Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/3231362e3234372e39372e302f32342d3234203d3e2037303138.roa
File:                     3231362e3234372e39372e302f32342d3234203d3e2037303138.roa (raw, json)
Hash identifier:          Ra615r6xAd2RTH7PrEDo+1v8OPjMJAEJrKE7FGqDLGw=
Subject key identifier:   AB:76:21:BE:06:12:8F:8E:19:4A:DF:2D:EC:0F:9E:1B:33:71:BD:B0
Certificate issuer:       /CN=718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c
Certificate serial:       41F2116F3AA3E2D226EBD1C66EF43C19C8020EAB
Authority key identifier: 1D:1D:EB:CD:9F:2E:82:12:22:15:3A:C9:EF:50:37:6A:31:59:CB:90
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/3231362e3234372e39372e302f32342d3234203d3e2037303138.roa
Signing time:             Mon 30 Oct 2023 12:03:55 +0000
ROA not before:           Mon 30 Oct 2023 11:58:55 +0000
ROA not after:            Mon 28 Oct 2024 12:03:55 +0000
asID:                     7018
IP address blocks:        216.247.97.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/1D1DEBCD9F2E821222153AC9EF50376A3159CB90.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/1D1DEBCD9F2E821222153AC9EF50376A3159CB90.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/f0b1b436-193c-4209-a695-f168f9f2b3b0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/f0b1b436-193c-4209-a695-f168f9f2b3b0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 28 Apr 2024 06:59:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:f2:11:6f:3a:a3:e2:d2:26:eb:d1:c6:6e:f4:3c:19:c8:02:0e:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c
        Validity
            Not Before: Oct 30 11:58:55 2023 GMT
            Not After : Oct 28 12:03:55 2024 GMT
        Subject: CN=AB7621BE06128F8E194ADF2DEC0F9E1B3371BDB0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:16:8d:f6:a3:96:84:a9:2a:07:a8:92:cc:e5:
                    a2:28:b9:98:29:bd:3c:47:90:d3:74:a5:4e:43:54:
                    19:84:be:50:72:12:e8:6e:0b:05:e7:2f:eb:3b:ab:
                    cf:e7:39:ab:b5:0d:1d:12:21:4b:f5:ba:6e:cb:f6:
                    bb:1a:2b:3f:c2:bc:6d:4b:a1:8a:7c:c3:67:6c:3f:
                    55:8e:7f:ac:ed:c6:49:35:42:2d:2c:cd:07:7d:2b:
                    41:8e:79:4d:10:34:ba:93:0a:d2:82:de:8b:e0:89:
                    4e:da:ff:5d:c2:15:e9:6e:d9:e5:8e:09:f0:de:6b:
                    81:06:74:62:6d:2d:55:5a:fe:ee:a3:c1:1f:b6:8b:
                    e2:06:de:a2:2a:51:0f:4f:de:2b:b7:35:68:5b:73:
                    ed:9d:eb:b4:30:05:b5:f8:ef:8f:24:57:b2:52:c3:
                    2e:84:67:14:f6:5f:8d:01:db:73:a7:fb:a7:8c:00:
                    12:77:36:c2:4a:9b:3e:46:8a:e2:07:37:4e:8f:1f:
                    32:94:ba:f7:e1:c5:34:b3:dc:53:99:c7:b6:33:70:
                    40:ae:9b:07:60:ca:f1:ce:88:6a:6a:79:99:b5:11:
                    de:4e:0e:d1:6c:4f:c2:90:a0:95:a4:3a:cd:f7:e1:
                    f1:24:c0:89:ef:f0:97:2f:8f:89:9e:e7:a0:b3:88:
                    d4:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:76:21:BE:06:12:8F:8E:19:4A:DF:2D:EC:0F:9E:1B:33:71:BD:B0
            X509v3 Authority Key Identifier:
                keyid:1D:1D:EB:CD:9F:2E:82:12:22:15:3A:C9:EF:50:37:6A:31:59:CB:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/1D1DEBCD9F2E821222153AC9EF50376A3159CB90.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/3231362e3234372e39372e302f32342d3234203d3e2037303138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.247.97.0/24

    Signature Algorithm: sha256WithRSAEncryption
         19:17:b2:f1:7c:98:1e:9d:81:ef:a2:af:0a:9e:20:63:f5:77:
         28:37:47:85:88:21:13:d9:69:80:3a:94:66:61:8f:e8:e4:e4:
         e3:8f:90:1d:78:0c:6b:58:4d:b8:f2:d9:a0:00:f4:d5:8d:ba:
         8b:77:5a:5e:9c:4f:ea:8d:4a:4f:85:5e:79:23:b0:11:14:81:
         84:09:6b:86:1e:77:e0:0d:81:bd:82:c0:7a:7e:a0:37:45:ac:
         cd:26:48:b0:3d:76:b0:00:4c:22:d9:4e:85:a9:8c:55:e8:cb:
         30:38:8b:34:05:af:b1:d9:8a:f2:88:44:a7:be:9c:88:67:a3:
         37:2c:b9:8d:fc:b0:bc:1a:d0:0c:0e:d6:f2:a3:b0:27:33:22:
         42:93:28:b1:53:73:d6:85:b5:1f:cc:4b:79:45:df:88:15:f7:
         3b:ed:76:ac:f5:42:a8:52:1e:c1:c9:dc:7b:9d:e0:a4:3c:6f:
         5a:f9:18:f5:bb:2c:f5:53:90:08:bb:e6:bb:09:3e:00:d4:56:
         15:de:9f:67:96:0b:86:a7:d9:3c:c8:2b:71:5e:9a:b2:bc:02:
         09:ff:d5:52:12:c3:b9:4c:76:8b:9a:12:40:8d:f0:b7:09:f3:
         7e:1e:cf:b3:77:ea:34:ff:cb:f4:a5:b3:01:d8:f8:df:e2:2c:
         1a:bd:67:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 10:16:04 2024 by rpki-client on console-ams.rpki-client.org