Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/0/32332e3134322e32342e302f32342d3234203d3e203632313634.roa
File:                     32332e3134322e32342e302f32342d3234203d3e203632313634.roa (raw, json)
Hash identifier:          hp9z1VjwcNG2Ne3s1u7UIn0RStDNtHgQJAynULCzpiU=
Subject key identifier:   B7:46:C9:FF:62:3A:B1:B1:33:98:EC:BE:4F:D4:25:38:DE:FC:17:71
Certificate issuer:       /CN=6916ebca586a822a5426c8bac8ea2e5e25e5def6c3210f28c5
Certificate serial:       248CF8F1F7E52EBF5A342601E080D0F76EEA417C
Authority key identifier: F7:CA:76:95:FC:79:BE:2F:5B:AC:B4:B4:5D:5A:A5:60:79:CA:93:36
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3098fc14-29c9-4916-b03a-ae4a2af101cd/6916ebca586a822a5426c8bac8ea2e5e25e5def6c3210f28c5.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/0/32332e3134322e32342e302f32342d3234203d3e203632313634.roa
Signing time:             Tue 05 Nov 2024 03:39:59 +0000
ROA not before:           Tue 05 Nov 2024 03:34:59 +0000
ROA not after:            Tue 04 Nov 2025 03:39:59 +0000
asID:                     62164
IP address blocks:        23.142.24.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/0/F7CA7695FC79BE2F5BACB4B45D5AA56079CA9336.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/0/F7CA7695FC79BE2F5BACB4B45D5AA56079CA9336.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3098fc14-29c9-4916-b03a-ae4a2af101cd/6916ebca586a822a5426c8bac8ea2e5e25e5def6c3210f28c5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3098fc14-29c9-4916-b03a-ae4a2af101cd/3098fc14-29c9-4916-b03a-ae4a2af101cd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3098fc14-29c9-4916-b03a-ae4a2af101cd/3098fc14-29c9-4916-b03a-ae4a2af101cd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3098fc14-29c9-4916-b03a-ae4a2af101cd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 15:50:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:8c:f8:f1:f7:e5:2e:bf:5a:34:26:01:e0:80:d0:f7:6e:ea:41:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6916ebca586a822a5426c8bac8ea2e5e25e5def6c3210f28c5
        Validity
            Not Before: Nov  5 03:34:59 2024 GMT
            Not After : Nov  4 03:39:59 2025 GMT
        Subject: CN=B746C9FF623AB1B13398ECBE4FD42538DEFC1771
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:0e:ff:3c:f4:ac:51:65:60:62:65:51:31:02:
                    14:bb:a9:7b:17:e2:b5:0c:a9:91:4a:11:66:b5:48:
                    30:a5:f6:22:f2:2b:4b:a8:db:52:48:55:d9:61:54:
                    c4:2b:4a:98:82:41:75:f9:9b:92:43:34:2e:1d:42:
                    65:ed:82:a0:a5:9b:f8:10:ee:ea:de:32:ff:d1:1f:
                    09:38:1a:22:1a:79:e2:7b:d9:9c:f9:ea:df:7d:ed:
                    5a:75:70:0a:98:ef:2d:89:42:06:83:ef:4d:f9:22:
                    42:4b:24:9f:33:6c:e2:c9:86:b4:fe:fb:45:07:c6:
                    58:28:49:b0:cd:d9:b4:72:33:aa:c1:cd:bc:44:5d:
                    e8:97:4d:43:ef:27:90:3c:60:76:da:e5:97:83:1a:
                    5f:4b:6f:cf:8c:e2:e3:e9:60:4f:8a:e0:7c:54:b7:
                    f4:ae:c6:92:29:07:fb:ba:19:d3:bc:70:96:c6:79:
                    b2:fc:9e:c8:37:03:e4:b6:46:ae:35:09:5d:bd:56:
                    11:8c:61:d0:6d:30:d3:c3:15:5d:fc:90:f2:88:72:
                    76:71:ee:34:16:74:3e:b2:9e:f3:7e:d2:6d:e9:13:
                    0f:44:a8:54:cd:08:fe:b0:c1:d5:4b:1e:c5:6e:e4:
                    95:02:c5:88:61:2f:a1:9b:65:39:ee:c4:1d:1e:44:
                    d7:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:46:C9:FF:62:3A:B1:B1:33:98:EC:BE:4F:D4:25:38:DE:FC:17:71
            X509v3 Authority Key Identifier:
                keyid:F7:CA:76:95:FC:79:BE:2F:5B:AC:B4:B4:5D:5A:A5:60:79:CA:93:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/0/F7CA7695FC79BE2F5BACB4B45D5AA56079CA9336.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3098fc14-29c9-4916-b03a-ae4a2af101cd/6916ebca586a822a5426c8bac8ea2e5e25e5def6c3210f28c5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/0/32332e3134322e32342e302f32342d3234203d3e203632313634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.142.24.0/24

    Signature Algorithm: sha256WithRSAEncryption
         27:ec:43:b4:8a:3e:91:14:c5:43:c7:86:77:f8:74:8d:ed:1b:
         07:64:be:6c:c7:af:af:45:97:3a:c9:76:0c:e5:a8:3e:63:25:
         b8:f4:13:56:2d:45:8a:36:5b:95:86:4c:b8:50:22:b6:99:68:
         9f:cd:07:92:f5:f8:3b:bf:d1:a1:c4:9d:6a:64:fe:59:ce:e7:
         2b:3c:b8:43:26:e6:71:15:7d:dc:5e:f6:cf:56:bf:36:e3:8f:
         1a:5e:84:bf:d1:6d:a0:d1:c1:ab:f1:cf:32:00:cd:19:5b:2e:
         c8:71:85:46:fe:5f:df:ad:27:c2:b0:a9:45:1a:eb:a4:8f:09:
         ff:5a:50:06:98:66:35:36:79:7b:0e:1d:f1:1b:3c:26:a5:20:
         f7:e1:ba:25:fc:57:d5:5f:19:69:b7:7f:f0:d0:49:dc:68:79:
         e7:d5:1a:09:c8:e4:14:c1:ec:a3:14:c9:b3:80:11:af:12:90:
         75:0c:4b:eb:53:6c:03:1f:65:52:b3:bb:09:33:7f:77:0a:b4:
         61:56:18:33:e4:92:6e:6c:08:b7:74:24:22:cb:f1:77:f8:16:
         34:dc:28:0f:f4:e5:4d:41:6f:ab:d4:b7:96:72:4a:9b:61:0f:
         38:8b:8b:1b:7d:0c:97:45:40:dd:39:61:f3:68:46:4a:98:36:
         b5:76:d4:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 15:51:29 2024 by rpki-client on console-ams.rpki-client.org