Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/3231362e3234372e39362e302f32342d3234203d3e20333938343635.roa
File:                     3231362e3234372e39362e302f32342d3234203d3e20333938343635.roa (raw, json)
Hash identifier:          tyJYdRfBvkt+uqO/2PKbPVTIAibKmLkH3aX1tRPub5k=
Subject key identifier:   13:4A:AC:E4:50:DE:42:58:AC:D7:40:B1:3B:89:4E:66:31:38:04:89
Certificate issuer:       /CN=718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c
Certificate serial:       3457C469BB8B672D97D3E27A8DFCF46F1DDB6306
Authority key identifier: 1D:1D:EB:CD:9F:2E:82:12:22:15:3A:C9:EF:50:37:6A:31:59:CB:90
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/3231362e3234372e39362e302f32342d3234203d3e20333938343635.roa
Signing time:             Mon 30 Oct 2023 12:03:53 +0000
ROA not before:           Mon 30 Oct 2023 11:58:53 +0000
ROA not after:            Mon 28 Oct 2024 12:03:53 +0000
asID:                     398465
IP address blocks:        216.247.96.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/1D1DEBCD9F2E821222153AC9EF50376A3159CB90.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/1D1DEBCD9F2E821222153AC9EF50376A3159CB90.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/f0b1b436-193c-4209-a695-f168f9f2b3b0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/f0b1b436-193c-4209-a695-f168f9f2b3b0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 29 Apr 2024 02:48:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:57:c4:69:bb:8b:67:2d:97:d3:e2:7a:8d:fc:f4:6f:1d:db:63:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c
        Validity
            Not Before: Oct 30 11:58:53 2023 GMT
            Not After : Oct 28 12:03:53 2024 GMT
        Subject: CN=134AACE450DE4258ACD740B13B894E6631380489
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:eb:0b:26:2b:b5:ba:30:a0:11:0c:e0:66:a7:
                    0c:34:68:9c:19:8b:b8:3f:5b:70:a3:9c:07:48:c3:
                    c0:97:90:11:09:c4:16:55:75:e9:16:73:ce:33:06:
                    ab:63:02:f0:32:56:17:e9:56:69:61:2c:d1:27:5f:
                    89:f5:e5:b8:70:7e:c5:98:37:f8:61:ad:16:43:bf:
                    37:7c:80:76:ca:49:ef:24:36:21:6d:2a:cb:3e:d0:
                    65:a7:ad:64:10:2f:69:eb:7d:5d:56:72:96:62:8e:
                    c8:2d:67:70:e1:67:17:87:a1:6c:40:35:9d:6b:dc:
                    56:e1:72:91:1f:d5:29:35:27:49:03:76:d8:a5:a8:
                    26:04:2c:d5:e7:f6:2e:85:a9:3d:2e:5b:ef:db:b8:
                    b8:38:91:30:be:9f:6a:55:69:79:78:fc:af:5a:5f:
                    3b:bb:5c:02:4b:df:28:14:29:be:af:6c:80:c9:8e:
                    2d:0e:ca:41:3b:4a:1e:47:57:66:50:62:4f:be:d2:
                    54:be:62:86:e8:80:d1:f3:36:af:05:7f:24:c2:da:
                    a4:17:c5:5b:ef:60:77:1a:dd:f8:66:66:69:b0:5f:
                    06:d5:bd:1f:c7:10:ca:ec:1d:c3:cc:c9:db:4a:18:
                    32:3c:08:87:ec:cf:98:46:fe:e1:4f:80:79:d5:b7:
                    97:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:4A:AC:E4:50:DE:42:58:AC:D7:40:B1:3B:89:4E:66:31:38:04:89
            X509v3 Authority Key Identifier:
                keyid:1D:1D:EB:CD:9F:2E:82:12:22:15:3A:C9:EF:50:37:6A:31:59:CB:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/1D1DEBCD9F2E821222153AC9EF50376A3159CB90.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/3231362e3234372e39362e302f32342d3234203d3e20333938343635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.247.96.0/24

    Signature Algorithm: sha256WithRSAEncryption
         cd:6a:9b:a0:aa:a4:21:05:fb:ff:96:91:bc:6c:67:70:0b:53:
         e1:32:51:90:1f:0a:4d:ea:58:2e:27:98:8a:75:f8:c1:ff:db:
         d4:d6:e5:f6:2e:c3:1e:34:ce:57:8f:e8:d6:e3:ca:36:15:3e:
         15:94:ad:fe:99:04:40:e4:97:5d:e9:24:32:a3:6c:73:c6:ab:
         15:48:61:ad:b3:44:18:6e:5b:9a:f5:aa:ba:81:4d:dc:65:47:
         c4:3d:99:69:1b:ec:67:3d:d8:e4:65:c4:ab:a4:ff:38:41:1a:
         8a:7b:86:12:4d:83:46:02:b2:6b:98:3d:7c:48:03:e2:84:c7:
         b6:27:24:ec:4a:c8:dc:f7:f6:64:9d:81:8b:b3:96:b2:7a:56:
         86:d6:5f:f1:15:4c:e6:70:c8:db:d5:43:04:45:76:65:fc:3d:
         a4:cd:cc:da:7a:54:df:9e:18:ed:92:89:40:7f:bf:7f:36:c0:
         a6:c2:15:52:0d:e9:a8:61:79:c9:9e:94:1f:f3:75:ba:23:41:
         ad:e9:ee:44:dc:84:6c:0f:4e:ea:f7:b7:f4:33:12:a9:21:26:
         f6:78:78:eb:10:44:72:ca:57:65:61:f6:c9:9e:fa:3a:62:f8:
         37:2c:ad:ba:1b:28:52:31:e2:b6:7c:c7:65:69:f0:12:89:bf:
         60:9f:34:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 00:01:21 2024 by rpki-client on console-ams.rpki-client.org