Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf82d5e52101850b65b10b358b/0/32332e3134342e3136392e302f32342d3234203d3e203530313034.roa
File:                     32332e3134342e3136392e302f32342d3234203d3e203530313034.roa (raw, json)
Hash identifier:          vdw3TwBbW3LMkndhg2ulIy92JgnbL7GH65qgnJ4fixg=
Subject key identifier:   6C:F7:CA:EE:9D:B7:1B:36:C2:06:4E:1C:FD:8C:89:74:76:CE:FE:77
Certificate issuer:       /CN=ed199e1daa148cc0522eb727a4aa5cc87d3d0149c7f073452f
Certificate serial:       6AFCA2B829772AC32CD5DA014DDB4801D919E876
Authority key identifier: E2:71:AE:55:26:8B:88:C1:E9:72:A7:EE:85:B1:45:9D:8D:D2:10:2C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c6babe0-c981-4c51-971c-b56bd0722eb1/ed199e1daa148cc0522eb727a4aa5cc87d3d0149c7f073452f.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf82d5e52101850b65b10b358b/0/32332e3134342e3136392e302f32342d3234203d3e203530313034.roa
Signing time:             Fri 28 Mar 2025 00:17:19 +0000
ROA not before:           Fri 28 Mar 2025 00:12:19 +0000
ROA not after:            Fri 27 Mar 2026 00:17:19 +0000
asID:                     50104
IP address blocks:        23.144.169.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf82d5e52101850b65b10b358b/0/E271AE55268B88C1E972A7EE85B1459D8DD2102C.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf82d5e52101850b65b10b358b/0/E271AE55268B88C1E972A7EE85B1459D8DD2102C.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c6babe0-c981-4c51-971c-b56bd0722eb1/ed199e1daa148cc0522eb727a4aa5cc87d3d0149c7f073452f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c6babe0-c981-4c51-971c-b56bd0722eb1/5c6babe0-c981-4c51-971c-b56bd0722eb1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c6babe0-c981-4c51-971c-b56bd0722eb1/5c6babe0-c981-4c51-971c-b56bd0722eb1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c6babe0-c981-4c51-971c-b56bd0722eb1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 08:54:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:fc:a2:b8:29:77:2a:c3:2c:d5:da:01:4d:db:48:01:d9:19:e8:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed199e1daa148cc0522eb727a4aa5cc87d3d0149c7f073452f
        Validity
            Not Before: Mar 28 00:12:19 2025 GMT
            Not After : Mar 27 00:17:19 2026 GMT
        Subject: CN=6CF7CAEE9DB71B36C2064E1CFD8C897476CEFE77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:b6:84:1e:3a:a5:69:47:0f:fc:69:46:5b:a8:
                    c3:3a:ab:b5:0f:83:75:09:54:0c:ee:f2:a4:ed:69:
                    d0:aa:06:ae:de:3e:b4:60:38:45:28:dc:0b:55:11:
                    84:88:30:6b:e0:e7:69:8f:83:95:99:9a:a8:93:8f:
                    47:18:5d:85:b4:71:31:27:95:81:8f:9c:bd:6d:63:
                    a4:9f:bb:16:59:c6:34:8f:da:07:2b:36:ea:03:4a:
                    d5:fd:85:fe:b5:1d:ce:17:97:55:53:4d:65:d8:69:
                    b2:a0:02:f5:41:d0:d0:54:a2:8a:7d:2c:32:83:72:
                    35:37:42:1a:04:a3:85:f2:ed:75:00:b9:c4:0a:54:
                    e4:87:41:e0:65:88:ff:c4:04:5e:38:c6:3b:bc:48:
                    3a:28:33:fa:05:44:e3:6e:8f:bb:ef:e5:95:1e:d2:
                    90:29:39:a0:be:38:f2:6b:d5:5c:bd:15:a9:64:9a:
                    11:e4:d6:f3:8e:4a:5f:ec:09:46:b5:b8:b0:99:b8:
                    65:3b:ae:a0:be:46:fc:73:a2:3d:7d:53:1c:d7:93:
                    30:71:14:8d:1f:f1:9d:10:83:68:cb:1d:44:ce:ed:
                    59:4e:92:53:df:04:d7:39:39:55:16:38:51:51:33:
                    09:14:fe:d8:c9:6e:15:a2:fe:ca:0b:fd:01:a9:66:
                    e9:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:F7:CA:EE:9D:B7:1B:36:C2:06:4E:1C:FD:8C:89:74:76:CE:FE:77
            X509v3 Authority Key Identifier:
                keyid:E2:71:AE:55:26:8B:88:C1:E9:72:A7:EE:85:B1:45:9D:8D:D2:10:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf82d5e52101850b65b10b358b/0/E271AE55268B88C1E972A7EE85B1459D8DD2102C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c6babe0-c981-4c51-971c-b56bd0722eb1/ed199e1daa148cc0522eb727a4aa5cc87d3d0149c7f073452f.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf82d5e52101850b65b10b358b/0/32332e3134342e3136392e302f32342d3234203d3e203530313034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.144.169.0/24

    Signature Algorithm: sha256WithRSAEncryption
         94:a1:ea:93:56:12:c2:99:16:b9:b4:73:4f:1d:8a:10:b5:0d:
         c1:c9:b7:49:37:32:fe:4c:7e:e8:8e:e8:d4:13:f1:e9:84:8a:
         4d:6e:5f:6b:b0:b9:5b:ae:78:99:d1:9c:d0:61:1e:ab:33:a2:
         b9:dc:b7:a7:e5:96:b1:b0:9f:d7:bd:3b:4e:b3:04:96:cc:f4:
         58:a6:c0:be:1c:9f:4f:30:e0:3f:0d:7d:f0:c5:07:f1:e9:ea:
         33:d0:22:3e:1d:22:78:fa:3a:4b:7c:b0:12:00:44:cd:0b:1a:
         da:55:87:f8:4f:97:a6:57:57:b6:ac:62:07:d1:37:f0:a2:3a:
         59:4d:c4:69:df:51:91:58:da:32:d0:b7:12:7c:9e:a2:30:c9:
         28:98:47:d5:20:72:62:3f:fc:91:ee:a6:e8:a3:83:2a:0c:ab:
         9b:92:74:c3:8e:55:dd:c5:48:3f:1c:97:6f:05:15:aa:76:56:
         52:8a:72:34:0e:9f:3e:2e:ff:db:6a:a0:23:67:99:97:13:50:
         a8:b9:f9:20:99:e1:e2:3a:93:ad:4f:dc:40:cc:14:ab:a4:e9:
         a7:54:68:40:2c:a9:e4:53:ea:d3:9a:11:a0:9d:89:17:fb:1f:
         91:b5:43:eb:e8:ff:4e:0c:6d:24:f9:98:67:7c:64:77:0a:95:
         8a:94:66:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:28:13 2025 by rpki-client