Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf82d5e52101850b65b10b358b/0/32332e3134342e3136382e302f32342d3234203d3e20323030373735.roa
File:                     32332e3134342e3136382e302f32342d3234203d3e20323030373735.roa (raw, json)
Hash identifier:          txTxjNFa3VuuPxxlzHCc9KuISzQqJ2GWPAN5lDLRu2k=
Subject key identifier:   8B:F9:AC:98:F3:37:5D:9D:FF:E5:B5:C4:7D:1E:D1:BE:E7:B2:65:08
Certificate issuer:       /CN=ed199e1daadbcd50649091bf3c154099a326233862ce25c671
Certificate serial:       09BBE0E3C34A94BE602615D4E6B6913939936D7F
Authority key identifier: B3:2D:01:46:71:A0:8A:F0:A5:5B:31:3E:AB:25:A8:2E:DD:40:2A:98
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c6babe0-c981-4c51-971c-b56bd0722eb1/ed199e1daadbcd50649091bf3c154099a326233862ce25c671.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf82d5e52101850b65b10b358b/0/32332e3134342e3136382e302f32342d3234203d3e20323030373735.roa
Signing time:             Tue 15 Oct 2024 13:53:48 +0000
ROA not before:           Tue 15 Oct 2024 13:48:48 +0000
ROA not after:            Tue 14 Oct 2025 13:53:48 +0000
asID:                     200775
IP address blocks:        23.144.168.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf82d5e52101850b65b10b358b/0/B32D014671A08AF0A55B313EAB25A82EDD402A98.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf82d5e52101850b65b10b358b/0/B32D014671A08AF0A55B313EAB25A82EDD402A98.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c6babe0-c981-4c51-971c-b56bd0722eb1/ed199e1daadbcd50649091bf3c154099a326233862ce25c671.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c6babe0-c981-4c51-971c-b56bd0722eb1/5c6babe0-c981-4c51-971c-b56bd0722eb1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c6babe0-c981-4c51-971c-b56bd0722eb1/5c6babe0-c981-4c51-971c-b56bd0722eb1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c6babe0-c981-4c51-971c-b56bd0722eb1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 17:41:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:bb:e0:e3:c3:4a:94:be:60:26:15:d4:e6:b6:91:39:39:93:6d:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed199e1daadbcd50649091bf3c154099a326233862ce25c671
        Validity
            Not Before: Oct 15 13:48:48 2024 GMT
            Not After : Oct 14 13:53:48 2025 GMT
        Subject: CN=8BF9AC98F3375D9DFFE5B5C47D1ED1BEE7B26508
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:05:4b:5b:e4:e5:96:e7:f6:58:a9:fc:c3:c2:
                    a3:cb:3e:bd:00:06:62:bc:9f:32:71:2c:24:35:ca:
                    8c:1f:79:7b:0b:15:10:cf:59:6d:99:e2:9e:a6:c0:
                    bc:62:46:7f:c0:cd:e1:f5:80:00:ce:b3:39:1a:dd:
                    04:36:62:8f:56:08:85:0e:ab:aa:ea:44:63:f1:84:
                    41:bf:e5:b5:e5:45:63:18:72:9a:92:2e:af:78:7f:
                    5c:2a:26:85:51:8c:df:6b:a1:ed:06:bd:55:8c:2d:
                    d1:ad:19:69:0a:4a:b5:ff:bb:ba:a2:3f:4c:32:9e:
                    61:e1:1a:4b:1e:5a:ab:fb:58:45:84:d0:f0:9b:15:
                    6e:6b:3a:02:d9:d3:1a:46:75:b4:94:f5:cb:83:4a:
                    71:af:96:e0:90:86:82:02:27:27:73:af:54:ad:ad:
                    5a:ea:25:15:24:d8:11:c8:2c:98:cc:3e:53:01:43:
                    54:11:e8:d4:93:a7:14:33:2f:1b:68:92:94:26:80:
                    81:72:17:e5:b5:94:05:97:62:7c:55:a2:52:19:20:
                    a2:1d:30:f1:c3:45:18:02:f2:2c:e0:31:2e:ce:aa:
                    f5:a9:bf:20:5b:49:e3:7a:68:36:50:a4:1c:a0:63:
                    3a:58:ab:a8:4e:bd:aa:d2:ee:45:bf:19:95:7a:d9:
