Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/0/32332e3134322e32342e302f32322d3234203d3e203631313338.roa
File:                     32332e3134322e32342e302f32322d3234203d3e203631313338.roa (raw, json)
Hash identifier:          pTkguSGIWD53bu2N8g6D4M7d+gId9XTXcMedYJAq4wY=
Subject key identifier:   44:F2:E8:93:33:45:DE:F1:99:AD:33:AE:15:B4:5D:C3:1B:19:E5:A3
Certificate issuer:       /CN=6916ebca586a822a5426c8bac8ea2e5e25e5def6c3210f28c5
Certificate serial:       735F3180F19DEA9F2B043FABB78FD9DC82345D2A
Authority key identifier: F7:CA:76:95:FC:79:BE:2F:5B:AC:B4:B4:5D:5A:A5:60:79:CA:93:36
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3098fc14-29c9-4916-b03a-ae4a2af101cd/6916ebca586a822a5426c8bac8ea2e5e25e5def6c3210f28c5.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/0/32332e3134322e32342e302f32322d3234203d3e203631313338.roa
Signing time:             Tue 05 Dec 2023 02:44:20 +0000
ROA not before:           Tue 05 Dec 2023 02:39:20 +0000
ROA not after:            Tue 03 Dec 2024 02:44:20 +0000
asID:                     61138
IP address blocks:        23.142.24.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/0/F7CA7695FC79BE2F5BACB4B45D5AA56079CA9336.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/0/F7CA7695FC79BE2F5BACB4B45D5AA56079CA9336.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3098fc14-29c9-4916-b03a-ae4a2af101cd/6916ebca586a822a5426c8bac8ea2e5e25e5def6c3210f28c5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3098fc14-29c9-4916-b03a-ae4a2af101cd/3098fc14-29c9-4916-b03a-ae4a2af101cd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3098fc14-29c9-4916-b03a-ae4a2af101cd/3098fc14-29c9-4916-b03a-ae4a2af101cd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3098fc14-29c9-4916-b03a-ae4a2af101cd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 27 Apr 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:5f:31:80:f1:9d:ea:9f:2b:04:3f:ab:b7:8f:d9:dc:82:34:5d:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6916ebca586a822a5426c8bac8ea2e5e25e5def6c3210f28c5
        Validity
            Not Before: Dec  5 02:39:20 2023 GMT
            Not After : Dec  3 02:44:20 2024 GMT
        Subject: CN=44F2E8933345DEF199AD33AE15B45DC31B19E5A3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:cd:87:5a:d6:6d:e8:3d:b5:5a:8d:0b:c5:43:
                    88:ba:3c:12:65:29:a8:53:e4:c3:3d:d8:ee:59:c5:
                    a4:07:a2:70:58:2a:fe:ab:2a:a6:fb:f8:1c:19:c6:
                    4e:68:43:99:70:d0:0f:a6:ef:3e:17:09:d2:c7:72:
                    39:9b:9d:c7:4c:66:cd:12:c8:56:40:0f:bc:63:47:
                    8b:b8:1a:40:1f:c4:ac:9c:c6:b3:b6:54:f8:57:fe:
                    75:8e:9c:fc:ba:1e:1b:93:b8:40:2e:61:63:a4:50:
                    3b:f1:ee:1c:38:fd:6c:63:b0:2d:03:5f:e6:34:0b:
                    c5:80:f1:89:d1:c3:5f:16:d5:de:84:47:b6:49:7e:
                    8c:d4:19:cf:94:e5:f6:05:62:6e:ac:08:23:7a:00:
                    5e:94:b2:18:62:69:b4:2c:e7:c0:be:b9:ee:53:7d:
                    ae:f4:b1:75:de:6a:6d:0d:ce:19:74:b7:7d:87:37:
                    1d:99:91:9c:aa:15:58:24:fa:01:13:7f:c3:a4:2b:
                    5a:04:ed:6c:a4:28:fc:8f:99:d2:c6:c6:4d:e0:55:
                    17:e4:cd:7a:6a:90:9e:26:39:d0:c8:fe:6b:75:c9:
                    e1:0f:8a:f4:36:4d:4d:66:21:46:49:b2:66:96:5d:
                    b0:94:e8:93:01:e6:51:a0:6c:65:c7:29:75:6b:d4:
                    8a:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:F2:E8:93:33:45:DE:F1:99:AD:33:AE:15:B4:5D:C3:1B:19:E5:A3
            X509v3 Authority Key Identifier:
                keyid:F7:CA:76:95:FC:79:BE:2F:5B:AC:B4:B4:5D:5A:A5:60:79:CA:93:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/0/F7CA7695FC79BE2F5BACB4B45D5AA56079CA9336.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3098fc14-29c9-4916-b03a-ae4a2af101cd/6916ebca586a822a5426c8bac8ea2e5e25e5def6c3210f28c5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/0/32332e3134322e32342e302f32322d3234203d3e203631313338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.142.24.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b9:f7:c2:9d:5b:96:7a:81:61:4d:3f:11:4b:28:4e:54:92:40:
         d8:b8:87:1c:0d:23:85:48:c2:2e:0e:18:bc:c8:8b:1e:73:e6:
         93:42:e1:b8:0b:d4:29:3c:9e:92:f5:c4:dd:ae:33:93:b3:56:
         df:38:48:80:04:2a:b6:ee:fb:17:79:74:32:ef:d6:34:16:83:
         4e:4b:bf:e3:f1:b9:f9:c0:94:a0:a2:be:c0:c1:0c:5f:26:9c:
         37:dd:bd:f8:34:9d:a0:e8:ba:c4:8e:1f:09:70:18:ae:f1:72:
         85:18:a2:ad:ab:4a:b1:da:19:9f:b3:8f:19:56:2c:76:26:c2:
         81:69:76:5a:b1:ac:c4:62:ab:4a:b4:90:24:b0:1e:99:a6:60:
         38:97:eb:fc:61:d9:5d:57:41:9e:8d:94:d5:c6:e3:e4:90:e3:
         33:1f:9b:bc:9e:b3:59:72:06:94:1d:9f:11:4c:48:5c:ad:fa:
         2b:eb:15:48:68:72:9b:33:53:07:b7:a7:f2:ba:4e:c5:e5:c3:
         41:bc:5a:dc:79:bf:15:d7:f2:cf:b0:8f:1f:9c:f5:b2:b4:2a:
         ac:0f:02:06:c7:0d:9f:c3:d0:ca:fe:64:7f:03:4c:70:5a:0a:
         d5:41:0b:a5:1f:e0:5f:b8:95:a9:60:09:b4:7b:63:d6:d4:aa:
         3f:f9:97:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 26 00:35:25 2024 by rpki-client on console-ams.rpki-client.org