Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf82d5e52101850b65b10b358b/0/32332e3134342e3136382e302f32342d3234203d3e20323030373735.roa
File:                     32332e3134342e3136382e302f32342d3234203d3e20323030373735.roa (raw, json)
Hash identifier:          ptXa6+D0oNad8NnswuP2NPLSqtLNMuWDPoxSWZctPWQ=
Subject key identifier:   BD:A7:2F:AF:50:4D:61:CE:2F:44:7E:A1:98:B0:63:F9:10:59:D2:8A
Certificate issuer:       /CN=ed199e1daadbcd50649091bf3c154099a326233862ce25c671
Certificate serial:       3D288EF67B68541B75DCB7F117B593DF1CAF03DE
Authority key identifier: B3:2D:01:46:71:A0:8A:F0:A5:5B:31:3E:AB:25:A8:2E:DD:40:2A:98
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c6babe0-c981-4c51-971c-b56bd0722eb1/ed199e1daadbcd50649091bf3c154099a326233862ce25c671.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf82d5e52101850b65b10b358b/0/32332e3134342e3136382e302f32342d3234203d3e20323030373735.roa
Signing time:             Tue 14 Nov 2023 13:01:30 +0000
ROA not before:           Tue 14 Nov 2023 12:56:30 +0000
ROA not after:            Tue 12 Nov 2024 13:01:30 +0000
asID:                     200775
IP address blocks:        23.144.168.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf82d5e52101850b65b10b358b/0/B32D014671A08AF0A55B313EAB25A82EDD402A98.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf82d5e52101850b65b10b358b/0/B32D014671A08AF0A55B313EAB25A82EDD402A98.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c6babe0-c981-4c51-971c-b56bd0722eb1/ed199e1daadbcd50649091bf3c154099a326233862ce25c671.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c6babe0-c981-4c51-971c-b56bd0722eb1/5c6babe0-c981-4c51-971c-b56bd0722eb1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c6babe0-c981-4c51-971c-b56bd0722eb1/5c6babe0-c981-4c51-971c-b56bd0722eb1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c6babe0-c981-4c51-971c-b56bd0722eb1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 03 Jun 2024 09:35:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:28:8e:f6:7b:68:54:1b:75:dc:b7:f1:17:b5:93:df:1c:af:03:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed199e1daadbcd50649091bf3c154099a326233862ce25c671
        Validity
            Not Before: Nov 14 12:56:30 2023 GMT
            Not After : Nov 12 13:01:30 2024 GMT
        Subject: CN=BDA72FAF504D61CE2F447EA198B063F91059D28A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:13:03:a8:02:52:ee:ba:86:b7:94:31:d6:72:
                    66:e7:14:44:ad:2d:ed:04:02:cc:3d:f3:6d:25:64:
                    84:dc:13:e2:b9:83:4e:5b:73:ee:bb:24:84:e4:dd:
                    b7:51:27:20:a5:d9:ac:bb:e3:cb:64:f8:60:e5:a1:
                    fb:1e:09:3e:d8:05:71:16:65:49:11:7a:5f:68:98:
                    79:c2:29:ae:4a:15:4b:89:bc:06:44:3e:76:83:9b:
                    36:ed:8f:09:a3:99:39:be:d2:3e:f8:ad:68:d8:98:
                    1a:10:64:26:0e:43:b9:9f:d9:1e:66:50:55:79:83:
                    8a:47:58:a8:21:59:9e:58:2e:34:84:61:74:1f:b7:
                    3e:73:3b:a3:fe:d9:6c:96:b2:26:3c:fa:89:20:14:
                    e8:5b:ae:53:b5:05:e8:f1:09:d3:51:29:a2:df:36:
                    b2:5c:94:cc:c3:37:c2:73:6f:b7:ab:eb:25:8f:e4:
                    09:0d:90:f9:28:2e:f4:a7:c7:65:df:a7:65:7c:2b:
                    aa:4b:36:69:85:7c:09:1b:ee:06:6d:5c:3a:88:5b:
                    bf:c1:ce:1f:3e:52:f3:b5:04:b1:e5:b9:84:03:ae:
                    fd:63:9e:a0:9f:0a:11:e4:82:fc:95:5a:fa:1f:3d:
                    e0:64:76:fe:49:f7:41:e8:55:d5:77:ae:01:ba:d6:
