Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/0/32332e3134322e32342e302f32322d3234203d3e20323035363633.roa
File:                     32332e3134322e32342e302f32322d3234203d3e20323035363633.roa (raw, json)
Hash identifier:          4dT2MNCIqN4cC8laBTcI/CCDQEO8dF7z2wS0MROreZc=
Subject key identifier:   13:BF:27:D5:55:34:34:86:EE:63:2C:11:E5:3B:E7:1B:A0:47:90:E6
Certificate issuer:       /CN=6916ebca586a822a5426c8bac8ea2e5e25e5def6c3210f28c5
Certificate serial:       7D79E3DDC41488D60B385934458278C4911CA920
Authority key identifier: F7:CA:76:95:FC:79:BE:2F:5B:AC:B4:B4:5D:5A:A5:60:79:CA:93:36
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3098fc14-29c9-4916-b03a-ae4a2af101cd/6916ebca586a822a5426c8bac8ea2e5e25e5def6c3210f28c5.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/0/32332e3134322e32342e302f32322d3234203d3e20323035363633.roa
Signing time:             Tue 05 Nov 2024 03:39:59 +0000
ROA not before:           Tue 05 Nov 2024 03:34:59 +0000
ROA not after:            Tue 04 Nov 2025 03:39:59 +0000
asID:                     205663
IP address blocks:        23.142.24.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/0/F7CA7695FC79BE2F5BACB4B45D5AA56079CA9336.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/0/F7CA7695FC79BE2F5BACB4B45D5AA56079CA9336.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3098fc14-29c9-4916-b03a-ae4a2af101cd/6916ebca586a822a5426c8bac8ea2e5e25e5def6c3210f28c5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3098fc14-29c9-4916-b03a-ae4a2af101cd/3098fc14-29c9-4916-b03a-ae4a2af101cd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3098fc14-29c9-4916-b03a-ae4a2af101cd/3098fc14-29c9-4916-b03a-ae4a2af101cd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3098fc14-29c9-4916-b03a-ae4a2af101cd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 21:47:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:79:e3:dd:c4:14:88:d6:0b:38:59:34:45:82:78:c4:91:1c:a9:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6916ebca586a822a5426c8bac8ea2e5e25e5def6c3210f28c5
        Validity
            Not Before: Nov  5 03:34:59 2024 GMT
            Not After : Nov  4 03:39:59 2025 GMT
        Subject: CN=13BF27D555343486EE632C11E53BE71BA04790E6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:43:6f:18:fa:79:05:0e:11:8c:a2:e6:ca:6c:
                    27:3c:ca:bf:31:27:47:5c:b0:2c:fb:c1:92:22:ef:
                    bd:5f:78:50:e7:c4:f4:52:11:de:d5:a2:a5:25:4d:
                    4f:ae:b5:86:5f:df:c4:ab:ea:c8:1d:bc:19:3d:41:
                    9f:51:db:72:df:75:49:81:c7:77:6e:92:a7:d7:ac:
                    a9:8b:f2:be:5d:e6:6c:ab:74:2a:e8:d0:ac:b4:f1:
                    66:8c:4a:82:f0:d1:be:ea:df:d0:2c:ab:11:4d:93:
                    8e:ac:2f:86:30:bc:2b:be:41:db:82:f2:f4:9a:7b:
                    1b:0a:62:e4:75:db:f7:83:c5:0d:7a:25:2e:8e:29:
                    53:79:5c:55:b4:06:32:54:6c:40:0c:60:6c:c8:26:
                    44:b0:ba:16:bb:62:8a:08:2a:98:0d:be:67:05:9f:
                    01:7b:5b:0a:f7:33:44:66:6f:53:04:32:b3:ac:23:
                    32:9a:60:8c:fc:31:81:ff:04:7b:cc:d9:e9:67:d4:
                    8e:df:80:e3:4d:84:0d:d8:a7:e2:55:df:8b:9b:ed:
                    42:60:57:7f:bd:62:65:58:05:c0:b9:24:2e:46:10:
                    a7:4f:a3:14:f3:75:6d:bc:72:f6:a8:2c:af:2c:72:
                    d0:b4:cf:5e:7d:ad:d7:7e:cc:1d:cb:e0:8f:70:2a:
                    4f:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:BF:27:D5:55:34:34:86:EE:63:2C:11:E5:3B:E7:1B:A0:47:90:E6
            X509v3 Authority Key Identifier:
                keyid:F7:CA:76:95:FC:79:BE:2F:5B:AC:B4:B4:5D:5A:A5:60:79:CA:93:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/0/F7CA7695FC79BE2F5BACB4B45D5AA56079CA9336.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3098fc14-29c9-4916-b03a-ae4a2af101cd/6916ebca586a822a5426c8bac8ea2e5e25e5def6c3210f28c5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/0/32332e3134322e32342e302f32322d3234203d3e20323035363633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.142.24.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a4:98:1e:31:fb:e3:8b:96:08:5b:a5:39:ba:fa:ea:89:8e:f6:
         14:e1:14:48:47:5b:f9:6b:0e:dc:34:7c:8b:a3:40:09:c5:51:
         63:cc:32:bb:74:42:04:d5:85:19:17:a9:00:81:c6:1a:64:d5:
         6f:09:1e:33:29:62:43:b3:4e:27:75:22:7a:63:1f:27:f4:e2:
         69:d0:ef:a5:56:9b:02:ae:8a:6e:5d:45:84:ae:28:13:22:9d:
         ef:81:38:2c:46:da:2a:fe:e2:bd:98:f7:bd:61:9a:af:2b:74:
         ee:9b:42:7e:30:7d:14:3e:5a:ff:3b:e8:37:b1:3d:8c:d0:55:
         62:9e:4a:ac:9f:99:fc:ed:85:bc:b1:b8:26:06:cf:4d:7d:f7:
         fc:78:6e:cb:49:78:be:d8:cc:82:f9:43:d2:3e:0f:ff:c8:17:
         14:25:91:b9:61:e7:c9:68:a5:3e:ed:e7:19:9a:a2:f4:8e:c9:
         4a:02:35:4b:b3:f3:85:50:e2:f8:b2:0e:9d:e1:a2:b2:80:8c:
         e6:87:6b:bb:00:e4:7b:9e:70:10:f4:52:33:92:7d:9e:70:61:
         55:3c:74:22:51:34:0c:89:9b:39:96:cb:95:56:1f:00:24:ab:
         ab:57:f1:45:cc:58:4e:9a:42:a1:ad:6f:ef:cb:04:cd:7f:4f:
         6a:30:34:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:12:04 2024 by rpki-client on console-ams.rpki-client.org