Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/3231362e3234372e3131302e302f32342d3234203d3e20313338393937.roa
File:                     3231362e3234372e3131302e302f32342d3234203d3e20313338393937.roa (raw, json)
Hash identifier:          OsMDRYo6QpNlsVSNbUH3xNUmeHhm9s+fFI23rcDk9jg=
Subject key identifier:   E7:FD:F5:F0:8C:5C:62:25:A2:F1:69:3D:C5:6F:72:92:4B:DF:F7:2D
Certificate issuer:       /CN=718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c
Certificate serial:       1E7DBD150877CA569DDCF3013951AFC2DAC6D3EC
Authority key identifier: 1D:1D:EB:CD:9F:2E:82:12:22:15:3A:C9:EF:50:37:6A:31:59:CB:90
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/3231362e3234372e3131302e302f32342d3234203d3e20313338393937.roa
Signing time:             Wed 31 Jan 2024 15:01:13 +0000
ROA not before:           Wed 31 Jan 2024 14:56:13 +0000
ROA not after:            Wed 29 Jan 2025 15:01:13 +0000
asID:                     138997
IP address blocks:        216.247.110.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/1D1DEBCD9F2E821222153AC9EF50376A3159CB90.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/1D1DEBCD9F2E821222153AC9EF50376A3159CB90.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/f0b1b436-193c-4209-a695-f168f9f2b3b0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/f0b1b436-193c-4209-a695-f168f9f2b3b0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 21:55:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:7d:bd:15:08:77:ca:56:9d:dc:f3:01:39:51:af:c2:da:c6:d3:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c
        Validity
            Not Before: Jan 31 14:56:13 2024 GMT
            Not After : Jan 29 15:01:13 2025 GMT
        Subject: CN=E7FDF5F08C5C6225A2F1693DC56F72924BDFF72D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:1e:d1:f6:ba:9f:c7:49:fe:e2:a7:05:3d:2a:
                    d4:83:02:e2:b3:ee:95:d9:13:b2:92:ab:26:b2:f6:
                    92:b4:7b:ca:9a:92:aa:48:ba:eb:dd:f1:68:28:b6:
                    9d:20:02:a3:e8:74:37:28:17:bf:6e:86:fa:1b:b0:
                    3f:9d:85:62:25:37:a8:7b:68:12:bc:ac:f4:c9:ae:
                    62:a0:18:9e:f1:6d:27:66:12:59:21:2c:77:45:ae:
                    2a:51:db:a7:69:91:ec:43:4c:cd:b1:b6:ff:6a:6e:
                    96:c2:d2:3c:f2:59:3d:20:e1:5e:17:aa:5d:94:28:
                    d0:a1:94:b1:48:33:ac:23:f1:10:20:10:17:f8:0f:
                    b9:b2:a4:e4:94:a1:48:e0:ac:f6:03:38:ff:b8:9c:
                    14:03:37:a6:9c:16:09:2b:09:19:9b:fe:00:ed:a7:
                    66:5b:ea:e3:e3:59:45:56:80:8f:79:59:0e:80:21:
                    fd:29:37:32:48:68:93:48:69:60:1d:11:01:3a:a1:
                    55:a6:b4:5b:a3:14:45:9f:9f:31:55:78:1f:68:28:
                    1a:99:8c:98:c2:5b:d3:83:36:ea:85:61:f8:3f:82:
                    1f:dc:5e:8d:db:fd:48:6f:e1:b0:c8:66:28:5c:2a:
                    e2:2c:d6:69:f1:34:aa:ee:0d:a9:33:10:71:1f:96:
                    e8:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:FD:F5:F0:8C:5C:62:25:A2:F1:69:3D:C5:6F:72:92:4B:DF:F7:2D
            X509v3 Authority Key Identifier:
                keyid:1D:1D:EB:CD:9F:2E:82:12:22:15:3A:C9:EF:50:37:6A:31:59:CB:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/1D1DEBCD9F2E821222153AC9EF50376A3159CB90.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/3231362e3234372e3131302e302f32342d3234203d3e20313338393937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.247.110.0/24

    Signature Algorithm: sha256WithRSAEncryption
         aa:0a:c6:2f:f9:be:c5:fc:7c:f8:3e:63:1d:c3:ba:72:0c:2d:
         b2:38:18:6f:70:38:9c:26:2c:71:70:6d:27:10:60:46:4a:42:
         a7:a4:87:c3:73:ce:c5:f8:c9:ac:ce:76:14:4c:61:6c:f3:34:
         3c:19:9b:22:40:c7:d0:65:f4:b7:33:5e:2d:7a:66:73:d3:3c:
         76:78:32:19:fc:81:f4:3e:fb:dc:fe:0a:2c:aa:5c:b4:05:a4:
         ad:e9:9c:e6:bf:01:e0:4d:14:c1:7d:68:42:7d:e5:06:3c:95:
         e3:99:9c:0b:2d:90:c3:b2:09:f9:da:84:90:9f:d6:5f:c6:35:
         2d:86:9f:3f:f8:e5:41:20:06:0b:e4:83:86:1d:a1:f5:7b:db:
         76:41:b0:0b:a2:18:d4:2a:60:99:2b:79:8e:50:07:84:21:c0:
         5a:7e:09:74:65:c9:dd:cc:8a:e5:d2:8f:f8:af:96:5e:93:80:
         57:7f:4a:82:59:35:91:c9:ed:db:a5:c6:24:e9:c8:f3:5e:ce:
         18:b0:58:9c:78:bf:87:43:91:c9:60:12:18:6b:47:fd:b3:7f:
         e5:a7:c5:76:22:e9:5c:b0:db:da:27:c6:d1:bd:ea:f3:28:19:
         da:7b:f9:17:bc:e7:64:31:39:5b:de:3b:88:c9:80:94:4a:90:
         d7:4f:aa:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:34:58 2024 by rpki-client on console-ams.rpki-client.org