Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/3231362e3234372e39372e302f32342d3234203d3e20343031313034.roa
File:                     3231362e3234372e39372e302f32342d3234203d3e20343031313034.roa (raw, json)
Hash identifier:          f136/C/Fg5aylzsnPpFvcLwS7oFaD6Ve2s+wH9ksrSY=
Subject key identifier:   FE:09:E0:50:7C:D1:69:7F:60:CA:CA:E1:B7:F8:DB:70:8C:E4:F4:AA
Certificate issuer:       /CN=718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c
Certificate serial:       177A505C5D949FF69516A3DC4B08B5528CEC4895
Authority key identifier: 1D:1D:EB:CD:9F:2E:82:12:22:15:3A:C9:EF:50:37:6A:31:59:CB:90
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/3231362e3234372e39372e302f32342d3234203d3e20343031313034.roa
Signing time:             Wed 17 Jul 2024 22:03:14 +0000
ROA not before:           Wed 17 Jul 2024 21:58:14 +0000
ROA not after:            Wed 16 Jul 2025 22:03:14 +0000
asID:                     401104
IP address blocks:        216.247.97.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/1D1DEBCD9F2E821222153AC9EF50376A3159CB90.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/1D1DEBCD9F2E821222153AC9EF50376A3159CB90.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/f0b1b436-193c-4209-a695-f168f9f2b3b0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/f0b1b436-193c-4209-a695-f168f9f2b3b0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 21:55:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:7a:50:5c:5d:94:9f:f6:95:16:a3:dc:4b:08:b5:52:8c:ec:48:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c
        Validity
            Not Before: Jul 17 21:58:14 2024 GMT
            Not After : Jul 16 22:03:14 2025 GMT
        Subject: CN=FE09E0507CD1697F60CACAE1B7F8DB708CE4F4AA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:6e:f0:4a:54:d6:d4:81:03:cd:da:3d:df:14:
                    94:30:89:73:43:1e:60:cc:80:fb:6f:cf:2b:5d:72:
                    fa:e7:ab:21:c3:0e:0f:a3:15:7c:7b:8a:7f:86:80:
                    99:1f:2f:a2:28:1f:dd:8e:7b:34:fc:cf:1a:ba:7b:
                    cb:cf:db:eb:93:dc:a2:22:60:a2:c3:e0:08:66:1b:
                    01:36:10:8d:f3:71:4d:b4:ad:97:f5:12:99:7c:35:
                    20:90:c7:15:f7:2e:4f:d2:db:6d:d9:f4:4b:23:c2:
                    0b:c0:90:65:03:83:5b:f6:7c:87:01:a3:62:5a:47:
                    84:3c:ae:d5:ac:08:76:cd:43:61:ef:a5:94:5e:af:
                    21:00:94:cd:30:03:08:0c:18:9e:5e:27:ac:ba:a5:
                    34:e0:9b:d7:b0:f3:97:75:81:a2:04:88:63:e8:1e:
                    5e:72:09:f0:7e:ac:99:ab:80:68:43:be:bf:6a:b1:
                    2d:2d:55:2c:83:01:59:43:44:6c:4a:3a:68:19:37:
                    9b:60:58:3d:79:b8:30:d8:5b:d4:ef:4e:d8:c5:99:
                    9a:40:f1:6a:61:89:29:c2:de:c3:64:89:3a:54:22:
                    89:13:f5:40:b5:2b:39:2c:c9:0a:5f:32:b9:a0:39:
                    59:9b:54:d8:f3:3d:09:07:a7:27:b0:52:ee:72:63:
                    e9:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:09:E0:50:7C:D1:69:7F:60:CA:CA:E1:B7:F8:DB:70:8C:E4:F4:AA
            X509v3 Authority Key Identifier:
