Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf82d5e52101850b65b10b358b/0/32332e3134342e3136392e302f32342d3234203d3e20323030373735.roa
File:                     32332e3134342e3136392e302f32342d3234203d3e20323030373735.roa (raw, json)
Hash identifier:          095syAjxqtDIbDNXhhGsDm41NmpX6dfNh97sMivyXs0=
Subject key identifier:   04:4C:FD:7B:90:ED:CD:9E:11:0D:86:5C:F6:E2:73:3B:CE:8D:DC:AC
Certificate issuer:       /CN=ed199e1daadbcd50649091bf3c154099a326233862ce25c671
Certificate serial:       43B02481686E2CBF4D60086403907EF264ACECFF
Authority key identifier: B3:2D:01:46:71:A0:8A:F0:A5:5B:31:3E:AB:25:A8:2E:DD:40:2A:98
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c6babe0-c981-4c51-971c-b56bd0722eb1/ed199e1daadbcd50649091bf3c154099a326233862ce25c671.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf82d5e52101850b65b10b358b/0/32332e3134342e3136392e302f32342d3234203d3e20323030373735.roa
Signing time:             Wed 07 Feb 2024 14:00:42 +0000
ROA not before:           Wed 07 Feb 2024 13:55:42 +0000
ROA not after:            Wed 05 Feb 2025 14:00:42 +0000
asID:                     200775
IP address blocks:        23.144.169.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf82d5e52101850b65b10b358b/0/B32D014671A08AF0A55B313EAB25A82EDD402A98.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf82d5e52101850b65b10b358b/0/B32D014671A08AF0A55B313EAB25A82EDD402A98.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c6babe0-c981-4c51-971c-b56bd0722eb1/ed199e1daadbcd50649091bf3c154099a326233862ce25c671.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c6babe0-c981-4c51-971c-b56bd0722eb1/5c6babe0-c981-4c51-971c-b56bd0722eb1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c6babe0-c981-4c51-971c-b56bd0722eb1/5c6babe0-c981-4c51-971c-b56bd0722eb1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c6babe0-c981-4c51-971c-b56bd0722eb1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 03 Jun 2024 09:35:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:b0:24:81:68:6e:2c:bf:4d:60:08:64:03:90:7e:f2:64:ac:ec:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed199e1daadbcd50649091bf3c154099a326233862ce25c671
        Validity
            Not Before: Feb  7 13:55:42 2024 GMT
            Not After : Feb  5 14:00:42 2025 GMT
        Subject: CN=044CFD7B90EDCD9E110D865CF6E2733BCE8DDCAC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:29:3f:85:65:4d:00:d0:4d:b1:ce:cc:12:fe:
                    15:5e:e1:08:68:c7:0a:0c:fd:ed:69:03:28:55:e9:
                    e3:47:7f:91:87:a8:67:c0:b4:e2:07:4b:a7:ac:fd:
                    33:a4:aa:8c:3f:09:e9:9a:cf:e0:4f:6a:e3:8b:39:
                    13:2a:58:bd:08:e7:d2:b6:59:3a:bd:c9:7b:28:b7:
                    4c:51:6d:60:83:a7:6d:a8:63:cc:f6:0d:36:39:be:
                    08:67:3d:32:34:b8:10:66:5a:0a:90:b7:41:4e:73:
                    46:55:4f:8e:11:d0:60:2b:d9:10:26:03:f2:7d:59:
                    70:6c:4b:8a:19:69:79:d5:08:d1:ea:c2:8b:8d:3b:
                    11:db:33:a3:b6:f7:56:dc:62:9f:c8:54:fd:95:17:
                    d3:03:7b:4a:36:06:db:8d:9a:4d:fa:e5:1a:a5:fd:
                    a6:09:ec:06:00:55:d4:08:bc:7e:6c:58:0e:bc:1c:
                    2a:0e:78:ee:66:39:e1:aa:85:0b:0d:88:1d:8e:72:
                    56:c2:e2:4c:f7:e1:dc:0c:d7:38:1d:1d:56:28:86:
                    2e:fa:1f:75:5f:e5:c6:e4:21:b3:23:16:16:14:12:
                    38:5e:50:c9:f4:88:78:6f:6c:51:f0:44:f1:2f:53:
                    b7:3f:d0:c2:bf:65:37:c5:71:da:8f:e2:1d:56:82:
                    45:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:4C:FD:7B:90:ED:CD:9E:11:0D:86:5C:F6:E2:73:3B:CE:8D:DC:AC
            X509v3 Authority Key Identifier:
                keyid:B3:2D:01:46:71:A0:8A:F0:A5:5B:31:3E:AB:25:A8:2E:DD:40:2A:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf82d5e52101850b65b10b358b/0/B32D014671A08AF0A55B313EAB25A82EDD402A98.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c6babe0-c981-4c51-971c-b56bd0722eb1/ed199e1daadbcd50649091bf3c154099a326233862ce25c671.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf82d5e52101850b65b10b358b/0/32332e3134342e3136392e302f32342d3234203d3e20323030373735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.144.169.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1d:40:f1:ed:39:ed:32:32:c2:96:e0:f7:34:a3:02:21:8f:a8:
         f3:ed:b8:6d:c8:2a:dc:c4:4e:93:6e:64:51:1e:56:9b:42:96:
         65:b6:57:9d:f4:a5:ba:16:dd:21:f2:64:27:d6:ae:4a:9e:4b:
         d2:5c:a1:8d:6e:17:6f:54:71:1d:b0:dc:db:46:37:af:94:8b:
         b5:30:65:a4:ba:fd:b2:0b:d7:e1:de:2b:57:23:11:43:b4:b8:
         9d:3c:f9:6a:13:81:b6:69:69:10:75:20:dd:73:ab:20:24:d8:
         69:a3:c7:73:fb:f8:d6:4f:bb:89:b5:43:11:91:38:6b:0f:44:
         9f:3a:b0:3c:1d:54:2a:cf:67:e9:41:7e:bf:fe:9c:c0:9c:c7:
         4c:24:c0:27:82:18:a0:97:b3:1d:aa:25:d4:20:ee:bf:30:ad:
         4c:dc:14:dd:b7:df:f7:c0:90:26:92:9b:23:83:f1:b6:35:86:
         16:7e:ef:16:92:7b:17:fd:fe:47:b4:90:e3:17:5b:f5:07:3d:
         0e:ca:d8:2c:dc:68:4d:87:e1:ec:ae:e6:2f:5d:9e:f6:77:08:
         f3:3f:a1:06:73:b7:6b:87:ce:a2:be:ac:a1:83:8c:46:94:a4:
         5d:87:7d:42:1c:b3:d7:c0:40:2e:10:5e:90:31:97:b0:67:60:
         c6:ae:1c:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 09:14:51 2024 by rpki-client on console-ams.rpki-client.org