Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/3231362e3234372e39362e302f32342d3234203d3e203232373733.roa
File:                     3231362e3234372e39362e302f32342d3234203d3e203232373733.roa (raw, json)
Hash identifier:          TxNfoSbW2SLYx6s65JPZuIDPYUg3x/Z29M/lI+8blFQ=
Subject key identifier:   2F:84:8B:E7:C2:58:65:C9:CD:DF:6B:68:FD:74:73:1E:53:D8:7F:66
Certificate issuer:       /CN=718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c
Certificate serial:       1C21186A4F2C6A0AFA44DA7178333E88F886D505
Authority key identifier: 1D:1D:EB:CD:9F:2E:82:12:22:15:3A:C9:EF:50:37:6A:31:59:CB:90
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/3231362e3234372e39362e302f32342d3234203d3e203232373733.roa
Signing time:             Mon 30 Oct 2023 12:03:54 +0000
ROA not before:           Mon 30 Oct 2023 11:58:54 +0000
ROA not after:            Mon 28 Oct 2024 12:03:54 +0000
asID:                     22773
IP address blocks:        216.247.96.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/1D1DEBCD9F2E821222153AC9EF50376A3159CB90.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/1D1DEBCD9F2E821222153AC9EF50376A3159CB90.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/f0b1b436-193c-4209-a695-f168f9f2b3b0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/f0b1b436-193c-4209-a695-f168f9f2b3b0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 29 Mar 2024 23:06:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:21:18:6a:4f:2c:6a:0a:fa:44:da:71:78:33:3e:88:f8:86:d5:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c
        Validity
            Not Before: Oct 30 11:58:54 2023 GMT
            Not After : Oct 28 12:03:54 2024 GMT
        Subject: CN=2F848BE7C25865C9CDDF6B68FD74731E53D87F66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:06:07:d9:85:27:30:36:f2:3f:8d:66:da:c0:
                    01:2c:66:5f:31:70:7f:cb:e0:96:cb:11:1e:0d:b1:
                    99:bf:b4:f9:f0:3c:95:4e:a5:17:7e:62:31:1d:f1:
                    c7:a2:c9:01:a5:86:e6:83:fa:aa:47:a6:d8:78:aa:
                    df:1f:c8:b7:8b:e3:77:13:75:15:dc:71:60:61:fa:
                    cf:c3:89:4c:70:9a:60:aa:b0:95:b2:6c:7c:f3:5a:
                    87:7f:08:ca:04:25:24:04:bb:86:7c:4e:be:1f:dc:
                    2f:15:84:f4:98:d5:5f:2a:59:56:1d:f7:ce:ee:4b:
                    d9:34:c2:b8:f1:3a:1c:93:9e:32:b2:1b:ef:63:91:
                    58:a3:03:17:e2:03:80:25:9a:42:20:37:36:40:eb:
                    df:8b:4f:1a:27:19:c6:9b:47:e7:ac:fd:ef:0a:df:
                    a3:3f:72:e9:48:a5:cf:af:48:6e:d9:b8:ad:ce:20:
                    c7:de:2a:b5:df:55:ad:55:e9:1f:53:06:83:75:79:
                    c0:eb:4e:c8:34:66:36:6e:a1:d8:72:2d:39:d0:05:
                    93:c0:0c:42:ce:dc:8f:8f:ed:78:54:ea:6e:f2:b0:
                    0e:c5:7f:a6:29:cc:8b:88:3c:64:7e:06:3a:9a:1d:
                    16:6c:cf:6e:bd:d2:c6:0c:17:52:5a:8b:78:42:82:
                    0b:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:84:8B:E7:C2:58:65:C9:CD:DF:6B:68:FD:74:73:1E:53:D8:7F:66
            X509v3 Authority Key Identifier:
