Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade89e025a7018ab3cccd0c1000/0/32332e3136322e3130342e302f32342d3234203d3e203537313536.roa
File:                     32332e3136322e3130342e302f32342d3234203d3e203537313536.roa (raw, json)
Hash identifier:          5Hlv2O1RhVUXC8UUyuc6vzJIQprXDtp8fPbFCVMtzgY=
Subject key identifier:   20:9B:36:3C:AF:98:28:AB:25:F4:BE:12:14:72:7E:C5:7E:2D:FA:15
Certificate issuer:       /CN=16904f79ba12ab12b4af08f2c5b88707f856d2ef6313be52b7
Certificate serial:       06CCE27777F4F8C7DC7FBE18886025AAC6E7C1F0
Authority key identifier: EC:95:74:5C:25:59:94:3A:CE:43:95:74:C9:86:86:65:E1:68:8B:08
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8ac1752e-3020-499d-a952-d54bdfadf765/16904f79ba12ab12b4af08f2c5b88707f856d2ef6313be52b7.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade89e025a7018ab3cccd0c1000/0/32332e3136322e3130342e302f32342d3234203d3e203537313536.roa
Signing time:             Sat 11 Nov 2023 22:21:34 +0000
ROA not before:           Sat 11 Nov 2023 22:16:34 +0000
ROA not after:            Sat 09 Nov 2024 22:21:34 +0000
asID:                     57156
IP address blocks:        23.162.104.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade89e025a7018ab3cccd0c1000/0/EC95745C2559943ACE439574C9868665E1688B08.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade89e025a7018ab3cccd0c1000/0/EC95745C2559943ACE439574C9868665E1688B08.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8ac1752e-3020-499d-a952-d54bdfadf765/16904f79ba12ab12b4af08f2c5b88707f856d2ef6313be52b7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8ac1752e-3020-499d-a952-d54bdfadf765/8ac1752e-3020-499d-a952-d54bdfadf765.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8ac1752e-3020-499d-a952-d54bdfadf765/8ac1752e-3020-499d-a952-d54bdfadf765.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8ac1752e-3020-499d-a952-d54bdfadf765.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 27 Jun 2024 10:48:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:cc:e2:77:77:f4:f8:c7:dc:7f:be:18:88:60:25:aa:c6:e7:c1:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16904f79ba12ab12b4af08f2c5b88707f856d2ef6313be52b7
        Validity
            Not Before: Nov 11 22:16:34 2023 GMT
            Not After : Nov  9 22:21:34 2024 GMT
        Subject: CN=209B363CAF9828AB25F4BE1214727EC57E2DFA15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:85:f1:aa:61:c8:a6:45:26:75:92:c3:a4:f6:
                    64:9a:d8:ce:97:2d:ac:0d:99:04:91:a4:ff:6f:ba:
                    e4:07:52:dc:2e:bf:4a:85:37:67:5f:3b:4e:d3:c5:
                    64:7f:88:68:15:a8:b0:c6:63:fc:e4:e1:03:8a:4e:
                    12:e0:85:e7:e1:c3:95:84:90:98:d2:98:77:6d:25:
                    8e:c5:b4:57:fa:c2:29:0b:7b:e8:87:36:5b:42:47:
                    b6:1e:db:b8:19:40:de:d8:d5:8a:d0:47:aa:46:1e:
                    f9:04:a5:40:35:68:6d:be:ff:72:ed:7a:01:b7:91:
                    86:a2:d9:a0:9a:d2:e9:ca:13:d9:f1:df:4c:87:18:
                    e8:0a:74:2d:b4:8c:e1:95:c0:a0:f6:2e:9f:c7:a5:
                    61:c8:67:5e:d7:3f:89:2c:3c:d2:24:71:27:39:e0:
                    a9:7e:bc:4d:e8:77:bb:5b:15:21:a4:21:1b:8b:01:
                    6e:5e:0c:14:b7:40:82:bd:5f:17:3c:21:12:d0:e6:
                    70:84:04:48:5a:45:bd:12:92:8c:3b:92:24:a3:fc:
                    98:b0:44:aa:13:9c:c9:44:85:5d:ce:95:17:79:d3:
                    9a:42:7f:24:0d:0d:4e:00:10:b3:28:4d:98:84:d5:
                    be:4f:ee:9c:92:63:f6:47:54:8c:21:44:46:2d:6d:
