Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/3231362e3234372e39362e302f32342d3234203d3e2037303138.roa
File:                     3231362e3234372e39362e302f32342d3234203d3e2037303138.roa (raw, json)
Hash identifier:          69eQ2JthwCZL4FompNiRN4GeOwwmvf92H1QLex0X2r0=
Subject key identifier:   67:41:56:58:35:81:F6:D6:AE:33:B2:D5:DD:48:DC:1D:36:74:97:D4
Certificate issuer:       /CN=718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c
Certificate serial:       5E9648E706B2FB5C2E83E6F88B34F71F633D44C9
Authority key identifier: 1D:1D:EB:CD:9F:2E:82:12:22:15:3A:C9:EF:50:37:6A:31:59:CB:90
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/3231362e3234372e39362e302f32342d3234203d3e2037303138.roa
Signing time:             Mon 30 Oct 2023 12:03:56 +0000
ROA not before:           Mon 30 Oct 2023 11:58:56 +0000
ROA not after:            Mon 28 Oct 2024 12:03:56 +0000
asID:                     7018
IP address blocks:        216.247.96.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/1D1DEBCD9F2E821222153AC9EF50376A3159CB90.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/1D1DEBCD9F2E821222153AC9EF50376A3159CB90.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/f0b1b436-193c-4209-a695-f168f9f2b3b0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/f0b1b436-193c-4209-a695-f168f9f2b3b0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 29 Apr 2024 02:48:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:96:48:e7:06:b2:fb:5c:2e:83:e6:f8:8b:34:f7:1f:63:3d:44:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c
        Validity
            Not Before: Oct 30 11:58:56 2023 GMT
            Not After : Oct 28 12:03:56 2024 GMT
        Subject: CN=674156583581F6D6AE33B2D5DD48DC1D367497D4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:0f:72:ba:4e:dd:ad:75:52:24:94:20:f3:c8:
                    e8:25:f8:cc:11:08:9a:03:ce:8d:68:40:62:94:6d:
                    49:b0:a5:76:35:e8:a2:06:bd:75:21:a8:8f:e8:8c:
                    85:1c:b2:58:df:aa:8b:2c:fa:e9:d7:ab:b5:5c:f5:
                    55:29:b0:60:83:ad:a2:11:41:3f:1e:14:03:3d:55:
                    8c:aa:4d:2e:82:59:75:6b:75:e9:8e:ef:45:a9:78:
                    82:2c:79:5f:51:4a:12:c1:b1:18:7f:ca:dd:75:0a:
                    8a:3d:ac:0f:27:43:d9:ef:31:51:e8:3d:4b:cf:a4:
                    92:5c:a2:d0:a9:8b:c7:0b:f4:02:a5:05:a8:fb:11:
                    8b:fe:9f:94:ee:de:3e:29:be:08:5b:ec:75:32:a3:
                    86:d4:e7:56:ed:08:2f:d5:aa:20:db:57:57:16:50:
                    0e:72:96:0e:ef:b0:55:0d:74:d7:49:31:16:1d:a0:
                    0a:6b:41:6a:5e:aa:fb:9a:f9:f4:fc:7d:7a:41:11:
                    a1:8f:37:9d:77:8d:0f:50:f5:2a:85:3c:c2:06:1b:
                    11:9f:b4:c9:f0:50:c9:93:8f:12:fc:57:61:59:91:
                    70:19:90:2d:80:52:48:81:c0:2d:20:23:40:61:c1:
                    c0:8e:16:bf:21:38:87:17:4a:89:65:6d:00:44:93:
                    d8:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:41:56:58:35:81:F6:D6:AE:33:B2:D5:DD:48:DC:1D:36:74:97:D4
            X509v3 Authority Key Identifier:
                keyid:1D:1D:EB:CD:9F:2E:82:12:22:15:3A:C9:EF:50:37:6A:31:59:CB:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/1D1DEBCD9F2E821222153AC9EF50376A3159CB90.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/3231362e3234372e39362e302f32342d3234203d3e2037303138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.247.96.0/24

    Signature Algorithm: sha256WithRSAEncryption
         93:37:0a:a4:80:cf:f7:15:2f:b9:45:55:f9:a5:83:f7:c8:0c:
         83:b5:3a:12:8f:30:aa:17:05:f0:87:5f:59:84:c4:db:74:31:
         8b:d9:89:08:49:8a:3f:69:b5:79:82:4c:6a:c3:40:c8:69:9f:
         ae:c7:36:6f:5a:ac:1b:3d:d3:40:9a:bf:9a:df:c4:2d:88:50:
         54:34:b4:17:05:ee:b3:fd:ed:86:b9:a1:92:c0:47:71:89:60:
         8c:f1:e8:65:be:26:a4:27:c3:38:e9:63:fc:0c:33:79:8d:2e:
         b4:d3:e5:df:0d:0f:6b:0a:65:9a:86:b2:eb:c2:a5:33:c9:5e:
         cb:4f:5e:b6:c4:6b:64:bd:a1:12:8a:3f:67:77:a4:6d:b7:3f:
         73:d3:0d:28:48:53:16:a3:a1:c0:42:88:c3:52:62:e5:66:54:
         5a:f2:dd:e5:1c:d5:30:45:eb:93:b4:07:db:f9:33:8b:07:cd:
         31:a0:ea:be:8f:0e:b4:1c:a5:8c:72:b9:ba:61:ac:cb:54:11:
         dd:02:28:34:41:48:f1:0f:80:c9:b4:41:d9:04:f6:3d:10:f1:
         97:81:7a:75:ee:d5:71:c8:9d:b6:27:bf:d9:80:2c:46:a7:1b:
         52:7d:38:b1:55:4e:3c:8f:19:4c:0e:aa:10:3d:96:8c:ef:1e:
         eb:5e:ad:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 00:01:21 2024 by rpki-client on console-ams.rpki-client.org