Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf915cb0a401919022ef071efe/1/32332e3134322e3234382e302f32342d3332203d3e20333933353737.roa
File:                     32332e3134322e3234382e302f32342d3332203d3e20333933353737.roa (raw, json)
Hash identifier:          oHr6LPBYUd0au2fBVqWKahAqtJ8+BCjEfcqmSYwCqY4=
Subject key identifier:   18:15:51:14:78:42:7E:1D:30:E3:C9:0E:F7:78:07:98:36:2B:EC:36
Certificate issuer:       /CN=0735111c25f6578195eb9729a303b6d74402d1d835d4389ed1
Certificate serial:       16031E4652E43D8099450EAD12B15512CFF3482D
Authority key identifier: E1:C2:F9:B8:BC:DE:6D:9C:27:61:54:58:33:55:B2:45:89:F4:9B:C8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/787ebbf9-1a0e-4410-81a0-a4a02a27fa2b/0735111c25f6578195eb9729a303b6d74402d1d835d4389ed1.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf915cb0a401919022ef071efe/1/32332e3134322e3234382e302f32342d3332203d3e20333933353737.roa
Signing time:             Mon 26 Aug 2024 19:22:40 +0000
ROA not before:           Mon 26 Aug 2024 19:17:40 +0000
ROA not after:            Mon 25 Aug 2025 19:22:40 +0000
asID:                     393577
IP address blocks:        23.142.248.0/24 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf915cb0a401919022ef071efe/1/E1C2F9B8BCDE6D9C276154583355B24589F49BC8.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf915cb0a401919022ef071efe/1/E1C2F9B8BCDE6D9C276154583355B24589F49BC8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/787ebbf9-1a0e-4410-81a0-a4a02a27fa2b/0735111c25f6578195eb9729a303b6d74402d1d835d4389ed1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/787ebbf9-1a0e-4410-81a0-a4a02a27fa2b/787ebbf9-1a0e-4410-81a0-a4a02a27fa2b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/787ebbf9-1a0e-4410-81a0-a4a02a27fa2b/787ebbf9-1a0e-4410-81a0-a4a02a27fa2b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/787ebbf9-1a0e-4410-81a0-a4a02a27fa2b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 29 Sep 2024 17:53:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:03:1e:46:52:e4:3d:80:99:45:0e:ad:12:b1:55:12:cf:f3:48:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0735111c25f6578195eb9729a303b6d74402d1d835d4389ed1
        Validity
            Not Before: Aug 26 19:17:40 2024 GMT
            Not After : Aug 25 19:22:40 2025 GMT
        Subject: CN=1815511478427E1D30E3C90EF7780798362BEC36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:a4:dd:62:30:24:fb:1a:62:b6:3a:48:5f:1c:
                    58:a4:2e:5a:0f:4a:48:8b:29:63:87:0a:4c:83:78:
                    30:eb:4a:39:a6:d5:d5:4a:1d:1d:0a:f7:e4:ff:e9:
                    a5:f2:34:f2:c2:61:1c:6e:a6:0d:fe:fd:c0:6c:9d:
                    2a:66:f7:79:d3:6d:15:d9:4c:2a:6b:40:58:4f:6c:
                    8d:31:44:f8:3a:ba:f8:b4:fb:a6:51:15:56:97:3c:
                    1b:dc:2d:45:6c:cf:45:92:31:18:e6:f4:46:e1:20:
                    e3:2e:b0:c2:4c:9c:17:95:9f:79:27:c4:a7:00:90:
                    71:48:f2:59:d4:49:d7:47:94:3b:f7:f8:13:4d:8a:
                    7c:01:47:3b:82:71:e9:ed:9c:31:68:e7:08:f7:fd:
                    97:06:22:91:21:7f:ec:0b:ad:86:3a:be:92:b3:58:
                    bb:59:79:83:7f:5a:eb:25:10:b1:75:e1:34:99:12:
                    6f:b7:04:50:d1:ae:7b:17:49:b5:be:21:49:02:df:
                    0b:5e:25:80:98:f0:2e:bb:74:b5:94:f1:52:50:b1:
                    de:a1:c2:7a:9e:9d:f2:53:ea:a7:dc:27:4b:2b:08:
                    b4:78:ed:dc:8a:23:9f:f4:56:4b:57:7b:f3:53:53:
                    60:40:e7:d1:85:04:7c:f6:32:d5:5c:a3:b8:24:ae:
                    46:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:15:51:14:78:42:7E:1D:30:E3:C9:0E:F7:78:07:98:36:2B:EC:36
            X509v3 Authority Key Identifier:
                keyid:E1:C2:F9:B8:BC:DE:6D:9C:27:61:54:58:33:55:B2:45:89:F4:9B:C8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf915cb0a401919022ef071efe/1/E1C2F9B8BCDE6D9C276154583355B24589F49BC8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/787ebbf9-1a0e-4410-81a0-a4a02a27fa2b/0735111c25f6578195eb9729a303b6d74402d1d835d4389ed1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf915cb0a401919022ef071efe/1/32332e3134322e3234382e302f32342d3332203d3e20333933353737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.142.248.0/24

    Signature Algorithm: sha256WithRSAEncryption
         72:d7:6b:1f:d6:a3:54:a5:49:b7:84:33:90:c6:ff:5b:16:ff:
         62:55:68:ea:4a:80:62:9c:e6:ff:35:01:57:90:92:e2:f4:12:
         fd:2f:41:05:5d:19:5c:98:90:b4:7a:46:29:27:2a:80:62:b5:
         99:25:41:69:cb:c3:d1:c1:23:5a:ae:dc:10:f1:ce:b3:9f:25:
         25:f7:eb:92:4f:94:70:93:16:6d:d8:47:7f:83:d4:6b:3d:a5:
         2e:a2:f0:fd:8b:36:89:6f:9a:dd:d2:ea:5b:ad:63:0b:76:5d:
         fd:a3:b9:16:a6:d1:64:fe:4d:95:85:cd:ec:5b:97:14:ee:59:
         88:43:21:04:81:33:2a:06:73:60:ee:cc:62:79:47:67:b6:dc:
         c0:05:7b:53:22:77:85:51:15:b9:92:84:e8:a9:de:c2:ac:28:
         62:38:b1:6e:fb:bd:3b:23:c4:90:74:71:54:8b:1f:7c:62:4c:
         b1:20:37:63:bb:75:f4:1b:77:0e:a7:d3:43:5a:13:66:ef:e5:
         27:16:3c:61:75:5d:9d:bb:28:be:c8:4e:ce:c7:87:f3:d1:f5:
         65:12:d5:2e:3c:d2:8b:8e:fc:6d:5b:ef:60:42:af:3e:46:aa:
         a8:fd:0c:ed:67:51:e6:70:81:94:8e:41:54:8d:2c:c0:e1:13:
         2c:e6:e7:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 19:15:22 2024 by rpki-client on console-ams.rpki-client.org