Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/3231362e3234372e39372e302f32342d3234203d3e20333938333535.roa
File:                     3231362e3234372e39372e302f32342d3234203d3e20333938333535.roa (raw, json)
Hash identifier:          PG2LGn2wat+Rir9/dTppz0pLEN2qBh2c1apaOxAOGuw=
Subject key identifier:   21:42:05:C3:E3:88:BB:1B:16:81:C3:AC:3B:E5:B1:E5:2F:2F:FF:F4
Certificate issuer:       /CN=718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c
Certificate serial:       2A9E1629ECC07F32432729D2EFBBAE2967D6753A
Authority key identifier: 1D:1D:EB:CD:9F:2E:82:12:22:15:3A:C9:EF:50:37:6A:31:59:CB:90
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/3231362e3234372e39372e302f32342d3234203d3e20333938333535.roa
Signing time:             Fri 27 Sep 2024 13:48:59 +0000
ROA not before:           Fri 27 Sep 2024 13:43:59 +0000
ROA not after:            Fri 26 Sep 2025 13:48:59 +0000
asID:                     398355
IP address blocks:        216.247.97.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/1D1DEBCD9F2E821222153AC9EF50376A3159CB90.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/1D1DEBCD9F2E821222153AC9EF50376A3159CB90.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/f0b1b436-193c-4209-a695-f168f9f2b3b0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/f0b1b436-193c-4209-a695-f168f9f2b3b0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 21:55:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:9e:16:29:ec:c0:7f:32:43:27:29:d2:ef:bb:ae:29:67:d6:75:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c
        Validity
            Not Before: Sep 27 13:43:59 2024 GMT
            Not After : Sep 26 13:48:59 2025 GMT
        Subject: CN=214205C3E388BB1B1681C3AC3BE5B1E52F2FFFF4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:68:ff:ed:68:d0:8e:c6:7b:a1:87:67:f6:b3:
                    dc:14:e2:c3:41:b4:f8:ea:1a:64:3a:9c:a3:85:b7:
                    6c:ef:22:6b:8d:06:7b:35:03:03:cb:0a:44:8f:da:
                    3e:ec:9f:1b:b2:84:ca:74:70:0d:d7:37:ad:c5:9e:
                    c2:62:5c:e5:28:22:e6:61:53:fa:cb:18:8a:95:6e:
                    52:cf:4a:cd:8e:40:f3:c3:ba:f0:85:04:52:80:c1:
                    78:7b:00:22:e5:d0:b5:8b:e0:96:03:c2:47:6b:3b:
                    0b:9b:68:ff:eb:f2:53:59:86:53:22:04:a1:fb:09:
                    5f:51:e6:b5:a5:9c:b0:2a:b2:73:8e:04:7d:0b:af:
                    92:2c:b6:14:b9:c7:02:68:11:0d:8d:94:81:d0:d6:
                    48:83:cb:0e:f4:ed:2a:f8:41:bf:44:f5:bd:89:33:
                    61:81:60:27:e7:43:9c:bb:71:5a:6c:5c:b5:29:e9:
                    0a:f9:33:11:9d:3d:10:9a:39:0d:0e:cc:3d:fd:91:
                    78:d6:12:0d:5c:8b:26:74:50:0e:bf:af:53:27:b6:
                    e8:37:a2:6c:e0:0c:8f:81:e3:57:f2:4c:5b:5c:d7:
                    9c:ec:7e:7a:94:f0:81:ef:60:75:e7:76:b0:fe:ac:
                    ba:8c:26:37:51:c2:9b:d6:c7:a8:e8:5a:84:16:d6:
                    40:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:42:05:C3:E3:88:BB:1B:16:81:C3:AC:3B:E5:B1:E5:2F:2F:FF:F4
            X509v3 Authority Key Identifier:
                keyid:1D:1D:EB:CD:9F:2E:82:12:22:15:3A:C9:EF:50:37:6A:31:59:CB:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/1D1DEBCD9F2E821222153AC9EF50376A3159CB90.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/3231362e3234372e39372e302f32342d3234203d3e20333938333535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.247.97.0/24

    Signature Algorithm: sha256WithRSAEncryption
         30:e0:da:f2:8c:5d:65:00:a8:4c:c7:c9:5a:80:bc:8a:de:58:
         7f:f0:91:2d:a9:b7:04:73:16:a0:c4:fa:f5:b4:22:c3:0e:63:
         7c:d6:48:bb:2c:d2:2c:08:3a:fe:50:d2:d5:ce:b2:e5:72:88:
         95:91:95:18:50:11:c0:df:6e:7a:1b:22:d7:19:d6:e9:c5:65:
         9a:39:d6:08:ed:76:2e:dc:81:65:f8:b2:dc:d8:10:6a:78:68:
         9c:3b:00:d1:89:be:e8:e4:93:06:49:f2:57:ab:ee:ac:3b:35:
         d5:f9:10:36:91:cf:a3:5d:c7:e2:35:83:b7:78:a7:05:b3:bb:
         e7:d6:c7:c8:16:ee:eb:ee:18:08:91:d5:a6:ba:01:2c:f5:86:
         87:98:f3:94:12:7d:a6:fc:15:04:96:8a:88:0c:ae:8d:06:cf:
         6d:12:d2:8c:9a:b0:d4:c7:55:ee:12:35:fa:5e:74:2f:83:a6:
         e8:79:55:44:29:91:3a:2b:f3:31:8d:c9:69:c6:84:9f:1c:77:
         0c:4e:6d:3c:5a:73:76:f1:c7:36:f7:b5:81:eb:3d:d9:91:c1:
         3f:ce:98:c4:a2:7e:02:ec:5c:cf:c4:a5:dc:dd:39:c1:8a:dc:
         4a:28:ce:5e:94:39:76:aa:58:d4:1f:ac:91:83:11:85:06:99:
         9a:2a:2d:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:34:39 2024 by rpki-client on console-fra.rpki-client.org