Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/3231362e3234372e3130382e302f32342d3234203d3e20323132333834.roa
File:                     3231362e3234372e3130382e302f32342d3234203d3e20323132333834.roa (raw, json)
Hash identifier:          hLiZlVpS6KUbK45/fOG1RtcPB4Pv55RZS9xJxQSbicY=
Subject key identifier:   DB:87:02:9A:47:8E:57:09:CF:3F:F7:87:0F:2B:F0:09:97:FB:27:E9
Certificate issuer:       /CN=718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c
Certificate serial:       11C54A22DACEDC226757A26591345CFABD980B04
Authority key identifier: 1D:1D:EB:CD:9F:2E:82:12:22:15:3A:C9:EF:50:37:6A:31:59:CB:90
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/3231362e3234372e3130382e302f32342d3234203d3e20323132333834.roa
Signing time:             Tue 27 May 2025 13:28:34 +0000
ROA not before:           Tue 27 May 2025 13:23:34 +0000
ROA not after:            Tue 26 May 2026 13:28:34 +0000
asID:                     212384
IP address blocks:        216.247.108.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/1D1DEBCD9F2E821222153AC9EF50376A3159CB90.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/1D1DEBCD9F2E821222153AC9EF50376A3159CB90.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/f0b1b436-193c-4209-a695-f168f9f2b3b0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/f0b1b436-193c-4209-a695-f168f9f2b3b0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 07:12:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:c5:4a:22:da:ce:dc:22:67:57:a2:65:91:34:5c:fa:bd:98:0b:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c
        Validity
            Not Before: May 27 13:23:34 2025 GMT
            Not After : May 26 13:28:34 2026 GMT
        Subject: CN=DB87029A478E5709CF3FF7870F2BF00997FB27E9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:0d:2a:b5:3d:e5:5b:a2:f8:4f:82:94:f2:be:
                    87:10:7d:bf:1c:9e:95:ca:ce:42:6b:60:41:99:8d:
                    e9:2a:cb:e0:7e:30:f2:be:9a:d8:e2:df:1c:56:70:
                    eb:b5:e9:2e:f3:4f:b0:f3:93:18:09:41:44:0b:d4:
                    3c:5e:01:eb:87:e8:59:a6:75:06:24:63:35:89:c6:
                    80:52:dc:bb:f7:2a:08:41:a6:cc:57:4f:9d:2e:c3:
                    64:c4:f1:b7:10:ca:da:3c:1d:50:44:23:f9:c0:6e:
                    6b:2c:d8:24:04:65:f3:83:ee:95:7a:9b:16:78:82:
                    17:7c:90:e7:a3:b6:4c:97:51:79:d7:b0:6e:1e:ca:
                    c8:1f:23:78:b6:ce:23:58:c7:5a:89:95:f4:fb:57:
                    1c:a8:37:5d:fd:92:63:e4:17:7a:65:f4:d9:85:2d:
                    66:a3:71:c4:cc:b1:68:b0:80:25:12:e5:5d:fe:60:
                    5e:52:b4:3f:a0:50:cc:25:7e:d8:be:3c:03:df:d9:
                    43:9c:e4:26:f6:95:3d:c7:05:bb:00:86:0f:a7:3f:
                    4c:4e:12:cf:e3:36:81:20:5c:11:ca:4a:6b:ec:bb:
                    51:56:66:67:26:82:e4:85:3b:dd:0f:5c:fd:26:e4:
                    bf:28:64:08:92:80:49:98:16:22:57:10:70:b2:b5:
                    88:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:87:02:9A:47:8E:57:09:CF:3F:F7:87:0F:2B:F0:09:97:FB:27:E9
            X509v3 Authority Key Identifier:
                keyid:1D:1D:EB:CD:9F:2E:82:12:22:15:3A:C9:EF:50:37:6A:31:59:CB:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/1D1DEBCD9F2E821222153AC9EF50376A3159CB90.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/3231362e3234372e3130382e302f32342d3234203d3e20323132333834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.247.108.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2c:09:7d:4b:32:e9:cb:9c:01:61:8f:4c:c4:24:86:8a:be:1b:
         81:f5:d3:ea:e3:60:e8:52:38:38:80:0a:74:2d:41:e8:9b:60:
         26:1f:4a:37:65:24:ca:87:28:a5:0e:90:b1:ae:7d:8f:16:d8:
         bb:18:1e:6e:a3:91:f1:d9:a6:17:b7:fa:3c:2a:75:66:7b:33:
         26:6a:7e:8c:86:a9:87:b4:8a:dd:da:c0:af:28:a1:17:a5:16:
         a8:c5:93:c1:28:3d:b5:f6:a8:25:07:35:db:5e:51:ba:3d:cc:
         4c:00:61:d4:dd:d5:66:40:25:c9:d7:71:7e:3b:81:3b:03:b7:
         37:91:7a:a7:63:35:69:95:88:11:ff:4a:cc:7a:ff:b5:21:a0:
         77:1e:a6:52:b5:12:e3:19:72:61:97:dc:57:50:35:8c:dd:56:
         12:62:0a:c7:d7:a2:c7:16:35:97:d7:9f:28:bd:73:59:25:7e:
         17:76:9f:76:a0:a8:e7:96:ec:8b:b0:57:3e:67:10:fd:41:fb:
         dc:9b:10:49:fa:81:95:79:1f:48:c3:ce:c4:66:c0:d2:54:46:
         c5:72:5b:cf:3a:a5:49:9b:2d:5e:07:d0:a2:46:0c:d0:29:17:
         7c:ed:1e:07:86:e7:02:3a:ea:42:9b:5a:31:26:f9:31:59:67:
         f6:67:57:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 08:19:59 2025 by rpki-client