Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf82d5e52101850b65b10b358b/0/32332e3134342e3136392e302f32342d3234203d3e203139353231.roa
File:                     32332e3134342e3136392e302f32342d3234203d3e203139353231.roa (raw, json)
Hash identifier:          v1ZP7hRsWIFezJzRFk7BEuIcqtBHNb91y1xKcHRIDNA=
Subject key identifier:   26:A5:1C:0C:D8:F3:A5:D7:42:08:04:F1:A0:51:DA:09:C0:64:06:73
Certificate issuer:       /CN=ed199e1daa148cc0522eb727a4aa5cc87d3d0149c7f073452f
Certificate serial:       39102CE6AF3834B7B5D8D2F1A2549664EE40B397
Authority key identifier: E2:71:AE:55:26:8B:88:C1:E9:72:A7:EE:85:B1:45:9D:8D:D2:10:2C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c6babe0-c981-4c51-971c-b56bd0722eb1/ed199e1daa148cc0522eb727a4aa5cc87d3d0149c7f073452f.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf82d5e52101850b65b10b358b/0/32332e3134342e3136392e302f32342d3234203d3e203139353231.roa
Signing time:             Fri 28 Mar 2025 00:17:18 +0000
ROA not before:           Fri 28 Mar 2025 00:12:18 +0000
ROA not after:            Fri 27 Mar 2026 00:17:18 +0000
asID:                     19521
IP address blocks:        23.144.169.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf82d5e52101850b65b10b358b/0/E271AE55268B88C1E972A7EE85B1459D8DD2102C.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf82d5e52101850b65b10b358b/0/E271AE55268B88C1E972A7EE85B1459D8DD2102C.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c6babe0-c981-4c51-971c-b56bd0722eb1/ed199e1daa148cc0522eb727a4aa5cc87d3d0149c7f073452f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c6babe0-c981-4c51-971c-b56bd0722eb1/5c6babe0-c981-4c51-971c-b56bd0722eb1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c6babe0-c981-4c51-971c-b56bd0722eb1/5c6babe0-c981-4c51-971c-b56bd0722eb1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c6babe0-c981-4c51-971c-b56bd0722eb1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 21:01:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:10:2c:e6:af:38:34:b7:b5:d8:d2:f1:a2:54:96:64:ee:40:b3:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed199e1daa148cc0522eb727a4aa5cc87d3d0149c7f073452f
        Validity
            Not Before: Mar 28 00:12:18 2025 GMT
            Not After : Mar 27 00:17:18 2026 GMT
        Subject: CN=26A51C0CD8F3A5D7420804F1A051DA09C0640673
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:eb:01:92:52:60:08:97:ea:fb:8b:36:58:05:
                    cf:77:00:bf:43:bd:e7:13:10:00:1e:dc:91:f4:1b:
                    b2:df:2f:66:7c:a1:3c:88:b6:47:2a:8f:53:7b:13:
                    7b:c4:66:24:cf:2e:b8:ef:0f:89:7c:3b:37:e6:bb:
                    39:6a:86:32:b9:77:db:38:db:09:0d:88:49:6a:f1:
                    b9:78:2d:28:d2:7f:17:63:68:c3:6e:ce:5a:cb:b8:
                    17:7d:23:ea:20:18:70:39:a9:24:08:f6:0c:d8:cb:
                    47:0f:0b:39:fb:83:f0:11:2c:c9:9e:11:6d:8a:a5:
                    0d:ac:49:6a:ef:70:c9:67:66:b2:fd:c8:db:38:03:
                    b4:ab:30:39:25:95:09:41:cc:86:84:1c:71:35:fb:
                    0e:f7:58:e7:5c:15:33:dc:9b:fe:e5:bf:a7:80:19:
                    48:cf:c6:88:43:af:17:da:8d:e8:db:2d:cd:92:f5:
                    50:56:76:12:29:cb:5e:3c:35:ec:e0:14:ab:84:a6:
                    80:e8:3e:a7:5d:c3:d1:51:7b:c9:e6:40:74:27:25:
                    e6:46:00:19:d8:17:b2:4c:97:49:33:ff:23:db:0c:
                    d7:af:44:30:41:cf:9f:c0:7d:3a:03:fb:b2:82:90:
                    aa:91:a5:56:fd:5e:ab:12:ea:bd:ce:d3:5e:48:93:
                    7c:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:A5:1C:0C:D8:F3:A5:D7:42:08:04:F1:A0:51:DA:09:C0:64:06:73
            X509v3 Authority Key Identifier:
                keyid:E2:71:AE:55:26:8B:88:C1:E9:72:A7:EE:85:B1:45:9D:8D:D2:10:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf82d5e52101850b65b10b358b/0/E271AE55268B88C1E972A7EE85B1459D8DD2102C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c6babe0-c981-4c51-971c-b56bd0722eb1/ed199e1daa148cc0522eb727a4aa5cc87d3d0149c7f073452f.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf82d5e52101850b65b10b358b/0/32332e3134342e3136392e302f32342d3234203d3e203139353231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.144.169.0/24

    Signature Algorithm: sha256WithRSAEncryption
         88:87:41:27:5a:f1:bb:80:2a:20:cd:14:9e:7d:0d:80:6c:18:
         13:8a:56:1a:53:b7:ba:43:0c:07:5a:dc:00:70:d7:93:63:03:
         f2:5f:ea:1d:4a:f4:c0:b3:54:ca:73:9f:db:2a:01:b6:14:d0:
         a2:d6:50:d5:6a:b0:c0:59:19:a9:f7:f5:79:61:7f:51:e0:8f:
         74:10:c7:2e:da:45:e8:b9:fa:ff:4a:51:0f:bf:8b:5a:c6:8a:
         2c:74:ee:ef:21:b3:c7:b0:23:01:51:26:c1:84:db:35:e9:f7:
         bf:09:52:d5:b0:5d:35:1c:87:cd:82:c8:38:33:cf:2d:3a:99:
         78:5a:93:56:7a:7d:79:07:5a:f3:77:bd:64:25:0c:b1:c5:94:
         d7:82:3e:91:dd:e5:61:df:c8:d1:fd:7d:15:cd:74:d3:58:6f:
         26:d8:9c:8d:00:02:cc:d9:8f:8f:ae:f1:4c:97:b5:bf:e6:ea:
         0c:d2:10:04:54:85:5b:11:c8:e2:a3:2a:9b:a9:8d:56:f6:e6:
         d0:c5:8a:c4:86:8e:95:8f:ec:a8:eb:48:8d:97:77:98:9b:d3:
         9c:6f:3e:b5:62:f6:c7:b4:8f:41:dd:e7:22:52:b5:6a:2d:2f:
         4a:c6:30:5c:e2:9a:4c:14:e8:c6:74:15:fa:0b:dc:ef:14:26:
         52:22:d8:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 13:04:58 2025 by rpki-client