Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/3231362e37332e3135382e302f32342d3234203d3e20313337343039.roa
File:                     3231362e37332e3135382e302f32342d3234203d3e20313337343039.roa (raw, json)
Hash identifier:          3bN8PFofBl+9rNuyvjYaInQjkUGgXLpYRzj4OwNjSlU=
Subject key identifier:   C9:B5:44:DE:7C:68:BC:8F:B3:49:C7:66:B3:07:3C:A7:89:84:98:09
Certificate issuer:       /CN=eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96
Certificate serial:       388640B05861FF98733DA805B83D3A2C6861BA27
Authority key identifier: 0F:03:31:2E:E5:9E:3D:E8:27:35:F6:6B:54:94:15:DE:44:64:78:75
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/3231362e37332e3135382e302f32342d3234203d3e20313337343039.roa
Signing time:             Fri 15 Mar 2024 09:08:08 +0000
ROA not before:           Fri 15 Mar 2024 09:03:08 +0000
ROA not after:            Fri 14 Mar 2025 09:08:08 +0000
asID:                     137409
IP address blocks:        216.73.158.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/0F03312EE59E3DE82735F66B549415DE44647875.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/0F03312EE59E3DE82735F66B549415DE44647875.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/a01e997c-b89e-47c2-8d79-d31e58bc3ca4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/a01e997c-b89e-47c2-8d79-d31e58bc3ca4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:86:40:b0:58:61:ff:98:73:3d:a8:05:b8:3d:3a:2c:68:61:ba:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96
        Validity
            Not Before: Mar 15 09:03:08 2024 GMT
            Not After : Mar 14 09:08:08 2025 GMT
        Subject: CN=C9B544DE7C68BC8FB349C766B3073CA789849809
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:95:45:45:47:5a:98:0c:3c:b7:25:df:89:56:
                    1f:a0:4b:dc:29:a4:84:69:ed:55:97:e4:c8:e9:46:
                    3c:9d:99:f8:af:d6:c1:83:20:76:d2:ef:b7:cd:53:
                    68:42:41:3b:e8:0e:a7:30:a4:a2:82:68:05:73:c3:
                    87:44:c9:fe:98:0e:a4:eb:12:4f:e6:aa:5b:a8:3b:
                    dc:e3:04:d8:17:aa:a5:06:15:49:5c:e8:78:cc:e7:
                    2e:41:3a:09:7f:df:f8:6e:4c:6d:c6:1f:35:19:a5:
                    3e:53:1e:62:1d:6b:3c:4f:0b:38:6d:36:2f:a9:8d:
                    89:ca:bb:72:b6:81:5c:d5:29:51:a5:2e:f5:2b:96:
                    83:4d:75:d4:7a:21:0a:75:24:f5:51:6d:60:9b:ed:
                    f7:2b:8a:5c:c9:6d:03:2d:4b:66:bd:0b:9c:2f:0f:
                    10:df:3a:b0:0b:e3:df:1b:61:a6:be:2e:f6:f4:82:
                    fe:73:52:df:32:02:b5:ad:8d:15:01:03:f1:4a:d6:
                    80:ec:0f:af:8a:05:5a:f5:b6:ef:c2:94:a1:cf:a8:
                    18:69:1d:50:8d:18:be:c7:ed:66:38:67:33:db:6c:
                    24:50:78:32:a0:ff:95:79:5f:e7:48:ea:dd:8c:3c:
                    90:ad:d8:5c:26:3c:f7:ba:25:53:c4:5c:7e:89:d3:
                    8d:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:B5:44:DE:7C:68:BC:8F:B3:49:C7:66:B3:07:3C:A7:89:84:98:09
            X509v3 Authority Key Identifier:
                keyid:0F:03:31:2E:E5:9E:3D:E8:27:35:F6:6B:54:94:15:DE:44:64:78:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/0F03312EE59E3DE82735F66B549415DE44647875.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/3231362e37332e3135382e302f32342d3234203d3e20313337343039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.73.158.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2f:ac:34:ee:f0:c4:50:7a:83:55:fc:e3:4b:b9:26:72:cd:f8:
         d5:93:31:da:95:b2:27:2e:a7:e7:f7:87:68:99:46:6c:6a:1a:
         3a:73:68:6b:4f:70:8b:b3:bb:9c:d4:e4:ce:0f:fe:c4:b8:83:
         cf:82:7a:f0:5b:bb:35:ca:6d:1b:8b:0e:2f:92:9b:87:00:36:
         ca:7e:72:c4:0e:83:57:51:1d:67:31:a7:30:bf:12:fa:ea:7b:
         27:15:f4:51:a1:eb:2f:d9:11:98:27:c3:67:8c:b1:52:36:8c:
         5d:7d:99:cc:54:ed:f7:70:25:f2:93:53:2d:a9:30:ba:c8:34:
         38:b4:35:2b:fc:7e:02:a3:ea:0f:48:e2:69:3f:81:64:6a:55:
         60:ef:54:bb:77:17:ca:91:11:9e:f9:85:24:50:ad:e5:43:78:
         11:dc:22:89:81:11:cf:c1:71:2e:06:55:55:dc:0d:c7:16:48:
         3a:38:75:f4:55:ca:57:9d:af:93:4d:09:9d:b9:a8:69:07:1a:
         58:52:08:7d:c8:e9:3d:34:fa:57:ab:c7:ce:c5:4c:c7:a2:fc:
         6f:82:b1:69:6e:30:72:7e:0b:e2:4b:45:ff:62:d2:3a:2b:2c:
         52:e4:5f:ef:54:b8:5a:d8:49:d7:0d:2f:e7:c3:ec:a9:fb:89:
         82:52:01:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:40:16 2024 by rpki-client on console-ams.rpki-client.org