Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf82d5e52101850b65b10b358b/0/32332e3134342e3136382e302f32342d3234203d3e20323130353337.roa
File:                     32332e3134342e3136382e302f32342d3234203d3e20323130353337.roa (raw, json)
Hash identifier:          yEZP4khDeaE3cx/RchQyvObziu1EbqYPIl75I0+/yMk=
Subject key identifier:   B9:07:48:F9:61:EC:46:CD:05:6C:24:04:27:F6:B0:1A:2D:00:50:DB
Certificate issuer:       /CN=ed199e1daadbcd50649091bf3c154099a326233862ce25c671
Certificate serial:       461C37ED3CAD3C38092F544A612574C3F22632FD
Authority key identifier: B3:2D:01:46:71:A0:8A:F0:A5:5B:31:3E:AB:25:A8:2E:DD:40:2A:98
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c6babe0-c981-4c51-971c-b56bd0722eb1/ed199e1daadbcd50649091bf3c154099a326233862ce25c671.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf82d5e52101850b65b10b358b/0/32332e3134342e3136382e302f32342d3234203d3e20323130353337.roa
Signing time:             Thu 18 Jul 2024 09:53:25 +0000
ROA not before:           Thu 18 Jul 2024 09:48:25 +0000
ROA not after:            Thu 17 Jul 2025 09:53:25 +0000
asID:                     210537
IP address blocks:        23.144.168.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf82d5e52101850b65b10b358b/0/B32D014671A08AF0A55B313EAB25A82EDD402A98.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf82d5e52101850b65b10b358b/0/B32D014671A08AF0A55B313EAB25A82EDD402A98.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c6babe0-c981-4c51-971c-b56bd0722eb1/ed199e1daadbcd50649091bf3c154099a326233862ce25c671.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c6babe0-c981-4c51-971c-b56bd0722eb1/5c6babe0-c981-4c51-971c-b56bd0722eb1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c6babe0-c981-4c51-971c-b56bd0722eb1/5c6babe0-c981-4c51-971c-b56bd0722eb1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c6babe0-c981-4c51-971c-b56bd0722eb1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 17:41:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:1c:37:ed:3c:ad:3c:38:09:2f:54:4a:61:25:74:c3:f2:26:32:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed199e1daadbcd50649091bf3c154099a326233862ce25c671
        Validity
            Not Before: Jul 18 09:48:25 2024 GMT
            Not After : Jul 17 09:53:25 2025 GMT
        Subject: CN=B90748F961EC46CD056C240427F6B01A2D0050DB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:36:5c:1d:7b:d3:c1:2e:df:e6:6a:35:1e:1b:
                    3d:9a:3f:e5:22:8c:9e:0c:5d:58:ee:f1:63:04:63:
                    34:f3:c6:19:68:9c:9b:19:91:5d:9b:6b:d3:d1:4d:
                    65:a5:5e:10:85:5a:0b:b9:3c:78:f1:83:87:20:00:
                    12:45:84:59:c9:13:fb:a0:10:5f:20:6d:b0:1c:e5:
                    3a:76:8a:cc:bf:a8:b8:12:20:61:ea:33:19:63:2d:
                    ce:28:30:07:1d:b0:a3:5a:b4:2d:4a:53:86:35:4f:
                    c0:55:cc:28:f9:29:46:43:01:66:af:fe:8c:65:e4:
                    2f:2f:c9:6d:de:39:5f:e5:a8:11:f5:42:f5:aa:f2:
                    5a:31:52:b2:00:79:4e:5c:6e:78:72:16:2e:cf:40:
                    29:c5:92:fa:0f:60:82:7a:3a:4a:50:f6:38:c1:eb:
                    15:cc:e7:df:d0:b5:5e:d2:64:f9:f6:25:c3:b8:eb:
                    1c:8d:ad:07:2d:fd:65:db:d0:ec:84:cd:a4:93:3d:
                    83:1a:94:f6:82:36:98:1d:d2:a1:8d:8f:af:04:48:
                    d6:6c:4f:d6:79:de:b6:39:2e:35:6f:42:57:1b:42:
                    c6:e4:2c:fe:a8:eb:89:c0:ba:ba:db:ae:94:95:ad:
                    00:31:c8:77:90:d5:b3:67:ed:10:03:08:80:fc:95:
