Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8cea2ac6018dcc61b42651d6/0/3231362e3231312e3230382e302f32322d3234203d3e203230343733.roa
File:                     3231362e3231312e3230382e302f32322d3234203d3e203230343733.roa (raw, json)
Hash identifier:          4s+rMNZ4z5f2m4YRHzC1H22OnT9YGQhQ2HAGmdD+pMQ=
Subject key identifier:   97:56:8B:C3:8D:BB:02:14:53:48:28:87:FB:7D:88:6D:C2:04:D9:D1
Certificate issuer:       /CN=d585ddc72480f69736d0dbfb4fb7bbbbea3025977ba96c315b
Certificate serial:       612A0799B727A9681899CC8BBB3196CEEF9BBC25
Authority key identifier: 1E:92:70:97:F9:61:CD:62:C6:84:22:11:20:67:91:58:56:88:EA:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4016a9a5-6e7c-4633-a4c3-24ad1b7f0785/d585ddc72480f69736d0dbfb4fb7bbbbea3025977ba96c315b.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8cea2ac6018dcc61b42651d6/0/3231362e3231312e3230382e302f32322d3234203d3e203230343733.roa
Signing time:             Wed 21 Feb 2024 15:57:07 +0000
ROA not before:           Wed 21 Feb 2024 15:52:07 +0000
ROA not after:            Wed 19 Feb 2025 15:57:07 +0000
asID:                     20473
IP address blocks:        216.211.208.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8cea2ac6018dcc61b42651d6/0/1E927097F961CD62C6842211206791585688EA6B.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8cea2ac6018dcc61b42651d6/0/1E927097F961CD62C6842211206791585688EA6B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4016a9a5-6e7c-4633-a4c3-24ad1b7f0785/d585ddc72480f69736d0dbfb4fb7bbbbea3025977ba96c315b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4016a9a5-6e7c-4633-a4c3-24ad1b7f0785/4016a9a5-6e7c-4633-a4c3-24ad1b7f0785.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4016a9a5-6e7c-4633-a4c3-24ad1b7f0785/4016a9a5-6e7c-4633-a4c3-24ad1b7f0785.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4016a9a5-6e7c-4633-a4c3-24ad1b7f0785.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 04:13:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:2a:07:99:b7:27:a9:68:18:99:cc:8b:bb:31:96:ce:ef:9b:bc:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d585ddc72480f69736d0dbfb4fb7bbbbea3025977ba96c315b
        Validity
            Not Before: Feb 21 15:52:07 2024 GMT
            Not After : Feb 19 15:57:07 2025 GMT
        Subject: CN=97568BC38DBB021453482887FB7D886DC204D9D1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:d4:fc:e9:34:10:00:19:32:4d:f3:f6:44:ae:
                    d2:70:c7:b4:b1:74:95:1f:3e:28:0a:7a:ff:18:cf:
                    91:5d:0a:fa:a0:f4:f8:f0:9b:60:04:3b:94:02:f1:
                    a6:8e:99:aa:19:d2:4d:6d:0a:3b:62:47:39:d4:34:
                    4d:eb:40:cd:77:4f:cb:10:ed:df:34:09:a3:d4:de:
                    e9:b0:c2:2b:53:dc:c6:3a:02:f1:4d:b4:99:d1:58:
                    b4:39:d7:44:d6:d9:4c:92:84:c0:b5:81:ec:e3:58:
                    92:d0:52:48:02:7a:d1:ac:ef:df:68:7a:56:b4:7b:
                    4c:97:1a:3f:8b:96:fc:18:7d:50:c2:be:a1:8a:18:
                    9b:c6:03:de:90:39:a3:75:45:06:da:1d:92:b5:13:
                    89:ed:9d:39:9e:d3:2f:95:9e:49:b9:be:da:88:5c:
                    9e:9e:f2:80:99:f5:f5:84:fa:38:4b:77:73:74:0c:
                    52:6f:e4:2a:16:f7:e2:2e:c4:ba:11:9d:a3:20:81:
                    58:38:1f:94:10:b5:c5:8c:3f:f9:cd:4f:ac:81:d8:
                    25:99:9b:aa:38:09:4c:9d:4c:23:f5:ca:55:50:df:
                    91:d1:bb:b1:4a:b0:51:c0:47:6f:89:f9:02:43:55:
                    68:00:50:d7:d5:06:42:e6:1c:8f:7b:72:2e:d3:45:
                    2b:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:56:8B:C3:8D:BB:02:14:53:48:28:87:FB:7D:88:6D:C2:04:D9:D1
            X509v3 Authority Key Identifier:
                keyid:1E:92:70:97:F9:61:CD:62:C6:84:22:11:20:67:91:58:56:88:EA:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8cea2ac6018dcc61b42651d6/0/1E927097F961CD62C6842211206791585688EA6B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4016a9a5-6e7c-4633-a4c3-24ad1b7f0785/d585ddc72480f69736d0dbfb4fb7bbbbea3025977ba96c315b.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8cea2ac6018dcc61b42651d6/0/3231362e3231312e3230382e302f32322d3234203d3e203230343733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.211.208.0/22

    Signature Algorithm: sha256WithRSAEncryption
         04:fe:14:ef:d8:3e:de:ea:83:a0:9e:aa:8c:e9:24:d0:93:93:
         0a:d1:c8:b7:be:be:19:a3:0c:15:52:c6:4e:a1:22:c9:a6:b7:
         9d:5d:48:96:ed:12:19:3c:81:b2:48:f8:1d:ad:33:f8:e8:a3:
         7e:4b:38:50:9c:e3:82:a6:1f:bd:06:8c:69:58:d1:9b:6b:3e:
         99:93:e5:59:e6:9d:b4:51:10:28:8f:1c:7f:e3:5a:33:ed:27:
         4f:8a:81:48:39:b6:e8:7c:05:68:71:2c:4a:e7:9d:85:f3:61:
         da:e5:0f:e1:1a:36:bb:3d:44:7d:7f:21:8d:fc:8b:5a:db:57:
         d1:9e:b4:50:0f:67:30:9f:a8:5a:34:b7:a9:4c:bc:14:5b:6c:
         74:ae:20:cf:26:52:37:b4:68:20:d0:04:46:75:4a:13:49:c1:
         7f:fe:85:3e:5f:e0:00:1b:7c:c5:42:1d:80:7e:6b:18:ef:96:
         0d:dd:6e:1c:d6:bf:ab:da:a9:5f:c2:18:93:68:73:69:0c:50:
         7c:99:5d:5d:ac:93:7b:68:5d:35:7c:a4:8e:5c:56:b7:46:ae:
         18:85:03:ae:aa:8f:c9:3a:dd:35:e6:fe:f9:bf:b3:dd:3b:05:
         d4:d0:49:e9:49:5c:47:ad:d4:bb:e3:4b:4d:94:2f:5a:f7:47:
         b5:e3:69:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 01:46:27 2024 by rpki-client on console-ams.rpki-client.org