Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf7f518c5d017f949e0c8c42f5/0/32332e3137352e3139322e302f32342d3234203d3e203534343736.roa
File:                     32332e3137352e3139322e302f32342d3234203d3e203534343736.roa (raw, json)
Hash identifier:          BrbAedIk1fZV0w7AqkYJ/Ox2K57SkqNqQYpYoEFvvUw=
Subject key identifier:   C4:53:6D:8B:06:7A:B7:D9:9C:9E:74:A0:0C:72:D1:9C:B0:3B:9F:FF
Certificate issuer:       /CN=63ef6ba7c75b0732465686b4f94bffe5c8f62e466a4f048b0a
Certificate serial:       04D527DCBC8AFB8B0118C8055059ED2747F3BE3F
Authority key identifier: E5:2C:37:7F:6C:65:01:F9:CA:9E:EB:01:8F:66:22:B1:DC:E9:86:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7e20303-2390-47a7-b89c-842367be4584/63ef6ba7c75b0732465686b4f94bffe5c8f62e466a4f048b0a.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf7f518c5d017f949e0c8c42f5/0/32332e3137352e3139322e302f32342d3234203d3e203534343736.roa
Signing time:             Wed 17 Jan 2024 22:27:59 +0000
ROA not before:           Wed 17 Jan 2024 22:22:59 +0000
ROA not after:            Wed 15 Jan 2025 22:27:59 +0000
asID:                     54476
IP address blocks:        23.175.192.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf7f518c5d017f949e0c8c42f5/0/E52C377F6C6501F9CA9EEB018F6622B1DCE98600.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf7f518c5d017f949e0c8c42f5/0/E52C377F6C6501F9CA9EEB018F6622B1DCE98600.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7e20303-2390-47a7-b89c-842367be4584/63ef6ba7c75b0732465686b4f94bffe5c8f62e466a4f048b0a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7e20303-2390-47a7-b89c-842367be4584/d7e20303-2390-47a7-b89c-842367be4584.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7e20303-2390-47a7-b89c-842367be4584/d7e20303-2390-47a7-b89c-842367be4584.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7e20303-2390-47a7-b89c-842367be4584.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 26 Jun 2024 18:20:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:d5:27:dc:bc:8a:fb:8b:01:18:c8:05:50:59:ed:27:47:f3:be:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63ef6ba7c75b0732465686b4f94bffe5c8f62e466a4f048b0a
        Validity
            Not Before: Jan 17 22:22:59 2024 GMT
            Not After : Jan 15 22:27:59 2025 GMT
        Subject: CN=C4536D8B067AB7D99C9E74A00C72D19CB03B9FFF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:8e:61:f1:90:ff:65:a5:e9:fd:7e:41:cf:b4:
                    4d:e1:1e:ae:00:28:a3:f2:ff:2f:31:99:cf:c3:56:
                    84:d5:6a:5b:f9:8d:9b:8f:1b:fd:0f:be:bc:90:13:
                    34:e5:1c:ab:4e:0d:a9:aa:90:1b:b9:ac:d0:20:81:
                    be:3f:24:bd:23:f8:77:a2:c2:4d:5c:b4:3a:da:ec:
                    fc:8e:5c:8f:e6:82:0c:84:8a:db:d7:5b:74:0f:f4:
                    9e:a6:eb:7a:ba:a0:5f:16:cd:e9:84:76:95:4b:41:
                    1b:22:5c:8f:99:c4:47:a7:8d:4c:e5:d0:15:6a:ac:
                    11:06:51:8b:68:59:05:41:cc:16:ca:69:5b:09:c9:
                    f4:ad:cc:76:a4:58:4b:bb:44:0c:04:63:f0:d6:e1:
                    08:6e:76:9e:1e:27:32:21:7d:a5:71:63:c7:39:9a:
                    9c:10:8a:ce:c0:d5:83:63:41:da:6d:a9:26:fd:04:
                    75:22:85:42:89:e9:ae:b3:72:9b:ea:93:32:cc:d0:
                    e1:46:a9:0d:c0:70:df:1e:02:dc:dd:20:27:de:39:
                    cd:8f:2b:e3:93:59:4b:54:a3:ba:bd:dd:4a:aa:8e:
                    b0:67:d3:fa:f5:6b:ea:f6:dc:ad:93:7a:0a:7f:ec:
                    95:df:42:86:8b:07:87:a2:78:39:4d:eb:0c:07:17:
                    e8:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:53:6D:8B:06:7A:B7:D9:9C:9E:74:A0:0C:72:D1:9C:B0:3B:9F:FF
            X509v3 Authority Key Identifier:
                keyid:E5:2C:37:7F:6C:65:01:F9:CA:9E:EB:01:8F:66:22:B1:DC:E9:86:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf7f518c5d017f949e0c8c42f5/0/E52C377F6C6501F9CA9EEB018F6622B1DCE98600.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7e20303-2390-47a7-b89c-842367be4584/63ef6ba7c75b0732465686b4f94bffe5c8f62e466a4f048b0a.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf7f518c5d017f949e0c8c42f5/0/32332e3137352e3139322e302f32342d3234203d3e203534343736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.175.192.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1f:73:15:41:71:79:8b:25:3b:4c:9b:0d:90:dd:04:52:37:b8:
         4e:74:7e:95:55:27:2c:14:66:08:6a:f2:f2:56:f7:a3:9d:37:
         33:68:5a:b2:b5:aa:66:5a:23:91:e4:bc:c5:f4:d6:d8:cc:77:
         ce:c3:3a:b0:6b:9d:70:00:1a:7d:db:f1:19:db:a8:b6:8c:3c:
         4d:76:b8:b3:9c:21:c3:fd:3e:a9:c1:98:96:91:55:bd:d2:7b:
         e3:db:1a:c9:a0:5c:e6:bb:5e:26:f2:63:4c:f0:9b:7c:b6:02:
         b0:30:2d:25:dd:ba:dd:ab:a6:5e:c5:ca:34:9b:9b:02:77:5e:
         5a:b2:b6:1f:0b:68:82:93:af:60:f7:4c:39:5d:3d:aa:b3:6a:
         6e:c8:44:18:bc:72:b1:d9:9d:dc:99:9b:3f:33:67:17:15:50:
         f0:68:c7:8c:e5:0f:72:3a:fc:6a:86:51:0a:c0:df:b1:94:5e:
         07:49:07:a8:47:cf:c2:22:46:7e:32:fa:10:2a:47:29:a9:50:
         da:83:54:f5:ad:1c:82:d1:1b:02:21:84:17:73:64:b1:e1:cf:
         10:2e:4c:58:3d:08:76:3d:af:11:61:95:57:8f:5a:05:cc:15:
         d4:f3:18:a9:b0:a0:c1:48:2a:63:64:bf:8b:e8:62:ef:d7:b3:
         f5:45:3b:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 25 22:06:42 2024 by rpki-client on console-ams.rpki-client.org