Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/3231362e37332e3135362e302f32342d3234203d3e203233343730.roa
File:                     3231362e37332e3135362e302f32342d3234203d3e203233343730.roa (raw, json)
Hash identifier:          tHUrAYMw3ooJccalXpU+J1TeztYXiTPxB7cTlEjY+zA=
Subject key identifier:   39:F2:56:F9:5B:1A:4E:BF:7C:2E:10:FC:EC:0A:E5:B0:A0:1C:6B:3C
Certificate issuer:       /CN=eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96
Certificate serial:       016F7BD883B2CC2048461AFBCC13ECAC7AD9647A
Authority key identifier: 0F:03:31:2E:E5:9E:3D:E8:27:35:F6:6B:54:94:15:DE:44:64:78:75
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/3231362e37332e3135362e302f32342d3234203d3e203233343730.roa
Signing time:             Wed 27 Dec 2023 05:44:21 +0000
ROA not before:           Wed 27 Dec 2023 05:39:21 +0000
ROA not after:            Wed 25 Dec 2024 05:44:21 +0000
asID:                     23470
IP address blocks:        216.73.156.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/0F03312EE59E3DE82735F66B549415DE44647875.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/0F03312EE59E3DE82735F66B549415DE44647875.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/a01e997c-b89e-47c2-8d79-d31e58bc3ca4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/a01e997c-b89e-47c2-8d79-d31e58bc3ca4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Nov 2024 05:30:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:6f:7b:d8:83:b2:cc:20:48:46:1a:fb:cc:13:ec:ac:7a:d9:64:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96
        Validity
            Not Before: Dec 27 05:39:21 2023 GMT
            Not After : Dec 25 05:44:21 2024 GMT
        Subject: CN=39F256F95B1A4EBF7C2E10FCEC0AE5B0A01C6B3C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:a6:c4:b4:cf:3e:c4:f5:b4:77:21:1c:35:05:
                    8b:1a:b6:1b:f9:b4:e5:ee:35:33:b0:03:7a:91:78:
                    55:c4:06:c1:d2:63:ba:95:5f:41:0b:65:dd:96:2e:
                    f1:fe:0e:b5:e7:37:bc:d8:9f:68:0e:91:75:45:28:
                    c0:99:f2:ed:1b:c8:9b:97:c3:15:0d:5f:9d:c5:ae:
                    29:84:4d:fc:c3:f7:6b:bf:fe:2c:6b:88:49:25:74:
                    49:29:4b:f9:1f:15:1a:93:3a:97:57:b5:a4:b2:b8:
                    58:fc:35:2d:69:08:ba:52:9c:9c:be:cd:df:aa:74:
                    87:b4:b9:16:12:ef:39:49:99:5b:57:8d:36:f0:1a:
                    b7:69:2f:e5:0f:ea:5a:fd:d1:25:04:b6:24:66:a1:
                    dd:85:80:bc:95:54:31:f0:7d:df:4d:e7:d8:39:69:
                    27:01:0a:2f:d3:aa:66:18:44:b4:d2:0a:a1:31:b0:
                    79:0e:88:f0:26:07:77:59:3a:0e:da:67:1c:12:82:
                    fb:57:07:fc:1c:ef:f1:80:14:04:27:e5:80:de:a9:
                    d6:f6:1b:84:82:5e:d0:9f:da:c0:39:2e:10:cb:c0:
                    81:b6:1b:1b:4d:8b:f5:29:de:44:de:44:76:4e:fd:
                    90:4f:62:68:82:a5:74:7c:33:17:ec:44:da:d7:bd:
                    18:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:F2:56:F9:5B:1A:4E:BF:7C:2E:10:FC:EC:0A:E5:B0:A0:1C:6B:3C
            X509v3 Authority Key Identifier:
                keyid:0F:03:31:2E:E5:9E:3D:E8:27:35:F6:6B:54:94:15:DE:44:64:78:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/0F03312EE59E3DE82735F66B549415DE44647875.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/3231362e37332e3135362e302f32342d3234203d3e203233343730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.73.156.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1e:7d:63:57:7f:0f:65:9f:e4:54:56:bd:4d:fd:ea:4c:68:31:
         08:cd:d0:6f:28:9c:da:99:ec:0e:f3:a8:b9:10:50:73:c0:39:
         0f:c9:8c:d2:3a:be:5d:de:d6:09:a5:18:f1:55:b0:4a:d3:ba:
         6e:18:37:5d:66:65:73:56:a0:eb:16:f3:18:b3:df:6e:1a:c2:
         ab:2f:d8:05:38:72:fa:eb:48:46:a4:f4:3a:3b:0e:39:19:1f:
         ed:e6:2e:a8:64:47:24:22:0e:4c:ad:18:60:b5:97:5f:3a:a3:
         1f:6d:45:ea:46:2f:ea:80:ac:09:53:92:6f:90:1e:82:38:2a:
         3f:fa:c2:a5:29:7a:60:72:25:6f:6d:9d:86:55:70:a6:81:22:
         5d:d5:bb:e7:d7:df:9e:31:4d:b4:2b:c1:2d:f4:03:ba:24:74:
         00:73:2c:d4:33:fd:5c:de:e8:fe:83:5b:cc:26:08:d9:2d:04:
         f7:65:f3:3c:ed:4c:d2:c5:d3:01:ef:da:88:26:53:ae:0f:84:
         e1:ad:cd:60:81:eb:b8:c7:fe:ea:c7:02:4e:c2:40:eb:4e:43:
         f9:6d:0a:6c:7a:e7:32:63:1d:cb:e7:4a:f4:bc:92:77:d5:db:
         d1:77:ab:fd:29:7c:0e:40:71:3b:d7:98:1d:bc:cf:88:02:3c:
         c2:7b:cf:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 04:29:28 2024 by rpki-client on console-fra.rpki-client.org