Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/32332e38382e3234302e302f32302d3234203d3e2031323339.roa
File:                     32332e38382e3234302e302f32302d3234203d3e2031323339.roa (raw, json)
Hash identifier:          bjjOx57ZWgD7pRj+6nmNu4IWyg74zguo4ohaOSruGQI=
Subject key identifier:   E9:E6:42:C0:7F:69:34:78:00:08:27:9C:1C:78:2B:9F:37:52:A8:2D
Certificate issuer:       /CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4
Certificate serial:       65772216A2E6B3B70444F82860A409089B2DA02E
Authority key identifier: 62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/32332e38382e3234302e302f32302d3234203d3e2031323339.roa
Signing time:             Mon 28 Nov 2022 11:29:17 +0000
ROA not before:           Mon 28 Nov 2022 11:24:17 +0000
ROA not after:            Mon 27 Nov 2023 11:29:17 +0000
asID:                     1239
IP address blocks:        23.88.240.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/e203869d-6b95-465f-b4dc-088a5a2103fc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/e203869d-6b95-465f-b4dc-088a5a2103fc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 15 Mar 2023 20:20:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:77:22:16:a2:e6:b3:b7:04:44:f8:28:60:a4:09:08:9b:2d:a0:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4
        Validity
            Not Before: Nov 28 11:24:17 2022 GMT
            Not After : Nov 27 11:29:17 2023 GMT
        Subject: CN=E9E642C07F6934780008279C1C782B9F3752A82D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:45:46:b3:16:f5:5e:32:1d:08:f1:0b:8f:29:
                    6e:5c:c7:f6:99:43:53:73:15:ea:d5:b1:8b:db:3a:
                    7f:f4:18:fe:5d:3c:46:3e:37:81:6e:74:52:05:c2:
                    61:8b:fc:fa:2f:6a:3b:2f:64:d2:b4:2b:40:5f:d5:
                    22:95:42:ae:a3:7c:97:e6:c8:e5:d3:df:de:eb:7c:
                    28:9f:d1:e4:67:c2:c0:ba:5a:40:4a:05:79:bb:d4:
                    98:bd:48:3b:92:b3:04:c3:ed:31:47:78:57:3a:33:
                    b0:74:1f:bd:b9:e4:73:2b:dc:8a:f1:62:90:3b:3c:
                    a3:a1:e3:a7:3f:24:08:09:92:04:21:93:cb:1e:68:
                    4e:29:13:fd:1c:68:fa:ef:4d:62:3c:36:51:a2:24:
                    fc:cf:a9:e5:85:ac:ab:2e:46:a1:1d:e1:03:c4:0e:
                    ba:bc:97:8f:87:82:d6:dd:14:f6:1b:64:e0:ba:ff:
                    fe:12:72:2c:88:60:1b:2b:f0:b9:c3:4c:1b:40:3d:
                    4e:0b:a2:ec:50:df:57:76:83:e9:45:73:43:c3:0e:
                    8f:e4:fe:3e:49:14:28:78:f0:ec:f0:93:c2:cc:09:
                    52:18:6b:e9:12:1e:05:a7:b0:24:69:97:fb:d9:9d:
                    3e:8f:99:1b:55:bc:6d:eb:cb:d3:26:b1:01:ea:06:
                    17:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                E9:E6:42:C0:7F:69:34:78:00:08:27:9C:1C:78:2B:9F:37:52:A8:2D
            X509v3 Authority Key Identifier: 
                keyid:62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.crl

