Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/3231362e3234372e39372e302f32342d3234203d3e20333938333535.roa
File:                     3231362e3234372e39372e302f32342d3234203d3e20333938333535.roa (raw, json)
Hash identifier:          CRlhv/QVW7PGzzL1K+BaSF5UZuIfHt1MlAt1L3pGqzs=
Subject key identifier:   AA:41:64:6F:A3:98:6E:C1:BD:9F:B2:FC:AF:6E:EF:CB:FD:20:1D:AA
Certificate issuer:       /CN=718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c
Certificate serial:       40129C53290659E9739E2D303B062E27C1C87273
Authority key identifier: 1D:1D:EB:CD:9F:2E:82:12:22:15:3A:C9:EF:50:37:6A:31:59:CB:90
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/3231362e3234372e39372e302f32342d3234203d3e20333938333535.roa
Signing time:             Fri 27 Oct 2023 13:23:32 +0000
ROA not before:           Fri 27 Oct 2023 13:18:32 +0000
ROA not after:            Fri 25 Oct 2024 13:23:32 +0000
asID:                     398355
IP address blocks:        216.247.97.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/1D1DEBCD9F2E821222153AC9EF50376A3159CB90.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/1D1DEBCD9F2E821222153AC9EF50376A3159CB90.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/f0b1b436-193c-4209-a695-f168f9f2b3b0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/f0b1b436-193c-4209-a695-f168f9f2b3b0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 29 Apr 2024 02:48:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:12:9c:53:29:06:59:e9:73:9e:2d:30:3b:06:2e:27:c1:c8:72:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c
        Validity
            Not Before: Oct 27 13:18:32 2023 GMT
            Not After : Oct 25 13:23:32 2024 GMT
        Subject: CN=AA41646FA3986EC1BD9FB2FCAF6EEFCBFD201DAA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:7b:c1:c3:0b:29:c8:66:2d:59:fa:f6:b7:9a:
                    83:40:26:d2:74:41:4b:be:df:5a:83:90:83:13:80:
                    44:fc:f4:f7:bf:67:c7:7a:ae:20:78:9f:1c:35:fc:
                    02:74:9f:ee:8d:38:0e:ad:b5:46:fc:20:ec:49:03:
                    b4:ca:8c:0f:05:d6:fc:0c:84:51:5a:96:bb:08:a3:
                    83:a3:6e:bf:ca:c6:1a:af:d4:78:5f:44:46:e4:61:
                    6a:40:2e:4b:ed:f7:8f:1d:e6:6a:de:ae:3e:be:8f:
                    1e:32:ae:5c:0f:f0:a8:03:b1:6d:5c:91:3c:c3:4d:
                    f7:fd:f3:5e:42:5c:76:a9:40:3a:f0:7c:62:5c:95:
                    ac:f3:6f:cb:75:17:a3:52:59:7c:05:c5:fa:fa:bb:
                    18:35:09:45:9a:0f:6e:ae:f2:35:3c:b6:f6:1b:12:
                    66:d3:2e:9d:25:3b:aa:79:bc:e9:a8:ab:dd:60:0e:
                    f8:f4:3b:25:ba:94:d7:e3:46:89:71:f5:01:4d:19:
                    62:e5:62:4a:91:90:f8:4a:60:16:69:fb:6c:4c:72:
                    0d:8d:ab:56:a5:20:0b:82:cf:e1:ec:a3:0f:35:3b:
                    43:e2:1b:49:db:cc:7a:2c:66:79:e0:fa:d9:9a:04:
                    7d:a8:ca:a5:8d:25:cd:ad:85:36:0d:94:e8:73:02:
                    1b:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:41:64:6F:A3:98:6E:C1:BD:9F:B2:FC:AF:6E:EF:CB:FD:20:1D:AA
            X509v3 Authority Key Identifier:
