Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf82d5e52101850b65b10b358b/0/3136372e3235332e34372e302f32342d3234203d3e203139353231.roa
File:                     3136372e3235332e34372e302f32342d3234203d3e203139353231.roa (raw, json)
Hash identifier:          W1hBQbTLp3Of1kCX0PY0AvviRicxowtKt0dbmmXPvS8=
Subject key identifier:   7E:A6:6D:29:8A:E7:F2:2D:62:A2:03:A2:02:3E:BE:57:E4:F4:AF:18
Certificate issuer:       /CN=ed199e1daadbcd50649091bf3c154099a326233862ce25c671
Certificate serial:       749C659E819FDFDEFB6E058A32E20155442B1D4D
Authority key identifier: B3:2D:01:46:71:A0:8A:F0:A5:5B:31:3E:AB:25:A8:2E:DD:40:2A:98
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c6babe0-c981-4c51-971c-b56bd0722eb1/ed199e1daadbcd50649091bf3c154099a326233862ce25c671.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf82d5e52101850b65b10b358b/0/3136372e3235332e34372e302f32342d3234203d3e203139353231.roa
Signing time:             Thu 04 Apr 2024 18:06:05 +0000
ROA not before:           Thu 04 Apr 2024 18:01:05 +0000
ROA not after:            Thu 03 Apr 2025 18:06:05 +0000
asID:                     19521
IP address blocks:        167.253.47.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf82d5e52101850b65b10b358b/0/B32D014671A08AF0A55B313EAB25A82EDD402A98.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf82d5e52101850b65b10b358b/0/B32D014671A08AF0A55B313EAB25A82EDD402A98.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c6babe0-c981-4c51-971c-b56bd0722eb1/ed199e1daadbcd50649091bf3c154099a326233862ce25c671.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c6babe0-c981-4c51-971c-b56bd0722eb1/5c6babe0-c981-4c51-971c-b56bd0722eb1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c6babe0-c981-4c51-971c-b56bd0722eb1/5c6babe0-c981-4c51-971c-b56bd0722eb1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c6babe0-c981-4c51-971c-b56bd0722eb1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 17:41:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:9c:65:9e:81:9f:df:de:fb:6e:05:8a:32:e2:01:55:44:2b:1d:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed199e1daadbcd50649091bf3c154099a326233862ce25c671
        Validity
            Not Before: Apr  4 18:01:05 2024 GMT
            Not After : Apr  3 18:06:05 2025 GMT
        Subject: CN=7EA66D298AE7F22D62A203A2023EBE57E4F4AF18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:81:74:d0:69:91:09:6f:8f:51:c1:9f:eb:6c:
                    ed:ac:a7:af:b6:36:c1:77:56:d8:00:37:73:a1:04:
                    ee:38:b4:53:79:12:9d:a7:8a:9c:69:4e:52:ba:88:
                    f3:0c:13:46:a0:f3:fa:f5:1a:14:b1:8b:ca:35:29:
                    fa:39:61:4f:f7:bf:76:c6:51:05:8f:a1:10:f1:aa:
                    e9:eb:a9:a8:3d:eb:36:e7:61:9c:96:83:23:e0:d8:
                    c3:20:09:a8:fb:25:94:5a:b5:a4:a9:c4:23:5d:d2:
                    9c:c0:4d:d8:69:1d:62:cd:94:a2:fa:9d:21:34:d7:
                    0b:47:1f:e5:09:19:f7:cd:e1:ed:17:59:14:d1:23:
                    41:69:75:06:0c:49:5e:21:dd:9f:a8:0b:56:99:e1:
                    1c:50:46:fe:7a:1d:42:4f:0e:8d:e3:ca:9f:af:2d:
                    38:bd:a8:02:29:9e:29:5b:f7:75:07:38:a8:ff:b1:
                    14:a9:57:18:f5:b5:b6:93:63:cd:df:2c:85:32:c7:
                    b8:6b:29:1f:09:8e:df:06:31:7a:ee:01:45:f1:3b:
                    0a:7a:6d:ff:8a:9f:d7:a3:e9:a5:96:f0:c8:27:c3:
                    bc:05:95:4c:96:d6:cc:50:f4:86:98:af:f9:04:0d:
                    09:1d:11:e9:d6:01:2d:a1:61:5a:87:91:5d:3b:3d:
                    25:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:A6:6D:29:8A:E7:F2:2D:62:A2:03:A2:02:3E:BE:57:E4:F4:AF:18
            X509v3 Authority Key Identifier:
                keyid:B3:2D:01:46:71:A0:8A:F0:A5:5B:31:3E:AB:25:A8:2E:DD:40:2A:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf82d5e52101850b65b10b358b/0/B32D014671A08AF0A55B313EAB25A82EDD402A98.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c6babe0-c981-4c51-971c-b56bd0722eb1/ed199e1daadbcd50649091bf3c154099a326233862ce25c671.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf82d5e52101850b65b10b358b/0/3136372e3235332e34372e302f32342d3234203d3e203139353231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.253.47.0/24

    Signature Algorithm: sha256WithRSAEncryption
         56:0f:38:af:f1:47:a3:1e:77:59:32:ae:27:80:6f:f8:8e:14:
         09:9d:cf:17:64:4c:6a:88:e3:78:93:12:81:aa:97:93:41:97:
         a4:b6:5d:80:cb:6d:d3:42:85:72:f3:62:da:9d:59:44:62:4c:
         3a:89:27:64:bc:b7:8e:69:52:3e:0b:6c:44:f5:4a:32:20:39:
         4b:45:f8:21:dc:12:f7:b1:ff:61:be:b4:f4:22:1b:59:6a:7e:
         39:8a:11:f4:6d:8b:07:d1:e0:f0:98:2e:d8:b8:c2:42:bb:00:
         e4:22:f5:8d:ba:9e:a4:fa:1a:e7:78:b5:2e:e6:00:20:7e:a1:
         cf:a6:f8:1e:52:14:3d:ee:2e:a1:15:d5:54:01:c3:0e:09:ab:
         ec:49:41:07:11:b5:7c:b8:ec:e8:98:24:90:31:59:16:e1:e9:
         d3:54:68:7a:26:31:ed:88:1b:35:eb:d1:e5:50:3b:6a:01:5b:
         53:5d:cb:9c:1b:c8:88:5c:02:f8:a3:19:e9:12:d9:62:d1:b7:
         7a:1a:a4:6a:9e:43:6d:26:38:c2:a2:13:14:d7:2a:4a:82:d0:
         db:b6:23:45:f8:9b:9d:0c:c2:7e:21:75:c0:48:01:b0:bb:8f:
         06:e3:97:41:ea:90:2b:2b:f3:af:41:09:8a:76:eb:e2:a3:38:
         b1:e1:7b:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 17:27:33 2024 by rpki-client on console-fra.rpki-client.org