Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/3231362e3234372e39362e302f32342d3234203d3e20333938333535.roa
File:                     3231362e3234372e39362e302f32342d3234203d3e20333938333535.roa (raw, json)
Hash identifier:          Jrioq5A0PydzNUa8GmJcmGI/Eh7LV0fWWHOdVqhXre4=
Subject key identifier:   6D:34:76:03:80:6E:44:D1:96:C7:0E:6A:16:AE:EF:9F:7F:F0:2A:AD
Certificate issuer:       /CN=718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c
Certificate serial:       4D3319439DC6EC97C003B57F3AC9043CBF3D201C
Authority key identifier: 1D:1D:EB:CD:9F:2E:82:12:22:15:3A:C9:EF:50:37:6A:31:59:CB:90
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/3231362e3234372e39362e302f32342d3234203d3e20333938333535.roa
Signing time:             Fri 27 Oct 2023 13:23:31 +0000
ROA not before:           Fri 27 Oct 2023 13:18:31 +0000
ROA not after:            Fri 25 Oct 2024 13:23:31 +0000
asID:                     398355
IP address blocks:        216.247.96.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/1D1DEBCD9F2E821222153AC9EF50376A3159CB90.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/1D1DEBCD9F2E821222153AC9EF50376A3159CB90.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/f0b1b436-193c-4209-a695-f168f9f2b3b0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/f0b1b436-193c-4209-a695-f168f9f2b3b0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 29 Apr 2024 02:48:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:33:19:43:9d:c6:ec:97:c0:03:b5:7f:3a:c9:04:3c:bf:3d:20:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c
        Validity
            Not Before: Oct 27 13:18:31 2023 GMT
            Not After : Oct 25 13:23:31 2024 GMT
        Subject: CN=6D347603806E44D196C70E6A16AEEF9F7FF02AAD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:ab:e6:0d:6e:28:fd:2c:de:be:4b:6a:3d:d5:
                    81:38:5f:5f:3a:79:c4:6d:ee:33:1f:5e:2d:92:51:
                    5a:5f:aa:df:bd:f0:af:15:d2:5b:96:24:d2:61:32:
                    58:70:eb:f8:c7:e0:d8:20:9a:d3:39:ba:c3:a1:de:
                    3f:37:ca:ed:92:1b:65:5f:47:0e:4a:ab:e9:18:ae:
                    7c:77:57:c2:df:a5:d6:06:8b:5f:ff:18:7b:ef:4b:
                    19:89:81:c1:d9:f4:77:e7:06:5c:05:b1:4d:68:8a:
                    1e:32:bd:6e:ec:38:17:ee:73:dd:94:e4:40:9e:1e:
                    fb:1d:9e:6d:df:97:19:fb:c3:c4:58:06:b7:49:30:
                    0e:c2:e1:49:50:c0:73:3c:ff:fd:d5:c0:22:91:ff:
                    08:cd:a7:c2:c1:62:b3:95:cd:0b:b8:4e:c9:ab:ee:
                    1e:ef:c6:a2:77:7f:19:f9:14:a4:a2:db:e9:9d:ad:
                    ca:71:d7:39:b6:48:3c:60:17:a5:0a:58:bf:78:85:
                    ef:27:67:3d:6a:89:22:db:ab:22:f5:d7:bb:88:58:
                    8b:5d:09:5d:e6:62:29:85:93:36:3a:4e:e3:85:c9:
                    96:c9:39:18:cc:62:c2:05:c0:70:f6:3d:4b:0f:4f:
                    b3:34:a3:b5:7c:15:6c:3b:40:9c:09:8a:f9:af:f7:
                    3a:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:34:76:03:80:6E:44:D1:96:C7:0E:6A:16:AE:EF:9F:7F:F0:2A:AD
            X509v3 Authority Key Identifier:
                keyid:1D:1D:EB:CD:9F:2E:82:12:22:15:3A:C9:EF:50:37:6A:31:59:CB:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/1D1DEBCD9F2E821222153AC9EF50376A3159CB90.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/3231362e3234372e39362e302f32342d3234203d3e20333938333535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.247.96.0/24

    Signature Algorithm: sha256WithRSAEncryption
         02:10:a8:82:23:da:b7:4d:47:b5:b0:27:98:f4:cc:e9:80:ba:
         89:80:b4:55:0b:92:ea:b9:69:1a:2c:f9:6b:eb:a4:11:6c:b2:
         de:00:90:01:e4:e5:ce:a0:68:dc:b6:b0:c5:44:a5:10:e3:8b:
         9b:0a:45:b5:95:94:55:0c:7c:74:8e:01:ba:7e:59:63:c5:a5:
         f0:da:4f:e5:57:22:eb:f2:92:10:d3:9e:9b:07:34:4b:8b:33:
         75:0e:7c:84:de:b7:f8:e3:c2:2d:3e:b0:be:0b:bf:99:b7:21:
         2f:1f:d1:5d:16:11:6a:a7:bf:b8:6a:1a:d6:30:23:a9:fa:49:
         05:b9:b5:4b:f6:2b:48:c9:a3:c7:ad:ba:9c:a5:fc:b1:0c:f2:
         16:5a:9a:d3:31:5a:17:be:53:b7:34:75:8f:fe:21:0f:d2:ed:
         7c:22:65:27:b7:0d:53:e5:99:ec:ff:9f:7b:85:fc:c4:16:db:
         64:ad:b5:5f:5e:6b:e2:12:49:aa:38:73:fa:5f:14:06:00:83:
         62:32:00:62:72:22:5c:89:b7:3a:f8:ba:35:6b:a2:b9:68:ca:
         8d:fb:d0:b6:e7:52:78:c1:a6:12:31:b5:89:f7:69:57:ba:81:
         25:6e:ee:b2:ef:a9:41:b2:74:5f:85:5d:63:d1:df:b3:8d:2e:
         aa:cd:1b:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 00:01:21 2024 by rpki-client on console-ams.rpki-client.org