Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf915cb0a401919022ef071efe/0/32332e3136382e32342e302f32342d3332203d3e20333933353737.roa
File:                     32332e3136382e32342e302f32342d3332203d3e20333933353737.roa (raw, json)
Hash identifier:          Lj4MVt16DExqG3O3ptG6akrJ0F47wv6vkW011YM93j8=
Subject key identifier:   DA:7A:66:59:F1:2C:E3:BC:AA:A3:2E:9A:32:CC:8F:D4:BF:6C:C1:65
Certificate issuer:       /CN=8d8a672dd79a741b29e5ff6fa5231f779488e707b290f2f247
Certificate serial:       6FB24F506FC50B254418621A2A73CCC120CCBE1B
Authority key identifier: C1:9A:74:47:85:5F:7A:C5:27:0D:95:C1:6E:13:45:5A:2A:5D:B3:2A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d37a072-15ae-4905-810e-991fc6201b45/8d8a672dd79a741b29e5ff6fa5231f779488e707b290f2f247.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf915cb0a401919022ef071efe/0/32332e3136382e32342e302f32342d3332203d3e20333933353737.roa
Signing time:             Mon 26 Aug 2024 19:22:49 +0000
ROA not before:           Mon 26 Aug 2024 19:17:49 +0000
ROA not after:            Mon 25 Aug 2025 19:22:49 +0000
asID:                     393577
IP address blocks:        23.168.24.0/24 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf915cb0a401919022ef071efe/0/C19A7447855F7AC5270D95C16E13455A2A5DB32A.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf915cb0a401919022ef071efe/0/C19A7447855F7AC5270D95C16E13455A2A5DB32A.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d37a072-15ae-4905-810e-991fc6201b45/8d8a672dd79a741b29e5ff6fa5231f779488e707b290f2f247.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d37a072-15ae-4905-810e-991fc6201b45/8d37a072-15ae-4905-810e-991fc6201b45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d37a072-15ae-4905-810e-991fc6201b45/8d37a072-15ae-4905-810e-991fc6201b45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d37a072-15ae-4905-810e-991fc6201b45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 29 Sep 2024 16:39:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:b2:4f:50:6f:c5:0b:25:44:18:62:1a:2a:73:cc:c1:20:cc:be:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8d8a672dd79a741b29e5ff6fa5231f779488e707b290f2f247
        Validity
            Not Before: Aug 26 19:17:49 2024 GMT
            Not After : Aug 25 19:22:49 2025 GMT
        Subject: CN=DA7A6659F12CE3BCAAA32E9A32CC8FD4BF6CC165
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:96:ab:e9:25:5f:9b:8f:de:21:d3:12:f4:0f:
                    a2:03:50:6c:82:5c:f3:98:e9:08:8b:6f:55:f1:ae:
                    89:80:dc:81:83:aa:17:a4:2f:52:62:60:19:30:55:
                    5b:af:db:86:6b:5a:31:64:e1:41:b2:2d:fc:c4:bb:
                    3f:02:3b:bb:2f:44:02:64:7a:a5:6a:5b:35:25:ad:
                    da:f4:19:b8:a0:1e:46:15:34:b5:e1:60:84:b3:64:
                    d4:21:6f:12:bf:8e:d2:e6:e7:71:13:18:d6:5f:b9:
                    41:6f:26:32:73:b8:25:37:21:d0:b3:ee:ce:fe:27:
                    17:27:4e:62:36:3d:25:0f:b7:0d:46:14:dc:c4:fb:
                    fc:dc:e4:e5:4e:f5:48:63:7f:7f:cb:09:32:22:d2:
                    c7:5f:18:b9:8c:c3:60:f2:5e:b9:b2:f5:e8:c4:c1:
                    84:4b:f8:2c:f8:45:25:e3:7b:ab:4c:ab:a9:5a:b9:
                    ab:d1:ed:1b:40:cc:64:d1:a4:46:80:30:f8:65:65:
                    60:8a:d4:58:c0:25:54:2e:f9:62:cb:b7:4d:21:eb:
                    27:3a:95:e6:01:2d:75:d9:32:b9:92:b2:bb:1a:ab:
                    e8:14:3b:dd:26:d7:07:64:54:27:bd:76:f2:d2:0e:
                    ce:67:d7:67:3c:8e:d1:cc:2c:67:55:57:6b:de:15:
                    1a:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:7A:66:59:F1:2C:E3:BC:AA:A3:2E:9A:32:CC:8F:D4:BF:6C:C1:65
            X509v3 Authority Key Identifier:
                keyid:C1:9A:74:47:85:5F:7A:C5:27:0D:95:C1:6E:13:45:5A:2A:5D:B3:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf915cb0a401919022ef071efe/0/C19A7447855F7AC5270D95C16E13455A2A5DB32A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d37a072-15ae-4905-810e-991fc6201b45/8d8a672dd79a741b29e5ff6fa5231f779488e707b290f2f247.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf915cb0a401919022ef071efe/0/32332e3136382e32342e302f32342d3332203d3e20333933353737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.168.24.0/24

    Signature Algorithm: sha256WithRSAEncryption
         48:d0:a6:b3:89:9a:e8:ae:f3:b9:84:11:a0:e8:6d:79:db:4b:
         06:c7:f1:7b:b5:9a:0e:4e:b9:6b:a0:64:60:05:55:9f:30:38:
         52:1c:c3:87:b9:62:3a:82:54:81:ff:50:b2:6b:18:7c:f4:53:
         d4:2e:7e:84:df:43:5d:00:36:39:7d:b3:6b:5c:6d:a2:04:85:
         5b:90:fb:a5:02:89:9e:f9:0b:08:24:c3:e6:5d:28:1d:b7:5f:
         47:a2:c0:a0:0a:e0:8e:e4:5b:da:cd:53:1c:8a:b8:d4:68:48:
         7c:41:66:b2:fd:f9:76:9b:11:20:c0:f0:ce:6e:1b:d4:70:2f:
         f7:c9:6d:f1:79:a6:5e:aa:59:7b:a6:68:2f:86:48:79:c2:45:
         06:5f:df:ff:20:3e:f6:70:98:0b:de:cb:4a:92:ed:b4:af:b9:
         0f:40:d9:68:f6:08:e0:94:d3:66:02:cd:96:2e:81:39:a8:f2:
         15:4c:21:ae:ff:92:17:b1:ce:d6:57:00:d4:6b:a3:cc:ee:fa:
         93:5a:2e:0f:9f:16:bb:43:10:dd:24:c5:2b:c4:d1:f4:85:df:
         11:b2:96:bc:f9:bc:e6:83:f2:6f:3f:a8:52:b8:d9:d3:76:2d:
         49:7f:b7:2b:f7:5b:c4:9d:1d:38:8c:26:3a:0b:63:2e:9f:29:
         df:63:89:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 15:16:19 2024 by rpki-client on console-fra.rpki-client.org