            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/32332e38382e3234302e302f32302d3234203d3e2031323339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.88.240.0/20

    Signature Algorithm: sha256WithRSAEncryption
         83:28:df:db:1c:49:a4:01:ba:2d:b6:a4:d6:c9:33:d3:60:73:
         35:bf:98:1c:22:f3:0b:99:e4:88:64:0a:57:d6:03:2d:c9:fe:
         69:f0:21:fa:f8:b9:a7:d9:dc:48:05:ad:2d:2e:cd:63:7b:48:
         c0:e1:35:f7:a0:d3:71:f6:6b:39:f6:25:a5:a5:c4:d0:b5:3c:
         e9:22:74:2a:f4:1b:b6:b4:81:53:12:9e:c2:09:9d:ec:e0:5f:
         fb:7c:18:c7:96:77:97:88:67:ae:31:35:23:04:e3:4f:74:1c:
         37:c6:89:b7:83:95:4a:67:23:80:60:dc:87:55:ec:2f:f3:5f:
         3d:b5:88:2a:8d:bc:f7:9b:43:f0:31:1d:d8:fe:56:c9:3f:ec:
         2b:fb:34:f2:9d:0c:87:94:a7:5b:fd:d7:6c:b5:f2:b2:83:2e:
         a4:af:6c:6f:39:69:bf:ad:94:37:6f:47:ed:1c:a6:bf:e1:d5:
         45:2e:87:51:20:71:17:8c:f9:82:14:d2:d9:1b:df:64:62:4c:
         b3:b7:28:10:4e:c6:d8:5f:e6:c0:7c:ad:de:e9:a6:fb:b4:b3:
         5f:51:6d:f4:30:c6:58:12:b6:2d:48:27:dd:29:71:51:9f:96:
         46:38:c4:9c:67:96:44:6c:c7:4c:62:4e:fa:a1:f0:c4:d6:c5:
         db:d9:c6:6e
-----BEGIN CERTIFICATE-----
MIIFrTCCBJWgAwIBAgIUZXciFqLms7cERPgoYKQJCJstoC4wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMWYyMmNmMDc1NzFlY2JhYjZkNDYwYTFmM2I2YzVkNjE5
N2QwOTgzNjQzYTU0ZDJlZDQwHhcNMjIxMTI4MTEyNDE3WhcNMjMxMTI3MTEyOTE3
WjAzMTEwLwYDVQQDEyhFOUU2NDJDMDdGNjkzNDc4MDAwODI3OUMxQzc4MkI5RjM3
NTJBODJEMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA20VGsxb1XjId
CPELjyluXMf2mUNTcxXq1bGL2zp/9Bj+XTxGPjeBbnRSBcJhi/z6L2o7L2TStCtA
X9UilUKuo3yX5sjl09/e63won9HkZ8LAulpASgV5u9SYvUg7krMEw+0xR3hXOjOw
dB+9ueRzK9yK8WKQOzyjoeOnPyQICZIEIZPLHmhOKRP9HGj6701iPDZRoiT8z6nl
hayrLkahHeEDxA66vJePh4LW3RT2G2Tguv/+EnIsiGAbK/C5w0wbQD1OC6LsUN9X
doPpRXNDww6P5P4+SRQoePDs8JPCzAlSGGvpEh4Fp7AkaZf72Z0+j5kbVbxt68vT
JrEB6gYXswIDAQABo4ICrTCCAqkwHQYDVR0OBBYEFOnmQsB/aTR4AAgnnBx4K583
UqgtMB8GA1UdIwQYMBaAFGK0t02IaU0zyBBuijO8FJ6zkE/rMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmODE0M2JmNjIwMTgxZWNkMzdkYWM3MmYxLzEv
NjJCNEI3NEQ4ODY5NEQzM0M4MTA2RThBMzNCQzE0OUVCMzkwNEZFQi5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi
MGI4NDE1L2UyMDM4NjlkLTZiOTUtNDY1Zi1iNGRjLTA4OGE1YTIxMDNmYy8xZjIy
Y2YwNzU3MWVjYmFiNmQ0NjBhMWYzYjZjNWQ2MTk3ZDA5ODM2NDNhNTRkMmVkNC5j
ZXIwgZ0GCCsGAQUFBwELBIGQMIGNMIGKBggrBgEFBQcwC4Z+cnN5bmM6Ly9ycGtp
LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODE0M2JmNjIwMTgxZWNk
MzdkYWM3MmYxLzEvMzIzMzJlMzgzODJlMzIzNDMwMmUzMDJmMzIzMDJkMzIzNDIw
M2QzZTIwMzEzMjMzMzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAQXWPAwDQYJKoZIhvcNAQELBQADggEB
AIMo39scSaQBui22pNbJM9NgczW/mBwi8wuZ5IhkClfWAy3J/mnwIfr4uafZ3EgF
rS0uzWN7SMDhNfeg03H2azn2JaWlxNC1POkidCr0G7a0gVMSnsIJnezgX/t8GMeW
d5eIZ64xNSME4090HDfGibeDlUpnI4Bg3IdV7C/zXz21iCqNvPebQ/AxHdj+Vsk/
7Cv7NPKdDIeUp1v912y18rKDLqSvbG85ab+tlDdvR+0cpr/h1UUuh1EgcReM+YIU
0tkb32RiTLO3KBBOxthf5sB8rd7ppvu0s19RbfQwxlgSti1IJ90pcVGflkY4xJxn
lkRsx0xiTvqh8MTWxdvZxm4=
-----END CERTIFICATE-----
Generated at Wed Mar 15 11:52:14 2023 by rpki-client on console-fra.rpki-client.org