Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/0/32332e3134322e32342e302f32322d3234203d3e203631313338.roa
File:                     32332e3134322e32342e302f32322d3234203d3e203631313338.roa (raw, json)
Hash identifier:          Tw7AUIuXZk5J6pL752yE7uQVhXS9nWiyv9swAZ/L4Xk=
Subject key identifier:   2C:60:90:7A:2D:2F:51:79:FF:75:C1:45:A2:17:D9:6E:63:7C:D4:75
Certificate issuer:       /CN=6916ebca586a822a5426c8bac8ea2e5e25e5def6c3210f28c5
Certificate serial:       4EF6EE040EE9E4406CDDB92D88EB10FCA0138434
Authority key identifier: F7:CA:76:95:FC:79:BE:2F:5B:AC:B4:B4:5D:5A:A5:60:79:CA:93:36
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3098fc14-29c9-4916-b03a-ae4a2af101cd/6916ebca586a822a5426c8bac8ea2e5e25e5def6c3210f28c5.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/0/32332e3134322e32342e302f32322d3234203d3e203631313338.roa
Signing time:             Tue 05 Nov 2024 03:39:59 +0000
ROA not before:           Tue 05 Nov 2024 03:34:59 +0000
ROA not after:            Tue 04 Nov 2025 03:39:59 +0000
asID:                     61138
IP address blocks:        23.142.24.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/0/F7CA7695FC79BE2F5BACB4B45D5AA56079CA9336.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/0/F7CA7695FC79BE2F5BACB4B45D5AA56079CA9336.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3098fc14-29c9-4916-b03a-ae4a2af101cd/6916ebca586a822a5426c8bac8ea2e5e25e5def6c3210f28c5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3098fc14-29c9-4916-b03a-ae4a2af101cd/3098fc14-29c9-4916-b03a-ae4a2af101cd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3098fc14-29c9-4916-b03a-ae4a2af101cd/3098fc14-29c9-4916-b03a-ae4a2af101cd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3098fc14-29c9-4916-b03a-ae4a2af101cd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:f6:ee:04:0e:e9:e4:40:6c:dd:b9:2d:88:eb:10:fc:a0:13:84:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6916ebca586a822a5426c8bac8ea2e5e25e5def6c3210f28c5
        Validity
            Not Before: Nov  5 03:34:59 2024 GMT
            Not After : Nov  4 03:39:59 2025 GMT
        Subject: CN=2C60907A2D2F5179FF75C145A217D96E637CD475
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:a5:b5:1f:0b:fd:de:e4:7c:cb:f3:a9:10:0e:
                    c4:87:7e:db:ba:c1:0c:c1:77:06:27:c7:9e:59:a3:
                    43:df:b7:f2:a2:b9:08:66:46:39:2d:59:e7:df:91:
                    a0:41:af:86:f0:a3:8a:ae:6a:88:86:79:e6:66:0f:
                    18:dc:4f:5f:52:7e:a8:e0:e5:a5:8b:17:b6:15:11:
                    67:a9:8b:62:1a:8a:e0:af:17:cd:04:f3:40:8a:f7:
                    e9:f6:da:5e:0c:a8:72:d0:d0:c0:ac:4c:b1:85:ea:
                    99:cb:72:b0:20:1e:bd:9c:a2:88:e6:10:8a:59:36:
                    35:cb:de:df:2a:aa:1d:1d:84:23:77:46:78:92:83:
                    64:10:e4:d6:f1:72:ef:b3:35:61:f7:05:bb:5c:ae:
                    53:e6:53:d9:b6:3f:35:33:80:56:00:a8:82:43:0d:
                    2c:de:5d:b7:5d:bb:7a:54:ee:ec:20:55:8c:e6:b1:
                    6b:27:7d:c6:53:a3:9b:eb:0b:03:ec:68:6c:a4:fe:
                    df:13:aa:aa:a1:b3:84:17:fb:9b:e4:76:58:01:64:
                    32:73:6c:27:b8:0b:0d:0b:8a:17:c4:71:0a:7a:89:
                    80:5b:cd:18:d2:5a:31:b8:3a:ba:86:7a:28:2d:b3:
                    8b:b8:af:fe:d3:7f:f2:6c:dd:39:70:07:fe:0d:f5:
                    5b:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:60:90:7A:2D:2F:51:79:FF:75:C1:45:A2:17:D9:6E:63:7C:D4:75
            X509v3 Authority Key Identifier:
                keyid:F7:CA:76:95:FC:79:BE:2F:5B:AC:B4:B4:5D:5A:A5:60:79:CA:93:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/0/F7CA7695FC79BE2F5BACB4B45D5AA56079CA9336.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3098fc14-29c9-4916-b03a-ae4a2af101cd/6916ebca586a822a5426c8bac8ea2e5e25e5def6c3210f28c5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/0/32332e3134322e32342e302f32322d3234203d3e203631313338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.142.24.0/22

    Signature Algorithm: sha256WithRSAEncryption
         39:e4:94:49:3d:75:63:ed:2a:58:1e:58:be:46:88:d1:3c:71:
         20:30:9b:91:a2:be:5a:02:0d:59:20:2c:00:e7:5f:c0:99:a9:
         48:fe:36:29:1a:6b:f6:21:ce:9f:1c:0c:c0:cd:2c:8f:c0:6b:
         e9:9e:32:9a:1e:fc:ce:29:51:c8:d4:fe:ea:c8:b5:78:eb:59:
         f4:bc:e9:9b:68:ef:ee:5b:d1:c5:dd:e6:c3:a9:75:37:de:6c:
         ff:ac:be:a7:4d:c1:02:91:cd:9d:6c:b8:37:e5:d4:56:31:a4:
         65:b6:c3:00:99:5a:30:f6:6c:7b:71:a1:e6:99:0f:1b:4d:6b:
         11:09:6c:f8:03:a1:ac:39:38:ca:6c:e8:a5:f4:78:11:45:e9:
         e6:c3:7b:b3:51:a5:98:9d:70:ad:37:d8:8e:12:dd:ad:93:a3:
         1f:a6:54:0f:8d:6b:5f:ad:d1:af:a5:fb:d0:1d:97:51:fd:25:
         46:21:ca:db:47:4e:31:db:d3:db:ad:a3:29:4f:01:bf:50:3e:
         05:f4:84:3b:ad:6c:e5:e2:38:a5:cd:44:6c:c4:23:04:b7:f4:
         32:e7:96:ee:3e:92:21:88:d9:e6:3a:d8:1d:ab:06:6a:df:5f:
         29:8d:bc:91:89:2a:65:4f:dd:de:2d:7f:3a:5f:56:38:16:48:
         dc:b2:a7:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 08:01:52 2024 by rpki-client on console-ams.rpki-client.org