Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/3231362e3234372e39372e302f32342d3234203d3e203232373733.roa
File:                     3231362e3234372e39372e302f32342d3234203d3e203232373733.roa (raw, json)
Hash identifier:          sP5zAfUFRtSrMEFKz5NFqg4JlqiK9FARDLWv3Z1SJvs=
Subject key identifier:   B1:F5:C1:9B:D1:30:B6:0C:AE:68:48:92:6B:C6:E2:F9:A1:EE:69:68
Certificate issuer:       /CN=718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c
Certificate serial:       7A73E15D702FC9529AED1B732D11F8246EE50865
Authority key identifier: 1D:1D:EB:CD:9F:2E:82:12:22:15:3A:C9:EF:50:37:6A:31:59:CB:90
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/3231362e3234372e39372e302f32342d3234203d3e203232373733.roa
Signing time:             Mon 30 Oct 2023 12:03:55 +0000
ROA not before:           Mon 30 Oct 2023 11:58:55 +0000
ROA not after:            Mon 28 Oct 2024 12:03:55 +0000
asID:                     22773
IP address blocks:        216.247.97.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/1D1DEBCD9F2E821222153AC9EF50376A3159CB90.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/1D1DEBCD9F2E821222153AC9EF50376A3159CB90.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/f0b1b436-193c-4209-a695-f168f9f2b3b0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/f0b1b436-193c-4209-a695-f168f9f2b3b0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 26 Apr 2024 19:31:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:73:e1:5d:70:2f:c9:52:9a:ed:1b:73:2d:11:f8:24:6e:e5:08:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c
        Validity
            Not Before: Oct 30 11:58:55 2023 GMT
            Not After : Oct 28 12:03:55 2024 GMT
        Subject: CN=B1F5C19BD130B60CAE6848926BC6E2F9A1EE6968
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:7f:48:4c:5b:4c:2b:96:3d:af:1f:46:35:eb:
                    32:93:54:b9:98:7c:08:df:5c:3b:4f:89:ec:00:00:
                    7f:e5:32:2d:46:2a:80:b9:f1:29:1a:7f:be:cf:1c:
                    f5:49:10:51:06:97:e0:62:88:ae:03:b4:f0:1c:a8:
                    69:35:76:1a:8e:35:5a:0b:c3:fe:30:bd:81:31:c0:
                    a0:19:d8:ab:15:0c:16:a8:e2:0f:de:bf:27:6a:2e:
                    6f:3f:d0:8b:22:57:1f:7f:e3:68:2b:ea:dc:44:ac:
                    07:60:fd:39:68:8e:f8:8f:95:e3:bc:e3:4f:d9:1d:
                    53:58:a2:64:c8:09:e4:14:19:6b:32:c9:42:15:44:
                    7d:85:09:2c:f3:b7:c0:31:b2:24:72:fc:6d:59:a8:
                    73:f9:b0:7d:40:e0:c8:2c:c3:df:eb:9a:46:ee:75:
                    e3:8d:9f:9c:30:1f:2e:c6:ea:53:e6:94:fe:5e:ec:
                    12:93:6c:17:8d:dd:30:80:54:2f:3e:6d:67:1c:51:
                    54:c3:25:fd:92:46:42:6a:19:76:2c:75:6e:ac:ad:
                    3b:54:11:c7:e0:55:83:38:20:08:6e:3a:c2:d6:f4:
                    0c:81:c9:11:55:c4:53:49:c8:c2:f6:2e:a2:44:83:
                    64:7e:26:c3:c2:cb:24:2e:68:d7:85:4a:2f:98:db:
                    d0:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:F5:C1:9B:D1:30:B6:0C:AE:68:48:92:6B:C6:E2:F9:A1:EE:69:68
            X509v3 Authority Key Identifier:
                keyid:1D:1D:EB:CD:9F:2E:82:12:22:15:3A:C9:EF:50:37:6A:31:59:CB:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/1D1DEBCD9F2E821222153AC9EF50376A3159CB90.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/3231362e3234372e39372e302f32342d3234203d3e203232373733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.247.97.0/24

    Signature Algorithm: sha256WithRSAEncryption
         76:e2:17:ae:28:84:7d:e1:f8:d4:83:5c:2c:dd:1c:14:5b:08:
         8e:16:49:cd:70:24:b3:06:56:a2:8e:f7:63:00:fc:61:e6:29:
         19:ee:45:f8:c1:31:13:cf:b1:ae:36:b7:25:af:1a:4a:b1:d7:
         2c:10:73:44:a7:ac:bd:d8:0c:86:ee:91:9c:52:dc:c2:ee:ed:
         f2:d8:9f:eb:b4:ca:e6:43:e3:36:6d:2c:4d:99:34:9d:58:0f:
         18:23:f5:58:3a:88:04:7d:96:0d:5d:86:a4:57:3c:12:80:d5:
         a4:92:7d:78:35:0e:d2:cd:17:e8:65:39:13:d3:cb:9c:31:07:
         45:73:e9:9b:98:10:b5:43:b9:37:f3:04:c9:2f:2d:5d:33:42:
         ee:2a:ce:da:7b:74:af:43:28:b0:da:64:23:20:23:0e:af:e3:
         f0:43:23:d3:23:fb:57:e4:74:fa:b5:c5:f1:d2:b5:71:1a:db:
         b3:41:eb:75:89:4b:8e:e1:f8:4c:49:60:d2:d1:2b:db:cd:02:
         21:c8:87:5f:4f:33:7f:60:a9:25:fb:6a:d2:62:56:ae:6c:5d:
         ec:5f:94:7b:ef:44:7e:37:fd:a8:13:6e:12:c8:d9:20:15:19:
         0c:a3:7b:0f:9e:5c:29:b0:c4:bd:15:c5:26:cd:2b:fd:27:7c:
         17:65:f4:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 22:32:11 2024 by rpki-client on console-fra.rpki-client.org