Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade91fb43b4019288462c3804e6/0/32332e3132382e34342e302f32342d3234203d3e203237343938.roa
File:                     32332e3132382e34342e302f32342d3234203d3e203237343938.roa (raw, json)
Hash identifier:          zJGUGQ3AmQ9+Cblq+4S/HnktSsr+Q9U51tR6SKx7oMY=
Subject key identifier:   DB:60:DD:55:A0:E1:8E:25:53:D1:46:F1:36:8A:C6:19:4A:64:D1:55
Certificate issuer:       /CN=e8238ea0d5ed59b84507040b80fb3ba7f9ebbda5fe05af1672
Certificate serial:       64D02E91A9FA527F1814B6C8A116B4A395CA16FB
Authority key identifier: 59:64:34:7C:AF:C9:84:C6:21:12:3C:2F:5E:4F:42:37:3C:60:80:FA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f0cf986a-2ec9-4aa2-9e61-43a0efc4f2ea/e8238ea0d5ed59b84507040b80fb3ba7f9ebbda5fe05af1672.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade91fb43b4019288462c3804e6/0/32332e3132382e34342e302f32342d3234203d3e203237343938.roa
Signing time:             Sat 16 Nov 2024 09:49:47 +0000
ROA not before:           Sat 16 Nov 2024 09:44:47 +0000
ROA not after:            Sat 15 Nov 2025 09:49:47 +0000
asID:                     27498
IP address blocks:        23.128.44.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade91fb43b4019288462c3804e6/0/5964347CAFC984C621123C2F5E4F42373C6080FA.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade91fb43b4019288462c3804e6/0/5964347CAFC984C621123C2F5E4F42373C6080FA.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f0cf986a-2ec9-4aa2-9e61-43a0efc4f2ea/e8238ea0d5ed59b84507040b80fb3ba7f9ebbda5fe05af1672.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f0cf986a-2ec9-4aa2-9e61-43a0efc4f2ea/f0cf986a-2ec9-4aa2-9e61-43a0efc4f2ea.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f0cf986a-2ec9-4aa2-9e61-43a0efc4f2ea/f0cf986a-2ec9-4aa2-9e61-43a0efc4f2ea.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f0cf986a-2ec9-4aa2-9e61-43a0efc4f2ea.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 13:39:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:d0:2e:91:a9:fa:52:7f:18:14:b6:c8:a1:16:b4:a3:95:ca:16:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8238ea0d5ed59b84507040b80fb3ba7f9ebbda5fe05af1672
        Validity
            Not Before: Nov 16 09:44:47 2024 GMT
            Not After : Nov 15 09:49:47 2025 GMT
        Subject: CN=DB60DD55A0E18E2553D146F1368AC6194A64D155
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:56:c8:fe:5b:60:ee:29:df:b3:a8:89:d9:30:
                    a8:71:73:0a:0d:9f:17:ff:6f:dd:2e:3a:07:0a:7e:
                    de:e7:67:f2:5e:49:d7:f3:e2:49:99:e1:52:57:3d:
                    5a:47:95:fa:c3:f1:94:43:a8:6c:29:5b:86:de:09:
                    36:0e:28:a5:d0:bf:7c:c0:59:26:d9:94:0c:0a:42:
                    ca:c7:91:13:2b:bd:ee:15:39:0c:3a:86:e3:97:77:
                    fb:c1:c5:46:aa:b7:cd:e1:78:fb:0e:97:7d:e4:bf:
                    45:23:95:fb:24:fc:0e:13:2c:39:60:62:57:9d:42:
                    5d:0f:90:b2:eb:56:34:2a:ab:ae:ae:47:87:07:d5:
                    38:a8:13:d5:1d:f1:db:55:45:ed:4b:4a:97:9e:26:
                    e9:5a:43:34:0d:93:f2:a2:f7:35:c2:11:3a:b8:20:
                    46:13:53:6e:30:b4:11:c8:a9:72:a9:79:52:a1:5a:
                    a5:65:40:a4:c5:67:cb:cd:ff:bc:53:2e:88:7e:e8:
                    1c:8c:ed:24:76:00:d1:ab:b2:88:2e:9c:e6:34:1f:
                    82:4c:5b:57:a1:cf:1e:6c:70:60:ba:c2:eb:4b:49:
                    cf:59:eb:59:49:36:e2:d7:23:f7:e8:ea:59:cf:55:
                    c5:2c:33:e4:db:88:71:78:80:cd:0a:3a:72:28:58:
                    72:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:60:DD:55:A0:E1:8E:25:53:D1:46:F1:36:8A:C6:19:4A:64:D1:55
            X509v3 Authority Key Identifier:
                keyid:59:64:34:7C:AF:C9:84:C6:21:12:3C:2F:5E:4F:42:37:3C:60:80:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade91fb43b4019288462c3804e6/0/5964347CAFC984C621123C2F5E4F42373C6080FA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f0cf986a-2ec9-4aa2-9e61-43a0efc4f2ea/e8238ea0d5ed59b84507040b80fb3ba7f9ebbda5fe05af1672.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade91fb43b4019288462c3804e6/0/32332e3132382e34342e302f32342d3234203d3e203237343938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.128.44.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7a:91:c2:24:79:36:04:ae:2c:03:11:de:2c:34:1b:ee:68:37:
         3c:81:a7:47:25:e4:de:05:9b:54:1d:92:79:96:e6:42:da:66:
         49:a5:ed:e4:cc:c7:33:6b:cb:82:67:d8:ed:26:76:b7:01:90:
         6f:7f:1a:00:d8:f1:af:f8:74:5a:55:e7:c6:06:8e:2b:a9:a9:
         20:1d:13:25:cd:e2:d1:5f:20:c2:10:43:39:d0:4a:a8:eb:01:
         a7:b4:26:ef:d8:cf:86:89:e8:96:17:5a:1e:9b:66:6b:97:ef:
         9f:d6:65:d9:a4:01:73:7c:86:aa:60:ed:a9:8d:08:74:19:cc:
         8e:62:9d:8d:a8:2e:c2:bb:b7:4d:da:fb:6c:c7:23:ec:47:2f:
         62:0d:80:d1:38:a8:0c:75:d0:9e:aa:54:ab:87:cc:08:c5:d2:
         5c:3d:e4:54:1b:5c:67:95:11:00:53:51:73:90:84:42:36:7c:
         0a:5d:6a:32:4f:ed:b8:cc:96:6d:6b:28:a4:56:08:ca:15:98:
         d7:74:ea:81:41:62:d5:dd:2a:45:16:ec:d1:65:75:72:cf:23:
         b2:14:d7:83:82:d2:61:d9:e2:57:be:ac:7d:62:f7:e3:16:e5:
         53:c5:07:6f:66:73:63:fa:5d:c4:ca:59:e2:15:04:1d:11:91:
         30:e3:9c:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 15:28:38 2024 by rpki-client on console-fra.rpki-client.org