                    1f:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:A7:2F:AF:50:4D:61:CE:2F:44:7E:A1:98:B0:63:F9:10:59:D2:8A
            X509v3 Authority Key Identifier:
                keyid:B3:2D:01:46:71:A0:8A:F0:A5:5B:31:3E:AB:25:A8:2E:DD:40:2A:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf82d5e52101850b65b10b358b/0/B32D014671A08AF0A55B313EAB25A82EDD402A98.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c6babe0-c981-4c51-971c-b56bd0722eb1/ed199e1daadbcd50649091bf3c154099a326233862ce25c671.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf82d5e52101850b65b10b358b/0/32332e3134342e3136382e302f32342d3234203d3e20323030373735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.144.168.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bc:31:0d:ca:7b:5d:b3:e8:37:62:ee:3d:97:9e:f8:8a:89:6f:
         a7:14:68:9c:16:84:65:42:e9:5f:ae:65:6f:c4:ff:7b:8e:97:
         17:42:29:2e:ff:e6:1d:a2:7c:23:c7:7d:95:6e:30:24:6d:7b:
         ed:de:55:01:29:e0:d1:9f:99:d3:e4:c5:23:da:69:60:e0:d7:
         98:f3:d0:5f:f1:a7:50:05:c6:b1:bc:85:16:9b:0f:6b:5b:10:
         b4:b8:62:53:bd:35:dc:3c:58:51:47:cd:aa:7a:1d:94:9b:43:
         f6:96:50:e1:72:e9:f9:c5:fd:5d:09:f0:aa:66:e0:ee:44:f4:
         f1:60:e0:0d:1b:7a:eb:b0:a2:d2:8d:fd:7c:d2:4e:84:6e:0d:
         47:dd:fb:d0:a2:04:7d:6c:75:6f:e5:3a:0b:2e:44:b6:4c:82:
         fc:fd:8d:5f:4c:05:8e:48:cb:5d:81:cc:3b:49:34:70:f1:f4:
         d2:37:f4:ff:3d:fc:b7:2a:39:6c:9a:5f:f3:db:3f:c6:ea:44:
         66:de:5d:c5:69:85:28:42:0b:16:26:ea:24:01:44:10:10:59:
         ec:30:82:31:84:78:ab:3d:c8:98:1f:cd:b0:60:25:d2:17:74:
         43:bb:92:f3:ee:55:03:14:6a:ad:47:10:c0:5e:05:b9:eb:a5:
         ce:96:56:bc
-----BEGIN CERTIFICATE-----
MIIFtDCCBJygAwIBAgIUPSiO9ntoVBt13LfxF7WT3xyvA94wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZWQxOTllMWRhYWRiY2Q1MDY0OTA5MWJmM2MxNTQwOTlh
MzI2MjMzODYyY2UyNWM2NzEwHhcNMjMxMTE0MTI1NjMwWhcNMjQxMTEyMTMwMTMw
WjAzMTEwLwYDVQQDEyhCREE3MkZBRjUwNEQ2MUNFMkY0NDdFQTE5OEIwNjNGOTEw
NTlEMjhBMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqRMDqAJS7rqG
t5Qx1nJm5xRErS3tBALMPfNtJWSE3BPiuYNOW3PuuySE5N23UScgpdmsu+PLZPhg
5aH7Hgk+2AVxFmVJEXpfaJh5wimuShVLibwGRD52g5s27Y8Jo5k5vtI++K1o2Jga
EGQmDkO5n9keZlBVeYOKR1ioIVmeWC40hGF0H7c+czuj/tlslrImPPqJIBToW65T
tQXo8QnTUSmi3zayXJTMwzfCc2+3q+slj+QJDZD5KC70p8dl36dlfCuqSzZphXwJ
G+4GbVw6iFu/wc4fPlLztQSx5bmEA679Y56gnwoR5IL8lVr6Hz3gZHb+SfdB6FXV
d64ButYfswIDAQABo4ICtDCCArAwHQYDVR0OBBYEFL2nL69QTWHOL0R+oZiwY/kQ
WdKKMB8GA1UdIwQYMBaAFLMtAUZxoIrwpVsxPqslqC7dQCqYMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmODJkNWU1MjEwMTg1MGI2NWIxMGIzNThiLzAv
QjMyRDAxNDY3MUEwOEFGMEE1NUIzMTNFQUIyNUE4MkVERDQwMkE5OC5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0
OTMzYWU1LzVjNmJhYmUwLWM5ODEtNGM1MS05NzFjLWI1NmJkMDcyMmViMS9lZDE5
OWUxZGFhZGJjZDUwNjQ5MDkxYmYzYzE1NDA5OWEzMjYyMzM4NjJjZTI1YzY3MS5j
ZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjgyZDVlNTIxMDE4NTBi
NjViMTBiMzU4Yi8wLzMyMzMyZTMxMzQzNDJlMzEzNjM4MmUzMDJmMzIzNDJkMzIz
NDIwM2QzZTIwMzIzMDMwMzczNzM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5CoMA0GCSqGSIb3DQEB
CwUAA4IBAQC8MQ3Ke12z6Ddi7j2XnviKiW+nFGicFoRlQulfrmVvxP97jpcXQiku
/+Ydonwjx32VbjAkbXvt3lUBKeDRn5nT5MUj2mlg4NeY89Bf8adQBcaxvIUWmw9r
WxC0uGJTvTXcPFhRR82qeh2Um0P2llDhcun5xf1dCfCqZuDuRPTxYOANG3rrsKLS
jf180k6Ebg1H3fvQogR9bHVv5ToLLkS2TIL8/Y1fTAWOSMtdgcw7STRw8fTSN/T/
Pfy3Kjlsml/z2z/G6kRm3l3FaYUoQgsWJuokAUQQEFnsMIIxhHirPciYH82wYCXS
F3RDu5Lz7lUDFGqtRxDAXgW566XOlla8
-----END CERTIFICATE-----
Generated at Sun Jun 2 07:03:21 2024 by rpki-client on console-fra.rpki-client.org