                    ae:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:9B:36:3C:AF:98:28:AB:25:F4:BE:12:14:72:7E:C5:7E:2D:FA:15
            X509v3 Authority Key Identifier:
                keyid:EC:95:74:5C:25:59:94:3A:CE:43:95:74:C9:86:86:65:E1:68:8B:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade89e025a7018ab3cccd0c1000/0/EC95745C2559943ACE439574C9868665E1688B08.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8ac1752e-3020-499d-a952-d54bdfadf765/16904f79ba12ab12b4af08f2c5b88707f856d2ef6313be52b7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade89e025a7018ab3cccd0c1000/0/32332e3136322e3130342e302f32342d3234203d3e203537313536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.162.104.0/24

    Signature Algorithm: sha256WithRSAEncryption
         41:42:57:72:08:fb:e1:0c:f1:91:8d:cf:44:39:79:28:98:ac:
         d5:39:51:40:82:ef:43:21:60:26:35:bb:37:eb:6b:60:6a:b0:
         84:1a:a9:81:74:17:7b:26:57:cc:02:e2:08:d6:07:0f:23:54:
         08:ff:b6:d4:55:aa:50:80:71:b3:f3:0a:b5:94:0e:4a:19:4c:
         a0:fd:18:88:08:c6:51:b1:38:82:23:ba:d5:ba:48:ba:1a:6c:
         f8:8f:a3:6b:88:f0:f8:dc:36:14:4b:bf:0b:63:6e:b8:e2:13:
         df:41:72:3d:59:20:ab:90:37:4b:d8:60:6f:e1:70:1d:cc:d5:
         ac:44:dc:38:d2:31:5f:c6:a0:ed:41:d9:d9:b5:77:ba:06:3f:
         73:c3:f4:07:11:70:f4:29:05:f0:7a:b5:0f:97:57:c7:4b:6b:
         59:75:0e:7d:6e:3f:cc:a7:3e:38:48:e7:e3:d2:48:bf:48:c0:
         1e:4c:49:d1:41:9d:f1:40:99:0e:16:9b:a3:dc:73:71:92:b0:
         39:e5:46:01:9b:e6:de:84:e4:b6:28:ee:da:ac:16:75:91:50:
         1e:67:f7:f4:c8:bc:5e:fb:ea:7b:dd:a9:66:60:e9:40:ae:06:
         29:60:05:d3:14:79:68:b5:40:63:cd:5c:a6:62:da:83:3b:43:
         39:de:f8:af
-----BEGIN CERTIFICATE-----
MIIFsjCCBJqgAwIBAgIUBszid3f0+Mfcf74YiGAlqsbnwfAwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMTY5MDRmNzliYTEyYWIxMmI0YWYwOGYyYzViODg3MDdm
ODU2ZDJlZjYzMTNiZTUyYjcwHhcNMjMxMTExMjIxNjM0WhcNMjQxMTA5MjIyMTM0
WjAzMTEwLwYDVQQDEygyMDlCMzYzQ0FGOTgyOEFCMjVGNEJFMTIxNDcyN0VDNTdF
MkRGQTE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr4XxqmHIpkUm
dZLDpPZkmtjOly2sDZkEkaT/b7rkB1LcLr9KhTdnXztO08Vkf4hoFaiwxmP85OED
ik4S4IXn4cOVhJCY0ph3bSWOxbRX+sIpC3vohzZbQke2Htu4GUDe2NWK0EeqRh75
BKVANWhtvv9y7XoBt5GGotmgmtLpyhPZ8d9MhxjoCnQttIzhlcCg9i6fx6VhyGde
1z+JLDzSJHEnOeCpfrxN6He7WxUhpCEbiwFuXgwUt0CCvV8XPCES0OZwhARIWkW9
EpKMO5Iko/yYsESqE5zJRIVdzpUXedOaQn8kDQ1OABCzKE2YhNW+T+6ckmP2R1SM
IURGLW2uRwIDAQABo4ICsjCCAq4wHQYDVR0OBBYEFCCbNjyvmCirJfS+EhRyfsV+
LfoVMB8GA1UdIwQYMBaAFOyVdFwlWZQ6zkOVdMmGhmXhaIsIMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODllMDI1YTcwMThhYjNjY2NkMGMxMDAwLzAv
RUM5NTc0NUMyNTU5OTQzQUNFNDM5NTc0Qzk4Njg2NjVFMTY4OEIwOC5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi
MGI4NDE1LzhhYzE3NTJlLTMwMjAtNDk5ZC1hOTUyLWQ1NGJkZmFkZjc2NS8xNjkw
NGY3OWJhMTJhYjEyYjRhZjA4ZjJjNWI4ODcwN2Y4NTZkMmVmNjMxM2JlNTJiNy5j
ZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZTg5ZTAyNWE3MDE4YWIz
Y2NjZDBjMTAwMC8wLzMyMzMyZTMxMzYzMjJlMzEzMDM0MmUzMDJmMzIzNDJkMzIz
NDIwM2QzZTIwMzUzNzMxMzUzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO
AjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEABeiaDANBgkqhkiG9w0BAQsF
AAOCAQEAQUJXcgj74QzxkY3PRDl5KJis1TlRQILvQyFgJjW7N+trYGqwhBqpgXQX
eyZXzALiCNYHDyNUCP+21FWqUIBxs/MKtZQOShlMoP0YiAjGUbE4giO61bpIuhps
+I+ja4jw+Nw2FEu/C2NuuOIT30FyPVkgq5A3S9hgb+FwHczVrETcONIxX8ag7UHZ
2bV3ugY/c8P0BxFw9CkF8Hq1D5dXx0trWXUOfW4/zKc+OEjn49JIv0jAHkxJ0UGd
8UCZDhabo9xzcZKwOeVGAZvm3oTktiju2qwWdZFQHmf39Mi8Xvvqe92pZmDpQK4G
KWAF0xR5aLVAY81cpmLagztDOd74rw==
-----END CERTIFICATE-----
Generated at Wed Jun 26 11:43:12 2024 by rpki-client on console-ams.rpki-client.org