Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/32332e38382e3232342e302f31392d3234203d3e203239383032.roa
File:                     32332e38382e3232342e302f31392d3234203d3e203239383032.roa (raw, json)
Hash identifier:          4mVpxZKXG0TmbpbZWu34XzaRkvu+cxB43x5ia24lNMo=
Subject key identifier:   5A:71:DF:BD:13:5B:19:C7:E1:62:93:B1:F0:3A:14:63:E3:46:28:76
Certificate issuer:       /CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4
Certificate serial:       65ECEDF016381E563912824EEA6990DA629C749C
Authority key identifier: 62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/32332e38382e3232342e302f31392d3234203d3e203239383032.roa
Signing time:             Mon 05 Feb 2024 13:01:13 +0000
ROA not before:           Mon 05 Feb 2024 12:56:13 +0000
ROA not after:            Mon 03 Feb 2025 13:01:13 +0000
asID:                     29802
IP address blocks:        23.88.224.0/19 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/e203869d-6b95-465f-b4dc-088a5a2103fc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/e203869d-6b95-465f-b4dc-088a5a2103fc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 30 Apr 2024 18:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:ec:ed:f0:16:38:1e:56:39:12:82:4e:ea:69:90:da:62:9c:74:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4
        Validity
            Not Before: Feb  5 12:56:13 2024 GMT
            Not After : Feb  3 13:01:13 2025 GMT
        Subject: CN=5A71DFBD135B19C7E16293B1F03A1463E3462876
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:91:bf:c6:e2:bf:70:d3:74:66:7a:d4:0a:1c:
                    2a:ed:df:a7:0d:9a:cc:30:ff:7e:28:86:19:17:46:
                    07:c4:ab:35:59:8b:d2:05:0c:92:12:c6:eb:be:61:
                    37:51:00:07:a2:a7:5b:c7:e6:30:c2:04:d1:e3:56:
                    a1:14:b0:fd:14:19:c5:56:84:3b:57:bc:f4:fc:0d:
                    af:58:7c:74:32:5c:2e:a5:6d:77:1b:16:f5:7c:a9:
                    3c:a5:5d:64:4a:a6:8a:87:69:4e:ee:e3:d8:bb:b9:
                    97:02:cb:15:6f:d6:fe:a2:0e:bf:9c:be:2f:9a:f2:
                    26:e8:5f:25:ca:6b:04:ab:1c:46:90:d5:c4:16:08:
                    c9:40:82:7e:b9:ba:be:3e:aa:49:4f:78:9e:22:54:
                    4c:8e:19:e7:76:89:b7:66:22:aa:d5:c3:c6:13:ba:
                    4c:33:62:b0:c2:e3:c7:d9:cc:11:e9:a4:47:ec:e6:
                    9d:7a:fb:a5:9c:6e:6a:4f:15:ba:c0:a5:4c:60:cc:
                    d4:62:24:d0:ef:af:76:95:5c:69:4e:27:7d:79:7c:
                    de:eb:5c:d5:51:7a:a1:6a:4a:5a:09:da:b8:7d:0d:
                    cf:5b:2e:8a:62:a4:62:6e:de:de:5c:b0:05:44:e6:
                    9c:18:db:2a:ff:98:cd:42:76:4a:49:be:0a:f2:b2:
                    84:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:71:DF:BD:13:5B:19:C7:E1:62:93:B1:F0:3A:14:63:E3:46:28:76
            X509v3 Authority Key Identifier:
                keyid:62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/32332e38382e3232342e302f31392d3234203d3e203239383032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.88.224.0/19

    Signature Algorithm: sha256WithRSAEncryption
         7a:1b:ea:77:cc:a2:32:51:cf:63:1d:eb:3a:21:71:55:e7:88:
         85:36:40:4a:5d:ca:65:92:3b:7e:31:85:88:fc:ce:2a:36:82:
         48:45:2a:85:dd:3c:c7:2a:57:15:3c:56:90:32:7c:3f:12:ff:
         7e:05:b4:f5:90:b7:b5:ea:c6:35:7b:c0:4e:f7:43:de:45:4c:
         95:20:c9:7f:26:f1:c3:b2:d9:43:0c:c0:61:47:8f:bd:62:c1:
         98:af:0b:b4:e8:53:6a:93:57:d5:42:29:b1:10:10:85:24:cf:
         a9:cf:be:a7:11:51:9e:5a:f7:6c:e6:50:e3:56:4e:ac:71:98:
         1d:53:85:6c:be:cb:0c:93:a0:8b:77:75:89:30:ed:74:20:84:
         f6:af:0e:a7:97:fc:6a:b0:30:7d:04:dd:e5:19:bc:06:a1:36:
         9a:8c:cc:8a:b4:5f:44:5c:ff:51:9a:f2:09:8d:c1:e5:f9:1f:
         2d:8f:59:b0:f4:f7:49:92:0a:15:fa:53:ce:5d:42:7e:3f:ca:
         46:94:d9:a0:7d:62:ab:fd:4a:04:33:17:25:c0:e2:86:28:40:
         ee:89:4c:ad:de:3d:87:be:ca:ea:21:ff:be:ee:b6:41:d7:8a:
         29:e1:bd:34:bb:ff:93:e4:42:e0:17:27:dd:f7:16:e7:d3:95:
         d2:16:27:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 29 17:47:28 2024 by rpki-client on console-fra.rpki-client.org