Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/0229bc11-dc0c-4ee5-838d-077696223e74/1/32332e3134372e3136382e302f32342d3234203d3e20323030343534.roa
File:                     32332e3134372e3136382e302f32342d3234203d3e20323030343534.roa (raw, json)
Hash identifier:          nFBG/cF1Fq4y9HAryx9t5TxPvFZnzi8LEE4amyl80Nc=
Subject key identifier:   87:CA:B4:C0:72:2A:02:4C:2A:9C:5F:38:9D:0F:4E:24:36:EA:FF:56
Certificate issuer:       /CN=01286d5411268f5f57e93c54df7894cce768bbb76730a62111
Certificate serial:       08C6A89CC2DFFE85E4829EFE6DA33D3CFA4D9603
Authority key identifier: 74:8F:02:5C:6A:24:87:27:80:55:99:1C:C1:69:5E:2C:FE:46:AE:59
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/26ce408d-5581-483d-90b3-5119fc830064/01286d5411268f5f57e93c54df7894cce768bbb76730a62111.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/0229bc11-dc0c-4ee5-838d-077696223e74/1/32332e3134372e3136382e302f32342d3234203d3e20323030343534.roa
Signing time:             Wed 31 Jan 2024 15:09:29 +0000
ROA not before:           Wed 31 Jan 2024 15:04:29 +0000
ROA not after:            Wed 29 Jan 2025 15:09:29 +0000
asID:                     200454
IP address blocks:        23.147.168.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/0229bc11-dc0c-4ee5-838d-077696223e74/1/748F025C6A2487278055991CC1695E2CFE46AE59.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/0229bc11-dc0c-4ee5-838d-077696223e74/1/748F025C6A2487278055991CC1695E2CFE46AE59.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/26ce408d-5581-483d-90b3-5119fc830064/01286d5411268f5f57e93c54df7894cce768bbb76730a62111.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/26ce408d-5581-483d-90b3-5119fc830064/26ce408d-5581-483d-90b3-5119fc830064.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/26ce408d-5581-483d-90b3-5119fc830064/26ce408d-5581-483d-90b3-5119fc830064.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/26ce408d-5581-483d-90b3-5119fc830064.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 11 Jun 2024 15:44:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:c6:a8:9c:c2:df:fe:85:e4:82:9e:fe:6d:a3:3d:3c:fa:4d:96:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01286d5411268f5f57e93c54df7894cce768bbb76730a62111
        Validity
            Not Before: Jan 31 15:04:29 2024 GMT
            Not After : Jan 29 15:09:29 2025 GMT
        Subject: CN=87CAB4C0722A024C2A9C5F389D0F4E2436EAFF56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:81:2e:ea:c5:37:ec:36:44:42:3d:8e:13:20:
                    0d:c7:31:28:25:e2:3f:c5:bd:b3:b7:dc:ab:8b:60:
                    83:c6:86:66:82:57:38:22:48:a8:c8:4a:b5:8b:a0:
                    f2:e4:71:b0:2b:62:b9:0e:7f:4e:b3:d4:3f:4f:b9:
                    cf:70:15:d2:0d:8a:b1:00:67:e1:c7:cf:32:f3:2c:
                    d2:53:58:16:6a:6d:40:fd:2f:8b:44:6e:9e:37:43:
                    5b:e1:2f:b6:4a:c1:a3:90:9a:0a:ad:53:ae:69:9e:
                    92:5b:ad:7e:07:67:84:fc:d1:46:f9:ef:05:b5:3b:
                    2f:44:64:39:40:e4:34:6d:bf:1b:a5:00:a9:c2:f7:
                    f7:b1:cb:64:4f:96:da:f5:7c:fa:b7:a8:4b:1e:c7:
                    11:4c:a2:12:cb:29:23:61:fd:b6:2a:10:9f:5d:d2:
                    7a:57:68:a8:de:a7:b0:f4:bf:a5:5b:15:13:d7:b2:
                    70:d1:69:2b:e5:ac:62:a6:71:54:01:17:fb:37:9a:
                    7d:be:55:2f:7e:94:93:e1:ba:af:b6:26:6b:7c:03:
                    c7:7b:dc:37:5b:a4:57:3c:26:87:9d:34:8e:c7:b0:
                    24:3e:89:f8:08:cb:03:5b:72:66:85:7d:2e:68:a1:
                    c9:7d:52:e0:48:5c:52:64:c7:af:e6:e4:9f:74:c7:
                    c2:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:CA:B4:C0:72:2A:02:4C:2A:9C:5F:38:9D:0F:4E:24:36:EA:FF:56
            X509v3 Authority Key Identifier:
                keyid:74:8F:02:5C:6A:24:87:27:80:55:99:1C:C1:69:5E:2C:FE:46:AE:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/0229bc11-dc0c-4ee5-838d-077696223e74/1/748F025C6A2487278055991CC1695E2CFE46AE59.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/26ce408d-5581-483d-90b3-5119fc830064/01286d5411268f5f57e93c54df7894cce768bbb76730a62111.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0229bc11-dc0c-4ee5-838d-077696223e74/1/32332e3134372e3136382e302f32342d3234203d3e20323030343534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.147.168.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7f:cf:6d:63:8e:db:b9:ea:38:a8:53:18:f7:05:35:25:21:49:
         15:31:aa:a1:df:26:54:ae:b9:bb:eb:94:6d:39:98:47:c0:29:
         6e:9a:66:b8:ec:f4:72:09:69:69:fe:74:d1:a9:a9:7b:8c:2b:
         b0:54:c8:ca:20:2d:32:ba:82:39:a1:97:5a:10:29:fd:8d:cf:
         89:5b:73:30:1c:c7:9b:c3:f2:27:af:11:3f:06:0c:e5:9c:6c:
         58:d1:55:13:a2:a8:6f:a9:49:0b:11:7c:2d:9f:50:42:7b:f1:
         7c:18:ea:95:8e:20:5a:7f:99:76:fc:02:b3:82:29:1a:75:b6:
         bc:df:87:6e:5d:5c:1d:13:6c:4a:df:c7:67:20:69:c3:0a:12:
         04:dc:da:9d:77:08:75:b4:1b:7a:36:9a:f4:c5:e1:2b:e7:c9:
         c1:0d:2b:4c:7f:eb:99:66:aa:20:d4:cc:d7:1a:1e:0f:cc:91:
         71:22:ed:53:d2:c4:95:2c:7e:15:e7:81:47:2b:1f:65:10:6a:
         c0:12:07:a9:1d:2d:ad:3f:0a:d9:8a:06:47:5c:3c:91:2d:7b:
         ca:33:48:d8:76:d5:b2:2e:f2:70:8e:69:7d:17:51:d6:26:3e:
         f5:e5:8b:e5:6b:c9:e4:75:b0:d6:fe:dd:3b:b1:b3:ae:c3:4b:
         80:40:82:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 10 18:26:50 2024 by rpki-client on console-ams.rpki-client.org