Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/3231362e3234372e39372e302f32342d3234203d3e20333938343635.roa
File:                     3231362e3234372e39372e302f32342d3234203d3e20333938343635.roa (raw, json)
Hash identifier:          jt5/TvDTHWRpdTywBn2/DZybhvgla17WUAiq6bpqtSU=
Subject key identifier:   B2:25:A9:B3:5A:29:A9:44:31:FA:8D:83:48:23:2E:7D:82:D0:B3:DC
Certificate issuer:       /CN=718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c
Certificate serial:       3B7DDD44155AAE42A86674EC9CA16DEF5FB76852
Authority key identifier: 1D:1D:EB:CD:9F:2E:82:12:22:15:3A:C9:EF:50:37:6A:31:59:CB:90
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/3231362e3234372e39372e302f32342d3234203d3e20333938343635.roa
Signing time:             Mon 30 Oct 2023 12:03:53 +0000
ROA not before:           Mon 30 Oct 2023 11:58:53 +0000
ROA not after:            Mon 28 Oct 2024 12:03:53 +0000
asID:                     398465
IP address blocks:        216.247.97.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/1D1DEBCD9F2E821222153AC9EF50376A3159CB90.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/1D1DEBCD9F2E821222153AC9EF50376A3159CB90.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/f0b1b436-193c-4209-a695-f168f9f2b3b0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/f0b1b436-193c-4209-a695-f168f9f2b3b0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 29 Apr 2024 02:48:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:7d:dd:44:15:5a:ae:42:a8:66:74:ec:9c:a1:6d:ef:5f:b7:68:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c
        Validity
            Not Before: Oct 30 11:58:53 2023 GMT
            Not After : Oct 28 12:03:53 2024 GMT
        Subject: CN=B225A9B35A29A94431FA8D8348232E7D82D0B3DC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:5a:0b:e2:5b:87:4b:f7:f6:94:09:cc:5b:c8:
                    33:c7:dc:5b:9e:24:df:ad:da:1f:d0:82:64:cb:3d:
                    1d:18:e0:60:b2:16:66:9b:e6:5a:cd:2c:60:28:32:
                    34:78:c8:c1:0c:f7:38:8c:aa:31:00:80:3a:a6:d2:
                    be:89:ba:9e:5b:4a:b9:ad:cf:ba:40:40:c1:4e:73:
                    60:29:74:85:12:af:d5:f9:cf:12:02:d6:cb:19:32:
                    3f:18:c0:14:a8:13:a0:17:cd:16:9a:ac:12:57:2b:
                    48:4c:fa:c0:c9:82:3c:8e:37:be:4f:fa:d3:6c:cb:
                    db:6d:cc:a4:cc:c8:9d:c5:1c:b0:88:d2:79:ed:18:
                    97:f8:21:1e:31:c8:d4:cf:6d:cf:49:9e:16:55:6e:
                    03:af:12:f8:c1:1e:d4:66:47:72:c0:6e:b1:31:13:
                    82:1a:a9:27:cf:b0:7c:f7:e1:db:b0:f7:d5:2c:55:
                    5c:83:88:58:3d:17:10:89:84:8e:29:2b:04:36:fa:
                    db:6c:c8:71:49:c8:d2:30:06:02:03:17:32:59:d0:
                    1a:2e:0c:b0:c1:60:b9:86:49:c7:66:8c:2e:2b:a9:
                    8a:36:08:f9:9b:41:9c:3c:fa:db:a4:be:ae:84:08:
                    72:cb:2e:45:3b:28:0f:7a:a1:b7:64:33:b5:2e:92:
                    a6:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:25:A9:B3:5A:29:A9:44:31:FA:8D:83:48:23:2E:7D:82:D0:B3:DC
            X509v3 Authority Key Identifier:
                keyid:1D:1D:EB:CD:9F:2E:82:12:22:15:3A:C9:EF:50:37:6A:31:59:CB:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/1D1DEBCD9F2E821222153AC9EF50376A3159CB90.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/3231362e3234372e39372e302f32342d3234203d3e20333938343635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.247.97.0/24

    Signature Algorithm: sha256WithRSAEncryption
         81:b3:cb:f5:24:1a:9a:96:09:c5:94:24:a9:63:4e:5d:2a:05:
         98:ff:55:27:b9:d0:2a:f5:e5:0f:d0:71:f7:9a:1e:ec:02:4d:
         b7:40:81:dc:75:c4:8b:87:09:95:56:f6:53:7b:e0:69:0e:46:
         01:f3:95:41:82:42:9f:6a:97:38:62:6e:1d:bc:fd:34:ff:1a:
         8c:68:38:f3:63:ef:ae:33:2d:7f:d7:e0:da:e7:86:57:6b:ae:
         18:27:61:4e:a8:40:bb:55:7f:d6:cb:c8:1e:62:d2:05:31:92:
         f9:8c:2b:35:04:31:93:c0:6f:f4:a2:bf:ac:70:f2:e0:b4:94:
         c5:8f:b1:1e:a5:0a:b2:92:97:13:1b:9a:d1:e2:9f:81:8e:1c:
         a6:fb:3a:fe:1a:93:66:17:6c:6c:3d:fd:db:2d:84:a8:0c:68:
         56:45:ae:e8:98:a8:87:2b:8d:fa:c9:f8:b5:ed:d5:73:ce:a4:
         f8:bc:4f:eb:9a:e4:d4:0b:43:32:b8:41:9a:5c:ad:95:d1:77:
         14:78:3b:58:57:f7:d1:11:3d:0b:3e:0f:8b:24:7f:9f:1f:b0:
         23:12:bf:3e:42:af:da:f1:1a:3f:2e:ad:b2:a4:bc:cd:3f:8a:
         48:72:ef:32:cc:34:e1:4b:e8:aa:b1:02:b3:03:8a:f5:ac:76:
         eb:ed:5e:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 00:01:21 2024 by rpki-client on console-ams.rpki-client.org