Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/3231362e3234372e3130392e302f32342d3234203d3e203436353337.roa
File:                     3231362e3234372e3130392e302f32342d3234203d3e203436353337.roa (raw, json)
Hash identifier:          RverYbLaHLQKyhEIlZCTqj793snC3LpIU1z2j8Jx3kA=
Subject key identifier:   97:FD:46:DA:C9:20:46:4F:DA:7F:78:E2:C8:05:EF:09:03:DA:BE:89
Certificate issuer:       /CN=718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c
Certificate serial:       397892B0EAC67F525249C41AD83856E2B651575F
Authority key identifier: 1D:1D:EB:CD:9F:2E:82:12:22:15:3A:C9:EF:50:37:6A:31:59:CB:90
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/3231362e3234372e3130392e302f32342d3234203d3e203436353337.roa
Signing time:             Mon 30 Sep 2024 12:48:59 +0000
ROA not before:           Mon 30 Sep 2024 12:43:59 +0000
ROA not after:            Mon 29 Sep 2025 12:48:59 +0000
asID:                     46537
IP address blocks:        216.247.109.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/1D1DEBCD9F2E821222153AC9EF50376A3159CB90.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/1D1DEBCD9F2E821222153AC9EF50376A3159CB90.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/f0b1b436-193c-4209-a695-f168f9f2b3b0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/f0b1b436-193c-4209-a695-f168f9f2b3b0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 04:16:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:78:92:b0:ea:c6:7f:52:52:49:c4:1a:d8:38:56:e2:b6:51:57:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c
        Validity
            Not Before: Sep 30 12:43:59 2024 GMT
            Not After : Sep 29 12:48:59 2025 GMT
        Subject: CN=97FD46DAC920464FDA7F78E2C805EF0903DABE89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:80:cf:34:c8:b2:ee:c7:31:1d:b1:6e:b4:31:
                    52:d6:65:8c:ff:67:ae:b4:77:85:1c:d9:8e:92:f1:
                    bd:06:b7:a7:d2:1d:b6:15:36:e0:f6:09:bf:2c:dd:
                    15:11:9a:42:47:86:f4:cc:76:7f:63:63:6e:34:bb:
                    6a:1c:20:ad:bb:62:20:b7:96:00:d3:7d:ba:f8:d7:
                    73:29:36:a5:10:10:cf:0e:d5:df:3b:00:f5:f1:b2:
                    ab:e6:a2:73:cb:32:f0:ea:75:12:fe:a4:35:67:fa:
                    81:96:c8:1b:ed:7d:3d:32:4b:d4:6d:44:7e:9a:66:
                    cc:69:a0:c8:39:f1:88:ba:c4:34:ed:46:e7:d2:15:
                    1f:0e:51:9c:1f:cc:22:bc:c9:0e:9f:c6:aa:e4:fb:
                    3b:d7:fe:b1:3a:23:49:1f:cc:c6:3d:48:b2:ce:d6:
                    91:46:29:83:d9:45:27:2e:64:bf:cd:81:71:c6:d5:
                    86:b7:7a:31:03:92:f1:d3:b6:82:97:99:e8:53:69:
                    01:b5:dc:64:34:e7:ab:bb:16:57:21:ff:05:d5:1e:
                    5e:d7:34:26:78:00:ba:39:2d:0d:67:55:72:c2:a5:
                    43:7e:31:7d:34:43:f2:7d:99:99:d3:4f:4c:47:06:
                    b0:5f:ef:09:c1:58:28:ac:cf:06:b5:a0:43:2e:be:
                    cd:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:FD:46:DA:C9:20:46:4F:DA:7F:78:E2:C8:05:EF:09:03:DA:BE:89
            X509v3 Authority Key Identifier:
                keyid:1D:1D:EB:CD:9F:2E:82:12:22:15:3A:C9:EF:50:37:6A:31:59:CB:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/1D1DEBCD9F2E821222153AC9EF50376A3159CB90.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/3231362e3234372e3130392e302f32342d3234203d3e203436353337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.247.109.0/24

    Signature Algorithm: sha256WithRSAEncryption
         29:48:7f:d0:f5:65:3a:5c:fa:e0:c2:e9:78:e4:18:73:0f:21:
         79:2c:f1:ec:6d:f5:01:3f:67:98:fd:99:07:e7:8a:6b:19:73:
         b6:bf:01:6e:87:ff:ee:82:4d:2b:f8:df:ba:cc:03:a8:52:27:
         8f:a4:32:6f:b8:96:aa:8f:14:e1:e0:cf:b3:c7:50:20:20:9d:
         8b:ff:c8:a0:8f:3a:57:70:d5:46:b9:50:40:d6:ae:9a:63:d7:
         92:5e:83:65:f3:a0:ea:70:c1:f8:48:26:98:31:27:af:be:77:
         36:16:a0:0f:fd:bc:67:3d:7e:16:a3:66:2c:a9:02:c8:ec:68:
         18:b0:65:9f:78:2a:04:02:dc:e4:55:b5:f5:d6:ee:c0:7a:c7:
         79:e8:01:5a:be:65:b5:28:f7:dd:75:fd:5f:ac:79:6d:b7:a1:
         7d:cf:08:6c:e5:f3:bf:91:0e:11:4e:49:60:4a:ad:70:7b:dc:
         66:2c:ae:1a:0a:39:b0:26:0f:c1:2f:6c:32:cb:7c:ca:b3:58:
         29:05:9e:20:bf:e6:e4:58:a9:8d:a7:52:bb:19:99:4f:df:ce:
         f8:63:e7:fe:8e:f9:34:64:7e:f5:b1:a3:7e:6e:16:08:8b:05:
         4c:d7:8f:c9:82:40:1e:46:13:d7:03:a2:76:0b:dd:02:f8:39:
         1c:2e:0f:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:26:34 2025 by rpki-client