Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf82d5e52101850b65b10b358b/0/32332e3134342e3136392e302f32342d3234203d3e20323130353337.roa
File:                     32332e3134342e3136392e302f32342d3234203d3e20323130353337.roa (raw, json)
Hash identifier:          5L1rkwm02BDfnZyArwF0A8mXgDtI+CVux9wgl55GQXA=
Subject key identifier:   57:CC:83:97:97:1B:D1:51:F1:F6:BD:D4:F6:CD:6B:9D:9E:02:2E:4C
Certificate issuer:       /CN=ed199e1daadbcd50649091bf3c154099a326233862ce25c671
Certificate serial:       51D5B980867FEE7A91CC3D4E866FE8881D2DF5AE
Authority key identifier: B3:2D:01:46:71:A0:8A:F0:A5:5B:31:3E:AB:25:A8:2E:DD:40:2A:98
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c6babe0-c981-4c51-971c-b56bd0722eb1/ed199e1daadbcd50649091bf3c154099a326233862ce25c671.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf82d5e52101850b65b10b358b/0/32332e3134342e3136392e302f32342d3234203d3e20323130353337.roa
Signing time:             Thu 18 Jul 2024 09:53:25 +0000
ROA not before:           Thu 18 Jul 2024 09:48:25 +0000
ROA not after:            Thu 17 Jul 2025 09:53:25 +0000
asID:                     210537
IP address blocks:        23.144.169.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf82d5e52101850b65b10b358b/0/B32D014671A08AF0A55B313EAB25A82EDD402A98.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf82d5e52101850b65b10b358b/0/B32D014671A08AF0A55B313EAB25A82EDD402A98.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c6babe0-c981-4c51-971c-b56bd0722eb1/ed199e1daadbcd50649091bf3c154099a326233862ce25c671.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c6babe0-c981-4c51-971c-b56bd0722eb1/5c6babe0-c981-4c51-971c-b56bd0722eb1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c6babe0-c981-4c51-971c-b56bd0722eb1/5c6babe0-c981-4c51-971c-b56bd0722eb1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c6babe0-c981-4c51-971c-b56bd0722eb1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 17:41:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:d5:b9:80:86:7f:ee:7a:91:cc:3d:4e:86:6f:e8:88:1d:2d:f5:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed199e1daadbcd50649091bf3c154099a326233862ce25c671
        Validity
            Not Before: Jul 18 09:48:25 2024 GMT
            Not After : Jul 17 09:53:25 2025 GMT
        Subject: CN=57CC8397971BD151F1F6BDD4F6CD6B9D9E022E4C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:05:c7:9f:e6:0f:4e:08:4c:9b:c8:3f:3a:07:
                    ae:73:ba:fe:4d:01:bc:92:fb:9b:4c:f1:9f:af:79:
                    89:b5:89:00:92:d9:0d:83:c5:ba:a6:0d:b9:a1:83:
                    e7:bf:28:65:fa:4e:32:9f:21:0d:50:c9:cf:e9:a1:
                    71:7b:cd:09:f2:35:e6:57:bf:5e:d4:3d:8d:bb:1e:
                    aa:8e:b9:7e:fe:a1:74:a8:48:46:be:a0:98:73:ae:
                    8a:13:45:92:40:60:0a:aa:23:39:94:f7:99:01:21:
                    e8:45:29:8f:3e:7b:2f:4f:19:02:3e:48:10:65:b5:
                    bc:68:6c:c3:bc:a6:18:bd:b5:7a:56:5c:ce:13:02:
                    27:29:f3:ad:53:4b:e1:9a:8e:dc:0f:52:dd:94:91:
                    31:97:3a:af:df:24:cf:1c:62:c5:5e:da:f4:98:93:
                    f5:e2:b6:d5:1c:3e:2c:a3:53:b7:7e:80:c1:81:cb:
                    38:95:5d:76:10:31:12:93:40:81:41:d8:22:81:15:
                    54:bc:86:6d:14:e9:eb:cd:1a:b7:b0:90:74:45:02:
                    8d:9d:5b:a6:c6:3e:c2:44:b2:96:fa:49:84:91:23:
                    49:2d:34:d1:6a:84:fd:80:4c:17:81:92:78:db:6f:
                    ce:80:54:f2:07:c7:e5:98:df:7d:d1:47:cd:dc:f7:
                    31:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:CC:83:97:97:1B:D1:51:F1:F6:BD:D4:F6:CD:6B:9D:9E:02:2E:4C
            X509v3 Authority Key Identifier:
                keyid:B3:2D:01:46:71:A0:8A:F0:A5:5B:31:3E:AB:25:A8:2E:DD:40:2A:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf82d5e52101850b65b10b358b/0/B32D014671A08AF0A55B313EAB25A82EDD402A98.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c6babe0-c981-4c51-971c-b56bd0722eb1/ed199e1daadbcd50649091bf3c154099a326233862ce25c671.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf82d5e52101850b65b10b358b/0/32332e3134342e3136392e302f32342d3234203d3e20323130353337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.144.169.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a6:50:e0:31:63:e1:63:59:df:53:d0:98:e7:16:c7:1c:c5:ab:
         4d:89:e5:a2:78:3c:7b:47:20:ef:8d:c0:bf:e1:94:d0:0c:21:
         ee:54:bd:70:db:3e:99:cc:c8:44:81:10:bf:d7:1e:bd:47:98:
         87:bc:78:aa:74:c8:84:1a:a8:e4:52:67:7b:40:96:6b:e7:5c:
         e6:3e:fa:fb:54:5c:ce:b2:f8:69:a0:fa:70:6c:73:8f:dc:33:
         9c:6a:ef:ec:72:b1:23:56:f0:26:5f:ab:7a:25:67:73:32:a4:
         a4:c0:60:bb:f0:ab:47:6a:58:f5:5b:3b:89:20:47:e3:85:4d:
         56:27:e0:a4:51:e9:a8:55:ae:4a:2a:69:2e:28:62:ea:29:d2:
         6b:d1:a9:9b:8f:8c:3c:31:29:7c:24:b8:47:a5:d2:79:7e:aa:
         30:71:f7:f9:05:48:db:9a:ef:71:bb:68:eb:c9:03:cc:64:a4:
         81:1f:4f:38:66:9e:51:ec:b8:75:62:8f:11:95:78:2b:dd:7c:
         df:29:c7:19:4c:af:1a:fb:ce:ab:b7:27:1f:2e:27:c9:05:b2:
         f9:94:bb:13:ce:29:24:55:61:ed:bf:ea:cc:f2:41:75:f3:63:
         16:c8:84:09:8a:24:e8:cd:7a:52:61:5f:c8:ac:3b:32:09:72:
         16:8e:82:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 18:49:11 2024 by rpki-client on console-ams.rpki-client.org