Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/32332e38382e3232342e302f31392d3139203d3e203134363138.roa
File:                     32332e38382e3232342e302f31392d3139203d3e203134363138.roa (raw, json)
Hash identifier:          HG7iGjFJWXedygSaG5NBX2Stlwp3N4+bbJI+fBn5gj8=
Subject key identifier:   C4:47:88:A0:C3:E6:17:46:F4:A6:6E:BC:E6:4B:29:D8:5E:76:48:01
Certificate issuer:       /CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4
Certificate serial:       34975AF1B990548B87D4FADC7FDA41EE642F0A52
Authority key identifier: 62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/32332e38382e3232342e302f31392d3139203d3e203134363138.roa
Signing time:             Mon 14 Oct 2024 14:29:36 +0000
ROA not before:           Mon 14 Oct 2024 14:24:36 +0000
ROA not after:            Mon 13 Oct 2025 14:29:36 +0000
asID:                     14618
IP address blocks:        23.88.224.0/19 maxlen: 19

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/e203869d-6b95-465f-b4dc-088a5a2103fc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/e203869d-6b95-465f-b4dc-088a5a2103fc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Oct 2024 11:55:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:97:5a:f1:b9:90:54:8b:87:d4:fa:dc:7f:da:41:ee:64:2f:0a:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4
        Validity
            Not Before: Oct 14 14:24:36 2024 GMT
            Not After : Oct 13 14:29:36 2025 GMT
        Subject: CN=C44788A0C3E61746F4A66EBCE64B29D85E764801
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:97:15:5b:ea:ba:05:10:86:d4:d5:d2:8a:35:
                    09:be:19:41:c4:bd:53:63:a4:19:11:4d:2e:a2:03:
                    eb:85:34:3e:6f:a2:5b:06:84:f9:2b:b7:2a:a3:15:
                    fd:d3:bd:6d:9d:13:d2:8a:6d:34:3c:0b:ed:8f:0d:
                    e1:37:0f:1a:fa:84:14:ee:45:94:cb:0d:8b:b4:2a:
                    c4:32:af:fa:9c:82:7e:04:92:f0:ba:9b:a8:3a:d6:
                    8c:93:dc:02:af:c3:35:0a:58:05:b7:60:0e:5c:62:
                    ad:3f:f2:0e:02:fb:ba:31:72:d8:0a:7f:13:0a:da:
                    6d:30:a7:65:3f:1e:5e:8f:40:08:93:b1:22:ed:fe:
                    66:16:71:2c:45:66:bc:4a:e2:98:25:84:ed:9e:19:
                    14:bb:da:d5:01:53:b2:89:eb:ae:f2:13:31:24:73:
                    c0:22:c1:1a:12:28:da:f0:f0:b6:65:e3:92:a7:3b:
                    c4:aa:18:fb:fd:12:db:7a:f2:6a:be:a0:dd:79:16:
                    a2:1b:02:77:15:49:75:84:c5:3e:c5:e8:db:26:4e:
                    e9:ad:a8:4f:d4:ba:b1:b5:92:7c:88:f3:7c:04:4e:
                    5f:06:a3:62:51:f4:e7:81:59:45:0b:c8:c7:62:b6:
                    af:01:24:12:96:ad:aa:c6:40:22:b0:df:fa:2e:78:
                    b4:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:47:88:A0:C3:E6:17:46:F4:A6:6E:BC:E6:4B:29:D8:5E:76:48:01
            X509v3 Authority Key Identifier:
                keyid:62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/32332e38382e3232342e302f31392d3139203d3e203134363138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.88.224.0/19

    Signature Algorithm: sha256WithRSAEncryption
         65:57:d9:8a:81:b9:9a:88:4c:6f:8a:83:34:be:1d:7b:f1:e7:
         a9:9a:b1:07:56:ad:1c:ff:78:49:3b:dd:d6:00:16:0a:3b:4e:
         7a:3d:8b:2d:c8:4b:26:28:80:d8:45:1d:2a:93:a9:81:cf:b6:
         fd:fb:7f:7b:84:6a:fd:65:ab:31:9d:f5:2a:22:54:95:6d:f3:
         f1:13:08:91:a1:b9:09:b7:f7:95:3d:12:9b:bd:91:5f:ed:4e:
         19:ba:f3:ea:fe:24:3a:29:66:e7:23:b7:ef:b0:2f:fc:34:80:
         37:d5:0a:f4:b7:ac:53:26:c9:75:ec:88:1a:43:9c:33:5f:0c:
         ed:e0:87:f6:16:3b:ba:e4:70:93:a3:ec:61:85:6a:36:ab:88:
         85:e9:16:d6:1e:98:89:6a:b5:fd:e0:d4:f2:2f:13:de:73:35:
         9a:e3:1e:c9:c0:43:00:9f:f3:59:9b:da:fc:96:fe:24:1e:5c:
         a3:4a:8b:d7:93:df:a6:89:c2:f2:a7:0d:b5:c0:36:69:c4:a7:
         32:f5:5b:52:18:49:51:9a:f2:a2:64:93:9b:4e:68:44:18:2f:
         bf:77:6d:99:df:3a:01:0d:5c:b0:91:54:bf:e8:82:c7:8a:f8:
         35:97:ff:29:0f:07:7c:53:52:31:20:87:bf:fd:2b:7b:cf:2d:
         5f:1d:ef:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 22 13:19:16 2024 by rpki-client on console-fra.rpki-client.org