Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/17/32332e3136362e3132302e302f32342d3234203d3e203539393933.roa
File:                     32332e3136362e3132302e302f32342d3234203d3e203539393933.roa (raw, json)
Hash identifier:          /gfEIPIW2FRoirqujhf6lWLCOwAEKoE9eEsaVfr+LfA=
Subject key identifier:   0A:57:21:E1:52:7E:8D:E0:E4:1B:F9:2C:47:C8:49:18:DB:72:1C:40
Certificate issuer:       /CN=d73656ced88be2df26e8fedea78d903fa24d694b36bf9f1992
Certificate serial:       1620C394901382CDA19D5855AA4603DDD491B7A2
Authority key identifier: C4:7A:79:9B:0B:26:9F:88:E8:38:1E:AD:F1:AA:22:E9:36:05:4D:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/62dfe06a-d178-4b64-b19e-dc6d1fbf52b2/d73656ced88be2df26e8fedea78d903fa24d694b36bf9f1992.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/17/32332e3136362e3132302e302f32342d3234203d3e203539393933.roa
Signing time:             Sat 22 Jun 2024 19:27:39 +0000
ROA not before:           Sat 22 Jun 2024 19:22:39 +0000
ROA not after:            Sat 21 Jun 2025 19:27:39 +0000
asID:                     59993
IP address blocks:        23.166.120.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/17/C47A799B0B269F88E8381EADF1AA22E936054DF9.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/17/C47A799B0B269F88E8381EADF1AA22E936054DF9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/62dfe06a-d178-4b64-b19e-dc6d1fbf52b2/d73656ced88be2df26e8fedea78d903fa24d694b36bf9f1992.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/62dfe06a-d178-4b64-b19e-dc6d1fbf52b2/62dfe06a-d178-4b64-b19e-dc6d1fbf52b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/62dfe06a-d178-4b64-b19e-dc6d1fbf52b2/62dfe06a-d178-4b64-b19e-dc6d1fbf52b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/62dfe06a-d178-4b64-b19e-dc6d1fbf52b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 05 Jul 2024 02:43:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:20:c3:94:90:13:82:cd:a1:9d:58:55:aa:46:03:dd:d4:91:b7:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d73656ced88be2df26e8fedea78d903fa24d694b36bf9f1992
        Validity
            Not Before: Jun 22 19:22:39 2024 GMT
            Not After : Jun 21 19:27:39 2025 GMT
        Subject: CN=0A5721E1527E8DE0E41BF92C47C84918DB721C40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:e2:7e:2c:24:69:c0:3a:94:a7:ee:1d:47:86:
                    4b:d3:34:f0:3e:e7:26:de:df:d6:6e:0f:db:c3:70:
                    5a:1b:00:a9:68:5a:db:24:4b:23:91:cd:1f:5a:06:
                    c1:ce:61:79:50:6b:2a:68:04:5a:43:b2:14:4e:12:
                    d6:1d:29:fb:a9:d7:17:10:8c:25:72:86:61:9b:a5:
                    85:2f:8d:d3:c2:45:38:ac:b0:79:22:5e:7d:d7:d1:
                    1f:6b:ec:23:9b:fd:8c:aa:52:d7:b2:99:0f:8d:6d:
                    65:ac:a4:fb:36:03:72:ab:74:7b:c2:ec:4a:59:ef:
                    0c:a7:df:76:74:f1:b2:00:94:1d:27:fe:46:3a:e4:
                    3f:f5:92:bd:ec:b7:ec:c1:0d:21:7f:91:96:83:21:
                    ea:f9:d1:9b:af:be:13:38:a8:e6:06:47:61:50:4f:
                    05:83:85:e4:22:b3:05:c5:3a:0b:51:fc:d2:ea:f3:
                    8c:48:46:07:49:c3:a1:e9:fb:6b:7b:a5:1b:9e:2f:
                    f1:07:1e:3c:8d:50:e4:a5:88:bf:ef:77:e2:f3:42:
                    00:0a:70:bd:99:31:e3:2e:e4:b9:02:77:f8:06:d8:
                    49:94:36:5b:7b:e6:e5:8d:0d:06:4e:be:8e:64:e0:
                    3e:0f:81:59:57:96:ec:cf:be:3a:33:3b:26:ef:78:
                    0f:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:57:21:E1:52:7E:8D:E0:E4:1B:F9:2C:47:C8:49:18:DB:72:1C:40
            X509v3 Authority Key Identifier:
                keyid:C4:7A:79:9B:0B:26:9F:88:E8:38:1E:AD:F1:AA:22:E9:36:05:4D:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/17/C47A799B0B269F88E8381EADF1AA22E936054DF9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/62dfe06a-d178-4b64-b19e-dc6d1fbf52b2/d73656ced88be2df26e8fedea78d903fa24d694b36bf9f1992.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/17/32332e3136362e3132302e302f32342d3234203d3e203539393933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.166.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a9:34:18:7f:fa:ef:49:ef:48:a1:fc:af:f6:a8:a6:5d:2b:69:
         09:0b:3d:08:c6:15:a3:2f:9f:cd:ec:65:ee:17:75:f3:fb:ae:
         e4:74:70:8b:b2:32:e1:b2:ae:3b:42:90:7a:dc:f0:d9:41:a7:
         8e:12:8b:50:81:95:fe:0c:78:30:d1:a1:27:b2:f5:71:48:b6:
         95:62:35:5b:cc:55:62:5d:ec:ba:de:55:96:dd:8e:fd:b6:42:
         2f:c0:78:dc:0d:d4:0b:0a:91:d8:0d:e5:b9:e6:bf:0a:3f:18:
         5a:45:d5:c0:8a:27:87:ee:99:bc:83:f4:c6:4f:3e:ce:b9:d6:
         5e:25:9b:97:a7:28:7d:56:08:88:d9:d9:23:57:f5:30:7a:21:
         69:af:ba:10:1d:45:f7:84:0b:d3:21:cd:bf:9c:97:20:1d:0f:
         38:7b:7c:26:c4:47:b4:ab:7c:72:e2:1a:5e:14:02:dc:6d:54:
         41:d0:57:17:e3:43:13:7f:96:eb:b6:de:0d:4e:de:d1:97:c6:
         99:07:0c:8a:47:fc:7a:9b:3f:16:f7:18:fa:8f:02:7d:c9:e2:
         6a:43:e5:e6:ce:35:cc:97:a9:4d:54:00:44:9a:f7:fa:2b:a0:
         4e:5e:f0:02:07:08:b2:37:44:f4:80:ee:90:02:c2:02:1e:26:
         f1:b1:f9:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 4 02:26:54 2024 by rpki-client on console-ams.rpki-client.org