                    a0:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:07:48:F9:61:EC:46:CD:05:6C:24:04:27:F6:B0:1A:2D:00:50:DB
            X509v3 Authority Key Identifier:
                keyid:B3:2D:01:46:71:A0:8A:F0:A5:5B:31:3E:AB:25:A8:2E:DD:40:2A:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf82d5e52101850b65b10b358b/0/B32D014671A08AF0A55B313EAB25A82EDD402A98.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c6babe0-c981-4c51-971c-b56bd0722eb1/ed199e1daadbcd50649091bf3c154099a326233862ce25c671.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf82d5e52101850b65b10b358b/0/32332e3134342e3136382e302f32342d3234203d3e20323130353337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.144.168.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6a:d5:ac:9e:7d:1f:58:0e:4a:dd:4a:bb:5d:63:c5:69:9b:1b:
         98:e8:f0:47:e4:15:60:ae:ff:49:83:e1:fc:2c:14:dd:c2:4a:
         27:f7:67:66:98:a6:ed:48:fb:a0:eb:e4:75:81:f7:ba:ff:a7:
         10:6c:90:42:d7:11:b5:8e:4c:1f:ab:81:9d:5d:9b:02:ac:2e:
         83:99:be:b0:bf:ac:cd:d7:93:89:83:57:98:c7:b2:dc:d0:97:
         37:ed:33:fb:d4:66:ce:29:ee:5c:34:8b:bf:c4:f3:59:6e:fc:
         aa:65:39:d3:a1:a3:c9:6b:fb:11:fd:5d:67:bc:8c:a7:27:3a:
         2c:9e:36:8a:e4:45:dc:74:ee:e7:d7:1c:c1:ef:84:36:bc:71:
         45:e7:66:24:41:36:9d:74:27:8b:39:0e:49:25:81:ec:fa:17:
         c3:36:0a:65:7a:5d:16:14:da:e4:d6:9d:97:51:83:17:f1:ed:
         4b:63:f9:a6:1e:7a:a9:60:29:90:71:6d:0c:13:34:bc:76:ed:
         13:a5:cb:cb:7a:36:57:c7:ca:c2:b4:2f:ef:d5:fd:89:41:89:
         2e:e4:ce:0d:fc:01:02:95:11:31:9c:82:63:04:ba:23:1e:83:
         db:c7:50:bc:56:87:0e:65:f8:c7:e8:ad:a5:3b:10:cf:d4:4c:
         b4:d7:fc:f0
-----BEGIN CERTIFICATE-----
MIIFtDCCBJygAwIBAgIURhw37TytPDgJL1RKYSV0w/ImMv0wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZWQxOTllMWRhYWRiY2Q1MDY0OTA5MWJmM2MxNTQwOTlh
MzI2MjMzODYyY2UyNWM2NzEwHhcNMjQwNzE4MDk0ODI1WhcNMjUwNzE3MDk1MzI1
WjAzMTEwLwYDVQQDEyhCOTA3NDhGOTYxRUM0NkNEMDU2QzI0MDQyN0Y2QjAxQTJE
MDA1MERCMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvzZcHXvTwS7f
5mo1Hhs9mj/lIoyeDF1Y7vFjBGM088YZaJybGZFdm2vT0U1lpV4QhVoLuTx48YOH
IAASRYRZyRP7oBBfIG2wHOU6dorMv6i4EiBh6jMZYy3OKDAHHbCjWrQtSlOGNU/A
Vcwo+SlGQwFmr/6MZeQvL8lt3jlf5agR9UL1qvJaMVKyAHlOXG54chYuz0ApxZL6
D2CCejpKUPY4wesVzOff0LVe0mT59iXDuOscja0HLf1l29DshM2kkz2DGpT2gjaY
HdKhjY+vBEjWbE/Wed62OS41b0JXG0LG5Cz+qOuJwLq6266Ula0AMch3kNWzZ+0Q
AwiA/JWgyQIDAQABo4ICtDCCArAwHQYDVR0OBBYEFLkHSPlh7EbNBWwkBCf2sBot
AFDbMB8GA1UdIwQYMBaAFLMtAUZxoIrwpVsxPqslqC7dQCqYMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmODJkNWU1MjEwMTg1MGI2NWIxMGIzNThiLzAv
QjMyRDAxNDY3MUEwOEFGMEE1NUIzMTNFQUIyNUE4MkVERDQwMkE5OC5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0
OTMzYWU1LzVjNmJhYmUwLWM5ODEtNGM1MS05NzFjLWI1NmJkMDcyMmViMS9lZDE5
OWUxZGFhZGJjZDUwNjQ5MDkxYmYzYzE1NDA5OWEzMjYyMzM4NjJjZTI1YzY3MS5j
ZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjgyZDVlNTIxMDE4NTBi
NjViMTBiMzU4Yi8wLzMyMzMyZTMxMzQzNDJlMzEzNjM4MmUzMDJmMzIzNDJkMzIz
NDIwM2QzZTIwMzIzMTMwMzUzMzM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5CoMA0GCSqGSIb3DQEB
CwUAA4IBAQBq1ayefR9YDkrdSrtdY8VpmxuY6PBH5BVgrv9Jg+H8LBTdwkon92dm
mKbtSPug6+R1gfe6/6cQbJBC1xG1jkwfq4GdXZsCrC6Dmb6wv6zN15OJg1eYx7Lc
0Jc37TP71GbOKe5cNIu/xPNZbvyqZTnToaPJa/sR/V1nvIynJzosnjaK5EXcdO7n
1xzB74Q2vHFF52YkQTaddCeLOQ5JJYHs+hfDNgplel0WFNrk1p2XUYMX8e1LY/mm
HnqpYCmQcW0MEzS8du0TpcvLejZXx8rCtC/v1f2JQYku5M4N/AEClRExnIJjBLoj
HoPbx1C8VocOZfjH6K2lOxDP1Ey01/zw
-----END CERTIFICATE-----
Generated at Thu Nov 21 17:27:33 2024 by rpki-client on console-fra.rpki-client.org