Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/0/32332e3134322e32342e302f32342d3234203d3e203632313634.roa
File:                     32332e3134322e32342e302f32342d3234203d3e203632313634.roa (raw, json)
Hash identifier:          4k+7k5LKUCzqteqnVH6YWQJx46RJZw8sP11io/pq894=
Subject key identifier:   F3:C2:09:74:11:6F:23:77:37:31:5A:4E:A2:6A:2F:05:8D:88:EC:A0
Certificate issuer:       /CN=6916ebca586a822a5426c8bac8ea2e5e25e5def6c3210f28c5
Certificate serial:       12F0C56241798F0A41749651389C559D6EE5B8EA
Authority key identifier: F7:CA:76:95:FC:79:BE:2F:5B:AC:B4:B4:5D:5A:A5:60:79:CA:93:36
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3098fc14-29c9-4916-b03a-ae4a2af101cd/6916ebca586a822a5426c8bac8ea2e5e25e5def6c3210f28c5.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/0/32332e3134322e32342e302f32342d3234203d3e203632313634.roa
Signing time:             Tue 05 Dec 2023 02:44:20 +0000
ROA not before:           Tue 05 Dec 2023 02:39:20 +0000
ROA not after:            Tue 03 Dec 2024 02:44:20 +0000
asID:                     62164
IP address blocks:        23.142.24.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/0/F7CA7695FC79BE2F5BACB4B45D5AA56079CA9336.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/0/F7CA7695FC79BE2F5BACB4B45D5AA56079CA9336.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3098fc14-29c9-4916-b03a-ae4a2af101cd/6916ebca586a822a5426c8bac8ea2e5e25e5def6c3210f28c5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3098fc14-29c9-4916-b03a-ae4a2af101cd/3098fc14-29c9-4916-b03a-ae4a2af101cd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3098fc14-29c9-4916-b03a-ae4a2af101cd/3098fc14-29c9-4916-b03a-ae4a2af101cd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3098fc14-29c9-4916-b03a-ae4a2af101cd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 17:21:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:f0:c5:62:41:79:8f:0a:41:74:96:51:38:9c:55:9d:6e:e5:b8:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6916ebca586a822a5426c8bac8ea2e5e25e5def6c3210f28c5
        Validity
            Not Before: Dec  5 02:39:20 2023 GMT
            Not After : Dec  3 02:44:20 2024 GMT
        Subject: CN=F3C20974116F237737315A4EA26A2F058D88ECA0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:c0:a8:a9:3c:f6:ea:74:fe:aa:75:4a:24:02:
                    6d:5a:ba:7b:4e:76:73:dd:13:65:e0:94:c6:73:5e:
                    92:b5:b1:55:49:54:01:16:55:8f:7e:1d:04:74:48:
                    68:53:32:56:6a:73:ab:e9:a3:a7:61:c8:11:7d:c3:
                    bc:43:12:c4:01:e8:6a:d0:9e:8d:47:d0:65:ef:b8:
                    15:5e:7a:3f:43:c3:c9:7c:5e:cb:4c:06:ed:3a:34:
                    bb:67:84:17:77:b9:f8:fd:af:50:84:39:94:96:92:
                    39:66:98:18:77:15:79:09:60:36:e3:de:98:4c:ec:
                    f7:b7:71:7f:f5:f6:46:50:41:a5:b8:f2:9f:12:43:
                    ff:08:1e:e5:09:e4:1b:75:5d:d3:d9:39:b9:1c:99:
                    c3:d3:e7:91:46:eb:7b:30:13:dc:07:f7:4a:be:ec:
                    08:1a:14:a8:01:9b:91:b6:0b:0a:3a:4a:25:66:57:
                    f4:38:04:bc:dd:ac:94:72:e1:6e:ac:26:4d:9a:1f:
                    97:4a:28:ba:b3:53:78:f1:c3:84:72:87:79:90:3c:
                    6d:ba:21:22:1d:4f:3e:96:2d:16:35:4e:da:bb:95:
                    5b:e4:fb:94:e6:68:48:aa:df:08:93:de:37:57:42:
                    6f:80:29:e2:d2:39:53:ba:b5:e9:4c:f8:cf:20:52:
                    57:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:C2:09:74:11:6F:23:77:37:31:5A:4E:A2:6A:2F:05:8D:88:EC:A0
            X509v3 Authority Key Identifier:
                keyid:F7:CA:76:95:FC:79:BE:2F:5B:AC:B4:B4:5D:5A:A5:60:79:CA:93:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/0/F7CA7695FC79BE2F5BACB4B45D5AA56079CA9336.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3098fc14-29c9-4916-b03a-ae4a2af101cd/6916ebca586a822a5426c8bac8ea2e5e25e5def6c3210f28c5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/0/32332e3134322e32342e302f32342d3234203d3e203632313634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.142.24.0/24

    Signature Algorithm: sha256WithRSAEncryption
         59:6e:4f:bb:57:50:c5:2f:fb:70:2e:50:65:b8:c5:ef:12:96:
         2b:4f:04:31:05:51:06:13:14:f1:24:00:5c:c4:ac:eb:9b:80:
         56:6d:be:eb:de:14:5d:20:90:f4:b2:e6:07:65:73:f6:82:40:
         23:8f:2f:86:2e:31:81:89:46:95:73:af:7b:54:79:34:4c:91:
         62:53:74:2a:c5:37:4a:cf:73:6c:47:0e:3d:9b:f4:48:0a:6d:
         8d:9c:50:bf:56:2d:9c:ac:b0:a9:be:85:36:0b:f0:00:22:fd:
         54:08:d8:b5:bd:8c:a5:c7:3f:7b:1d:b7:4f:96:5a:c3:cb:71:
         62:fc:eb:19:66:f1:b3:5c:03:e0:89:e3:16:62:58:c8:c6:aa:
         de:81:e2:89:01:de:34:9b:05:cf:bc:04:bf:ad:fd:9f:62:8e:
         df:d2:c5:fa:b1:50:50:71:17:eb:45:6d:10:72:38:29:7b:6f:
         83:cb:7d:81:c7:da:1e:b6:4d:08:62:46:b5:1d:5a:18:f9:b2:
         4e:47:02:ec:aa:cc:c8:15:9b:32:d9:f4:e9:5f:0e:51:df:de:
         11:7e:01:47:78:6d:58:95:48:f4:23:9b:37:20:17:00:8d:11:
         b5:d9:3b:ca:f0:dd:d4:5a:4a:4e:1c:ea:bf:cb:49:30:ab:67:
         a1:45:30:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 12 15:08:42 2024 by rpki-client on console-ams.rpki-client.org