Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/3231362e3234372e39372e302f32342d3234203d3e20333938343635.roa
File:                     3231362e3234372e39372e302f32342d3234203d3e20333938343635.roa (raw, json)
Hash identifier:          GRoZFuDBrJl/bHt2Jk7thS5n/XNohIUIMCMLXZo16G4=
Subject key identifier:   E1:B5:80:B4:CD:18:15:9C:20:B1:C0:1B:36:93:C5:1F:67:EE:0F:31
Certificate issuer:       /CN=718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c
Certificate serial:       1DA5150E1BC7E4F6DF29A49D2ABB791AC5A7289E
Authority key identifier: 1D:1D:EB:CD:9F:2E:82:12:22:15:3A:C9:EF:50:37:6A:31:59:CB:90
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/3231362e3234372e39372e302f32342d3234203d3e20333938343635.roa
Signing time:             Mon 30 Sep 2024 12:48:59 +0000
ROA not before:           Mon 30 Sep 2024 12:43:59 +0000
ROA not after:            Mon 29 Sep 2025 12:48:59 +0000
asID:                     398465
IP address blocks:        216.247.97.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/1D1DEBCD9F2E821222153AC9EF50376A3159CB90.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/1D1DEBCD9F2E821222153AC9EF50376A3159CB90.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/f0b1b436-193c-4209-a695-f168f9f2b3b0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/f0b1b436-193c-4209-a695-f168f9f2b3b0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 21:55:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:a5:15:0e:1b:c7:e4:f6:df:29:a4:9d:2a:bb:79:1a:c5:a7:28:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c
        Validity
            Not Before: Sep 30 12:43:59 2024 GMT
            Not After : Sep 29 12:48:59 2025 GMT
        Subject: CN=E1B580B4CD18159C20B1C01B3693C51F67EE0F31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:c7:16:28:36:14:33:f9:fd:f3:08:5b:07:85:
                    c2:71:6c:25:43:7b:e9:e9:fc:ea:13:13:35:c1:86:
                    c0:c3:20:42:cc:8c:0d:fe:5f:c1:20:3c:24:7c:03:
                    fe:d9:0b:63:b7:49:4b:31:cf:88:fd:d3:61:13:97:
                    a4:ba:c9:5e:e9:60:0c:6a:59:05:cc:c1:a7:34:22:
                    1d:ff:dd:14:b2:a7:68:ed:cf:1d:17:c6:46:98:23:
                    70:42:b8:4e:a6:08:36:38:82:d8:5b:52:c0:92:75:
                    ce:8c:d3:2f:ce:94:c4:a4:e3:06:ae:56:47:4b:5c:
                    53:53:ad:d9:5f:b1:af:eb:7f:c8:ad:46:60:36:89:
                    dc:17:54:22:26:86:df:2e:f1:0c:a1:5b:ff:d2:83:
                    96:42:16:5d:e6:c3:6f:ea:21:fe:2f:36:ee:ff:62:
                    60:fa:8b:80:3c:9f:96:3e:bb:eb:28:79:02:80:b6:
                    1a:f7:04:07:37:58:c8:18:20:f0:4d:90:99:58:54:
                    1d:81:cd:44:a2:0b:b5:2b:02:46:63:ff:f4:69:d0:
                    b3:a2:a7:1f:95:36:f1:2e:1d:d0:f0:22:5d:01:92:
                    63:d1:d8:20:38:59:8e:48:f9:95:b5:0e:aa:d0:0f:
                    53:6d:6c:de:fa:75:9d:de:59:0c:b9:ef:9c:50:be:
                    3d:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:B5:80:B4:CD:18:15:9C:20:B1:C0:1B:36:93:C5:1F:67:EE:0F:31
            X509v3 Authority Key Identifier:
                keyid:1D:1D:EB:CD:9F:2E:82:12:22:15:3A:C9:EF:50:37:6A:31:59:CB:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/1D1DEBCD9F2E821222153AC9EF50376A3159CB90.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/3231362e3234372e39372e302f32342d3234203d3e20333938343635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.247.97.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9c:a8:a2:12:5d:41:79:65:64:14:b4:f2:3b:c8:60:b0:bc:63:
         1c:df:37:57:99:fc:d5:98:ec:0c:8d:6f:37:f5:87:99:27:dc:
         cb:42:b6:32:f7:4b:3c:a0:6d:b1:78:c9:ec:0f:d6:b5:5a:bb:
         cd:bd:e1:b5:76:c5:c7:00:7f:11:3d:d8:cf:8f:6d:38:f3:80:
         32:9b:92:da:91:f2:6c:fb:98:e8:23:96:0e:24:d8:4a:6e:18:
         0e:5f:e9:be:55:9a:4a:74:6b:82:34:a1:30:1a:21:80:01:ae:
         03:89:05:7b:8d:a7:91:3a:40:ef:3d:ce:33:50:c5:d2:14:6a:
         4b:fc:ff:e5:bf:12:e2:f9:74:86:d0:61:49:d7:c3:b1:06:9b:
         5c:a7:11:6e:a2:ff:cf:97:1d:ff:b6:01:a6:84:54:42:1d:97:
         19:0b:5f:8d:d0:1f:43:c7:48:40:9a:c1:da:e9:4f:da:b4:33:
         39:8e:b8:56:35:dc:8d:28:6a:71:ab:2f:1f:ce:bd:09:45:c4:
         ee:0a:f5:af:11:4b:0f:fa:24:69:41:1a:84:ad:c6:e6:a2:6d:
         5c:20:c3:23:01:07:59:c1:9e:03:c5:d6:d4:3c:20:a0:3f:3b:
         a4:2c:83:79:34:f0:4a:0d:f2:a7:29:71:d7:26:b6:f1:eb:ea:
         66:4a:05:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:34:39 2024 by rpki-client on console-fra.rpki-client.org