Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/3231362e3234372e39372e302f32342d3234203d3e203232373733.roa
File:                     3231362e3234372e39372e302f32342d3234203d3e203232373733.roa (raw, json)
Hash identifier:          jFvXa16E6ZP3nxlsF83kzQRl9OoZcSoXCjHGP57Xe1g=
Subject key identifier:   BE:B3:52:8F:83:C4:DE:E8:DB:E6:81:D1:9E:21:63:EC:62:20:3E:E1
Certificate issuer:       /CN=718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c
Certificate serial:       3CB4E1E0C62B39AE7AAEEC7129A8BAB4A3DF2B65
Authority key identifier: 1D:1D:EB:CD:9F:2E:82:12:22:15:3A:C9:EF:50:37:6A:31:59:CB:90
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/3231362e3234372e39372e302f32342d3234203d3e203232373733.roa
Signing time:             Mon 30 Sep 2024 12:48:59 +0000
ROA not before:           Mon 30 Sep 2024 12:43:59 +0000
ROA not after:            Mon 29 Sep 2025 12:48:59 +0000
asID:                     22773
IP address blocks:        216.247.97.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/1D1DEBCD9F2E821222153AC9EF50376A3159CB90.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/1D1DEBCD9F2E821222153AC9EF50376A3159CB90.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/f0b1b436-193c-4209-a695-f168f9f2b3b0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/f0b1b436-193c-4209-a695-f168f9f2b3b0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 14 Mar 2025 12:09:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:b4:e1:e0:c6:2b:39:ae:7a:ae:ec:71:29:a8:ba:b4:a3:df:2b:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c
        Validity
            Not Before: Sep 30 12:43:59 2024 GMT
            Not After : Sep 29 12:48:59 2025 GMT
        Subject: CN=BEB3528F83C4DEE8DBE681D19E2163EC62203EE1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:40:0c:39:5f:94:1f:5b:b3:ed:46:bc:bd:07:
                    51:6f:01:f2:2c:8a:22:a8:1c:96:18:f3:7a:3b:d5:
                    9c:83:09:af:ea:3a:04:20:6f:8f:6f:ad:e6:3a:d4:
                    3b:c5:05:1d:79:cf:8d:37:28:6a:19:11:6e:29:6c:
                    51:8a:0a:1e:a9:1c:1e:2d:02:d1:49:45:99:d4:56:
                    13:7b:cc:a6:8f:03:95:bd:91:06:fb:0c:8c:19:21:
                    4b:5d:1c:b1:0f:2e:ca:a9:cd:e2:9c:82:8b:03:7c:
                    e0:c3:e4:f6:ae:7d:70:ce:e1:b7:68:93:95:57:2c:
                    1d:01:a9:60:71:85:be:1f:7c:10:01:77:09:96:0e:
                    b8:ba:6e:02:c3:a4:97:c1:2d:4c:38:03:a5:09:16:
                    f6:3c:27:0f:2f:ca:0c:6f:b9:58:e8:b0:a7:9f:56:
                    0a:3c:1c:7d:90:35:7b:1a:09:19:7c:87:af:17:07:
                    42:52:35:7a:37:f3:4e:4b:7f:82:6f:8f:b3:e8:c8:
                    5e:e5:1a:69:33:d6:89:b5:ac:e4:2e:ff:92:19:d7:
                    2b:c3:57:93:5b:db:f4:13:82:0d:74:28:47:1c:2f:
                    60:41:db:f2:d5:0f:74:ef:0a:a7:fd:a9:14:d6:a7:
                    bc:76:79:1e:e1:cc:30:00:04:37:14:71:e8:6f:b6:
                    7f:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:B3:52:8F:83:C4:DE:E8:DB:E6:81:D1:9E:21:63:EC:62:20:3E:E1
            X509v3 Authority Key Identifier:
                keyid:1D:1D:EB:CD:9F:2E:82:12:22:15:3A:C9:EF:50:37:6A:31:59:CB:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/1D1DEBCD9F2E821222153AC9EF50376A3159CB90.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/3231362e3234372e39372e302f32342d3234203d3e203232373733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.247.97.0/24

    Signature Algorithm: sha256WithRSAEncryption
         82:85:a1:ff:ae:47:6d:aa:30:13:fc:6f:2f:c0:3e:0d:3e:94:
         80:51:dd:1f:b4:6b:4f:6c:0b:21:f1:d6:90:c2:e8:de:d7:55:
         1e:6a:2c:6d:86:42:61:15:9f:5a:fb:97:27:5e:e8:a2:0c:88:
         83:62:39:5d:18:06:b9:0d:21:09:22:33:38:bf:fe:67:f6:33:
         7c:25:61:50:0f:36:2d:bd:a4:62:30:48:c5:22:6d:d1:1c:87:
         0f:6d:99:16:fa:c4:2f:c1:4f:c2:5f:04:5b:08:cb:be:a9:9a:
         5a:07:95:1f:28:35:4d:0e:0b:7c:2a:7b:f3:a1:20:73:40:fb:
         13:2a:01:3b:2f:76:e4:49:06:9c:2a:0e:3f:bb:44:13:26:c8:
         1e:36:cc:9e:87:4e:f6:eb:c3:2c:b8:4a:b3:66:1f:ad:e9:7f:
         ef:fe:27:fd:dd:6b:9e:6a:82:f3:95:d1:47:9a:ce:9c:3d:41:
         59:bb:21:da:86:c3:8d:ac:8f:0d:c3:ad:c2:a3:d9:cb:66:67:
         f9:78:5c:36:ce:fe:28:dd:24:76:54:4a:f9:d9:3f:cc:61:3c:
         ad:a4:e6:51:2f:ca:ba:60:07:fd:a2:ea:08:b4:6f:f0:b1:53:
         91:0b:38:c1:70:ab:44:c4:3a:88:cc:40:23:46:b7:0f:c2:7c:
         3d:e6:ca:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 23:57:52 2025 by rpki-client