Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/3231362e3234372e39382e302f32342d3234203d3e20323132333834.roa
File:                     3231362e3234372e39382e302f32342d3234203d3e20323132333834.roa (raw, json)
Hash identifier:          lhQxWni/n6xQtwhl+Udj6dggvtQG1d6ogg/xMibPqJs=
Subject key identifier:   E1:18:F0:3C:58:24:B8:06:00:92:35:4F:61:D7:31:1E:77:EB:2C:63
Certificate issuer:       /CN=718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c
Certificate serial:       6A21958D233BD34C3731DEC7D302F9787FFFFEDA
Authority key identifier: 1D:1D:EB:CD:9F:2E:82:12:22:15:3A:C9:EF:50:37:6A:31:59:CB:90
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/3231362e3234372e39382e302f32342d3234203d3e20323132333834.roa
Signing time:             Fri 08 Mar 2024 13:24:23 +0000
ROA not before:           Fri 08 Mar 2024 13:19:23 +0000
ROA not after:            Fri 07 Mar 2025 13:24:23 +0000
asID:                     212384
IP address blocks:        216.247.98.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/1D1DEBCD9F2E821222153AC9EF50376A3159CB90.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/1D1DEBCD9F2E821222153AC9EF50376A3159CB90.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/f0b1b436-193c-4209-a695-f168f9f2b3b0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/f0b1b436-193c-4209-a695-f168f9f2b3b0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 21:55:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:21:95:8d:23:3b:d3:4c:37:31:de:c7:d3:02:f9:78:7f:ff:fe:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c
        Validity
            Not Before: Mar  8 13:19:23 2024 GMT
            Not After : Mar  7 13:24:23 2025 GMT
        Subject: CN=E118F03C5824B8060092354F61D7311E77EB2C63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:92:c0:05:87:18:a2:2b:ca:d6:19:c1:22:39:
                    7d:04:18:6a:bc:5f:23:61:7b:76:47:02:0f:5b:3d:
                    66:ae:73:73:77:b4:05:ec:29:70:60:c5:54:a9:94:
                    b2:84:8e:b1:e8:15:6c:96:ae:44:19:60:9a:a0:0f:
                    fa:0a:45:3b:1f:53:ca:72:ec:8e:7f:0b:c2:66:94:
                    db:90:4a:82:1a:a0:87:75:29:c7:83:c7:9d:a5:31:
                    62:50:99:ea:be:dc:5e:b0:e3:d5:86:65:c5:78:23:
                    6a:94:5b:87:00:07:12:14:29:8c:90:62:5a:9f:fd:
                    d2:16:a9:90:99:dd:22:c3:98:06:d9:42:8c:61:a7:
                    ab:92:b2:72:a5:a9:45:84:a4:85:03:12:43:0d:e1:
                    63:0c:1b:db:ab:75:90:09:12:eb:56:de:6d:52:ad:
                    03:80:5d:b0:eb:c0:fb:48:15:35:43:ba:a5:7d:c1:
                    ee:6a:98:21:87:8a:29:d3:e5:f5:b6:a9:e8:3e:5a:
                    a3:d6:a4:ad:87:f6:ee:b4:6d:24:1e:57:f4:cd:b7:
                    dd:d2:6f:37:af:0b:8b:db:75:3f:16:54:80:9f:93:
                    67:85:c8:f3:3f:6e:f5:dc:65:1d:10:cd:05:ec:82:
                    b5:9a:d1:a2:b8:eb:1d:85:1c:9c:8d:c9:7b:94:1f:
                    2f:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:18:F0:3C:58:24:B8:06:00:92:35:4F:61:D7:31:1E:77:EB:2C:63
            X509v3 Authority Key Identifier:
                keyid:1D:1D:EB:CD:9F:2E:82:12:22:15:3A:C9:EF:50:37:6A:31:59:CB:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/1D1DEBCD9F2E821222153AC9EF50376A3159CB90.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/3231362e3234372e39382e302f32342d3234203d3e20323132333834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.247.98.0/24

    Signature Algorithm: sha256WithRSAEncryption
         39:04:1e:ba:0c:dd:81:95:29:04:cf:1e:f2:c6:ad:9b:f3:d6:
         66:f6:d5:d7:9c:c0:ed:c7:0d:9d:98:c1:1d:00:e9:95:ad:5e:
         3a:cc:7d:e0:eb:af:a5:70:21:ca:f1:3d:87:49:72:31:48:65:
         87:29:4c:dd:7d:d4:fd:e3:5b:ec:1a:c3:d7:24:2e:82:dc:de:
         10:a2:dd:a6:4d:15:5a:ed:d6:c1:73:c5:d5:99:df:71:9f:2f:
         66:1e:d1:6b:4c:a0:07:10:f2:25:e4:54:58:59:a9:2e:f0:fd:
         29:d1:3d:7a:cb:ca:78:0c:3c:87:b3:46:f3:23:ac:f0:64:ab:
         3f:33:e9:ab:a3:78:f5:40:56:fa:93:f3:e9:4b:3d:68:1f:7d:
         17:be:01:de:b9:7b:8c:bd:aa:f4:4d:01:ae:66:25:c8:de:cd:
         79:ba:5f:df:24:6e:b1:7e:07:a2:ae:8f:e7:c7:bf:64:14:82:
         dc:46:63:f9:df:61:3e:ac:bc:be:35:7f:bd:2e:eb:f3:d8:a4:
         d0:fb:5a:fd:6f:c8:1d:63:04:fe:cc:ea:0d:6e:c6:85:ba:cb:
         12:24:35:cc:2a:34:4b:58:03:a7:7c:f1:d9:c0:63:3c:36:9f:
         7a:94:5f:27:7d:a6:4a:9e:f3:54:8f:7c:f5:13:9b:bb:64:4b:
         f3:ea:e7:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:34:39 2024 by rpki-client on console-fra.rpki-client.org