Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS32475.roa
File:                     AS32475.roa (raw, json)
Hash identifier:          1/jzz6QLRUSf3J7O05+knA0fEeKQtvtz0+Wf81OcfwM=
Subject key identifier:   1B:01:14:19:4A:D8:FD:9E:70:3E:3D:C0:18:04:6A:CF:A4:86:C6:7E
Certificate issuer:       /CN=ec93568485034d6f590126278015e55786765323f329d6aa05
Certificate serial:       6524EC6DAD773EC20D0EF2C7359EAE065BAABC63
Authority key identifier: BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS32475.roa
Signing time:             Thu 01 Jun 2023 19:24:07 +0000
ROA not before:           Thu 01 Jun 2023 19:19:07 +0000
ROA not after:            Thu 30 May 2024 19:24:07 +0000
asID:                     32475
IP address blocks:        140.99.244.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/c556b910-dc6c-4228-adf3-8828ac96ee60.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/c556b910-dc6c-4228-adf3-8828ac96ee60.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 17 Apr 2024 03:29:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:24:ec:6d:ad:77:3e:c2:0d:0e:f2:c7:35:9e:ae:06:5b:aa:bc:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec93568485034d6f590126278015e55786765323f329d6aa05
        Validity
            Not Before: Jun  1 19:19:07 2023 GMT
            Not After : May 30 19:24:07 2024 GMT
        Subject: CN=1B0114194AD8FD9E703E3DC018046ACFA486C67E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:17:06:2b:64:e1:dd:14:18:6a:80:62:50:12:
                    7c:b6:88:6a:70:47:40:4a:66:ef:1b:f7:89:ab:82:
                    5c:b3:83:d2:ba:89:71:1c:8c:09:95:e6:21:6c:a7:
                    14:d0:d0:55:4e:99:51:5d:81:1c:c7:39:0e:6c:83:
                    7d:49:05:1c:05:57:27:3c:ce:0e:cf:77:aa:5b:c4:
                    6c:f5:a0:98:5e:df:f4:75:15:68:ed:bd:6a:f3:e5:
                    ff:88:25:b3:13:fe:b4:c8:cb:70:ae:0f:70:8c:26:
                    de:75:7d:27:38:f0:d6:1c:62:84:2a:64:fc:ac:a5:
                    b8:a7:58:5c:ea:84:31:2a:d1:d3:1b:c4:8e:17:a2:
                    38:ce:2d:65:93:8a:49:4b:7a:b7:d6:cb:d3:9f:36:
                    d5:bd:a9:24:bf:36:e6:9c:e8:9c:4a:ca:1c:cc:ba:
                    8d:b7:f1:ab:e1:99:85:c5:af:77:af:5a:3d:6c:70:
                    b8:4a:77:03:8f:21:9b:67:34:de:a4:01:6b:6e:65:
                    45:33:fc:26:2f:3e:46:7e:f4:81:5d:3a:83:24:e4:
                    fc:a5:a7:5e:68:75:bd:7c:32:63:3a:ef:81:b6:21:
                    72:25:93:a1:b7:7b:73:7d:77:fa:36:7b:cb:26:55:
                    7e:93:b4:c2:2a:ec:33:89:af:57:2e:53:4f:cf:74:
                    80:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:01:14:19:4A:D8:FD:9E:70:3E:3D:C0:18:04:6A:CF:A4:86:C6:7E
            X509v3 Authority Key Identifier:
                keyid:BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS32475.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.99.244.0/23

