Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/3231362e37332e3135392e302f32342d3234203d3e203631313338.roa
File:                     3231362e37332e3135392e302f32342d3234203d3e203631313338.roa (raw, json)
Hash identifier:          QSCIHbZHU3gumCwkke9HL4D+DNxn9Stf4R3qNCME8/4=
Subject key identifier:   1F:83:78:C3:11:53:FE:49:61:D2:C2:51:80:6C:86:73:79:CC:6A:43
Certificate issuer:       /CN=eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96
Certificate serial:       318EC6CE666908A9F66DDEB958085C0A3124DDD3
Authority key identifier: 0F:03:31:2E:E5:9E:3D:E8:27:35:F6:6B:54:94:15:DE:44:64:78:75
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/3231362e37332e3135392e302f32342d3234203d3e203631313338.roa
Signing time:             Tue 05 Nov 2024 03:40:11 +0000
ROA not before:           Tue 05 Nov 2024 03:35:11 +0000
ROA not after:            Tue 04 Nov 2025 03:40:11 +0000
asID:                     61138
IP address blocks:        216.73.159.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/0F03312EE59E3DE82735F66B549415DE44647875.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/0F03312EE59E3DE82735F66B549415DE44647875.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/a01e997c-b89e-47c2-8d79-d31e58bc3ca4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/a01e997c-b89e-47c2-8d79-d31e58bc3ca4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:8e:c6:ce:66:69:08:a9:f6:6d:de:b9:58:08:5c:0a:31:24:dd:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96
        Validity
            Not Before: Nov  5 03:35:11 2024 GMT
            Not After : Nov  4 03:40:11 2025 GMT
        Subject: CN=1F8378C31153FE4961D2C251806C867379CC6A43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:07:97:0f:1d:42:42:3b:28:53:44:35:a9:fa:
                    10:b8:e1:31:d2:f9:68:10:32:3d:bf:b9:8f:0f:b6:
                    91:02:9b:a7:8f:09:d1:d8:a8:92:98:31:8c:4b:b2:
                    4f:1f:8a:a1:7d:fd:7e:d3:24:4b:91:3d:1d:c3:ba:
                    50:b5:a0:67:e9:d4:9b:a7:75:59:55:78:b3:bf:f1:
                    6a:f1:f8:a1:55:04:0b:92:30:8c:6d:2b:98:e4:91:
                    02:91:47:ea:d1:b8:2e:06:d8:90:a2:5e:d8:53:c1:
                    39:cc:4a:05:8c:c3:f2:e2:13:32:5f:9b:0f:c1:65:
                    f4:4b:b9:3d:f6:f2:f4:cb:6b:0a:dc:6a:58:31:64:
                    48:34:b1:e3:44:49:bc:04:26:59:a0:eb:39:65:91:
                    85:c3:69:75:99:ca:e0:fc:96:da:c5:4e:aa:3e:bb:
                    be:42:f1:71:cc:de:b3:f0:49:1c:c8:18:b3:b1:85:
                    13:85:87:b7:30:71:2f:e6:24:57:32:20:a2:8c:a3:
                    ec:8b:94:e4:db:48:8a:22:03:d5:3e:ff:5b:6e:5d:
                    72:62:9c:15:fe:f3:04:fa:a4:c4:50:b5:3e:32:4e:
                    fb:7e:c2:b5:71:1d:4d:78:53:47:c7:7c:c3:ee:7d:
                    1d:ce:68:25:d3:8e:b8:83:eb:36:80:2b:a9:c4:75:
                    a5:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:83:78:C3:11:53:FE:49:61:D2:C2:51:80:6C:86:73:79:CC:6A:43
            X509v3 Authority Key Identifier:
                keyid:0F:03:31:2E:E5:9E:3D:E8:27:35:F6:6B:54:94:15:DE:44:64:78:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/0F03312EE59E3DE82735F66B549415DE44647875.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/3231362e37332e3135392e302f32342d3234203d3e203631313338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.73.159.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b5:ea:05:8d:5a:1e:dc:2c:ae:9b:c9:89:c7:59:54:04:a7:54:
         3c:47:b5:5a:6a:ea:f2:a1:b6:a6:a4:6d:62:41:1c:37:20:81:
         45:e0:8e:da:36:8c:57:81:8b:f4:0b:35:ed:0d:f4:b8:bc:8e:
         6d:55:7d:03:17:57:89:fc:87:6b:6d:b5:b6:6d:b4:66:b4:3b:
         fe:35:d5:ac:7c:30:49:23:66:5b:5b:53:31:8b:8c:97:20:5f:
         7f:bd:51:72:d9:4e:c2:78:06:36:30:3f:3e:f5:24:cf:54:d1:
         28:25:89:4d:61:9c:8b:75:8c:53:11:9a:95:9e:d2:7d:23:98:
         f7:b1:44:da:80:c5:e7:f4:7e:fa:4d:85:5d:5b:8e:1e:e2:5b:
         5e:81:f3:a2:c5:07:88:b8:e9:ab:90:e9:4e:85:0f:d8:35:d9:
         d2:ba:17:ba:9b:b0:b8:27:0d:7b:a0:d3:de:2c:fd:40:fe:f6:
         c1:b0:c7:dd:08:0a:36:68:34:ed:63:eb:1c:22:ef:80:45:2f:
         15:0b:79:35:be:61:e5:43:db:40:4d:51:85:25:73:83:ee:f0:
         8f:2b:3c:08:00:32:a3:eb:58:6b:53:b4:04:11:02:c2:36:10:
         ad:90:cc:fe:96:63:21:9c:7c:ba:30:9f:c8:36:1b:89:cb:49:
         fb:f6:6d:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:40:16 2024 by rpki-client on console-ams.rpki-client.org