Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8fded1a0019006e97cb128ef/0/3231362e3135312e3136322e302f32342d3234203d3e20323132333834.roa
File:                     3231362e3135312e3136322e302f32342d3234203d3e20323132333834.roa (raw, json)
Hash identifier:          l+CRgU9kPUS7eKZKvgjHzwn/EO1X/D3lO13FiUrKlgA=
Subject key identifier:   9F:AA:83:C8:81:63:91:BD:A0:55:82:52:97:65:7F:A3:26:B4:C3:F1
Certificate issuer:       /CN=7e2bb4e56cdfe2f40f824abdccd9b523466eccddb306c90c5b
Certificate serial:       79C93CB1A7D2712C18100A49C014F931CDCAD9DD
Authority key identifier: C3:A3:D9:17:F4:39:9B:C2:6C:0A:68:77:18:2B:EA:3C:D9:FE:F4:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/efa01acb-51ec-4048-8589-d09390791aed/7e2bb4e56cdfe2f40f824abdccd9b523466eccddb306c90c5b.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8fded1a0019006e97cb128ef/0/3231362e3135312e3136322e302f32342d3234203d3e20323132333834.roa
Signing time:             Tue 25 Jun 2024 13:24:47 +0000
ROA not before:           Tue 25 Jun 2024 13:19:47 +0000
ROA not after:            Tue 24 Jun 2025 13:24:47 +0000
asID:                     212384
IP address blocks:        216.151.162.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade8fded1a0019006e97cb128ef/0/C3A3D917F4399BC26C0A6877182BEA3CD9FEF402.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade8fded1a0019006e97cb128ef/0/C3A3D917F4399BC26C0A6877182BEA3CD9FEF402.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/efa01acb-51ec-4048-8589-d09390791aed/7e2bb4e56cdfe2f40f824abdccd9b523466eccddb306c90c5b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/efa01acb-51ec-4048-8589-d09390791aed/efa01acb-51ec-4048-8589-d09390791aed.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/efa01acb-51ec-4048-8589-d09390791aed/efa01acb-51ec-4048-8589-d09390791aed.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/efa01acb-51ec-4048-8589-d09390791aed.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 11:13:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:c9:3c:b1:a7:d2:71:2c:18:10:0a:49:c0:14:f9:31:cd:ca:d9:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e2bb4e56cdfe2f40f824abdccd9b523466eccddb306c90c5b
        Validity
            Not Before: Jun 25 13:19:47 2024 GMT
            Not After : Jun 24 13:24:47 2025 GMT
        Subject: CN=9FAA83C8816391BDA055825297657FA326B4C3F1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:dd:c2:bb:ee:a3:52:1d:a1:75:cf:da:1b:cb:
                    91:7a:6f:01:46:56:7c:8a:aa:2c:b1:46:0c:fd:93:
                    bc:20:2c:f9:e9:41:b7:23:2c:e1:ed:c0:e0:c2:4f:
                    84:d6:7c:ad:10:ab:f6:13:16:8a:97:b5:a1:1d:44:
                    bb:f8:f5:23:13:08:a9:28:ec:2b:3a:e5:29:40:e2:
                    d3:82:cb:7a:e1:05:2e:c7:b7:62:d5:7d:4d:f2:44:
                    35:d3:92:32:a2:4b:4e:de:2b:99:85:7c:19:7b:7c:
                    01:00:98:96:95:77:20:67:1e:35:d4:10:ef:a5:96:
                    c0:ae:36:71:fe:bc:98:dc:56:b2:1a:f9:c6:67:78:
                    17:15:09:7f:c8:3f:5c:b8:b9:37:e9:d4:6f:aa:17:
                    5c:a3:d0:a6:a1:f9:98:0e:09:18:d6:b5:4d:23:59:
                    e5:b1:bb:40:a6:c7:54:da:75:14:a0:40:d2:a7:05:
                    28:83:0f:06:5c:34:6b:c3:7a:c2:3d:a3:96:49:e5:
                    9f:75:b5:ef:b9:53:10:b4:c1:61:bb:45:1c:a4:8f:
                    ac:fc:87:c3:b2:3c:10:66:9b:cd:0f:d7:db:e4:59:
                    ad:52:b0:ed:6b:8a:4c:cc:b1:15:a9:c5:89:ae:7e:
                    34:22:93:14:bc:54:7f:87:38:e1:a1:06:5a:1a:57:
                    65:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:AA:83:C8:81:63:91:BD:A0:55:82:52:97:65:7F:A3:26:B4:C3:F1
            X509v3 Authority Key Identifier:
                keyid:C3:A3:D9:17:F4:39:9B:C2:6C:0A:68:77:18:2B:EA:3C:D9:FE:F4:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8fded1a0019006e97cb128ef/0/C3A3D917F4399BC26C0A6877182BEA3CD9FEF402.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/efa01acb-51ec-4048-8589-d09390791aed/7e2bb4e56cdfe2f40f824abdccd9b523466eccddb306c90c5b.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8fded1a0019006e97cb128ef/0/3231362e3135312e3136322e302f32342d3234203d3e20323132333834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.151.162.0/24

    Signature Algorithm: sha256WithRSAEncryption
         64:8f:55:d1:41:83:63:f1:e4:40:68:6d:2c:3e:8b:e7:ab:9e:
         5c:95:25:0e:d6:be:cb:25:6c:8e:3f:e4:45:13:76:e4:52:bb:
         ca:db:ef:25:02:57:15:73:a3:2e:69:1d:6d:25:60:b7:a4:c9:
         da:09:b8:b1:3f:ca:3c:3e:4b:99:11:7e:d9:79:14:c5:96:17:
         61:1e:de:e4:00:3a:be:8f:8b:33:80:12:18:06:0e:9d:b2:9e:
         bb:11:db:36:99:bd:17:82:43:7e:34:64:97:f5:07:ff:3a:aa:
         8b:23:f9:ee:a8:a7:b8:3b:54:52:21:62:45:37:05:c0:17:3c:
         6d:92:c6:3c:98:91:5a:a8:52:28:fb:28:6e:96:a5:c7:3a:a6:
         6b:0b:06:25:05:94:d8:f0:6e:d3:79:17:7d:36:97:e6:68:58:
         61:30:c9:b6:b4:e2:e3:4e:42:ae:7f:dc:d6:2a:3d:fc:1e:89:
         44:55:52:90:fe:00:04:6b:bd:53:5a:d3:ac:fe:8e:e6:ae:af:
         6d:9d:8f:ac:3d:29:bf:4d:0e:8b:cd:a3:1a:26:60:6e:4a:a1:
         4f:6c:b9:59:20:f6:ae:70:a0:95:60:bc:f2:0b:23:66:a7:68:
         75:4c:bc:18:e9:0b:aa:e8:69:36:36:f8:ee:7d:e0:6f:09:69:
         38:2d:1a:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:09:15 2024 by rpki-client on console-ams.rpki-client.org