Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf82d5e52101850b65b10b358b/0/32332e3134342e3136382e302f32342d3234203d3e203139353231.roa
File:                     32332e3134342e3136382e302f32342d3234203d3e203139353231.roa (raw, json)
Hash identifier:          SLKBFamY1Nd93WXSp/mrppPa59pN+NbIzEoHd1RcSbM=
Subject key identifier:   8C:EA:07:29:DD:00:BD:48:C3:7A:9F:B3:DD:95:EB:33:58:B5:AA:67
Certificate issuer:       /CN=ed199e1daadbcd50649091bf3c154099a326233862ce25c671
Certificate serial:       79BC5FBAE1FAAC8AD4179E519EAFDB07CEF7057E
Authority key identifier: B3:2D:01:46:71:A0:8A:F0:A5:5B:31:3E:AB:25:A8:2E:DD:40:2A:98
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c6babe0-c981-4c51-971c-b56bd0722eb1/ed199e1daadbcd50649091bf3c154099a326233862ce25c671.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf82d5e52101850b65b10b358b/0/32332e3134342e3136382e302f32342d3234203d3e203139353231.roa
Signing time:             Fri 05 Jan 2024 12:08:01 +0000
ROA not before:           Fri 05 Jan 2024 12:03:01 +0000
ROA not after:            Fri 03 Jan 2025 12:08:01 +0000
asID:                     19521
IP address blocks:        23.144.168.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf82d5e52101850b65b10b358b/0/B32D014671A08AF0A55B313EAB25A82EDD402A98.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf82d5e52101850b65b10b358b/0/B32D014671A08AF0A55B313EAB25A82EDD402A98.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c6babe0-c981-4c51-971c-b56bd0722eb1/ed199e1daadbcd50649091bf3c154099a326233862ce25c671.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c6babe0-c981-4c51-971c-b56bd0722eb1/5c6babe0-c981-4c51-971c-b56bd0722eb1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c6babe0-c981-4c51-971c-b56bd0722eb1/5c6babe0-c981-4c51-971c-b56bd0722eb1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c6babe0-c981-4c51-971c-b56bd0722eb1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 17:41:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:bc:5f:ba:e1:fa:ac:8a:d4:17:9e:51:9e:af:db:07:ce:f7:05:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed199e1daadbcd50649091bf3c154099a326233862ce25c671
        Validity
            Not Before: Jan  5 12:03:01 2024 GMT
            Not After : Jan  3 12:08:01 2025 GMT
        Subject: CN=8CEA0729DD00BD48C37A9FB3DD95EB3358B5AA67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:37:cf:32:d1:84:24:f0:1c:6e:62:79:18:34:
                    8b:44:b3:1e:ec:f0:ce:8a:11:f2:82:8b:59:f3:bb:
                    8f:e1:b3:b9:90:1f:4b:46:c1:31:70:81:af:8e:82:
                    ab:49:0c:59:c7:17:78:97:40:70:e9:ce:0a:8b:c3:
                    ea:48:1e:63:e3:e8:41:61:d2:f9:ad:1d:69:65:a8:
                    a2:81:70:e4:1e:64:60:91:d9:16:5d:da:e0:13:67:
                    3a:e2:f0:90:32:71:89:27:eb:bc:e3:df:6c:5b:b1:
                    53:11:ac:ab:94:10:7a:b4:f0:93:be:7c:b6:7b:32:
                    4e:2b:79:9b:21:a8:8e:08:f8:32:44:f5:e3:44:35:
                    17:bd:a4:d1:ec:e5:48:b8:8d:ca:6f:db:5c:1e:bf:
                    71:3f:5d:a3:e4:eb:fc:73:ff:08:fa:ff:1a:8c:16:
                    0f:ae:74:dd:ab:a2:de:10:23:82:27:a8:c9:4c:bc:
                    39:14:ff:8c:47:5c:89:9a:46:3b:36:b8:7c:54:84:
                    4a:ca:3d:5a:1a:8f:35:c0:c0:bc:ef:f2:d3:91:7f:
                    d2:d6:76:ad:cc:25:1f:6c:2c:ac:3b:ae:34:13:dc:
                    51:7b:f7:9a:db:23:5a:21:12:c9:69:95:76:f4:5e:
                    39:d6:b7:42:f2:ab:21:63:d5:1f:30:fa:fa:e7:e2:
                    a7:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:EA:07:29:DD:00:BD:48:C3:7A:9F:B3:DD:95:EB:33:58:B5:AA:67
            X509v3 Authority Key Identifier:
                keyid:B3:2D:01:46:71:A0:8A:F0:A5:5B:31:3E:AB:25:A8:2E:DD:40:2A:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf82d5e52101850b65b10b358b/0/B32D014671A08AF0A55B313EAB25A82EDD402A98.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c6babe0-c981-4c51-971c-b56bd0722eb1/ed199e1daadbcd50649091bf3c154099a326233862ce25c671.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf82d5e52101850b65b10b358b/0/32332e3134342e3136382e302f32342d3234203d3e203139353231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.144.168.0/24

    Signature Algorithm: sha256WithRSAEncryption
         38:1c:bd:bf:13:89:7b:cc:8d:15:44:ec:3e:cf:b0:dc:ca:3c:
         06:51:46:ea:10:5c:2f:49:30:e6:49:c9:7f:d0:e0:a2:e8:30:
         53:f6:54:23:c1:dd:33:26:ec:81:58:03:52:1b:87:76:1f:7e:
         3b:a2:48:3c:b3:cf:0c:44:cc:3e:e7:cf:db:01:ee:8c:18:d5:
         5d:84:73:3a:50:4a:a9:56:00:86:e0:8b:de:89:3b:8e:b0:6f:
         fb:27:1f:bb:03:ef:84:50:b4:6e:18:27:a6:e7:99:3c:ad:94:
         93:7b:a2:8f:2b:7c:7b:93:f6:69:03:70:aa:b7:1d:22:30:b9:
         6e:3f:1d:ae:ad:47:c9:d4:87:6a:17:10:21:aa:61:82:1d:a8:
         86:6a:3a:2b:46:b3:3e:09:64:f7:06:53:83:1a:e9:57:30:e7:
         80:d0:a0:4f:e5:0e:2a:a1:ea:cd:1f:ba:31:71:fb:8d:29:78:
         51:31:bb:bf:79:0f:53:31:47:04:12:3f:58:b4:f4:c6:9d:7c:
         59:c5:1a:f5:c1:82:f1:7d:cc:95:f8:b1:4c:58:d2:91:e7:ec:
         4a:31:5c:8a:e5:d1:80:1b:1c:7a:c6:3d:7f:57:0b:87:62:e5:
         55:07:a6:81:e4:98:c8:da:d1:ad:ae:e8:0a:76:30:6f:aa:03:
         8b:86:7a:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 17:27:33 2024 by rpki-client on console-fra.rpki-client.org