Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/3231362e3234372e39392e302f32342d3234203d3e203231383539.roa
File:                     3231362e3234372e39392e302f32342d3234203d3e203231383539.roa (raw, json)
Hash identifier:          SEr29HUrsTTEe4uGvDqZH3F8Pb/F3vz49WrpoJ1j52M=
Subject key identifier:   1F:ED:20:CF:C8:67:0D:C7:C7:92:BF:20:18:D5:29:31:11:17:BD:51
Certificate issuer:       /CN=718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c
Certificate serial:       7059F0BF481E7EA6EDFF18E06356B13A41BE2FC8
Authority key identifier: 1D:1D:EB:CD:9F:2E:82:12:22:15:3A:C9:EF:50:37:6A:31:59:CB:90
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/3231362e3234372e39392e302f32342d3234203d3e203231383539.roa
Signing time:             Thu 11 Jan 2024 03:41:54 +0000
ROA not before:           Thu 11 Jan 2024 03:36:54 +0000
ROA not after:            Thu 09 Jan 2025 03:41:54 +0000
asID:                     21859
IP address blocks:        216.247.99.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/1D1DEBCD9F2E821222153AC9EF50376A3159CB90.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/1D1DEBCD9F2E821222153AC9EF50376A3159CB90.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/f0b1b436-193c-4209-a695-f168f9f2b3b0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/f0b1b436-193c-4209-a695-f168f9f2b3b0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 21:55:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:59:f0:bf:48:1e:7e:a6:ed:ff:18:e0:63:56:b1:3a:41:be:2f:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c
        Validity
            Not Before: Jan 11 03:36:54 2024 GMT
            Not After : Jan  9 03:41:54 2025 GMT
        Subject: CN=1FED20CFC8670DC7C792BF2018D529311117BD51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:4d:50:3e:00:1f:b6:6f:95:df:55:5b:dd:49:
                    51:a2:cb:c2:1c:8e:b6:7f:de:ad:3d:04:26:b7:a9:
                    02:8d:a1:0f:d5:9b:7b:3b:02:eb:63:13:f0:23:da:
                    ec:ac:59:c0:cb:9e:b4:b4:b4:26:e7:c3:f0:47:68:
                    41:5b:b4:46:4e:c6:c1:9b:4a:ea:3a:16:89:d2:43:
                    85:41:c6:01:52:ea:c4:15:14:1a:ca:5a:a3:b1:6b:
                    d9:f4:1e:79:ae:cc:b1:36:1a:31:46:37:e5:be:a7:
                    b4:22:5c:e8:24:1a:cb:b9:6f:25:75:11:b2:5f:0d:
                    23:9e:37:5e:0b:c9:13:0b:ff:00:c5:5e:a9:41:7e:
                    60:c7:a2:ee:a0:19:36:7e:30:4d:58:34:f3:9f:c3:
                    0e:28:40:31:fd:4b:72:4d:3e:da:b9:17:a8:f7:90:
                    d2:be:52:e7:ea:e4:1b:06:36:61:53:8e:f3:a3:0f:
                    15:e9:39:94:c7:8d:51:7e:ea:1b:38:25:20:99:84:
                    d6:41:57:58:d3:6b:72:77:c8:7b:d1:22:fe:5e:f6:
                    2d:a7:4e:6d:b7:48:ee:39:51:b8:e8:5a:23:92:90:
                    b8:36:4c:06:7b:a0:ec:f8:2a:65:6a:92:a4:be:ef:
                    a6:6a:6e:dd:eb:a2:9c:41:d6:90:d4:2c:60:f7:d5:
                    90:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:ED:20:CF:C8:67:0D:C7:C7:92:BF:20:18:D5:29:31:11:17:BD:51
            X509v3 Authority Key Identifier:
                keyid:1D:1D:EB:CD:9F:2E:82:12:22:15:3A:C9:EF:50:37:6A:31:59:CB:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/1D1DEBCD9F2E821222153AC9EF50376A3159CB90.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/3231362e3234372e39392e302f32342d3234203d3e203231383539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.247.99.0/24

    Signature Algorithm: sha256WithRSAEncryption
         54:cf:01:83:df:2f:2b:c3:60:19:39:41:03:ec:13:8e:60:16:
         3a:bb:5b:2c:a8:42:cd:f6:c9:fa:64:97:d0:a4:76:c3:d2:c6:
         c8:76:f8:66:1d:b0:5c:44:22:11:a7:51:ca:5e:df:01:11:41:
         0c:4e:4c:0c:4c:20:48:b3:f6:57:64:72:51:97:6a:8a:08:51:
         2d:a5:4a:d6:f6:80:c5:bf:d9:92:70:74:f2:71:19:ac:14:df:
         2b:80:7e:cf:2d:9b:a1:99:85:ea:3c:ca:97:3e:e4:3e:4a:3f:
         11:74:8f:33:7c:97:a0:37:ee:b9:46:6f:94:ad:46:72:6e:ff:
         29:4a:90:5d:bf:0c:15:30:db:63:59:39:53:44:c0:dc:d0:ec:
         4d:ed:df:4e:5e:d5:86:8b:38:de:a3:e1:f0:70:28:04:32:29:
         5a:39:a9:90:49:c2:1a:64:23:51:12:5f:4d:63:00:40:2e:8e:
         38:9f:42:48:f9:36:12:3f:30:8e:7f:51:60:76:9c:4b:0f:61:
         85:16:1c:ab:c2:80:3f:f8:3e:71:0a:6d:2b:f9:42:91:67:87:
         86:5e:30:0b:72:9b:dc:8a:40:be:ad:81:88:27:b9:f1:a8:ef:
         db:29:f9:f6:c0:49:b4:ec:d1:11:0a:61:9d:5e:7b:21:9f:36:
         48:f3:06:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:34:39 2024 by rpki-client on console-fra.rpki-client.org