Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf82d5e52101850b65b10b358b/0/32332e3134342e3136382e302f32342d3234203d3e203530313034.roa
File:                     32332e3134342e3136382e302f32342d3234203d3e203530313034.roa (raw, json)
Hash identifier:          +rmm9Lm16Y/z11SS2qj24bqRGV7gRRzTe/87Mib99X4=
Subject key identifier:   84:CE:06:04:CF:01:28:36:AB:32:BD:2A:71:46:89:D9:05:98:22:B5
Certificate issuer:       /CN=ed199e1daadbcd50649091bf3c154099a326233862ce25c671
Certificate serial:       4070D65F76260CBA7E4FFDC391F5C9DF04E649DF
Authority key identifier: B3:2D:01:46:71:A0:8A:F0:A5:5B:31:3E:AB:25:A8:2E:DD:40:2A:98
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c6babe0-c981-4c51-971c-b56bd0722eb1/ed199e1daadbcd50649091bf3c154099a326233862ce25c671.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf82d5e52101850b65b10b358b/0/32332e3134342e3136382e302f32342d3234203d3e203530313034.roa
Signing time:             Thu 18 Jul 2024 09:53:25 +0000
ROA not before:           Thu 18 Jul 2024 09:48:25 +0000
ROA not after:            Thu 17 Jul 2025 09:53:25 +0000
asID:                     50104
IP address blocks:        23.144.168.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf82d5e52101850b65b10b358b/0/B32D014671A08AF0A55B313EAB25A82EDD402A98.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf82d5e52101850b65b10b358b/0/B32D014671A08AF0A55B313EAB25A82EDD402A98.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c6babe0-c981-4c51-971c-b56bd0722eb1/ed199e1daadbcd50649091bf3c154099a326233862ce25c671.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c6babe0-c981-4c51-971c-b56bd0722eb1/5c6babe0-c981-4c51-971c-b56bd0722eb1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c6babe0-c981-4c51-971c-b56bd0722eb1/5c6babe0-c981-4c51-971c-b56bd0722eb1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c6babe0-c981-4c51-971c-b56bd0722eb1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 17:41:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:70:d6:5f:76:26:0c:ba:7e:4f:fd:c3:91:f5:c9:df:04:e6:49:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed199e1daadbcd50649091bf3c154099a326233862ce25c671
        Validity
            Not Before: Jul 18 09:48:25 2024 GMT
            Not After : Jul 17 09:53:25 2025 GMT
        Subject: CN=84CE0604CF012836AB32BD2A714689D9059822B5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:95:10:07:85:95:c6:4b:0b:91:e3:99:18:0c:
                    d3:fa:40:1b:12:f2:93:83:8e:e6:fa:35:63:cb:42:
                    3b:38:9a:1a:59:6e:35:8d:2e:8f:39:16:ba:af:55:
                    ec:9e:53:ec:4d:05:91:37:01:ec:6b:db:2d:59:7c:
                    2c:65:0a:cd:01:61:85:27:ad:09:39:0d:2c:cd:3d:
                    38:bd:dd:ec:fe:38:87:38:3e:2a:25:7f:6f:c8:cb:
                    39:a1:ce:60:cb:78:69:13:cf:15:87:b6:c3:24:ef:
                    60:f1:91:ac:0d:d5:7a:1c:f0:6e:9c:53:44:99:6d:
                    f3:a1:d5:0d:11:35:f0:f8:2e:67:c0:f5:64:2e:6a:
                    a3:72:de:5e:58:39:3b:3a:fe:6b:bd:cd:5d:dd:21:
                    f9:c7:97:ed:5f:90:ad:3e:61:b7:ba:7b:f7:39:a9:
                    52:dc:e6:73:cc:84:ea:1b:0f:15:a9:06:38:ce:13:
                    09:ea:ba:94:18:cf:e8:b8:7d:a1:e9:ba:ed:f3:64:
                    bb:98:e5:18:69:23:8c:22:d0:79:41:de:79:e9:b0:
                    22:16:31:99:a3:a7:aa:96:88:d8:64:cd:c6:3c:d3:
                    f4:d7:8d:61:85:9d:80:f3:2a:4e:fe:50:ce:f7:90:
                    b9:67:ae:1b:59:1f:d6:ab:74:78:3b:fd:3a:83:63:
                    5d:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:CE:06:04:CF:01:28:36:AB:32:BD:2A:71:46:89:D9:05:98:22:B5
            X509v3 Authority Key Identifier:
                keyid:B3:2D:01:46:71:A0:8A:F0:A5:5B:31:3E:AB:25:A8:2E:DD:40:2A:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf82d5e52101850b65b10b358b/0/B32D014671A08AF0A55B313EAB25A82EDD402A98.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c6babe0-c981-4c51-971c-b56bd0722eb1/ed199e1daadbcd50649091bf3c154099a326233862ce25c671.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf82d5e52101850b65b10b358b/0/32332e3134342e3136382e302f32342d3234203d3e203530313034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.144.168.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3f:f0:bc:f8:e9:6f:b7:01:f4:94:d9:62:55:46:72:fe:be:13:
         2c:83:e4:5e:73:79:df:78:67:e8:ef:b0:e1:e3:14:21:8a:40:
         21:e3:1d:11:db:82:34:79:c2:db:38:b7:47:8e:98:89:a8:8e:
         3a:70:2f:77:a7:ea:08:87:d4:2a:12:04:12:71:77:88:49:64:
         ee:bc:bd:1a:5b:c8:86:32:b7:f3:85:6e:ad:a1:07:43:d7:7b:
         ee:c9:30:5d:29:75:58:d4:e0:1f:2f:48:b2:1c:2f:90:5f:66:
         bb:68:9c:46:ea:82:83:a3:08:89:cb:7e:93:73:9b:6e:75:e1:
         5b:6a:6e:46:c1:28:da:4d:c2:99:fc:17:d8:8a:b6:dd:0f:ab:
         e4:53:bb:c5:35:a3:63:88:e6:85:55:da:7f:ad:f9:96:32:26:
         e4:9a:da:4e:b9:ba:0f:6c:d1:3e:12:fd:72:0d:7d:c9:46:ff:
         9f:85:27:3f:79:31:52:c7:5a:b3:69:1b:39:46:00:66:34:32:
         11:7a:e4:5f:ab:8a:07:6a:db:9c:6b:40:84:85:6e:67:58:07:
         6d:ae:0b:b1:be:93:0a:20:15:a0:35:7c:e7:d6:53:b1:94:bc:
         01:3b:dc:ef:01:65:ac:2d:f6:c1:29:9c:63:2d:54:72:21:b6:
         04:5d:32:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 17:27:33 2024 by rpki-client on console-fra.rpki-client.org