                    1b:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:F9:AC:98:F3:37:5D:9D:FF:E5:B5:C4:7D:1E:D1:BE:E7:B2:65:08
            X509v3 Authority Key Identifier:
                keyid:B3:2D:01:46:71:A0:8A:F0:A5:5B:31:3E:AB:25:A8:2E:DD:40:2A:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf82d5e52101850b65b10b358b/0/B32D014671A08AF0A55B313EAB25A82EDD402A98.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c6babe0-c981-4c51-971c-b56bd0722eb1/ed199e1daadbcd50649091bf3c154099a326233862ce25c671.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf82d5e52101850b65b10b358b/0/32332e3134342e3136382e302f32342d3234203d3e20323030373735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.144.168.0/24

    Signature Algorithm: sha256WithRSAEncryption
         23:ff:12:8c:67:d4:9a:96:3d:2b:42:b3:b8:c8:4e:57:f1:8e:
         31:71:7c:4c:58:7f:f3:a7:39:41:34:09:42:0f:d5:69:00:e1:
         2a:01:c2:65:a1:6e:4f:0a:ff:84:1b:c3:d8:e3:67:a6:59:ed:
         03:9a:6a:ce:62:bd:e9:48:a8:fa:c5:ef:0e:dc:e8:33:b4:9e:
         88:dc:50:c1:f0:ae:3f:cf:87:aa:41:36:d8:43:f6:b9:bb:31:
         97:88:3f:d7:76:96:ad:59:ea:6f:eb:1b:dc:ed:b1:b5:4b:18:
         f4:0d:9c:29:80:a9:72:be:21:22:9f:22:d2:49:f0:49:68:a0:
         d8:55:75:78:b3:50:14:a3:b7:bb:6a:fc:52:6f:86:e6:bf:14:
         3a:dd:e3:29:4f:9e:3b:6f:8e:8c:1e:e5:17:f2:52:0d:c9:c0:
         69:7d:16:6e:8b:01:58:9e:40:d2:8c:e9:e0:b5:57:e1:97:b8:
         ad:36:bd:ef:1c:18:11:9a:7e:7f:13:86:ec:22:bc:47:ab:75:
         00:93:96:6d:be:31:1a:ed:c7:20:be:45:e1:2a:76:57:5f:4d:
         b9:13:b7:4c:fc:09:f2:f5:6c:51:b6:3d:18:f5:fc:5e:4c:0e:
         f0:ca:6e:4d:51:75:80:83:05:cb:0a:73:17:26:5e:17:b1:dd:
         79:38:5c:29
-----BEGIN CERTIFICATE-----
MIIFtDCCBJygAwIBAgIUCbvg48NKlL5gJhXU5raROTmTbX8wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZWQxOTllMWRhYWRiY2Q1MDY0OTA5MWJmM2MxNTQwOTlh
MzI2MjMzODYyY2UyNWM2NzEwHhcNMjQxMDE1MTM0ODQ4WhcNMjUxMDE0MTM1MzQ4
WjAzMTEwLwYDVQQDEyg4QkY5QUM5OEYzMzc1RDlERkZFNUI1QzQ3RDFFRDFCRUU3
QjI2NTA4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuAVLW+Tlluf2
WKn8w8Kjyz69AAZivJ8ycSwkNcqMH3l7CxUQz1ltmeKepsC8YkZ/wM3h9YAAzrM5
Gt0ENmKPVgiFDquq6kRj8YRBv+W15UVjGHKaki6veH9cKiaFUYzfa6HtBr1VjC3R
rRlpCkq1/7u6oj9MMp5h4RpLHlqr+1hFhNDwmxVuazoC2dMaRnW0lPXLg0pxr5bg
kIaCAicnc69Ura1a6iUVJNgRyCyYzD5TAUNUEejUk6cUMy8baJKUJoCBchfltZQF
l2J8VaJSGSCiHTDxw0UYAvIs4DEuzqr1qb8gW0njemg2UKQcoGM6WKuoTr2q0u5F
vxmVetkblwIDAQABo4ICtDCCArAwHQYDVR0OBBYEFIv5rJjzN12d/+W1xH0e0b7n
smUIMB8GA1UdIwQYMBaAFLMtAUZxoIrwpVsxPqslqC7dQCqYMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmODJkNWU1MjEwMTg1MGI2NWIxMGIzNThiLzAv
QjMyRDAxNDY3MUEwOEFGMEE1NUIzMTNFQUIyNUE4MkVERDQwMkE5OC5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0
OTMzYWU1LzVjNmJhYmUwLWM5ODEtNGM1MS05NzFjLWI1NmJkMDcyMmViMS9lZDE5
OWUxZGFhZGJjZDUwNjQ5MDkxYmYzYzE1NDA5OWEzMjYyMzM4NjJjZTI1YzY3MS5j
ZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjgyZDVlNTIxMDE4NTBi
NjViMTBiMzU4Yi8wLzMyMzMyZTMxMzQzNDJlMzEzNjM4MmUzMDJmMzIzNDJkMzIz
NDIwM2QzZTIwMzIzMDMwMzczNzM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5CoMA0GCSqGSIb3DQEB
CwUAA4IBAQAj/xKMZ9Salj0rQrO4yE5X8Y4xcXxMWH/zpzlBNAlCD9VpAOEqAcJl
oW5PCv+EG8PY42emWe0DmmrOYr3pSKj6xe8O3OgztJ6I3FDB8K4/z4eqQTbYQ/a5
uzGXiD/XdpatWepv6xvc7bG1Sxj0DZwpgKlyviEinyLSSfBJaKDYVXV4s1AUo7e7
avxSb4bmvxQ63eMpT547b46MHuUX8lINycBpfRZuiwFYnkDSjOngtVfhl7itNr3v
HBgRmn5/E4bsIrxHq3UAk5ZtvjEa7ccgvkXhKnZXX025E7dM/Any9WxRtj0Y9fxe
TA7wym5NUXWAgwXLCnMXJl4Xsd15OFwp
-----END CERTIFICATE-----
Generated at Thu Nov 21 17:27:33 2024 by rpki-client on console-fra.rpki-client.org