Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8693f0600186f0d510a65d11/0/32332e3132382e3130302e302f32342d3234203d3e203533343237.roa
File:                     32332e3132382e3130302e302f32342d3234203d3e203533343237.roa (raw, json)
Hash identifier:          /g8+yoqUtUsPa89a82275fBtA533Kqg9cw2AJTwdTVg=
Subject key identifier:   62:42:43:A1:80:67:C0:13:FD:51:B1:4F:3C:B0:68:EE:95:63:EB:CD
Certificate issuer:       /CN=dd9d9fe5ccb47bb94f8eb964236a5c3f27851abd8c6ad6869e
Certificate serial:       7FC4A0FAA9BFF9EDF223118DF04B3AA65AC69771
Authority key identifier: DA:28:0F:70:DF:67:81:E8:89:EB:4B:A3:E0:D9:BB:69:FA:6A:09:05
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/88c69486-3e14-4f26-9f99-02cf7aaab7bf/dd9d9fe5ccb47bb94f8eb964236a5c3f27851abd8c6ad6869e.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186f0d510a65d11/0/32332e3132382e3130302e302f32342d3234203d3e203533343237.roa
Signing time:             Wed 30 Oct 2024 17:09:52 +0000
ROA not before:           Wed 30 Oct 2024 17:04:52 +0000
ROA not after:            Wed 29 Oct 2025 17:09:52 +0000
asID:                     53427
IP address blocks:        23.128.100.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186f0d510a65d11/0/DA280F70DF6781E889EB4BA3E0D9BB69FA6A0905.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186f0d510a65d11/0/DA280F70DF6781E889EB4BA3E0D9BB69FA6A0905.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/88c69486-3e14-4f26-9f99-02cf7aaab7bf/dd9d9fe5ccb47bb94f8eb964236a5c3f27851abd8c6ad6869e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/88c69486-3e14-4f26-9f99-02cf7aaab7bf/88c69486-3e14-4f26-9f99-02cf7aaab7bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/88c69486-3e14-4f26-9f99-02cf7aaab7bf/88c69486-3e14-4f26-9f99-02cf7aaab7bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/88c69486-3e14-4f26-9f99-02cf7aaab7bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:c4:a0:fa:a9:bf:f9:ed:f2:23:11:8d:f0:4b:3a:a6:5a:c6:97:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dd9d9fe5ccb47bb94f8eb964236a5c3f27851abd8c6ad6869e
        Validity
            Not Before: Oct 30 17:04:52 2024 GMT
            Not After : Oct 29 17:09:52 2025 GMT
        Subject: CN=624243A18067C013FD51B14F3CB068EE9563EBCD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:63:48:a3:bc:64:82:14:48:2f:29:0e:19:14:
                    03:3a:06:35:2a:b7:b4:e5:60:11:15:db:48:e3:90:
                    02:14:81:a8:e1:58:3c:00:02:e8:2a:8a:57:3a:9d:
                    26:3b:ad:8c:41:c6:e8:f3:e9:e6:cf:82:c0:33:34:
                    3e:47:9a:75:ba:d5:ac:8d:52:2c:f5:c3:48:68:b8:
                    4d:ea:12:93:67:b2:36:eb:96:45:8f:7a:e4:6a:2f:
                    8b:97:1b:3e:d3:63:4d:75:5d:e2:d4:c1:76:69:5e:
                    3a:d9:d9:79:82:9d:f3:a0:4c:3d:f0:be:40:df:65:
                    dd:61:f3:96:f0:da:85:d4:2a:bd:8a:9c:54:9d:f5:
                    4d:5c:60:f9:28:f6:4f:e5:3d:77:b7:c5:14:76:2f:
                    49:a7:2b:5f:a8:ca:5d:b0:ad:94:01:a4:97:22:a1:
                    2d:55:a1:0c:b0:b2:9d:1b:9b:6f:06:3a:9c:68:d5:
                    22:d7:c5:b0:f2:5d:10:df:a9:18:e3:67:4d:f5:e0:
                    0e:21:db:db:47:25:3e:3b:2e:04:a3:db:e7:02:e5:
                    b0:09:f7:83:15:a2:ce:06:a5:02:9a:d1:88:c5:b5:
                    85:38:85:0d:6c:ea:0b:52:30:72:8a:35:f0:5f:10:
                    71:a5:18:84:aa:5d:36:29:a0:05:b7:53:24:41:9b:
                    b4:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:42:43:A1:80:67:C0:13:FD:51:B1:4F:3C:B0:68:EE:95:63:EB:CD
            X509v3 Authority Key Identifier:
                keyid:DA:28:0F:70:DF:67:81:E8:89:EB:4B:A3:E0:D9:BB:69:FA:6A:09:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186f0d510a65d11/0/DA280F70DF6781E889EB4BA3E0D9BB69FA6A0905.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/88c69486-3e14-4f26-9f99-02cf7aaab7bf/dd9d9fe5ccb47bb94f8eb964236a5c3f27851abd8c6ad6869e.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186f0d510a65d11/0/32332e3132382e3130302e302f32342d3234203d3e203533343237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.128.100.0/24

    Signature Algorithm: sha256WithRSAEncryption
         74:90:25:d3:83:e4:67:1b:2f:f3:26:6d:7b:0c:b7:85:5f:6d:
         38:3f:50:4a:81:9f:f9:61:36:07:6e:b9:ee:f0:86:d2:01:2e:
         26:20:ed:cc:55:5e:2e:ef:f0:e4:92:ee:b0:62:8f:76:49:d1:
         2a:1e:ae:5b:45:4f:1e:9b:f8:ff:1f:1c:7b:c3:c9:6c:f3:6f:
         62:c9:c6:c3:1f:5d:ab:3b:b4:a8:86:9c:a0:e4:3b:34:15:81:
         4d:80:ee:0e:7b:7e:b4:4d:1c:2a:fc:69:9c:e6:9d:1a:8e:23:
         5b:56:e0:af:59:e7:f1:0b:24:a8:23:26:a8:19:ca:92:35:3d:
         80:b9:69:14:ea:86:af:3e:61:6c:75:92:ca:71:dd:26:f0:09:
         0c:92:7b:97:c8:05:02:5b:60:49:b8:b5:67:3a:6c:70:65:16:
         06:09:68:91:3d:61:97:d2:f4:ad:e1:6c:fa:9e:6e:bc:48:2d:
         f3:1d:a4:0c:e8:7b:a2:3b:db:ac:6a:5f:7d:6c:09:3b:1d:9f:
         c3:8d:a9:f6:b4:76:c7:63:59:9e:e9:a1:c0:ba:f7:37:17:3b:
         53:ad:5a:b0:9d:a2:2a:45:dd:32:7f:d0:33:e2:a5:b8:d9:c7:
         e4:36:ee:bb:b3:80:1f:ab:0d:b6:8d:22:17:14:47:e6:72:56:
         15:21:d8:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 06:35:49 2024 by rpki-client on console-ams.rpki-client.org