Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/32332e3136302e3135322e302f32342d3234203d3e20323030333531.roa
File:                     32332e3136302e3135322e302f32342d3234203d3e20323030333531.roa (raw, json)
Hash identifier:          0vkyWImINxb0SCuU5eo9q0hrEq5oNCuJq+FM/4bPVJQ=
Subject key identifier:   E2:D3:10:C6:02:E8:88:C4:2C:04:16:D7:A9:7E:99:34:04:CC:85:B7
Certificate issuer:       /CN=7ecae3204952da74eb1b93714b67cc61bc4f7b1595a2132788
Certificate serial:       3705654D5C48EA9C841C43F2E95A101BA22C3437
Authority key identifier: 04:40:EC:91:AE:04:E8:04:91:BF:66:17:36:09:7F:35:69:C7:DB:1B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b/7ecae3204952da74eb1b93714b67cc61bc4f7b1595a2132788.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/32332e3136302e3135322e302f32342d3234203d3e20323030333531.roa
Signing time:             Thu 24 Oct 2024 21:03:27 +0000
ROA not before:           Thu 24 Oct 2024 20:58:27 +0000
ROA not after:            Thu 23 Oct 2025 21:03:27 +0000
asID:                     200351
IP address blocks:        23.160.152.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/0440EC91AE04E80491BF661736097F3569C7DB1B.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/0440EC91AE04E80491BF661736097F3569C7DB1B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b/7ecae3204952da74eb1b93714b67cc61bc4f7b1595a2132788.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 00:08:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:05:65:4d:5c:48:ea:9c:84:1c:43:f2:e9:5a:10:1b:a2:2c:34:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ecae3204952da74eb1b93714b67cc61bc4f7b1595a2132788
        Validity
            Not Before: Oct 24 20:58:27 2024 GMT
            Not After : Oct 23 21:03:27 2025 GMT
        Subject: CN=E2D310C602E888C42C0416D7A97E993404CC85B7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:93:bf:17:42:4d:8e:a5:da:2f:d2:64:4c:cc:
                    42:03:49:94:8b:bf:26:d4:18:c0:42:bc:d9:b4:3d:
                    8f:5d:4a:02:d9:71:ba:e0:f7:af:ab:92:f1:e6:5d:
                    c3:30:de:e8:60:e6:eb:69:cb:fa:49:68:18:5a:5f:
                    58:73:20:18:bd:dd:16:26:d6:98:23:cc:4a:8e:01:
                    bd:7e:76:ef:5f:f8:00:cf:49:49:e1:9d:1e:1d:22:
                    09:26:44:b8:5a:d2:41:bf:2e:ce:54:4b:60:e7:5a:
                    76:b2:9e:18:9c:46:c8:8c:32:05:c2:92:96:d6:5c:
                    62:ed:1a:a8:e4:ab:cb:af:0e:75:02:cd:3c:f0:2e:
                    3f:0c:e5:47:ae:c2:50:c3:f0:4f:dd:4c:8e:e1:70:
                    ea:7f:c9:7e:4d:ea:fb:20:bd:7f:ef:33:4c:5d:6d:
                    cc:9e:c1:df:20:6e:bb:7e:9a:85:b0:32:be:5b:66:
                    89:6f:4a:85:b2:d1:70:9b:eb:8b:33:49:8a:4a:ba:
                    ff:02:79:08:66:6e:f2:b0:66:a1:db:05:25:35:e0:
                    02:60:69:a0:46:78:fd:71:dd:66:9d:55:4f:af:d6:
                    10:61:94:e4:54:59:ab:de:ca:15:2d:cd:a3:e2:3c:
                    37:f3:3d:93:c5:45:7e:79:ad:65:41:22:bf:17:76:
                    b6:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:D3:10:C6:02:E8:88:C4:2C:04:16:D7:A9:7E:99:34:04:CC:85:B7
            X509v3 Authority Key Identifier:
                keyid:04:40:EC:91:AE:04:E8:04:91:BF:66:17:36:09:7F:35:69:C7:DB:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/0440EC91AE04E80491BF661736097F3569C7DB1B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b/7ecae3204952da74eb1b93714b67cc61bc4f7b1595a2132788.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/32332e3136302e3135322e302f32342d3234203d3e20323030333531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.160.152.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3f:5c:86:72:b9:9b:31:c1:bd:b4:f9:e5:53:4d:c8:27:22:36:
         0d:90:ae:78:6b:43:9a:bd:71:cd:7e:d7:19:41:1f:29:86:1c:
         8b:62:97:03:e7:1e:e3:a7:53:16:33:19:1c:71:42:4d:16:38:
         c8:1f:53:76:a5:66:07:99:c0:99:b6:b5:b4:25:4e:6b:ab:3f:
         71:d4:82:9e:b3:df:cb:40:3d:8c:d8:dc:82:86:8b:70:92:63:
         f1:52:14:23:50:37:87:8f:b7:b5:65:97:c2:88:88:4e:9a:6e:
         5c:9f:2b:f8:ec:9f:eb:3a:16:54:39:2f:28:d3:c7:e2:98:fe:
         d7:ec:71:49:21:4b:96:0f:37:fb:a7:6c:86:66:fc:4d:a0:87:
         ac:b9:2f:f3:87:9b:ee:a3:d8:04:65:8f:ce:e8:a1:6d:7c:19:
         51:b1:7b:f0:70:eb:41:c7:de:bf:f2:19:37:93:fd:69:52:7c:
         1b:f5:5a:73:8a:7b:18:d6:7b:b3:fc:5e:00:45:21:6c:70:74:
         91:62:fb:db:ef:13:98:1c:3b:4d:b1:fd:be:9f:ca:30:6d:3c:
         d8:40:25:bd:db:1a:67:2d:84:0b:d1:05:d9:4e:fd:da:df:be:
         71:9e:6d:b1:aa:70:10:4a:b8:6e:5c:2a:b2:67:c6:10:67:e3:
         f9:73:29:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 23:10:44 2024 by rpki-client on console-fra.rpki-client.org