CB:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/1D1DEBCD9F2E821222153AC9EF50376A3159CB90.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/3231362e3234372e3130382e302f32342d3234203d3e20323132333834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.247.108.0/24

    Signature Algorithm: sha256WithRSAEncryption
         99:98:39:5e:81:58:dd:c1:c2:7a:3a:de:c0:36:05:79:32:4d:
         69:61:6f:f8:ca:5d:97:d5:1f:f5:72:4e:0c:cf:55:ea:26:e0:
         eb:7b:09:9f:b9:c5:1f:4b:aa:af:c3:70:17:5e:00:8b:7b:ba:
         de:dd:f1:78:3b:3d:dc:ca:dd:91:bf:07:c2:1a:3b:7a:bd:12:
         2a:69:49:fd:cc:46:25:e9:25:ae:c1:6c:63:3e:86:42:eb:52:
         de:20:55:00:4f:2b:3c:6d:1e:20:a6:cc:3c:7d:9b:4d:4e:49:
         45:a2:f9:81:38:9c:01:c6:ac:f6:71:a1:03:1c:f7:ab:02:a2:
         4a:62:d5:43:29:fe:a2:ab:c4:eb:e1:70:52:e8:d2:f9:b9:0b:
         80:22:ba:b5:37:0b:d2:68:e5:29:9f:ca:2e:87:bc:97:ca:97:
         88:a3:2e:29:78:08:13:14:b0:32:0e:54:a3:61:8d:37:5e:a2:
         72:06:58:55:9d:df:fb:7e:89:47:59:a4:e0:ee:c4:a6:49:94:
         17:c1:7e:8e:65:33:f8:10:ea:31:64:11:64:42:b0:c7:c5:b4:
         20:e5:0f:ad:e0:bb:03:8b:83:cb:18:81:c1:89:36:62:9b:5b:
         32:ca:55:fa:02:6d:21:44:07:ca:a1:36:39:4b:85:37:fe:e6:
         33:49:de:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 03:16:41 2024 by rpki-client on console-ams.rpki-client.org