Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade89d095ae0189d3087fdd0326/0/32332e3136302e34302e302f32342d3234203d3e203236313935.roa
File:                     32332e3136302e34302e302f32342d3234203d3e203236313935.roa (raw, json)
Hash identifier:          /kdj+3aPJMNd9WBzUW94lVzCslmZUGfEWd1ikrblaCc=
Subject key identifier:   52:4B:C6:48:33:8F:17:C4:19:1D:DB:10:34:91:02:E2:3A:B7:F3:9F
Certificate issuer:       /CN=589b794a16997b4277977b09df9fd5c57dc3f7cfa7d2cba7c9
Certificate serial:       53583999F2EA4F07F1B876D3EFB88AECDF672817
Authority key identifier: E4:5A:B0:95:6C:BB:0D:ED:33:89:02:52:EB:8E:19:AA:87:33:AD:89
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/33ecaab9-1807-4780-80d0-6a8df954060e/589b794a16997b4277977b09df9fd5c57dc3f7cfa7d2cba7c9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade89d095ae0189d3087fdd0326/0/32332e3136302e34302e302f32342d3234203d3e203236313935.roa
Signing time:             Wed 06 Mar 2024 07:13:03 +0000
ROA not before:           Wed 06 Mar 2024 07:08:03 +0000
ROA not after:            Wed 05 Mar 2025 07:13:03 +0000
asID:                     26195
IP address blocks:        23.160.40.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade89d095ae0189d3087fdd0326/0/E45AB0956CBB0DED33890252EB8E19AA8733AD89.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade89d095ae0189d3087fdd0326/0/E45AB0956CBB0DED33890252EB8E19AA8733AD89.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/33ecaab9-1807-4780-80d0-6a8df954060e/589b794a16997b4277977b09df9fd5c57dc3f7cfa7d2cba7c9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/33ecaab9-1807-4780-80d0-6a8df954060e/33ecaab9-1807-4780-80d0-6a8df954060e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/33ecaab9-1807-4780-80d0-6a8df954060e/33ecaab9-1807-4780-80d0-6a8df954060e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/33ecaab9-1807-4780-80d0-6a8df954060e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 16 Jun 2024 19:17:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:58:39:99:f2:ea:4f:07:f1:b8:76:d3:ef:b8:8a:ec:df:67:28:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=589b794a16997b4277977b09df9fd5c57dc3f7cfa7d2cba7c9
        Validity
            Not Before: Mar  6 07:08:03 2024 GMT
            Not After : Mar  5 07:13:03 2025 GMT
        Subject: CN=524BC648338F17C4191DDB10349102E23AB7F39F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:04:36:d8:0c:17:66:08:75:c6:4c:40:96:0a:
                    b4:93:31:d5:e5:0c:6b:67:2b:a1:f2:fe:72:fa:0d:
                    d4:dd:7c:99:af:4f:16:65:8d:fd:6b:07:6a:36:6d:
                    a2:8e:a2:ee:e2:5c:ba:25:e2:5e:c4:e9:0e:7d:2e:
                    52:ca:d0:7c:46:33:f6:d1:2d:17:76:b2:19:eb:a9:
                    d3:c9:78:f4:d1:45:23:d8:fc:9e:80:13:5b:f1:84:
                    6c:c4:5b:8d:16:39:4d:be:64:ee:87:59:47:80:5c:
                    93:41:c4:ea:ea:7b:06:8c:15:c8:0c:5a:76:82:4e:
                    8e:5b:34:8e:69:dc:51:9c:0f:d5:d0:02:fb:f2:b1:
                    ec:a3:4e:cb:e9:a4:07:1c:c6:c3:9f:e7:c6:59:bb:
                    85:16:bc:70:5f:0a:41:b7:13:2d:18:28:17:1f:42:
                    30:d1:25:f7:3e:73:2f:73:e5:04:5f:13:21:93:15:
                    49:f2:02:62:81:f1:b6:e5:3e:e9:17:2e:0a:90:29:
                    e9:61:fe:01:dc:71:d3:59:f9:90:20:b2:88:83:3c:
                    b9:0e:73:f8:2e:ed:54:f2:76:d6:18:67:22:8b:d4:
                    18:dc:fc:ff:e1:e2:6f:f8:75:10:66:de:1d:fb:35:
                    d8:e2:04:35:a9:d9:62:6b:82:a4:04:bd:f1:96:40:
                    25:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:4B:C6:48:33:8F:17:C4:19:1D:DB:10:34:91:02:E2:3A:B7:F3:9F
            X509v3 Authority Key Identifier:
                keyid:E4:5A:B0:95:6C:BB:0D:ED:33:89:02:52:EB:8E:19:AA:87:33:AD:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade89d095ae0189d3087fdd0326/0/E45AB0956CBB0DED33890252EB8E19AA8733AD89.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/33ecaab9-1807-4780-80d0-6a8df954060e/589b794a16997b4277977b09df9fd5c57dc3f7cfa7d2cba7c9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade89d095ae0189d3087fdd0326/0/32332e3136302e34302e302f32342d3234203d3e203236313935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.160.40.0/24

    Signature Algorithm: sha256WithRSAEncryption
         04:14:b4:af:02:56:2d:e3:29:69:57:03:3c:cc:36:24:01:26:
         23:6b:f6:94:64:b6:9b:c3:75:6a:d5:ee:a7:5c:0f:47:63:eb:
         fd:4d:38:34:01:ed:6b:42:46:57:61:cd:7d:29:44:ef:38:b4:
         3f:e9:eb:39:8d:fe:d6:41:cb:01:0d:a4:3b:1e:78:22:0d:9a:
         13:4c:fc:ba:d5:51:88:db:27:0a:b7:9a:20:05:62:39:27:8c:
         b2:72:b9:0d:b5:c4:70:4e:27:be:18:f2:90:28:61:63:a8:a4:
         17:dd:db:28:a4:29:72:e0:9e:2e:db:76:03:2b:6d:b1:d7:5a:
         de:e7:a2:1f:f6:f9:46:6f:eb:50:c6:77:c9:92:4a:4f:41:7c:
         f7:80:36:1e:42:e5:b4:e0:d1:bd:0f:77:64:b5:a6:96:41:e5:
         a7:6a:63:79:62:f6:a9:0e:ab:d6:85:13:7c:67:73:b5:49:1b:
         50:b5:f3:be:08:5d:b1:15:d9:97:4b:e8:81:ae:8b:22:43:50:
         0d:70:a4:59:29:2c:cb:fe:f1:12:81:cc:67:76:d2:98:e0:4f:
         bc:96:96:d3:02:fc:44:15:25:81:b7:c2:8d:e2:a8:df:55:91:
         7f:2f:84:56:49:61:9e:79:f3:5a:a4:b4:f1:ae:a1:e1:30:14:
         33:38:e4:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 19:15:51 2024 by rpki-client on console-ams.rpki-client.org