Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8baa579c018cdcf2c8354b52/0/32332e3137302e3132302e302f32342d3234203d3e20323135393037.roa
File:                     32332e3137302e3132302e302f32342d3234203d3e20323135393037.roa (raw, json)
Hash identifier:          6jICgDrMDxzNq62poJ29D3i3ykqBEsFsCMr5GiglcyU=
Subject key identifier:   F6:EC:6B:0B:11:75:F7:F3:10:97:9E:FD:EF:B6:52:4A:D1:6B:86:2B
Certificate issuer:       /CN=e7ddebf1ad37d7cbca3033a60e7f0302d626b96a0fcf97ff3d
Certificate serial:       0E18AD3607B60A9C6A3DB40DBF8B99C9AF6D8C23
Authority key identifier: 46:B9:FD:BC:20:19:62:8A:80:55:D0:3A:B8:27:C9:E7:E4:00:73:BF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8b7b8f22-587d-41e9-a798-93c4775f7fa1/e7ddebf1ad37d7cbca3033a60e7f0302d626b96a0fcf97ff3d.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8baa579c018cdcf2c8354b52/0/32332e3137302e3132302e302f32342d3234203d3e20323135393037.roa
Signing time:             Wed 31 Jan 2024 02:22:48 +0000
ROA not before:           Wed 31 Jan 2024 02:17:48 +0000
ROA not after:            Wed 29 Jan 2025 02:22:48 +0000
asID:                     215907
IP address blocks:        23.170.120.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade8baa579c018cdcf2c8354b52/0/46B9FDBC2019628A8055D03AB827C9E7E40073BF.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade8baa579c018cdcf2c8354b52/0/46B9FDBC2019628A8055D03AB827C9E7E40073BF.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8b7b8f22-587d-41e9-a798-93c4775f7fa1/e7ddebf1ad37d7cbca3033a60e7f0302d626b96a0fcf97ff3d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8b7b8f22-587d-41e9-a798-93c4775f7fa1/8b7b8f22-587d-41e9-a798-93c4775f7fa1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8b7b8f22-587d-41e9-a798-93c4775f7fa1/8b7b8f22-587d-41e9-a798-93c4775f7fa1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8b7b8f22-587d-41e9-a798-93c4775f7fa1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 01:50:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:18:ad:36:07:b6:0a:9c:6a:3d:b4:0d:bf:8b:99:c9:af:6d:8c:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7ddebf1ad37d7cbca3033a60e7f0302d626b96a0fcf97ff3d
        Validity
            Not Before: Jan 31 02:17:48 2024 GMT
            Not After : Jan 29 02:22:48 2025 GMT
        Subject: CN=F6EC6B0B1175F7F310979EFDEFB6524AD16B862B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:98:a2:f8:90:61:45:bc:ef:2c:0f:4e:26:7b:
                    1b:cc:01:80:a4:d2:45:07:2b:28:08:cf:42:cd:df:
                    c9:60:5d:13:73:8c:48:57:c6:81:de:6d:65:d0:e9:
                    2c:4b:cd:c2:e2:d9:97:c5:98:77:7b:0d:47:34:ac:
                    7b:ea:61:6c:8a:31:f9:f9:db:8c:62:13:e2:21:db:
                    0f:ea:c4:a4:bc:51:d3:09:3d:91:7c:a9:47:d0:5b:
                    3d:19:56:5b:be:5d:a1:78:3c:82:36:27:b8:4f:30:
                    16:8d:46:86:29:d8:5a:6b:f7:27:d9:61:19:39:aa:
                    ee:2d:b1:db:de:5e:0c:6e:61:40:61:28:da:77:b7:
                    55:6d:ce:ea:8c:af:6f:ca:f8:60:20:d8:e4:31:88:
                    7a:dd:d8:f3:ad:2a:6e:92:85:a0:ce:55:48:4d:e2:
                    4d:73:39:83:af:e4:25:d6:8e:3b:ed:ae:15:47:11:
                    1b:0f:94:8c:73:ea:54:d3:5b:c3:2e:0a:23:72:91:
                    1b:4b:8a:74:a8:d4:67:7d:56:00:ed:3c:4a:49:ef:
                    4b:a2:2e:0d:3f:7e:3b:1c:5a:5a:96:5a:f1:0f:55:
                    6f:e7:ca:7d:fd:db:f1:66:75:5f:03:63:81:5e:42:
                    0f:d8:4b:dc:81:f4:2b:77:ed:ec:92:3e:bf:60:9d:
                    b5:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:EC:6B:0B:11:75:F7:F3:10:97:9E:FD:EF:B6:52:4A:D1:6B:86:2B
            X509v3 Authority Key Identifier:
                keyid:46:B9:FD:BC:20:19:62:8A:80:55:D0:3A:B8:27:C9:E7:E4:00:73:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8baa579c018cdcf2c8354b52/0/46B9FDBC2019628A8055D03AB827C9E7E40073BF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8b7b8f22-587d-41e9-a798-93c4775f7fa1/e7ddebf1ad37d7cbca3033a60e7f0302d626b96a0fcf97ff3d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8baa579c018cdcf2c8354b52/0/32332e3137302e3132302e302f32342d3234203d3e20323135393037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.170.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         93:d9:b6:ae:f1:c9:4f:39:27:12:c9:db:26:79:d3:30:fd:b5:
         ac:00:3e:2d:ee:96:1e:63:2d:6e:86:d0:88:4b:ab:0d:1d:b3:
         0c:ab:f8:ae:15:84:4d:e6:a3:07:2e:4f:a3:32:4a:29:d7:22:
         c2:80:82:75:f1:ed:69:f5:86:54:e8:dd:b2:80:e9:80:f4:b9:
         3d:27:d1:bc:39:61:b4:ed:f4:67:97:64:74:4e:c7:23:5c:22:
         8b:65:c5:5e:8f:6e:3b:73:0a:45:65:b2:8e:64:b8:61:e9:84:
         8b:a6:18:18:73:bf:3d:45:26:73:0f:e2:9c:53:c6:de:96:3f:
         2b:c4:49:6e:7e:c1:f0:83:a9:3f:1b:97:d4:25:a7:e0:ff:8b:
         97:8e:40:15:9b:52:27:a7:fc:db:3e:7c:ab:28:7e:aa:d7:3e:
         55:3b:a6:15:70:59:9a:cb:5a:3b:bf:ba:d1:0f:bf:64:97:63:
         ff:00:8c:5f:79:e3:20:b3:f5:59:b7:eb:09:fe:e6:f8:35:78:
         dd:f2:51:21:29:10:5b:66:73:11:f3:b7:15:10:a4:c6:7a:b7:
         aa:cd:e2:fa:ae:f6:82:90:c1:98:5d:f5:08:bc:0b:2b:89:ff:
         7f:0b:2f:50:c3:c5:4e:5b:84:83:b6:d6:03:ab:16:c0:55:8a:
         18:fa:e3:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 01:33:37 2024 by rpki-client on console-ams.rpki-client.org