                keyid:1D:1D:EB:CD:9F:2E:82:12:22:15:3A:C9:EF:50:37:6A:31:59:CB:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/1D1DEBCD9F2E821222153AC9EF50376A3159CB90.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/3231362e3234372e39372e302f32342d3234203d3e20343031313034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.247.97.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0d:d7:ad:22:ec:97:b3:15:a1:a9:d5:f6:87:b7:d1:42:1f:85:
         93:ab:78:02:1d:a1:a3:f5:1f:97:71:aa:4e:17:e3:31:c0:39:
         6c:07:5a:c3:95:4e:5f:16:d1:33:b2:4a:79:eb:73:d1:98:82:
         fa:f0:0b:bb:09:69:d9:99:b5:b8:da:b0:4b:fc:ef:6d:f2:e6:
         1e:2b:04:ba:5d:1c:05:f0:af:12:b7:d3:7f:75:01:e7:67:11:
         80:a1:11:35:ce:a5:97:ac:08:6a:5d:fe:90:c5:48:a1:c5:49:
         ac:fc:ed:60:82:0a:13:e3:d4:4d:f0:f3:bb:85:fb:6e:ef:72:
         68:5d:ed:a9:73:af:da:49:c6:50:66:34:a1:fc:fd:ef:d7:87:
         2e:e8:a9:3d:92:47:6d:66:00:83:ac:ef:6f:f2:5f:08:c2:d9:
         86:fb:72:6c:6c:35:d2:5e:d1:b8:1c:8b:3f:de:d8:3d:6d:f4:
         07:7b:64:2b:d5:1e:5c:a3:ed:24:c9:76:41:29:a1:44:a7:f7:
         07:5f:ff:2c:c5:a5:3d:2a:aa:9d:78:9a:e0:1a:60:12:f6:72:
         8f:cb:97:9b:2d:c3:a2:f7:b1:ea:e0:2e:18:61:74:a6:d4:0e:
         71:22:79:a8:8a:10:ff:99:f9:0b:d6:de:af:68:89:3e:f0:ca:
         ca:4a:4b:51
-----BEGIN CERTIFICATE-----
MIIFtDCCBJygAwIBAgIUF3pQXF2Un/aVFqPcSwi1UozsSJUwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNzE4NjI2ZWFiNzM1OTZmNDcyZGZiMDIwYTljMGYzYjcx
YWQ5ZGQ0ZmVmOTk0N2U5MWMwHhcNMjQwNzE3MjE1ODE0WhcNMjUwNzE2MjIwMzE0
WjAzMTEwLwYDVQQDEyhGRTA5RTA1MDdDRDE2OTdGNjBDQUNBRTFCN0Y4REI3MDhD
RTRGNEFBMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy27wSlTW1IED
zdo93xSUMIlzQx5gzID7b88rXXL656shww4PoxV8e4p/hoCZHy+iKB/djns0/M8a
unvLz9vrk9yiImCiw+AIZhsBNhCN83FNtK2X9RKZfDUgkMcV9y5P0ttt2fRLI8IL
wJBlA4Nb9nyHAaNiWkeEPK7VrAh2zUNh76WUXq8hAJTNMAMIDBieXiesuqU04JvX
sPOXdYGiBIhj6B5ecgnwfqyZq4BoQ76/arEtLVUsgwFZQ0RsSjpoGTebYFg9ebgw
2FvU707YxZmaQPFqYYkpwt7DZIk6VCKJE/VAtSs5LMkKXzK5oDlZm1TY8z0JB6cn
sFLucmPpWwIDAQABo4ICtDCCArAwHQYDVR0OBBYEFP4J4FB80Wl/YMrK4bf423CM
5PSqMB8GA1UdIwQYMBaAFB0d682fLoISIhU6ye9QN2oxWcuQMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODBmMWE4MGEwMTgxZjBmMTc1NDE2NjdmLzEv
MUQxREVCQ0Q5RjJFODIxMjIyMTUzQUM5RUY1MDM3NkEzMTU5Q0I5MC5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi
MGI4NDE1L2YwYjFiNDM2LTE5M2MtNDIwOS1hNjk1LWYxNjhmOWYyYjNiMC83MTg2
MjZlYWI3MzU5NmY0NzJkZmIwMjBhOWMwZjNiNzFhZDlkZDRmZWY5OTQ3ZTkxYy5j
ZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZTgwZjFhODBhMDE4MWYw
ZjE3NTQxNjY3Zi8xLzMyMzEzNjJlMzIzNDM3MmUzOTM3MmUzMDJmMzIzNDJkMzIz
NDIwM2QzZTIwMzQzMDMxMzEzMDM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2PdhMA0GCSqGSIb3DQEB
CwUAA4IBAQAN160i7JezFaGp1faHt9FCH4WTq3gCHaGj9R+XcapOF+MxwDlsB1rD
lU5fFtEzskp563PRmIL68Au7CWnZmbW42rBL/O9t8uYeKwS6XRwF8K8St9N/dQHn
ZxGAoRE1zqWXrAhqXf6QxUihxUms/O1gggoT49RN8PO7hftu73JoXe2pc6/aScZQ
ZjSh/P3v14cu6Kk9kkdtZgCDrO9v8l8IwtmG+3JsbDXSXtG4HIs/3tg9bfQHe2Qr
1R5co+0kyXZBKaFEp/cHX/8sxaU9KqqdeJrgGmAS9nKPy5ebLcOi97Hq4C4YYXSm
1A5xInmoihD/mfkL1t6vaIk+8MrKSktR
-----END CERTIFICATE-----
Generated at Thu Nov 21 22:34:39 2024 by rpki-client on console-fra.rpki-client.org