                keyid:1D:1D:EB:CD:9F:2E:82:12:22:15:3A:C9:EF:50:37:6A:31:59:CB:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/1D1DEBCD9F2E821222153AC9EF50376A3159CB90.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/3231362e3234372e39362e302f32342d3234203d3e203232373733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.247.96.0/24

    Signature Algorithm: sha256WithRSAEncryption
         cd:5c:18:4f:d3:a2:f1:2f:94:d2:44:a2:f9:1c:e4:57:76:99:
         a6:70:a6:bc:5e:03:d5:fa:cd:44:0e:1b:c2:4e:32:c7:e8:3a:
         ab:be:e8:70:a3:c3:06:ec:de:9e:a5:73:0a:9e:6a:02:64:d0:
         dd:19:b0:49:dc:2e:68:0e:56:32:13:25:5b:7a:c4:ce:ac:78:
         6d:8b:59:7c:c7:79:e8:34:13:49:e9:82:09:97:32:d0:4b:ee:
         f0:14:20:bd:93:9f:a5:e1:65:a9:13:9f:f6:55:bd:00:a1:d0:
         02:01:0c:c2:09:e4:d3:61:08:cf:cb:49:b3:25:d6:ff:b8:42:
         e2:af:6d:6b:1d:9e:a6:4a:98:82:f0:5c:cf:90:04:4a:4e:91:
         9d:27:ea:6d:d3:07:48:35:70:de:fd:30:57:13:6d:30:db:93:
         24:48:46:24:fa:d2:b6:b4:b2:40:99:00:21:74:6c:2a:f2:a9:
         ab:ee:f3:12:0f:55:c8:29:27:6b:43:f0:92:57:e4:d1:3d:4b:
         c2:8d:20:ea:d7:06:00:7d:80:6f:e3:ab:c3:8f:4f:06:98:a0:
         b8:be:db:78:ed:3b:f7:97:3d:fb:d4:ed:dd:83:35:7a:dd:cb:
         f6:be:41:a4:5f:ae:01:9a:ad:cf:7e:b6:c2:8f:b7:e6:e6:05:
         92:29:5e:53
-----BEGIN CERTIFICATE-----
MIIFsjCCBJqgAwIBAgIUHCEYak8sagr6RNpxeDM+iPiG1QUwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNzE4NjI2ZWFiNzM1OTZmNDcyZGZiMDIwYTljMGYzYjcx
YWQ5ZGQ0ZmVmOTk0N2U5MWMwHhcNMjMxMDMwMTE1ODU0WhcNMjQxMDI4MTIwMzU0
WjAzMTEwLwYDVQQDEygyRjg0OEJFN0MyNTg2NUM5Q0RERjZCNjhGRDc0NzMxRTUz
RDg3RjY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuAYH2YUnMDby
P41m2sABLGZfMXB/y+CWyxEeDbGZv7T58DyVTqUXfmIxHfHHoskBpYbmg/qqR6bY
eKrfH8i3i+N3E3UV3HFgYfrPw4lMcJpgqrCVsmx881qHfwjKBCUkBLuGfE6+H9wv
FYT0mNVfKllWHffO7kvZNMK48Tock54yshvvY5FYowMX4gOAJZpCIDc2QOvfi08a
JxnGm0fnrP3vCt+jP3LpSKXPr0hu2bitziDH3iq131WtVekfUwaDdXnA607INGY2
bqHYci050AWTwAxCztyPj+14VOpu8rAOxX+mKcyLiDxkfgY6mh0WbM9uvdLGDBdS
Wot4QoILoQIDAQABo4ICsjCCAq4wHQYDVR0OBBYEFC+Ei+fCWGXJzd9raP10cx5T
2H9mMB8GA1UdIwQYMBaAFB0d682fLoISIhU6ye9QN2oxWcuQMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODBmMWE4MGEwMTgxZjBmMTc1NDE2NjdmLzEv
MUQxREVCQ0Q5RjJFODIxMjIyMTUzQUM5RUY1MDM3NkEzMTU5Q0I5MC5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi
MGI4NDE1L2YwYjFiNDM2LTE5M2MtNDIwOS1hNjk1LWYxNjhmOWYyYjNiMC83MTg2
MjZlYWI3MzU5NmY0NzJkZmIwMjBhOWMwZjNiNzFhZDlkZDRmZWY5OTQ3ZTkxYy5j
ZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZTgwZjFhODBhMDE4MWYw
ZjE3NTQxNjY3Zi8xLzMyMzEzNjJlMzIzNDM3MmUzOTM2MmUzMDJmMzIzNDJkMzIz
NDIwM2QzZTIwMzIzMjM3MzczMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO
AjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEANj3YDANBgkqhkiG9w0BAQsF
AAOCAQEAzVwYT9Oi8S+U0kSi+RzkV3aZpnCmvF4D1frNRA4bwk4yx+g6q77ocKPD
BuzenqVzCp5qAmTQ3RmwSdwuaA5WMhMlW3rEzqx4bYtZfMd56DQTSemCCZcy0Evu
8BQgvZOfpeFlqROf9lW9AKHQAgEMwgnk02EIz8tJsyXW/7hC4q9tax2epkqYgvBc
z5AESk6RnSfqbdMHSDVw3v0wVxNtMNuTJEhGJPrStrSyQJkAIXRsKvKpq+7zEg9V
yCkna0Pwklfk0T1Lwo0g6tcGAH2Ab+Orw49PBpiguL7beO0795c9+9Tt3YM1et3L
9r5BpF+uAZqtz362wo+35uYFkileUw==
-----END CERTIFICATE-----
Generated at Thu Mar 28 23:59:17 2024 by rpki-client on console-fra.rpki-client.org