Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/3231362e3234372e39372e302f32342d3234203d3e2037303138.roa
File:                     3231362e3234372e39372e302f32342d3234203d3e2037303138.roa (raw, json)
Hash identifier:          j+t43oSbEBjQKT50dlnToS5x2TIxG6rg4h1kMJbu4pw=
Subject key identifier:   1E:17:77:E8:10:69:94:4A:D5:BB:9E:7A:34:5C:8E:45:83:62:D5:48
Certificate issuer:       /CN=718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c
Certificate serial:       6E24BE336F112ADEFA278189858E114B9351773F
Authority key identifier: 1D:1D:EB:CD:9F:2E:82:12:22:15:3A:C9:EF:50:37:6A:31:59:CB:90
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/3231362e3234372e39372e302f32342d3234203d3e2037303138.roa
Signing time:             Mon 30 Sep 2024 12:48:59 +0000
ROA not before:           Mon 30 Sep 2024 12:43:59 +0000
ROA not after:            Mon 29 Sep 2025 12:48:59 +0000
asID:                     7018
IP address blocks:        216.247.97.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/1D1DEBCD9F2E821222153AC9EF50376A3159CB90.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/1D1DEBCD9F2E821222153AC9EF50376A3159CB90.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/f0b1b436-193c-4209-a695-f168f9f2b3b0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/f0b1b436-193c-4209-a695-f168f9f2b3b0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 14 Mar 2025 12:09:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:24:be:33:6f:11:2a:de:fa:27:81:89:85:8e:11:4b:93:51:77:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c
        Validity
            Not Before: Sep 30 12:43:59 2024 GMT
            Not After : Sep 29 12:48:59 2025 GMT
        Subject: CN=1E1777E81069944AD5BB9E7A345C8E458362D548
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:a7:06:52:39:f9:7c:2f:62:85:49:d9:c3:4e:
                    b9:b1:9f:b3:66:f9:e4:10:69:29:67:00:7f:25:f7:
                    87:f0:d1:b7:92:d0:67:15:b1:43:a7:0f:31:d8:4f:
                    cf:af:89:06:6b:39:bf:34:ba:be:44:e3:28:29:25:
                    0c:a2:e9:c7:40:19:fb:48:9b:64:55:02:66:c6:8d:
                    a2:dc:ee:84:8f:f4:33:68:e2:7d:32:6c:e9:9b:a1:
                    04:61:67:2a:21:ee:98:14:d0:cc:af:ac:67:14:6e:
                    b0:d8:35:f7:7e:88:7c:b5:55:e1:17:6f:c7:e6:5e:
                    d8:0f:af:84:c7:5e:62:27:f5:90:f4:d8:03:0c:73:
                    8f:d6:73:ba:97:f1:bc:e8:48:23:30:3f:9d:0f:e3:
                    76:5b:16:a3:c7:92:95:92:8a:27:30:d8:f8:fd:93:
                    ba:83:e1:a5:e9:0e:da:0d:df:89:c6:9a:53:86:a9:
                    47:e7:25:c9:67:a2:64:0c:f5:d0:b0:bc:f2:16:ef:
                    43:70:c2:2a:be:31:64:64:02:a4:b9:30:40:d9:13:
                    87:be:96:ab:c9:2c:60:76:1e:6d:94:ec:e0:3e:fc:
                    7c:15:b1:9f:84:91:36:75:a3:5f:29:2b:ee:e9:49:
                    44:e6:e7:bb:ac:a9:71:28:8b:80:37:f1:76:12:b0:
                    50:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:17:77:E8:10:69:94:4A:D5:BB:9E:7A:34:5C:8E:45:83:62:D5:48
            X509v3 Authority Key Identifier:
