Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/20/32332e3138332e3133362e302f32342d3234203d3e20323633363932.roa
File:                     32332e3138332e3133362e302f32342d3234203d3e20323633363932.roa (raw, json)
Hash identifier:          tl3GbOc1nEyNsKV3gLNEH9+sqIHGzcJ+QE3ljqyv/80=
Subject key identifier:   D5:61:46:54:67:7E:C9:4D:79:4D:FB:36:26:EF:76:EC:97:64:BA:33
Certificate issuer:       /CN=ba59c15b9777a4a5270c9b7a584e46978e09a7bd2d154bfa9d
Certificate serial:       06CC15DC86154D3726B5DEFBE504D1194671B4A8
Authority key identifier: D7:0A:91:D8:9E:34:C7:A2:00:09:B1:E1:60:FB:6C:62:70:63:63:0C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/32619ff9-4a46-4e93-a9b5-dda2a33a9ffd/ba59c15b9777a4a5270c9b7a584e46978e09a7bd2d154bfa9d.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/20/32332e3138332e3133362e302f32342d3234203d3e20323633363932.roa
Signing time:             Wed 24 Jul 2024 03:42:36 +0000
ROA not before:           Wed 24 Jul 2024 03:37:36 +0000
ROA not after:            Wed 23 Jul 2025 03:42:36 +0000
asID:                     263692
IP address blocks:        23.183.136.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/20/D70A91D89E34C7A20009B1E160FB6C627063630C.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/20/D70A91D89E34C7A20009B1E160FB6C627063630C.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/32619ff9-4a46-4e93-a9b5-dda2a33a9ffd/ba59c15b9777a4a5270c9b7a584e46978e09a7bd2d154bfa9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/32619ff9-4a46-4e93-a9b5-dda2a33a9ffd/32619ff9-4a46-4e93-a9b5-dda2a33a9ffd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/32619ff9-4a46-4e93-a9b5-dda2a33a9ffd/32619ff9-4a46-4e93-a9b5-dda2a33a9ffd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/32619ff9-4a46-4e93-a9b5-dda2a33a9ffd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 29 Sep 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:cc:15:dc:86:15:4d:37:26:b5:de:fb:e5:04:d1:19:46:71:b4:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ba59c15b9777a4a5270c9b7a584e46978e09a7bd2d154bfa9d
        Validity
            Not Before: Jul 24 03:37:36 2024 GMT
            Not After : Jul 23 03:42:36 2025 GMT
        Subject: CN=D5614654677EC94D794DFB3626EF76EC9764BA33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:73:68:17:1a:6f:8a:e7:f4:59:f8:6f:14:72:
                    ae:c0:f1:c7:f1:29:a9:a4:72:4c:b2:80:d3:d2:32:
                    de:ef:a5:1e:18:3e:65:2c:06:6e:69:a5:ec:f4:88:
                    57:65:5f:09:76:b5:99:17:9c:99:12:0f:5e:b2:e0:
                    66:b5:e2:ff:27:8e:32:5f:22:bb:46:c6:0c:8b:bf:
                    12:2a:86:21:2c:9b:86:53:bf:6a:95:0f:8c:34:f0:
                    4a:d3:1f:ca:20:df:e4:7d:f8:e6:80:0a:80:de:34:
                    9a:00:59:c9:a7:ca:50:da:11:db:6a:98:9b:00:9f:
                    d7:4e:46:fa:09:c6:d5:05:47:41:b1:60:d5:6f:e4:
                    30:08:4d:7b:2a:38:f2:30:62:fe:fd:4b:99:77:61:
                    a2:48:7c:57:b2:fc:2f:af:bb:7d:cd:9e:9e:79:60:
                    61:49:23:4a:79:98:e1:c2:53:d7:f3:50:b5:3d:18:
                    21:2c:cb:ff:76:41:38:6b:2e:86:88:a2:8b:2c:ac:
                    09:ea:9d:1f:2b:cd:b9:b7:8d:ed:aa:75:49:e0:d9:
                    75:b2:66:de:57:3f:8f:96:73:39:f3:66:b4:70:6c:
                    89:bc:5e:21:f0:3e:eb:12:62:77:8b:94:bf:05:d7:
                    49:9a:c9:d3:c3:4c:6a:2b:2a:52:b7:eb:f6:57:e3:
                    bb:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:61:46:54:67:7E:C9:4D:79:4D:FB:36:26:EF:76:EC:97:64:BA:33
            X509v3 Authority Key Identifier:
                keyid:D7:0A:91:D8:9E:34:C7:A2:00:09:B1:E1:60:FB:6C:62:70:63:63:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/20/D70A91D89E34C7A20009B1E160FB6C627063630C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/32619ff9-4a46-4e93-a9b5-dda2a33a9ffd/ba59c15b9777a4a5270c9b7a584e46978e09a7bd2d154bfa9d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/20/32332e3138332e3133362e302f32342d3234203d3e20323633363932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.183.136.0/24

    Signature Algorithm: sha256WithRSAEncryption
         14:55:7e:7f:19:3d:c2:82:6d:c9:68:7a:de:aa:49:63:ff:a5:
         82:96:75:08:50:85:7e:b2:4d:8b:d1:f6:4c:67:cc:36:c7:50:
         af:18:47:04:79:39:a3:31:ac:6b:58:49:59:e3:cc:17:a6:d8:
         01:cc:eb:ba:bd:a1:73:56:bf:23:12:d8:27:95:4f:7f:77:a3:
         2b:a4:55:96:a4:f4:16:00:89:bb:e9:8d:74:20:50:75:00:8d:
         bc:13:ee:8b:5a:dd:aa:d7:c2:e8:eb:2e:dd:31:a8:7b:75:cc:
         75:26:2a:9a:e1:5d:58:8d:0a:47:67:5c:2a:99:f4:76:3b:8c:
         bd:9b:51:55:f8:34:4f:87:d5:fb:1d:bb:14:d1:32:b2:fe:09:
         a7:2d:ab:b8:58:e5:62:64:5d:42:41:f6:8f:68:05:ad:9f:ac:
         80:a2:e9:ba:96:76:a0:8a:99:ab:e8:8d:ff:d3:c1:18:83:4b:
         04:bd:1b:03:3d:3a:09:ec:31:d1:2d:df:32:13:db:05:d0:a8:
         c9:30:de:64:e0:51:53:1e:1d:3e:c1:e3:30:b9:ff:0f:d9:75:
         84:be:80:f5:01:c3:9e:31:b4:81:4b:ec:fd:ac:19:67:22:6a:
         04:9d:cd:72:fb:a1:9d:2d:78:2a:33:b4:1b:5a:38:cc:a0:3c:
         04:8a:26:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 08:59:06 2024 by rpki-client on console-ams.rpki-client.org