Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8cea2ac6018dcc61b42651d6/0/3137362e3130332e3231382e302f32342d3234203d3e203230343733.roa
File:                     3137362e3130332e3231382e302f32342d3234203d3e203230343733.roa (raw, json)
Hash identifier:          8VXqBjhfkLWFsS5JIkAXvVNA38agCMLXmFCMaamVxJs=
Subject key identifier:   BF:61:71:35:44:F0:32:93:3C:7A:0B:28:4B:DF:76:1E:68:B9:9D:61
Certificate issuer:       /CN=d585ddc72480f69736d0dbfb4fb7bbbbea3025977ba96c315b
Certificate serial:       63A5D0695B18BD44515739C27BBE8CC2E47DB744
Authority key identifier: 1E:92:70:97:F9:61:CD:62:C6:84:22:11:20:67:91:58:56:88:EA:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4016a9a5-6e7c-4633-a4c3-24ad1b7f0785/d585ddc72480f69736d0dbfb4fb7bbbbea3025977ba96c315b.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8cea2ac6018dcc61b42651d6/0/3137362e3130332e3231382e302f32342d3234203d3e203230343733.roa
Signing time:             Wed 21 Feb 2024 15:56:41 +0000
ROA not before:           Wed 21 Feb 2024 15:51:41 +0000
ROA not after:            Wed 19 Feb 2025 15:56:41 +0000
asID:                     20473
IP address blocks:        176.103.218.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8cea2ac6018dcc61b42651d6/0/1E927097F961CD62C6842211206791585688EA6B.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8cea2ac6018dcc61b42651d6/0/1E927097F961CD62C6842211206791585688EA6B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4016a9a5-6e7c-4633-a4c3-24ad1b7f0785/d585ddc72480f69736d0dbfb4fb7bbbbea3025977ba96c315b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4016a9a5-6e7c-4633-a4c3-24ad1b7f0785/4016a9a5-6e7c-4633-a4c3-24ad1b7f0785.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4016a9a5-6e7c-4633-a4c3-24ad1b7f0785/4016a9a5-6e7c-4633-a4c3-24ad1b7f0785.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4016a9a5-6e7c-4633-a4c3-24ad1b7f0785.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 04:13:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:a5:d0:69:5b:18:bd:44:51:57:39:c2:7b:be:8c:c2:e4:7d:b7:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d585ddc72480f69736d0dbfb4fb7bbbbea3025977ba96c315b
        Validity
            Not Before: Feb 21 15:51:41 2024 GMT
            Not After : Feb 19 15:56:41 2025 GMT
        Subject: CN=BF61713544F032933C7A0B284BDF761E68B99D61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:34:14:6a:ae:2b:68:fa:8b:b4:12:66:e3:7f:
                    ca:b6:b3:b9:68:fc:45:1a:b7:ef:4c:5a:c0:4f:08:
                    ff:2b:78:8e:8b:88:22:05:61:fe:5e:69:6e:53:e2:
                    da:7f:5c:48:30:66:e5:2b:f5:7e:96:c3:ee:32:41:
                    00:45:54:ca:5c:38:b7:f9:43:14:93:c1:40:f8:c4:
                    0b:e8:3a:39:a0:d6:1b:2c:5a:3a:80:6f:47:89:c8:
                    61:ae:79:d7:ce:fc:a8:2e:36:dd:bb:f7:7f:51:1b:
                    a9:16:da:0e:1b:d0:1b:be:76:68:32:06:df:9d:e7:
                    46:e4:39:ec:44:06:d1:98:9c:97:16:1f:b5:41:94:
                    31:1b:a2:1c:ca:30:ea:68:e6:16:81:15:03:de:2b:
                    5d:34:7c:3e:6a:46:b7:2e:b8:27:1e:60:5b:f6:1c:
                    2a:ec:44:d6:12:f0:2f:0e:f1:26:8f:a0:63:b4:83:
                    50:4f:70:86:80:f2:01:57:3b:d0:6f:9e:27:3e:84:
                    29:1c:27:0f:f7:d7:28:28:d7:68:c5:bb:7b:58:d2:
                    70:ef:ac:bc:ed:3e:2d:b1:dd:2d:0f:b7:19:0f:8b:
                    64:83:76:e0:ac:ce:bb:47:5f:df:5a:72:68:96:46:
                    bc:09:2d:8b:b7:3c:2a:0e:2e:3c:ed:94:bd:08:f3:
                    be:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:61:71:35:44:F0:32:93:3C:7A:0B:28:4B:DF:76:1E:68:B9:9D:61
            X509v3 Authority Key Identifier:
                keyid:1E:92:70:97:F9:61:CD:62:C6:84:22:11:20:67:91:58:56:88:EA:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8cea2ac6018dcc61b42651d6/0/1E927097F961CD62C6842211206791585688EA6B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4016a9a5-6e7c-4633-a4c3-24ad1b7f0785/d585ddc72480f69736d0dbfb4fb7bbbbea3025977ba96c315b.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8cea2ac6018dcc61b42651d6/0/3137362e3130332e3231382e302f32342d3234203d3e203230343733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  176.103.218.0/24

    Signature Algorithm: sha256WithRSAEncryption
         46:42:8e:eb:4e:a3:87:59:64:e5:88:53:7d:2b:f3:60:68:c6:
         2f:5e:97:dc:ee:18:bd:2f:a1:7e:22:3c:44:0b:d2:04:c5:90:
         42:53:fe:e7:6a:5c:63:94:b1:32:aa:97:9a:63:bd:94:42:36:
         4b:5f:ea:e4:84:23:3f:ca:34:ca:89:1e:de:dc:c2:4b:31:79:
         7a:57:e1:0f:51:40:9d:23:fd:e2:ea:01:d5:bf:3e:f2:fe:da:
         58:14:ac:54:ed:c0:f5:f1:f8:a9:bc:64:d2:6d:32:8b:c3:44:
         8b:e5:4c:65:cc:2f:5b:d6:01:01:e8:8b:58:0c:26:a3:3a:ff:
         34:61:d4:74:8f:c6:e9:c1:86:4a:58:3b:ea:3f:dc:e2:06:0f:
         70:ba:ba:e7:18:4d:42:1b:0a:c1:a7:4a:d4:24:1b:74:73:b2:
         93:1c:aa:bc:a2:fe:61:c1:8c:ff:86:96:2a:ee:f9:cb:05:fa:
         7c:a3:59:b9:67:89:bd:f7:e3:52:be:4c:23:04:73:15:87:8a:
         16:07:7c:f3:bc:25:bb:7d:34:45:36:67:89:f1:79:10:0e:b4:
         5a:18:b9:e7:f4:f9:46:92:53:e5:78:f7:a0:77:ef:f7:30:d5:
         e6:94:f5:9e:8d:2f:d4:a6:83:0e:9a:11:1f:ac:9f:2f:10:fe:
         a1:46:b1:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 01:47:29 2024 by rpki-client on console-fra.rpki-client.org