Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/32332e3136302e3135322e302f32342d3234203d3e203534313438.roa
File:                     32332e3136302e3135322e302f32342d3234203d3e203534313438.roa (raw, json)
Hash identifier:          PgflrtDC2ZgT1wNLdCkbjioZ7SxqNJ6Q9gSvYwWhH/w=
Subject key identifier:   1B:A1:C4:E5:DD:1E:BE:D4:64:DA:C2:31:07:49:24:55:AF:21:4A:0F
Certificate issuer:       /CN=7ecae3204952da74eb1b93714b67cc61bc4f7b1595a2132788
Certificate serial:       5DD3C3E1B49BAA0E6E517CFE3AD731E5B8536C3E
Authority key identifier: 04:40:EC:91:AE:04:E8:04:91:BF:66:17:36:09:7F:35:69:C7:DB:1B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b/7ecae3204952da74eb1b93714b67cc61bc4f7b1595a2132788.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/32332e3136302e3135322e302f32342d3234203d3e203534313438.roa
Signing time:             Thu 24 Oct 2024 21:03:28 +0000
ROA not before:           Thu 24 Oct 2024 20:58:28 +0000
ROA not after:            Thu 23 Oct 2025 21:03:28 +0000
asID:                     54148
IP address blocks:        23.160.152.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/0440EC91AE04E80491BF661736097F3569C7DB1B.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/0440EC91AE04E80491BF661736097F3569C7DB1B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b/7ecae3204952da74eb1b93714b67cc61bc4f7b1595a2132788.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 13 Dec 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:d3:c3:e1:b4:9b:aa:0e:6e:51:7c:fe:3a:d7:31:e5:b8:53:6c:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ecae3204952da74eb1b93714b67cc61bc4f7b1595a2132788
        Validity
            Not Before: Oct 24 20:58:28 2024 GMT
            Not After : Oct 23 21:03:28 2025 GMT
        Subject: CN=1BA1C4E5DD1EBED464DAC23107492455AF214A0F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:3b:89:f3:5f:aa:9e:64:3a:7a:5d:e6:95:8c:
                    2a:d5:ba:46:89:ac:5b:92:71:47:56:a5:29:41:db:
                    02:97:a8:57:19:c5:60:7a:23:ca:1c:51:14:51:d2:
                    82:f3:a5:c5:a8:ad:41:e8:b9:d7:55:11:41:31:f8:
                    2c:c2:d8:d9:69:25:62:d6:29:2f:2e:79:98:aa:55:
                    b4:20:c7:a5:51:30:60:3f:a4:97:e3:97:b0:7e:be:
                    cd:81:00:a8:03:97:8c:c9:98:c2:48:7f:2a:8a:64:
                    49:a2:07:16:d6:7d:cf:5d:de:de:4a:c2:7e:47:21:
                    fb:f8:92:14:2d:a7:26:66:09:48:df:81:85:d6:3c:
                    70:9d:4d:08:b2:18:d7:82:99:dd:f9:13:d4:f7:ff:
                    53:06:b1:7f:8a:d3:54:0f:35:68:b4:84:c5:43:41:
                    94:7b:ed:54:61:df:e1:45:32:dc:0a:19:7d:a7:fc:
                    a2:15:15:20:53:79:b0:24:48:b4:b5:f8:9c:1d:12:
                    7d:0b:53:ca:fe:91:8e:29:7f:ea:85:e9:60:88:33:
                    1a:34:a7:7b:ae:ff:d5:3b:3f:4e:c8:3f:db:99:75:
                    f5:38:7c:46:8f:51:6c:e1:34:21:68:09:e1:5f:f7:
                    7c:bc:a2:40:9d:0c:63:76:1c:bf:59:b5:e1:11:a5:
                    a5:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:A1:C4:E5:DD:1E:BE:D4:64:DA:C2:31:07:49:24:55:AF:21:4A:0F
            X509v3 Authority Key Identifier:
                keyid:04:40:EC:91:AE:04:E8:04:91:BF:66:17:36:09:7F:35:69:C7:DB:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/0440EC91AE04E80491BF661736097F3569C7DB1B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b/7ecae3204952da74eb1b93714b67cc61bc4f7b1595a2132788.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/32332e3136302e3135322e302f32342d3234203d3e203534313438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.160.152.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a6:6c:ed:ec:53:60:c3:c5:5e:f8:b2:ab:91:b7:46:8a:b0:cb:
         da:c3:cc:f5:1f:d2:dd:6b:03:cf:c1:77:8a:be:e4:c6:5b:4b:
         6d:5a:22:e4:d5:b1:71:1c:5a:3d:7f:ce:58:1b:e6:a4:10:e1:
         4a:22:20:b1:76:ad:73:6d:22:f3:6d:d8:4f:8d:14:14:e4:97:
         6a:58:a9:d9:71:a2:d1:13:93:bf:1f:3f:ed:f3:d1:38:b7:d8:
         a2:d2:d8:73:7a:81:ef:ab:50:a8:26:e6:d1:28:8d:2d:f6:9b:
         1d:86:20:b3:b2:16:b3:c7:30:91:40:d7:56:95:cf:24:1c:20:
         ae:bc:b7:36:62:5b:55:e3:6a:73:47:ec:a7:a3:42:13:30:34:
         68:58:25:b5:80:f1:f0:cc:9e:b5:07:74:fb:79:e5:c6:eb:10:
         be:30:8a:c3:16:9f:ba:55:b8:d8:29:ff:b1:2b:ad:9a:c1:f7:
         6b:23:ec:e7:e3:e4:de:0e:3f:be:71:94:a3:61:0c:7b:54:b4:
         51:dd:a0:c0:12:bd:81:f3:aa:04:1d:d2:7b:18:87:44:d8:b7:
         b6:28:b6:7f:20:f2:88:9e:9f:25:0f:e2:d8:f0:f9:87:83:84:
         95:46:13:cf:ed:60:9d:4c:7b:58:d1:88:05:a5:d0:6d:27:a9:
         51:08:f2:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 12 14:40:46 2024 by rpki-client on console-ams.rpki-client.org