                keyid:1D:1D:EB:CD:9F:2E:82:12:22:15:3A:C9:EF:50:37:6A:31:59:CB:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/1D1DEBCD9F2E821222153AC9EF50376A3159CB90.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/3231362e3234372e39372e302f32342d3234203d3e20333938333535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.247.97.0/24

    Signature Algorithm: sha256WithRSAEncryption
         87:fe:64:f7:d6:7c:84:3e:51:08:3e:99:1e:cd:d8:fa:76:1e:
         6f:db:66:68:87:fe:79:83:8b:34:b4:32:52:7b:dc:89:d5:74:
         5b:c7:90:55:21:80:58:7d:f3:b3:a8:74:16:cb:8a:cf:eb:d0:
         45:db:65:2f:1d:b8:98:43:69:fc:b0:ff:4b:5f:2d:fc:80:3e:
         93:c2:db:d4:9f:df:45:52:14:60:2e:8a:c2:2a:c5:53:5f:4e:
         ab:f0:a4:54:69:15:1c:7f:a4:a0:9f:e2:4b:cc:82:f7:16:12:
         4d:ca:eb:d8:d4:cd:71:fe:77:f0:3a:14:2a:21:ca:d2:16:88:
         de:40:6c:af:30:34:11:bb:11:7f:b2:44:83:3a:e6:90:99:aa:
         5e:4b:3c:13:0a:80:40:0c:19:5d:f7:78:6b:9d:95:d2:8e:ea:
         fb:84:c6:32:5e:17:3f:33:bb:10:06:57:03:56:cf:14:19:62:
         75:9d:34:67:48:c4:33:ea:0f:9f:9d:6a:ae:0f:af:4b:a9:81:
         32:43:2a:50:b5:3e:d3:49:d0:07:85:c1:b4:b8:a9:cb:87:9c:
         81:dc:73:79:44:0b:f3:cb:89:a7:05:4d:e7:b8:26:78:65:c5:
         68:80:a1:7c:f2:f3:c3:93:9c:0d:a8:79:f9:35:29:c9:aa:5e:
         f6:4b:72:ab
-----BEGIN CERTIFICATE-----
MIIFtDCCBJygAwIBAgIUQBKcUykGWelzni0wOwYuJ8HIcnMwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNzE4NjI2ZWFiNzM1OTZmNDcyZGZiMDIwYTljMGYzYjcx
YWQ5ZGQ0ZmVmOTk0N2U5MWMwHhcNMjMxMDI3MTMxODMyWhcNMjQxMDI1MTMyMzMy
WjAzMTEwLwYDVQQDEyhBQTQxNjQ2RkEzOTg2RUMxQkQ5RkIyRkNBRjZFRUZDQkZE
MjAxREFBMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuXvBwwspyGYt
Wfr2t5qDQCbSdEFLvt9ag5CDE4BE/PT3v2fHeq4geJ8cNfwCdJ/ujTgOrbVG/CDs
SQO0yowPBdb8DIRRWpa7CKODo26/ysYar9R4X0RG5GFqQC5L7fePHeZq3q4+vo8e
Mq5cD/CoA7FtXJE8w033/fNeQlx2qUA68HxiXJWs82/LdRejUll8BcX6+rsYNQlF
mg9urvI1PLb2GxJm0y6dJTuqebzpqKvdYA749DslupTX40aJcfUBTRli5WJKkZD4
SmAWaftsTHINjatWpSALgs/h7KMPNTtD4htJ28x6LGZ54PrZmgR9qMqljSXNrYU2
DZTocwIb8QIDAQABo4ICtDCCArAwHQYDVR0OBBYEFKpBZG+jmG7BvZ+y/K9u78v9
IB2qMB8GA1UdIwQYMBaAFB0d682fLoISIhU6ye9QN2oxWcuQMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODBmMWE4MGEwMTgxZjBmMTc1NDE2NjdmLzEv
MUQxREVCQ0Q5RjJFODIxMjIyMTUzQUM5RUY1MDM3NkEzMTU5Q0I5MC5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi
MGI4NDE1L2YwYjFiNDM2LTE5M2MtNDIwOS1hNjk1LWYxNjhmOWYyYjNiMC83MTg2
MjZlYWI3MzU5NmY0NzJkZmIwMjBhOWMwZjNiNzFhZDlkZDRmZWY5OTQ3ZTkxYy5j
ZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZTgwZjFhODBhMDE4MWYw
ZjE3NTQxNjY3Zi8xLzMyMzEzNjJlMzIzNDM3MmUzOTM3MmUzMDJmMzIzNDJkMzIz
NDIwM2QzZTIwMzMzOTM4MzMzNTM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2PdhMA0GCSqGSIb3DQEB
CwUAA4IBAQCH/mT31nyEPlEIPpkezdj6dh5v22Zoh/55g4s0tDJSe9yJ1XRbx5BV
IYBYffOzqHQWy4rP69BF22UvHbiYQ2n8sP9LXy38gD6TwtvUn99FUhRgLorCKsVT
X06r8KRUaRUcf6Sgn+JLzIL3FhJNyuvY1M1x/nfwOhQqIcrSFojeQGyvMDQRuxF/
skSDOuaQmapeSzwTCoBADBld93hrnZXSjur7hMYyXhc/M7sQBlcDVs8UGWJ1nTRn
SMQz6g+fnWquD69LqYEyQypQtT7TSdAHhcG0uKnLh5yB3HN5RAvzy4mnBU3nuCZ4
ZcVogKF88vPDk5wNqHn5NSnJql72S3Kr
-----END CERTIFICATE-----
Generated at Sun Apr 28 00:01:21 2024 by rpki-client on console-ams.rpki-client.org