Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/3231362e3234372e39362e302f32342d3234203d3e203136323736.roa
File:                     3231362e3234372e39362e302f32342d3234203d3e203136323736.roa (raw, json)
Hash identifier:          fenObV+Njd0167WmzenXgNoOVUfdZpw2qw3NntElt9Q=
Subject key identifier:   5B:28:4B:FD:CF:21:2F:40:19:6A:1D:81:BC:54:D9:73:47:D6:EF:FC
Certificate issuer:       /CN=718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c
Certificate serial:       7B6E203D958DD17F3470F3FBD3AD84B6E44F4E3C
Authority key identifier: 1D:1D:EB:CD:9F:2E:82:12:22:15:3A:C9:EF:50:37:6A:31:59:CB:90
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/3231362e3234372e39362e302f32342d3234203d3e203136323736.roa
Signing time:             Wed 06 Nov 2024 13:56:37 +0000
ROA not before:           Wed 06 Nov 2024 13:51:37 +0000
ROA not after:            Wed 05 Nov 2025 13:56:37 +0000
asID:                     16276
IP address blocks:        216.247.96.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/1D1DEBCD9F2E821222153AC9EF50376A3159CB90.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/1D1DEBCD9F2E821222153AC9EF50376A3159CB90.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/f0b1b436-193c-4209-a695-f168f9f2b3b0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/f0b1b436-193c-4209-a695-f168f9f2b3b0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 21:55:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:6e:20:3d:95:8d:d1:7f:34:70:f3:fb:d3:ad:84:b6:e4:4f:4e:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c
        Validity
            Not Before: Nov  6 13:51:37 2024 GMT
            Not After : Nov  5 13:56:37 2025 GMT
        Subject: CN=5B284BFDCF212F40196A1D81BC54D97347D6EFFC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:3c:e0:dc:5e:00:1f:16:4f:bc:be:b3:11:db:
                    9c:cc:f1:a3:4e:a9:c9:68:f1:62:b6:b6:d1:1c:ce:
                    16:25:31:dc:95:97:f5:5e:dd:df:7b:25:30:77:af:
                    14:f4:22:ce:a9:59:69:c2:52:a3:ad:47:8d:03:0c:
                    cb:28:b0:db:25:e1:1f:5d:da:9c:75:f3:00:e1:dc:
                    89:68:f1:6a:2f:e4:bd:55:f9:02:f3:20:a8:67:96:
                    11:30:a2:7d:a8:31:e8:c3:56:eb:f7:e6:36:37:de:
                    c5:35:73:63:c5:55:f0:59:7a:93:66:69:3b:b2:4f:
                    11:8e:d3:60:20:c2:87:b7:ab:14:95:51:4d:8a:ff:
                    8b:52:67:a6:4a:ea:b5:23:7d:87:bf:5f:e1:af:3c:
                    b0:a7:01:a2:de:f8:da:5e:b1:1f:f2:9c:dd:b6:5b:
                    82:05:ea:08:a8:b6:25:b6:21:6f:81:e7:29:b3:ac:
                    aa:bf:e7:38:8d:21:1c:ad:fa:65:f9:fa:db:58:dc:
                    4e:b2:3d:03:9d:bf:ef:f6:c4:28:a2:59:99:72:8a:
                    1d:91:a9:d0:2f:e6:25:80:d2:ea:ae:8c:01:87:db:
                    e5:e2:67:09:aa:58:0a:93:99:f2:68:b9:c8:20:7e:
                    76:e0:07:3b:89:5c:6e:78:cb:74:c4:38:12:16:cb:
                    88:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:28:4B:FD:CF:21:2F:40:19:6A:1D:81:BC:54:D9:73:47:D6:EF:FC
            X509v3 Authority Key Identifier:
                keyid:1D:1D:EB:CD:9F:2E:82:12:22:15:3A:C9:EF:50:37:6A:31:59:CB:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/1D1DEBCD9F2E821222153AC9EF50376A3159CB90.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/3231362e3234372e39362e302f32342d3234203d3e203136323736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.247.96.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a8:02:3f:d1:a4:a7:28:10:2e:20:7c:15:94:a0:c1:af:d9:44:
         a6:4e:c5:60:55:97:b9:ba:5b:6c:6f:b0:66:43:78:c9:f9:64:
         67:af:44:9f:ad:cc:85:8d:c4:b8:35:ba:df:ec:41:bd:11:4d:
         de:35:3e:7d:c1:a6:ca:a8:68:03:b1:00:49:ce:c3:0a:c6:3f:
         94:7d:62:d6:f6:ee:7f:c7:b4:fa:73:6f:8a:17:75:47:66:1c:
         f2:89:26:0a:5f:24:2a:2f:6c:45:1c:c8:e2:c4:ed:1d:f0:ea:
         20:2d:98:9b:87:2d:be:6c:a8:ff:a4:d6:5a:3a:64:44:ea:0d:
         c8:aa:0b:df:a4:74:b3:0f:7a:5b:4d:2d:b2:4e:39:6c:4e:83:
         97:99:b8:34:88:2b:14:6f:8b:db:ed:c7:3c:67:40:f3:17:04:
         b9:f1:29:94:19:08:39:96:80:c7:ec:13:01:94:8e:df:c6:4c:
         a7:4c:a2:3d:f1:59:72:e8:1e:e1:38:c4:d6:40:af:8d:96:d2:
         b6:1a:26:ae:61:c4:86:08:29:16:65:fa:71:8b:15:00:51:cf:
         e1:20:22:01:e3:3b:90:a9:82:57:c3:b5:5c:e4:f8:9e:c4:d4:
         46:af:61:37:32:3b:62:ad:e6:73:5e:1b:a2:cc:d9:29:c2:99:
         94:7e:7a:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:34:58 2024 by rpki-client on console-ams.rpki-client.org