    Signature Algorithm: sha256WithRSAEncryption
         05:83:e8:02:eb:bf:33:83:b2:aa:06:34:2c:0b:e2:1a:d9:36:
         0a:e8:98:dd:b1:0e:fb:bb:d7:2e:79:07:0d:f8:c3:4a:14:55:
         76:ef:7d:0f:5c:37:41:60:3b:30:fa:6d:00:60:3b:2e:ad:c0:
         34:bd:7a:20:ed:b2:1c:92:3d:df:3d:57:73:66:03:a2:cd:c2:
         04:d6:52:e1:5c:85:18:f8:18:5b:2d:19:a0:a6:b0:50:52:1d:
         fc:6a:29:f1:3d:7c:d6:47:53:eb:01:4b:2d:f1:ad:16:64:a4:
         53:64:0a:23:6b:f7:80:e3:42:f3:6d:6e:b3:50:5f:82:02:8c:
         7c:56:6e:0b:ab:9b:4c:cb:18:d9:2c:1e:c0:5c:99:7e:db:63:
         fc:da:a7:17:ea:ea:99:1d:82:11:7d:a8:d9:58:33:bf:91:d7:
         b5:f0:51:10:92:ca:c6:6f:79:87:e5:a9:c7:df:bc:e8:25:7d:
         61:2b:77:65:32:1b:ad:55:64:d5:97:93:6b:e2:78:91:49:ed:
         83:10:8d:8e:88:54:7f:bb:02:a4:38:8b:bd:c3:78:58:5b:4f:
         5c:c5:4d:5d:ea:2e:ef:9a:af:e1:a4:e4:72:63:8c:ba:12:3f:
         38:56:f1:17:c4:ef:cb:80:42:eb:d6:8b:b9:a3:9b:b7:9b:81:
         61:45:22:a7
-----BEGIN CERTIFICATE-----
MIIFfjCCBGagAwIBAgIUZSTsba13PsINDvLHNZ6uBluqvGMwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZWM5MzU2ODQ4NTAzNGQ2ZjU5MDEyNjI3ODAxNWU1NTc4
Njc2NTMyM2YzMjlkNmFhMDUwHhcNMjMwNjAxMTkxOTA3WhcNMjQwNTMwMTkyNDA3
WjAzMTEwLwYDVQQDEygxQjAxMTQxOTRBRDhGRDlFNzAzRTNEQzAxODA0NkFDRkE0
ODZDNjdFMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxRcGK2Th3RQY
aoBiUBJ8tohqcEdASmbvG/eJq4Jcs4PSuolxHIwJleYhbKcU0NBVTplRXYEcxzkO
bIN9SQUcBVcnPM4Oz3eqW8Rs9aCYXt/0dRVo7b1q8+X/iCWzE/60yMtwrg9wjCbe
dX0nOPDWHGKEKmT8rKW4p1hc6oQxKtHTG8SOF6I4zi1lk4pJS3q31svTnzbVvakk
vzbmnOicSsoczLqNt/Gr4ZmFxa93r1o9bHC4SncDjyGbZzTepAFrbmVFM/wmLz5G
fvSBXTqDJOT8padeaHW9fDJjOu+BtiFyJZOht3tzfXf6NnvLJlV+k7TCKuwzia9X
LlNPz3SAGwIDAQABo4ICfjCCAnowHQYDVR0OBBYEFBsBFBlK2P2ecD49wBgEas+k
hsZ+MB8GA1UdIwQYMBaAFLsns3tY8FYG4V9SyiQuodT+trMEMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODJkNWRlNDEwMTgzN2ZkMGRmMGE3MGM4LzAv
QkIyN0IzN0I1OEYwNTYwNkUxNUY1MkNBMjQyRUExRDRGRUI2QjMwNC5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3
ZTk3MWFjL2M1NTZiOTEwLWRjNmMtNDIyOC1hZGYzLTg4MjhhYzk2ZWU2MC9lYzkz
NTY4NDg1MDM0ZDZmNTkwMTI2Mjc4MDE1ZTU1Nzg2NzY1MzIzZjMyOWQ2YWEwNS5j
ZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNyc3luYzovL3Jwa2ktcnBz
LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4MmQ1ZGU0MTAxODM3ZmQwZGYw
YTcwYzgvMC9BUzMyNDc1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8G
CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBjGP0MA0GCSqGSIb3DQEBCwUAA4IB
AQAFg+gC678zg7KqBjQsC+Ia2TYK6JjdsQ77u9cueQcN+MNKFFV2730PXDdBYDsw
+m0AYDsurcA0vXog7bIckj3fPVdzZgOizcIE1lLhXIUY+BhbLRmgprBQUh38ainx
PXzWR1PrAUst8a0WZKRTZAoja/eA40LzbW6zUF+CAox8Vm4Lq5tMyxjZLB7AXJl+
22P82qcX6uqZHYIRfajZWDO/kde18FEQksrGb3mH5anH37zoJX1hK3dlMhutVWTV
l5Nr4niRSe2DEI2OiFR/uwKkOIu9w3hYW09cxU1d6i7vmq/hpORyY4y6Ej84VvEX
xO/LgELr1ou5o5u3m4FhRSKn
-----END CERTIFICATE-----
Generated at Tue Apr 16 00:26:01 2024 by rpki-client on console-fra.rpki-client.org