                keyid:1D:1D:EB:CD:9F:2E:82:12:22:15:3A:C9:EF:50:37:6A:31:59:CB:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/1D1DEBCD9F2E821222153AC9EF50376A3159CB90.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/3231362e3234372e39372e302f32342d3234203d3e2037303138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.247.97.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a4:59:3d:26:98:5e:6e:08:58:f9:4e:8e:a5:bb:2b:83:06:7d:
         65:81:d4:46:e2:22:16:ce:8d:4a:12:10:97:35:89:3d:fd:1b:
         39:69:b8:2b:f3:19:d5:e4:c1:10:7b:f3:e7:6d:70:a6:13:5b:
         8c:d6:c4:25:62:38:34:21:b1:3b:cd:cc:13:df:a8:77:76:bb:
         3a:b9:74:62:35:4b:fb:cb:2d:55:ae:55:da:20:b1:89:cc:77:
         6b:85:03:82:c5:5e:9c:be:c0:d8:ef:a9:ff:b5:9a:88:65:9a:
         31:98:00:72:5f:15:8e:03:2e:74:f3:85:61:c6:53:10:c4:a7:
         3b:41:2e:ec:c1:41:1f:0e:e1:d7:67:df:20:31:49:97:f5:6f:
         2b:23:0b:80:08:5f:21:9a:85:dc:19:93:24:6d:c7:66:fe:cf:
         ba:d1:e9:42:86:f3:ba:87:e3:97:15:db:30:7e:a8:26:f9:0e:
         a9:51:89:72:70:ca:a6:5e:79:df:d4:7f:49:3d:59:66:5e:90:
         5a:c9:e7:b8:e3:35:95:0f:c9:7a:74:94:74:88:8e:59:3c:b0:
         b6:1a:82:75:22:dd:c1:89:75:86:fb:d4:e6:ba:f4:82:66:a2:
         37:3b:16:1d:96:7d:28:64:40:28:26:52:23:7f:60:e8:79:69:
         4d:64:4d:b4
-----BEGIN CERTIFICATE-----
MIIFsDCCBJigAwIBAgIUbiS+M28RKt76J4GJhY4RS5NRdz8wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNzE4NjI2ZWFiNzM1OTZmNDcyZGZiMDIwYTljMGYzYjcx
YWQ5ZGQ0ZmVmOTk0N2U5MWMwHhcNMjQwOTMwMTI0MzU5WhcNMjUwOTI5MTI0ODU5
WjAzMTEwLwYDVQQDEygxRTE3NzdFODEwNjk5NDRBRDVCQjlFN0EzNDVDOEU0NTgz
NjJENTQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9KcGUjn5fC9i
hUnZw065sZ+zZvnkEGkpZwB/JfeH8NG3ktBnFbFDpw8x2E/Pr4kGazm/NLq+ROMo
KSUMounHQBn7SJtkVQJmxo2i3O6Ej/QzaOJ9Mmzpm6EEYWcqIe6YFNDMr6xnFG6w
2DX3foh8tVXhF2/H5l7YD6+Ex15iJ/WQ9NgDDHOP1nO6l/G86EgjMD+dD+N2Wxaj
x5KVkoonMNj4/ZO6g+Gl6Q7aDd+JxppThqlH5yXJZ6JkDPXQsLzyFu9DcMIqvjFk
ZAKkuTBA2ROHvparySxgdh5tlOzgPvx8FbGfhJE2daNfKSvu6UlE5ue7rKlxKIuA
N/F2ErBQxQIDAQABo4ICsDCCAqwwHQYDVR0OBBYEFB4Xd+gQaZRK1bueejRcjkWD
YtVIMB8GA1UdIwQYMBaAFB0d682fLoISIhU6ye9QN2oxWcuQMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODBmMWE4MGEwMTgxZjBmMTc1NDE2NjdmLzEv
MUQxREVCQ0Q5RjJFODIxMjIyMTUzQUM5RUY1MDM3NkEzMTU5Q0I5MC5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi
MGI4NDE1L2YwYjFiNDM2LTE5M2MtNDIwOS1hNjk1LWYxNjhmOWYyYjNiMC83MTg2
MjZlYWI3MzU5NmY0NzJkZmIwMjBhOWMwZjNiNzFhZDlkZDRmZWY5OTQ3ZTkxYy5j
ZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZTgwZjFhODBhMDE4MWYw
ZjE3NTQxNjY3Zi8xLzMyMzEzNjJlMzIzNDM3MmUzOTM3MmUzMDJmMzIzNDJkMzIz
NDIwM2QzZTIwMzczMDMxMzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADY92EwDQYJKoZIhvcNAQELBQAD
ggEBAKRZPSaYXm4IWPlOjqW7K4MGfWWB1EbiIhbOjUoSEJc1iT39GzlpuCvzGdXk
wRB78+dtcKYTW4zWxCViODQhsTvNzBPfqHd2uzq5dGI1S/vLLVWuVdogsYnMd2uF
A4LFXpy+wNjvqf+1mohlmjGYAHJfFY4DLnTzhWHGUxDEpztBLuzBQR8O4ddn3yAx
SZf1bysjC4AIXyGahdwZkyRtx2b+z7rR6UKG87qH45cV2zB+qCb5DqlRiXJwyqZe
ed/Uf0k9WWZekFrJ57jjNZUPyXp0lHSIjlk8sLYagnUi3cGJdYb71Oa69IJmojc7
Fh2WfShkQCgmUiN/YOh5aU1kTbQ=
-----END CERTIFICATE-----
Generated at Thu Mar 13 23:56:31 2025 by rpki-client