Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/3231362e37332e3135372e302f32342d3234203d3e203233343730.roa
File:                     3231362e37332e3135372e302f32342d3234203d3e203233343730.roa (raw, json)
Hash identifier:          8s7rh+YH+oX6BTLeO8pGczwGuBapBdbFMkN27bRzrdw=
Subject key identifier:   A0:83:FE:4A:A6:4B:A7:F4:71:D2:70:86:C0:D7:F9:E0:F3:F6:35:45
Certificate issuer:       /CN=eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96
Certificate serial:       0EF4FCE60995FF2412B473EBEA843D5EDFD263BE
Authority key identifier: 0F:03:31:2E:E5:9E:3D:E8:27:35:F6:6B:54:94:15:DE:44:64:78:75
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/3231362e37332e3135372e302f32342d3234203d3e203233343730.roa
Signing time:             Tue 18 Jun 2024 18:39:57 +0000
ROA not before:           Tue 18 Jun 2024 18:34:57 +0000
ROA not after:            Tue 17 Jun 2025 18:39:57 +0000
asID:                     23470
IP address blocks:        216.73.157.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/0F03312EE59E3DE82735F66B549415DE44647875.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/0F03312EE59E3DE82735F66B549415DE44647875.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/a01e997c-b89e-47c2-8d79-d31e58bc3ca4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/a01e997c-b89e-47c2-8d79-d31e58bc3ca4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:f4:fc:e6:09:95:ff:24:12:b4:73:eb:ea:84:3d:5e:df:d2:63:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96
        Validity
            Not Before: Jun 18 18:34:57 2024 GMT
            Not After : Jun 17 18:39:57 2025 GMT
        Subject: CN=A083FE4AA64BA7F471D27086C0D7F9E0F3F63545
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:0b:61:09:ea:4c:ea:e2:77:0b:9d:f6:cd:4b:
                    aa:c1:73:18:f4:52:58:fb:87:9b:1a:1f:07:b2:ff:
                    de:e3:0a:0c:4f:c4:e5:d9:a1:ae:f7:05:53:00:b1:
                    df:bd:0c:6b:41:88:fc:6d:60:07:bf:d7:43:9c:44:
                    3c:67:9f:6f:cd:03:23:55:e3:b2:af:cd:64:91:eb:
                    2c:a4:50:19:26:52:0b:5c:a2:92:2d:38:95:56:b2:
                    28:f7:7f:c2:83:3d:87:48:65:fa:0b:c1:60:02:1d:
                    f2:62:23:bd:37:f7:f7:f9:ab:fc:1c:de:83:f6:33:
                    3b:6e:b0:d4:8f:ce:90:5d:0a:cf:59:c4:4a:48:a0:
                    8d:c5:ed:9a:75:73:e2:98:d1:93:2c:ba:1e:5a:4a:
                    36:67:8c:45:4f:13:b0:b2:2f:2f:8a:dd:ea:75:3d:
                    ff:ce:29:7a:65:f3:d6:20:ce:ee:eb:1b:32:f9:45:
                    7f:86:56:56:47:37:6a:0c:3d:88:c9:c6:2e:d6:14:
                    b8:4c:00:dd:f3:59:4e:cf:13:30:23:80:c2:17:57:
                    e2:e9:d7:3b:45:1c:6e:e5:02:08:d4:16:85:e1:53:
                    58:4e:82:41:2c:fe:37:f6:10:76:d5:01:af:7f:b2:
                    c1:60:5c:e1:af:65:ed:5e:45:3a:4b:39:4f:56:e1:
                    9a:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:83:FE:4A:A6:4B:A7:F4:71:D2:70:86:C0:D7:F9:E0:F3:F6:35:45
            X509v3 Authority Key Identifier:
                keyid:0F:03:31:2E:E5:9E:3D:E8:27:35:F6:6B:54:94:15:DE:44:64:78:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/0F03312EE59E3DE82735F66B549415DE44647875.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/3231362e37332e3135372e302f32342d3234203d3e203233343730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.73.157.0/24

    Signature Algorithm: sha256WithRSAEncryption
         72:0b:65:02:22:d7:da:ec:a1:4f:a3:ff:42:3e:55:cf:69:87:
         7b:0d:3e:7b:70:c0:6e:09:ec:73:34:47:c8:ef:9a:3a:f1:3f:
         af:73:af:b2:29:d0:59:00:0f:e2:c1:88:8a:4d:dc:e8:f6:8f:
         99:11:54:d6:53:93:ee:66:fc:63:63:45:ca:b6:a4:9f:40:1f:
         a0:83:cb:39:98:2d:e9:c3:93:4a:93:95:2f:96:e3:f2:90:df:
         24:6b:82:e5:40:79:7d:84:87:2f:b7:86:b3:07:e0:ec:c0:ce:
         cc:20:af:ef:9b:33:56:da:99:38:3a:75:1e:5b:ed:36:e5:d8:
         74:16:3c:4f:c3:17:8f:df:2f:d5:bb:c2:1b:30:3e:99:f6:0b:
         04:fb:24:1c:c4:fc:a4:39:c9:f2:84:84:85:c9:a8:31:54:94:
         3e:f6:cc:7c:7b:53:e2:74:ff:1a:2f:05:9f:14:c8:24:fb:7f:
         c8:65:e0:da:11:52:b3:e6:b6:79:b2:c4:cf:3c:34:ee:65:b4:
         52:98:89:d7:34:92:5b:ec:45:c4:41:24:ad:c0:5a:02:1d:d1:
         96:4f:99:f0:e8:c0:4e:eb:78:d7:d2:5a:61:8a:16:e4:14:0b:
         60:43:4e:45:0a:fa:11:33:6d:be:9d:cb:f9:ec:67:86:72:a4:
         af:45:ae:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:40:16 2024 by rpki-client on console-ams.rpki-client.org