Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/3231362e37332e3135392e302f32342d3234203d3e203631313338.roa
File:                     3231362e37332e3135392e302f32342d3234203d3e203631313338.roa (raw, json)
Hash identifier:          LvJQl9KrlAdbKfxdZXjzVFl6ZE9m0njD4lUm8/r10E8=
Subject key identifier:   F7:5E:79:A0:87:63:46:63:A2:D0:F2:5E:BC:81:8A:ED:65:B1:EF:8F
Certificate issuer:       /CN=eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96
Certificate serial:       540834EB7D5DA5FADB602691E527E82F843430AC
Authority key identifier: 0F:03:31:2E:E5:9E:3D:E8:27:35:F6:6B:54:94:15:DE:44:64:78:75
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/3231362e37332e3135392e302f32342d3234203d3e203631313338.roa
Signing time:             Tue 05 Dec 2023 02:44:20 +0000
ROA not before:           Tue 05 Dec 2023 02:39:20 +0000
ROA not after:            Tue 03 Dec 2024 02:44:20 +0000
asID:                     61138
IP address blocks:        216.73.159.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/0F03312EE59E3DE82735F66B549415DE44647875.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/0F03312EE59E3DE82735F66B549415DE44647875.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/a01e997c-b89e-47c2-8d79-d31e58bc3ca4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/a01e997c-b89e-47c2-8d79-d31e58bc3ca4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 25 Apr 2024 08:34:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:08:34:eb:7d:5d:a5:fa:db:60:26:91:e5:27:e8:2f:84:34:30:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96
        Validity
            Not Before: Dec  5 02:39:20 2023 GMT
            Not After : Dec  3 02:44:20 2024 GMT
        Subject: CN=F75E79A087634663A2D0F25EBC818AED65B1EF8F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:fd:49:08:cf:9c:2b:dc:91:e0:40:39:b3:90:
                    99:44:cb:a2:27:1c:8e:72:b1:07:be:26:1f:af:47:
                    40:fb:bd:f5:e4:2e:58:3e:06:2c:87:b8:7d:12:e0:
                    85:93:5a:8b:9c:78:49:d0:8c:79:0b:ba:45:03:b1:
                    63:61:91:dc:34:c8:9a:ca:eb:1e:df:70:2c:d7:9b:
                    5b:43:3c:9c:34:3d:4b:8f:6e:46:9f:cd:a7:03:05:
                    7e:2e:04:47:cd:49:67:5e:3b:1e:e6:8a:19:06:60:
                    28:ec:0f:cc:ba:73:33:6e:91:d0:a0:4f:b3:2c:e3:
                    15:cb:4a:68:08:27:13:c9:20:f0:6d:10:3c:b4:f2:
                    da:d2:5f:da:4f:ea:02:0b:9f:a7:09:35:8b:fb:c5:
                    42:aa:a7:0d:4e:1c:38:72:d7:e9:aa:80:6b:b2:06:
                    ff:c2:b1:c6:b5:42:c0:96:14:f0:85:05:ef:ad:26:
                    43:56:33:9f:99:6e:a4:e7:82:b4:fb:42:41:08:2b:
                    e8:09:91:fc:3c:f8:7d:bc:08:f3:49:77:37:7a:4d:
                    20:e8:70:5f:53:fc:b3:cd:25:3b:f9:f2:0a:b5:07:
                    61:5e:8e:71:aa:82:51:f7:5b:2b:d1:f1:d1:c3:27:
                    ca:77:1c:83:8b:ed:a8:39:14:6a:5a:00:7c:2a:84:
                    7d:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:5E:79:A0:87:63:46:63:A2:D0:F2:5E:BC:81:8A:ED:65:B1:EF:8F
            X509v3 Authority Key Identifier:
