Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf82d5e52101850b65b10b358b/0/32332e3134342e3136382e302f32342d3234203d3e203139353231.roa
File:                     32332e3134342e3136382e302f32342d3234203d3e203139353231.roa (raw, json)
Hash identifier:          WR+to3DEP98139OiryEjttDbFE9DhRsAmUWMq9wR7kU=
Subject key identifier:   3B:AF:DB:35:33:69:46:11:BF:89:FA:FD:DB:31:04:82:D6:42:CF:3C
Certificate issuer:       /CN=ed199e1daa148cc0522eb727a4aa5cc87d3d0149c7f073452f
Certificate serial:       6B496028F1395045E0DCD75CE8791DDA186E6C0C
Authority key identifier: E2:71:AE:55:26:8B:88:C1:E9:72:A7:EE:85:B1:45:9D:8D:D2:10:2C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c6babe0-c981-4c51-971c-b56bd0722eb1/ed199e1daa148cc0522eb727a4aa5cc87d3d0149c7f073452f.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf82d5e52101850b65b10b358b/0/32332e3134342e3136382e302f32342d3234203d3e203139353231.roa
Signing time:             Fri 28 Mar 2025 00:17:17 +0000
ROA not before:           Fri 28 Mar 2025 00:12:17 +0000
ROA not after:            Fri 27 Mar 2026 00:17:17 +0000
asID:                     19521
IP address blocks:        23.144.168.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf82d5e52101850b65b10b358b/0/E271AE55268B88C1E972A7EE85B1459D8DD2102C.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf82d5e52101850b65b10b358b/0/E271AE55268B88C1E972A7EE85B1459D8DD2102C.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c6babe0-c981-4c51-971c-b56bd0722eb1/ed199e1daa148cc0522eb727a4aa5cc87d3d0149c7f073452f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c6babe0-c981-4c51-971c-b56bd0722eb1/5c6babe0-c981-4c51-971c-b56bd0722eb1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c6babe0-c981-4c51-971c-b56bd0722eb1/5c6babe0-c981-4c51-971c-b56bd0722eb1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c6babe0-c981-4c51-971c-b56bd0722eb1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 21:01:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:49:60:28:f1:39:50:45:e0:dc:d7:5c:e8:79:1d:da:18:6e:6c:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed199e1daa148cc0522eb727a4aa5cc87d3d0149c7f073452f
        Validity
            Not Before: Mar 28 00:12:17 2025 GMT
            Not After : Mar 27 00:17:17 2026 GMT
        Subject: CN=3BAFDB3533694611BF89FAFDDB310482D642CF3C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:d8:4b:a8:6f:68:2f:a9:f9:4c:d7:4b:98:21:
                    9e:dc:8b:1f:f1:46:18:1f:c8:cd:d1:9e:48:9a:c1:
                    90:bd:b7:28:88:1a:d8:c9:c0:92:30:92:29:6b:4c:
                    b0:b4:12:24:8a:e9:bb:57:7e:fa:7f:10:1f:20:ca:
                    45:8b:75:12:2c:da:ae:1a:e5:bb:26:8c:44:e4:6a:
                    76:ed:74:c6:cd:61:fe:9c:94:5f:7a:d5:fe:d9:6d:
                    a4:c4:33:a4:94:fb:65:52:7d:7a:b9:b0:25:0d:46:
                    99:25:5a:96:15:c4:7d:37:82:cc:67:1e:c2:51:7e:
                    ab:e3:6b:1a:5a:ff:30:76:7a:b7:49:fe:3d:ba:55:
                    0a:96:f9:75:c5:ea:92:44:52:1d:d4:7f:65:99:a5:
                    9e:3a:37:35:5a:de:dd:31:4d:bd:d7:93:a3:15:37:
                    c6:77:99:c6:7c:de:7c:7a:75:ed:3f:5d:95:77:f3:
                    9f:33:d7:97:61:b9:9c:d8:c1:10:03:dc:8f:c7:1f:
                    b5:53:3e:ef:67:54:0c:12:3d:a6:b1:24:6f:99:45:
                    19:de:02:f3:86:95:c2:97:d3:69:f7:ff:21:8d:ec:
                    9f:4c:23:84:b8:aa:bd:f5:bf:2b:8a:bc:20:80:14:
                    f2:bc:d4:0e:36:ec:32:d1:64:c4:36:30:37:d5:95:
                    a0:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:AF:DB:35:33:69:46:11:BF:89:FA:FD:DB:31:04:82:D6:42:CF:3C
            X509v3 Authority Key Identifier:
                keyid:E2:71:AE:55:26:8B:88:C1:E9:72:A7:EE:85:B1:45:9D:8D:D2:10:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf82d5e52101850b65b10b358b/0/E271AE55268B88C1E972A7EE85B1459D8DD2102C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c6babe0-c981-4c51-971c-b56bd0722eb1/ed199e1daa148cc0522eb727a4aa5cc87d3d0149c7f073452f.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf82d5e52101850b65b10b358b/0/32332e3134342e3136382e302f32342d3234203d3e203139353231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.144.168.0/24

    Signature Algorithm: sha256WithRSAEncryption
         37:46:fb:ee:f7:ab:58:79:c3:a2:25:97:ec:68:0f:dd:10:67:
         af:0f:bc:50:2a:c7:ac:02:55:6d:3c:40:b2:34:81:4b:1b:c1:
         6d:8a:42:9c:79:c1:f7:71:49:13:8d:f8:a6:bb:17:49:82:d0:
         73:ac:93:22:2d:68:ef:c3:61:75:ba:93:ae:3c:b5:8b:76:9b:
         11:9b:21:f4:95:7b:81:b6:c5:2b:2b:2d:1a:e1:47:65:f2:8e:
         7d:c4:70:50:3d:76:5d:3e:59:61:05:d2:ff:d6:47:05:2d:ac:
         00:33:ff:9e:bb:f8:40:87:bb:81:4e:b9:72:55:c6:2c:4d:75:
         1a:63:83:e1:04:de:aa:b4:24:7b:97:90:68:b2:11:d0:53:85:
         ca:e5:43:c5:47:2c:2e:5b:e7:44:93:16:07:43:77:5f:2c:c5:
         54:fd:d7:01:be:65:54:8e:2b:cc:5b:e5:47:3a:2a:01:14:cd:
         3b:ba:97:99:af:e0:88:21:49:86:a1:fa:5f:b7:eb:48:e3:86:
         2f:7a:08:f4:fb:32:7c:2b:fe:6d:ad:3d:99:d9:c3:31:57:6d:
         03:99:48:97:9a:4f:1e:0d:06:a3:dc:8c:6e:d9:35:a7:e5:a7:
         78:78:60:7c:d8:1a:62:6b:4f:2e:2c:2d:2a:75:76:72:81:db:
         4f:bd:8c:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 13:04:58 2025 by rpki-client