Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8fded1a0019006e97cb128ef/0/3231362e3135312e3136382e302f32342d3234203d3e20313734.roa
File:                     3231362e3135312e3136382e302f32342d3234203d3e20313734.roa (raw, json)
Hash identifier:          MekF96DtQhJYrxoTQBeHpu6FAQKX7GwuyiF/NlyOIII=
Subject key identifier:   1C:C2:00:15:48:27:3B:CD:4C:AD:86:00:D6:F0:49:E1:CA:06:01:D1
Certificate issuer:       /CN=7e2bb4e56cdfe2f40f824abdccd9b523466eccddb306c90c5b
Certificate serial:       2BD6E34284175AB9821DBF2E84DED662172940EE
Authority key identifier: C3:A3:D9:17:F4:39:9B:C2:6C:0A:68:77:18:2B:EA:3C:D9:FE:F4:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/efa01acb-51ec-4048-8589-d09390791aed/7e2bb4e56cdfe2f40f824abdccd9b523466eccddb306c90c5b.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8fded1a0019006e97cb128ef/0/3231362e3135312e3136382e302f32342d3234203d3e20313734.roa
Signing time:             Sat 10 Aug 2024 06:56:24 +0000
ROA not before:           Sat 10 Aug 2024 06:51:24 +0000
ROA not after:            Sat 09 Aug 2025 06:56:24 +0000
asID:                     174
IP address blocks:        216.151.168.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade8fded1a0019006e97cb128ef/0/C3A3D917F4399BC26C0A6877182BEA3CD9FEF402.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade8fded1a0019006e97cb128ef/0/C3A3D917F4399BC26C0A6877182BEA3CD9FEF402.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/efa01acb-51ec-4048-8589-d09390791aed/7e2bb4e56cdfe2f40f824abdccd9b523466eccddb306c90c5b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/efa01acb-51ec-4048-8589-d09390791aed/efa01acb-51ec-4048-8589-d09390791aed.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/efa01acb-51ec-4048-8589-d09390791aed/efa01acb-51ec-4048-8589-d09390791aed.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/efa01acb-51ec-4048-8589-d09390791aed.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Oct 2024 22:58:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:d6:e3:42:84:17:5a:b9:82:1d:bf:2e:84:de:d6:62:17:29:40:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e2bb4e56cdfe2f40f824abdccd9b523466eccddb306c90c5b
        Validity
            Not Before: Aug 10 06:51:24 2024 GMT
            Not After : Aug  9 06:56:24 2025 GMT
        Subject: CN=1CC2001548273BCD4CAD8600D6F049E1CA0601D1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:78:fe:f5:0f:60:07:a9:84:ea:24:bc:b0:30:
                    da:7d:f1:05:b9:0c:e7:85:8a:a1:19:79:7b:ad:c8:
                    89:c8:34:28:2e:6d:9b:fd:6d:22:5a:93:a2:cf:b7:
                    57:30:51:31:4c:10:af:a0:1e:2e:27:33:e5:4b:04:
                    13:96:44:a4:5f:44:21:b7:dd:15:2f:aa:4e:76:9a:
                    b1:f2:66:c4:15:18:30:b6:87:97:75:9c:32:38:46:
                    5d:08:45:74:60:3e:42:55:f9:fe:f3:10:01:1b:dc:
                    37:96:ff:3d:7c:99:ef:94:6d:5a:f5:07:a8:33:5d:
                    7e:0d:69:34:97:c2:86:68:7a:c6:ce:f7:42:a1:c7:
                    bc:4d:96:69:b8:dd:0c:0c:ca:6a:77:62:1c:6d:6d:
                    04:3a:cc:db:e4:47:f1:43:23:28:3f:5e:2f:09:2e:
                    41:50:ec:81:36:61:37:42:8e:b5:e5:eb:62:00:a8:
                    01:50:a6:27:dc:90:e9:d1:22:69:72:ad:7f:a6:31:
                    08:5a:36:f3:90:b8:08:7f:34:58:e7:05:7d:4b:7f:
                    c4:c9:43:bf:38:06:0b:d9:14:03:b8:5a:3a:a2:8f:
                    2a:19:e2:f7:f2:2f:9b:db:10:cd:12:fd:0e:83:56:
                    1e:14:24:ac:35:58:71:13:35:8a:9e:95:ff:97:89:
                    5c:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:C2:00:15:48:27:3B:CD:4C:AD:86:00:D6:F0:49:E1:CA:06:01:D1
            X509v3 Authority Key Identifier:
                keyid:C3:A3:D9:17:F4:39:9B:C2:6C:0A:68:77:18:2B:EA:3C:D9:FE:F4:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8fded1a0019006e97cb128ef/0/C3A3D917F4399BC26C0A6877182BEA3CD9FEF402.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/efa01acb-51ec-4048-8589-d09390791aed/7e2bb4e56cdfe2f40f824abdccd9b523466eccddb306c90c5b.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8fded1a0019006e97cb128ef/0/3231362e3135312e3136382e302f32342d3234203d3e20313734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.151.168.0/24

    Signature Algorithm: sha256WithRSAEncryption
         78:e8:4f:a5:f2:d6:07:13:fa:2f:13:1f:dc:4d:52:bf:5c:61:
         21:34:38:0d:41:56:24:94:29:15:1c:9a:b2:7e:e8:b5:f5:9b:
         41:e1:ae:58:f3:61:f8:9c:f0:e1:d2:8e:8a:77:9c:c9:22:6e:
         10:23:fa:72:12:48:7b:24:eb:3e:e4:c5:e9:74:e5:8d:e9:ef:
         f4:ab:b0:c3:79:7c:a0:44:10:97:e3:a1:a5:53:43:67:c4:fb:
         12:24:a8:ee:83:ae:36:e0:1e:c1:82:de:cf:0f:0b:ef:32:45:
         5e:00:0b:0a:2b:61:fe:aa:11:fe:a2:a3:4c:e2:ae:a5:12:75:
         0f:2c:85:e4:9e:63:ec:8e:50:a2:7a:21:55:58:6d:df:dc:f9:
         6b:98:b7:30:2a:96:8e:6c:36:ad:e8:c9:70:6a:18:ef:ae:1c:
         8b:b6:68:ff:ae:4f:a0:08:da:ec:e3:91:28:46:6c:7a:ff:28:
         f9:56:4e:9b:bc:51:2e:f8:62:2d:3a:00:9a:31:86:f7:fa:b6:
         30:de:3e:5d:77:90:9f:bd:d9:f7:b8:9b:34:0a:29:79:b9:53:
         0a:f1:7f:85:43:7a:8e:23:cb:67:ce:51:65:be:cc:bb:ec:24:
         ac:8a:7a:c5:10:1f:ea:bc:3a:5a:8d:c7:0a:e2:a0:ce:12:8c:
         39:a0:54:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 22 21:14:54 2024 by rpki-client on console-ams.rpki-client.org