Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8fded1a0019006e97cb128ef/0/3231362e3135312e3136372e302f32342d3234203d3e203239383032.roa
File:                     3231362e3135312e3136372e302f32342d3234203d3e203239383032.roa (raw, json)
Hash identifier:          9I9YnDTdFm7SGDkaqZcmLz16YoZFFmWaf5ERG+2pHao=
Subject key identifier:   76:76:B0:38:18:06:49:68:5D:5E:E8:10:A7:E8:8C:09:81:3D:23:84
Certificate issuer:       /CN=7e2bb4e56cdfe2f40f824abdccd9b523466eccddb306c90c5b
Certificate serial:       62DA2849C77BB799C5BA556DC34C4F9AA80032DA
Authority key identifier: C3:A3:D9:17:F4:39:9B:C2:6C:0A:68:77:18:2B:EA:3C:D9:FE:F4:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/efa01acb-51ec-4048-8589-d09390791aed/7e2bb4e56cdfe2f40f824abdccd9b523466eccddb306c90c5b.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8fded1a0019006e97cb128ef/0/3231362e3135312e3136372e302f32342d3234203d3e203239383032.roa
Signing time:             Thu 08 Aug 2024 07:14:23 +0000
ROA not before:           Thu 08 Aug 2024 07:09:23 +0000
ROA not after:            Thu 07 Aug 2025 07:14:23 +0000
asID:                     29802
IP address blocks:        216.151.167.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade8fded1a0019006e97cb128ef/0/C3A3D917F4399BC26C0A6877182BEA3CD9FEF402.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade8fded1a0019006e97cb128ef/0/C3A3D917F4399BC26C0A6877182BEA3CD9FEF402.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/efa01acb-51ec-4048-8589-d09390791aed/7e2bb4e56cdfe2f40f824abdccd9b523466eccddb306c90c5b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/efa01acb-51ec-4048-8589-d09390791aed/efa01acb-51ec-4048-8589-d09390791aed.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/efa01acb-51ec-4048-8589-d09390791aed/efa01acb-51ec-4048-8589-d09390791aed.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/efa01acb-51ec-4048-8589-d09390791aed.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 11:13:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:da:28:49:c7:7b:b7:99:c5:ba:55:6d:c3:4c:4f:9a:a8:00:32:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e2bb4e56cdfe2f40f824abdccd9b523466eccddb306c90c5b
        Validity
            Not Before: Aug  8 07:09:23 2024 GMT
            Not After : Aug  7 07:14:23 2025 GMT
        Subject: CN=7676B038180649685D5EE810A7E88C09813D2384
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:3d:6a:2c:cb:75:ac:7d:7b:7a:99:82:f8:db:
                    d7:61:16:b5:4d:86:0d:02:c6:c2:df:ab:79:a1:8e:
                    22:7d:7b:4d:84:b2:f0:6a:79:a2:34:0b:70:5e:03:
                    b0:3b:13:86:ca:0d:a5:e3:14:56:4a:44:dd:29:4e:
                    f3:c2:d3:61:da:09:fc:21:ba:61:64:fa:66:39:8e:
                    8e:11:fd:ef:78:4a:74:a0:73:18:cb:c2:2f:40:40:
                    3c:40:1e:94:df:c1:1f:d4:fb:52:f3:14:20:b6:eb:
                    cb:75:9d:90:01:2f:2a:bf:2d:a0:3f:80:21:64:03:
                    17:f3:24:5c:52:5e:ec:e5:a3:bb:bc:b8:7f:7a:ea:
                    28:9c:a7:4f:b5:5a:98:bf:dc:b8:85:65:e4:65:dd:
                    26:29:b9:56:6a:8f:00:de:6b:8e:b5:1f:01:28:67:
                    18:00:b3:43:73:89:f4:23:99:c6:9e:5d:21:3b:05:
                    a1:08:f7:0d:7a:30:f6:c4:d0:f0:0f:fd:3b:f3:51:
                    64:2c:70:d4:71:f3:30:9a:25:20:41:96:22:85:46:
                    3a:93:f2:72:61:16:57:5c:c7:ee:63:64:70:6b:9b:
                    75:76:85:7b:d6:16:a9:24:7a:86:40:2c:35:28:04:
                    53:f2:43:09:4c:db:9d:e0:98:c8:5b:f0:9b:38:22:
                    20:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:76:B0:38:18:06:49:68:5D:5E:E8:10:A7:E8:8C:09:81:3D:23:84
            X509v3 Authority Key Identifier:
                keyid:C3:A3:D9:17:F4:39:9B:C2:6C:0A:68:77:18:2B:EA:3C:D9:FE:F4:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8fded1a0019006e97cb128ef/0/C3A3D917F4399BC26C0A6877182BEA3CD9FEF402.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/efa01acb-51ec-4048-8589-d09390791aed/7e2bb4e56cdfe2f40f824abdccd9b523466eccddb306c90c5b.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8fded1a0019006e97cb128ef/0/3231362e3135312e3136372e302f32342d3234203d3e203239383032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.151.167.0/24

    Signature Algorithm: sha256WithRSAEncryption
         30:50:93:0a:98:6a:3e:ae:7e:bb:08:64:3a:47:dd:b4:a0:06:
         fa:ef:df:1e:43:89:6f:a7:47:f0:23:7f:b6:01:ce:bf:27:18:
         07:a5:f6:c0:fc:33:a2:ed:46:4b:92:91:b3:42:c3:ee:85:43:
         e7:3b:7a:49:cd:82:99:85:02:ae:53:93:dd:4e:da:b0:d6:74:
         30:4d:44:5b:a4:18:26:53:98:c5:7f:d8:c1:84:37:3d:f9:9d:
         1a:8b:e4:f8:9a:9e:17:88:17:c4:f0:fb:ab:4f:52:53:d6:7f:
         6c:ae:71:fa:5a:0c:91:c0:6f:f8:27:ed:df:51:f3:f8:27:de:
         65:35:70:b8:e5:60:89:71:5b:79:5d:88:b3:8e:f7:03:a7:46:
         f6:3b:e3:55:5e:55:10:48:43:52:00:86:bf:62:d6:c7:58:01:
         87:10:79:b9:91:7d:d4:a0:13:14:4a:d9:8c:7d:93:3a:63:e4:
         11:80:98:b3:13:3b:fd:7a:5d:0c:df:68:5c:84:90:e8:1d:37:
         ca:b9:42:fa:b2:22:af:82:13:89:58:28:21:7e:bc:3e:a5:be:
         75:b9:b4:19:8a:b4:c9:1b:cb:76:9a:04:4d:d1:26:50:f5:8a:
         80:7b:98:71:00:02:ac:64:25:8f:44:33:fd:24:a6:8e:ee:68:
         21:96:ff:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:09:15 2024 by rpki-client on console-ams.rpki-client.org