Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8fded1a0019006e97cb128ef/0/3231362e3135312e3136392e302f32342d3234203d3e203632323430.roa
File:                     3231362e3135312e3136392e302f32342d3234203d3e203632323430.roa (raw, json)
Hash identifier:          gZsKwmrONL8IHfMIXibgE3eN+IbfVKnNY+2PsQjw9FE=
Subject key identifier:   26:B3:2F:12:48:05:6D:03:7F:92:4A:2C:7C:CC:E3:00:97:65:C1:F8
Certificate issuer:       /CN=7e2bb4e56cdfe2f40f824abdccd9b523466eccddb306c90c5b
Certificate serial:       13B51AA7540B885436C49C47D2FB0F3FF18151B0
Authority key identifier: C3:A3:D9:17:F4:39:9B:C2:6C:0A:68:77:18:2B:EA:3C:D9:FE:F4:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/efa01acb-51ec-4048-8589-d09390791aed/7e2bb4e56cdfe2f40f824abdccd9b523466eccddb306c90c5b.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8fded1a0019006e97cb128ef/0/3231362e3135312e3136392e302f32342d3234203d3e203632323430.roa
Signing time:             Thu 21 Nov 2024 09:01:09 +0000
ROA not before:           Thu 21 Nov 2024 08:56:09 +0000
ROA not after:            Thu 20 Nov 2025 09:01:09 +0000
asID:                     62240
IP address blocks:        216.151.169.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade8fded1a0019006e97cb128ef/0/C3A3D917F4399BC26C0A6877182BEA3CD9FEF402.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade8fded1a0019006e97cb128ef/0/C3A3D917F4399BC26C0A6877182BEA3CD9FEF402.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/efa01acb-51ec-4048-8589-d09390791aed/7e2bb4e56cdfe2f40f824abdccd9b523466eccddb306c90c5b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/efa01acb-51ec-4048-8589-d09390791aed/efa01acb-51ec-4048-8589-d09390791aed.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/efa01acb-51ec-4048-8589-d09390791aed/efa01acb-51ec-4048-8589-d09390791aed.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/efa01acb-51ec-4048-8589-d09390791aed.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 08:57:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:b5:1a:a7:54:0b:88:54:36:c4:9c:47:d2:fb:0f:3f:f1:81:51:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e2bb4e56cdfe2f40f824abdccd9b523466eccddb306c90c5b
        Validity
            Not Before: Nov 21 08:56:09 2024 GMT
            Not After : Nov 20 09:01:09 2025 GMT
        Subject: CN=26B32F1248056D037F924A2C7CCCE3009765C1F8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:dc:6a:22:d4:9f:6d:5e:45:69:07:7a:03:2e:
                    b7:21:f7:cc:94:bd:72:cd:58:85:d6:97:f7:29:49:
                    37:09:a8:37:44:17:d6:60:95:c0:8a:fd:9c:b7:9d:
                    3d:1a:35:83:f6:e1:a7:7a:cb:86:f6:6a:a1:57:f3:
                    32:8a:63:53:2a:95:bf:c3:9d:a6:15:cc:5b:30:26:
                    96:15:63:89:49:e6:4b:41:09:01:4f:e5:fb:d6:e3:
                    7b:ac:73:fe:a6:e4:48:e8:f9:26:ce:dd:83:4c:76:
                    c5:75:68:9e:e9:31:f3:a8:e7:21:ad:68:ed:f5:77:
                    74:08:df:7d:f7:05:c3:91:f7:e3:36:6d:64:b5:54:
                    29:2a:16:1a:f4:a1:9f:4a:65:8b:55:ae:71:0a:ad:
                    b4:d3:32:95:c0:a8:bb:f7:06:49:22:7a:91:61:76:
                    13:f4:05:b5:3b:ad:10:0b:ac:5a:5d:27:67:ed:3f:
                    36:b5:4e:f7:3a:07:02:54:9f:9e:81:74:71:3a:1f:
                    8d:ee:dc:d5:4c:7b:c0:75:bf:df:b7:26:c4:70:ae:
                    a8:4c:d7:1e:9b:f5:0e:a3:60:6d:df:ed:ff:8f:5a:
                    84:9c:f7:bd:1d:8e:21:e3:f6:48:0b:5f:13:9c:0f:
                    22:ba:f1:94:41:60:de:b8:fb:9c:84:56:5d:6f:3a:
                    ac:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:B3:2F:12:48:05:6D:03:7F:92:4A:2C:7C:CC:E3:00:97:65:C1:F8
            X509v3 Authority Key Identifier:
                keyid:C3:A3:D9:17:F4:39:9B:C2:6C:0A:68:77:18:2B:EA:3C:D9:FE:F4:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8fded1a0019006e97cb128ef/0/C3A3D917F4399BC26C0A6877182BEA3CD9FEF402.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/efa01acb-51ec-4048-8589-d09390791aed/7e2bb4e56cdfe2f40f824abdccd9b523466eccddb306c90c5b.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8fded1a0019006e97cb128ef/0/3231362e3135312e3136392e302f32342d3234203d3e203632323430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.151.169.0/24

    Signature Algorithm: sha256WithRSAEncryption
         32:eb:a3:0e:9f:6a:20:0f:06:04:78:36:f6:6e:a8:64:dc:b9:
         2c:74:39:38:4c:22:5e:16:a9:b3:d0:63:42:e2:4b:bd:78:f1:
         7e:b0:86:16:77:6a:8e:1e:71:9e:94:ca:15:04:23:70:be:94:
         d7:b7:68:1d:b5:50:c4:2d:f5:6b:b6:b9:89:e2:f7:bb:44:5e:
         4e:b6:7b:bd:4c:57:36:87:39:9f:c7:8f:6d:29:97:5c:04:f9:
         3b:6b:5a:9c:ef:24:0b:b1:ac:f5:34:a7:d7:3b:59:1b:43:c3:
         ea:f5:49:06:61:8e:66:64:2c:bd:b9:81:5d:e9:6d:cf:96:a9:
         da:55:9d:30:f0:d2:fe:50:78:4a:a1:c0:f0:7c:df:34:2f:2e:
         b3:60:aa:15:d8:7c:19:18:bc:3c:dc:b4:38:ac:f2:1c:09:d4:
         71:0e:a4:2a:b0:07:aa:98:49:3f:b4:30:fb:9f:b7:27:13:d2:
         8b:88:05:d1:29:ae:78:99:ee:48:9c:8e:3a:3b:56:87:be:49:
         fe:b9:dd:40:45:4f:9d:6d:a8:be:5b:0e:14:52:a2:d1:fc:75:
         f6:e3:80:d8:f1:be:be:81:ad:7c:71:63:f0:c9:cd:a4:33:ec:
         a9:1e:99:98:af:b8:5d:0c:19:a1:3a:10:c1:33:07:46:fd:a1:
         cf:e3:33:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:37:14 2025 by rpki-client