                keyid:0F:03:31:2E:E5:9E:3D:E8:27:35:F6:6B:54:94:15:DE:44:64:78:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/0F03312EE59E3DE82735F66B549415DE44647875.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/3231362e37332e3135392e302f32342d3234203d3e203631313338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.73.159.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bd:85:57:9b:fb:d3:31:5e:13:0d:54:34:4e:27:b0:cb:a7:17:
         07:6b:7a:ce:e1:ef:58:65:87:43:f1:19:b0:53:19:95:04:7c:
         4a:b5:10:9d:7f:6b:2e:8d:df:15:6a:59:af:df:8f:30:f0:e4:
         06:57:c7:22:83:9e:11:49:02:a1:c2:f8:2b:e6:36:12:20:0c:
         f4:34:03:3f:c2:6d:52:d7:da:8f:03:19:6f:1d:a5:9b:76:61:
         56:13:19:58:31:25:29:c6:b0:c3:16:c8:4f:7f:df:5a:99:bf:
         b3:63:11:85:d6:64:c0:65:57:bb:b9:10:6c:cf:14:52:f3:5a:
         23:28:be:07:ac:f2:a2:d1:8f:84:c0:c0:6e:59:8f:0a:1d:00:
         ba:95:7e:b8:89:a6:72:c4:22:58:30:af:e7:18:92:3b:87:a6:
         6d:fb:74:4e:4b:43:62:92:9a:68:f8:dc:3f:76:cc:e3:43:76:
         96:8c:3e:f4:5d:36:a0:b1:30:76:b1:5f:6c:ed:b7:9e:40:c3:
         69:08:32:50:30:ba:2a:9d:62:9b:fa:0e:7d:d7:1c:15:5b:a8:
         40:79:1a:d1:e0:43:b7:5d:48:a3:66:19:64:b2:aa:24:2a:fe:
         ca:59:e0:10:91:f7:f9:23:12:13:6b:ba:12:db:a3:0f:3a:c1:
         da:46:0b:06
-----BEGIN CERTIFICATE-----
MIIFsjCCBJqgAwIBAgIUVAg0631dpfrbYCaR5SfoL4Q0MKwwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZWVjZjg0N2Q3YTNlNTc5NTliZWJkNjk3YTdlMDY3YTc1
ZTE4YmI2Mjk4YjFkM2JmOTYwHhcNMjMxMjA1MDIzOTIwWhcNMjQxMjAzMDI0NDIw
WjAzMTEwLwYDVQQDEyhGNzVFNzlBMDg3NjM0NjYzQTJEMEYyNUVCQzgxOEFFRDY1
QjFFRjhGMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu/1JCM+cK9yR
4EA5s5CZRMuiJxyOcrEHviYfr0dA+7315C5YPgYsh7h9EuCFk1qLnHhJ0Ix5C7pF
A7FjYZHcNMiayuse33As15tbQzycND1Lj25Gn82nAwV+LgRHzUlnXjse5ooZBmAo
7A/MunMzbpHQoE+zLOMVy0poCCcTySDwbRA8tPLa0l/aT+oCC5+nCTWL+8VCqqcN
Thw4ctfpqoBrsgb/wrHGtULAlhTwhQXvrSZDVjOfmW6k54K0+0JBCCvoCZH8PPh9
vAjzSXc3ek0g6HBfU/yzzSU7+fIKtQdhXo5xqoJR91sr0fHRwyfKdxyDi+2oORRq
WgB8KoR9AQIDAQABo4ICsjCCAq4wHQYDVR0OBBYEFPdeeaCHY0ZjotDyXryBiu1l
se+PMB8GA1UdIwQYMBaAFA8DMS7lnj3oJzX2a1SUFd5EZHh1MA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1YzkxYmUzZjlkLzEv
MEYwMzMxMkVFNTlFM0RFODI3MzVGNjZCNTQ5NDE1REU0NDY0Nzg3NS5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEz
YjAyZTI5L2EwMWU5OTdjLWI4OWUtNDdjMi04ZDc5LWQzMWU1OGJjM2NhNC9lZWNm
ODQ3ZDdhM2U1Nzk1OWJlYmQ2OTdhN2UwNjdhNzVlMThiYjYyOThiMWQzYmY5Ni5j
ZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1
NWM5MWJlM2Y5ZC8xLzMyMzEzNjJlMzczMzJlMzEzNTM5MmUzMDJmMzIzNDJkMzIz
NDIwM2QzZTIwMzYzMTMxMzMzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO
AjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEANhJnzANBgkqhkiG9w0BAQsF
AAOCAQEAvYVXm/vTMV4TDVQ0Tiewy6cXB2t6zuHvWGWHQ/EZsFMZlQR8SrUQnX9r
Lo3fFWpZr9+PMPDkBlfHIoOeEUkCocL4K+Y2EiAM9DQDP8JtUtfajwMZbx2lm3Zh
VhMZWDElKcawwxbIT3/fWpm/s2MRhdZkwGVXu7kQbM8UUvNaIyi+B6zyotGPhMDA
blmPCh0AupV+uImmcsQiWDCv5xiSO4embft0TktDYpKaaPjcP3bM40N2low+9F02
oLEwdrFfbO23nkDDaQgyUDC6Kp1im/oOfdccFVuoQHka0eBDt11Io2YZZLKqJCr+
ylngEJH3+SMSE2u6EtujDzrB2kYLBg==
-----END CERTIFICATE-----
Generated at Wed Apr 24 08:43:40 2024 by rpki-client on console-ams.rpki-client.org