Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf82d5e52101850b65b10b358b/0/32332e3134342e3136392e302f32342d3234203d3e203139353231.roa
File:                     32332e3134342e3136392e302f32342d3234203d3e203139353231.roa (raw, json)
Hash identifier:          6QXp+z3hiVgxSB5TMp+edUQirlbS6kSJeF+ZeHDGr1w=
Subject key identifier:   82:04:2F:C0:2A:9F:C0:D9:78:C9:5F:99:B2:75:4A:FE:03:92:BC:51
Certificate issuer:       /CN=ed199e1daadbcd50649091bf3c154099a326233862ce25c671
Certificate serial:       1FE84C8E45DC9B41E580190DDBFDD7721AD507B7
Authority key identifier: B3:2D:01:46:71:A0:8A:F0:A5:5B:31:3E:AB:25:A8:2E:DD:40:2A:98
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c6babe0-c981-4c51-971c-b56bd0722eb1/ed199e1daadbcd50649091bf3c154099a326233862ce25c671.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf82d5e52101850b65b10b358b/0/32332e3134342e3136392e302f32342d3234203d3e203139353231.roa
Signing time:             Fri 05 Jan 2024 12:08:23 +0000
ROA not before:           Fri 05 Jan 2024 12:03:23 +0000
ROA not after:            Fri 03 Jan 2025 12:08:23 +0000
asID:                     19521
IP address blocks:        23.144.169.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf82d5e52101850b65b10b358b/0/B32D014671A08AF0A55B313EAB25A82EDD402A98.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf82d5e52101850b65b10b358b/0/B32D014671A08AF0A55B313EAB25A82EDD402A98.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c6babe0-c981-4c51-971c-b56bd0722eb1/ed199e1daadbcd50649091bf3c154099a326233862ce25c671.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c6babe0-c981-4c51-971c-b56bd0722eb1/5c6babe0-c981-4c51-971c-b56bd0722eb1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c6babe0-c981-4c51-971c-b56bd0722eb1/5c6babe0-c981-4c51-971c-b56bd0722eb1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c6babe0-c981-4c51-971c-b56bd0722eb1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 01 Jun 2024 19:31:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:e8:4c:8e:45:dc:9b:41:e5:80:19:0d:db:fd:d7:72:1a:d5:07:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed199e1daadbcd50649091bf3c154099a326233862ce25c671
        Validity
            Not Before: Jan  5 12:03:23 2024 GMT
            Not After : Jan  3 12:08:23 2025 GMT
        Subject: CN=82042FC02A9FC0D978C95F99B2754AFE0392BC51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:81:c1:6c:d4:5b:ef:20:f0:c1:67:d3:57:87:
                    90:ce:48:4c:df:ee:04:ec:31:91:04:13:a3:14:e9:
                    b9:b9:31:77:a7:0e:d2:91:d4:45:0c:7f:e1:91:1f:
                    45:b9:72:7b:45:7d:b6:ee:10:ab:62:84:28:54:09:
                    22:8f:d3:36:b2:cc:e1:bf:c8:9c:54:b3:d1:f8:b4:
                    55:f0:c7:58:27:9a:8a:80:25:1f:60:b5:0e:4e:ca:
                    2f:43:5e:4f:ad:d7:ca:1b:29:cc:61:84:6f:3b:94:
                    e0:e0:60:21:dd:fc:81:59:32:3c:a4:76:57:5a:0d:
                    ca:07:42:67:b1:53:9e:b6:70:d8:1b:84:da:95:22:
                    73:8d:1c:ee:70:19:5a:09:63:19:15:78:6d:8b:89:
                    48:cb:b1:31:ab:e0:ed:e4:ea:4a:ac:f2:2f:58:60:
                    c5:50:94:75:be:a2:be:7b:de:b5:1c:2d:4b:c8:4b:
                    87:e6:ba:12:c5:cb:73:6d:7f:a2:1a:89:03:fd:86:
                    a9:83:a4:a6:2d:f2:38:99:f0:c6:da:6e:51:bf:2d:
                    c8:e1:e7:f1:1a:74:ce:8c:05:fc:86:6c:fe:29:1e:
                    03:9e:31:b4:96:bb:56:e8:d8:29:8b:3b:7d:da:7f:
                    39:11:11:fa:18:a5:5e:a1:38:5c:8b:ce:95:3d:29:
                    97:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:04:2F:C0:2A:9F:C0:D9:78:C9:5F:99:B2:75:4A:FE:03:92:BC:51
            X509v3 Authority Key Identifier:
                keyid:B3:2D:01:46:71:A0:8A:F0:A5:5B:31:3E:AB:25:A8:2E:DD:40:2A:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf82d5e52101850b65b10b358b/0/B32D014671A08AF0A55B313EAB25A82EDD402A98.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c6babe0-c981-4c51-971c-b56bd0722eb1/ed199e1daadbcd50649091bf3c154099a326233862ce25c671.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf82d5e52101850b65b10b358b/0/32332e3134342e3136392e302f32342d3234203d3e203139353231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.144.169.0/24

    Signature Algorithm: sha256WithRSAEncryption
         96:89:2e:e7:ce:d7:60:bf:2f:5c:96:a4:b9:79:e1:e2:d1:d3:
         6c:ad:d0:d4:a9:f8:07:0e:29:32:de:ec:8d:df:c3:34:18:22:
         71:61:07:2b:09:d9:83:8c:7b:49:fe:80:76:87:13:27:40:73:
         00:ae:04:a1:b3:a1:60:f3:dd:c2:87:28:e0:dd:e7:a3:64:a9:
         01:47:46:a8:57:0b:ef:99:29:73:f0:52:20:11:50:be:ab:cc:
         ff:08:5b:ac:5e:4e:0b:61:f9:4c:cd:58:44:45:5e:d7:2e:14:
         b6:4b:40:97:16:84:34:1a:d4:95:2d:2f:1e:d3:87:96:d9:c0:
         29:9f:f1:c2:2a:4e:73:19:1d:9f:68:3a:2d:5b:06:ab:34:c8:
         ec:02:f3:7a:dc:c2:27:49:9b:cf:8f:f7:e0:e1:75:a8:a1:dd:
         98:2c:3b:d0:42:c3:ee:ae:d7:e8:fc:d6:18:88:eb:1d:fc:51:
         52:48:d2:56:4d:0a:d2:0e:32:11:0f:15:d9:b4:bb:0a:c7:09:
         f4:50:ee:18:9d:53:f1:6d:12:96:5a:43:b2:57:db:73:97:98:
         94:dd:a9:88:10:cf:79:fc:4d:74:50:c3:5c:90:ad:dc:e2:c3:
         79:28:da:1a:86:20:2f:30:1b:9e:b1:53:d1:83:57:5e:fa:3c:
         f3:f9:90:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 31 19:47:40 2024 by rpki-client on console-fra.rpki-client.org