Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/0/32332e3134322e32352e302f32342d3234203d3e20323133383632.roa
File:                     32332e3134322e32352e302f32342d3234203d3e20323133383632.roa (raw, json)
Hash identifier:          Dx5iQ0Gkn1fR9bXbF29wLB698DxlmiG9ifuNbo/8lEQ=
Subject key identifier:   12:25:29:CC:4A:9A:3F:BA:9B:A0:B6:3F:79:C6:C2:59:15:CD:A6:F8
Certificate issuer:       /CN=6916ebca586a822a5426c8bac8ea2e5e25e5def6c3210f28c5
Certificate serial:       6ACDACB9E460DD7CA8F1BF4434ECF7E8E584A2E7
Authority key identifier: F7:CA:76:95:FC:79:BE:2F:5B:AC:B4:B4:5D:5A:A5:60:79:CA:93:36
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3098fc14-29c9-4916-b03a-ae4a2af101cd/6916ebca586a822a5426c8bac8ea2e5e25e5def6c3210f28c5.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/0/32332e3134322e32352e302f32342d3234203d3e20323133383632.roa
Signing time:             Thu 21 Nov 2024 20:01:30 +0000
ROA not before:           Thu 21 Nov 2024 19:56:30 +0000
ROA not after:            Thu 20 Nov 2025 20:01:30 +0000
asID:                     213862
IP address blocks:        23.142.25.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/0/F7CA7695FC79BE2F5BACB4B45D5AA56079CA9336.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/0/F7CA7695FC79BE2F5BACB4B45D5AA56079CA9336.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3098fc14-29c9-4916-b03a-ae4a2af101cd/6916ebca586a822a5426c8bac8ea2e5e25e5def6c3210f28c5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3098fc14-29c9-4916-b03a-ae4a2af101cd/3098fc14-29c9-4916-b03a-ae4a2af101cd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3098fc14-29c9-4916-b03a-ae4a2af101cd/3098fc14-29c9-4916-b03a-ae4a2af101cd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3098fc14-29c9-4916-b03a-ae4a2af101cd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 18 Feb 2025 05:50:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:cd:ac:b9:e4:60:dd:7c:a8:f1:bf:44:34:ec:f7:e8:e5:84:a2:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6916ebca586a822a5426c8bac8ea2e5e25e5def6c3210f28c5
        Validity
            Not Before: Nov 21 19:56:30 2024 GMT
            Not After : Nov 20 20:01:30 2025 GMT
        Subject: CN=122529CC4A9A3FBA9BA0B63F79C6C25915CDA6F8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:54:7b:2c:8f:60:95:8f:93:50:45:da:28:80:
                    06:e3:1a:db:c4:5c:25:bc:6e:c5:5d:2b:14:99:45:
                    1d:16:bc:d4:fe:4a:c3:85:21:00:89:55:13:6d:a4:
                    6e:e6:05:b8:5a:a4:3d:53:ac:65:a6:0b:c0:1f:4c:
                    4a:95:05:52:3b:57:b3:11:be:88:af:fc:bb:1b:06:
                    fc:d4:d7:cd:68:65:04:68:7a:4b:64:28:44:80:1f:
                    04:91:50:37:c6:87:5d:21:ac:79:bd:d8:ef:be:da:
                    fa:b9:47:df:4f:53:1a:39:6d:a6:24:76:eb:e3:ff:
                    c3:d7:a3:ea:6c:e6:4c:7f:29:92:db:d3:21:1f:f0:
                    bd:d6:b6:25:c0:9f:ac:85:26:5a:48:05:7f:e9:6c:
                    c9:fb:74:e9:b3:8f:86:5b:3d:5e:0f:0f:06:e4:f4:
                    ed:a0:ab:af:83:63:02:e0:59:92:bf:bf:c0:b8:c5:
                    39:bb:6a:08:74:bd:05:9e:02:80:50:84:e5:d4:57:
                    d5:2f:d9:3a:7c:78:65:57:dc:dc:1a:88:3c:70:bf:
                    c3:57:15:46:d8:25:d3:f9:37:db:33:aa:0d:14:f0:
                    2a:6b:be:68:1f:b1:ed:7c:f1:d2:23:b8:fd:74:65:
                    71:03:14:24:14:53:c3:21:49:27:17:cb:8b:d0:ba:
                    12:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:25:29:CC:4A:9A:3F:BA:9B:A0:B6:3F:79:C6:C2:59:15:CD:A6:F8
            X509v3 Authority Key Identifier:
                keyid:F7:CA:76:95:FC:79:BE:2F:5B:AC:B4:B4:5D:5A:A5:60:79:CA:93:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/0/F7CA7695FC79BE2F5BACB4B45D5AA56079CA9336.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3098fc14-29c9-4916-b03a-ae4a2af101cd/6916ebca586a822a5426c8bac8ea2e5e25e5def6c3210f28c5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/0/32332e3134322e32352e302f32342d3234203d3e20323133383632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.142.25.0/24

    Signature Algorithm: sha256WithRSAEncryption
         04:56:47:aa:a6:85:f1:b9:57:67:25:f7:29:7b:54:b5:47:84:
         05:2b:b1:d1:84:94:82:c5:3f:45:73:59:9d:79:8b:31:e0:b5:
         c6:8e:2e:c5:9c:95:fc:62:0f:18:23:cb:e0:4b:09:d2:f5:dd:
         a6:5a:2e:2a:16:b5:57:b6:9d:ce:7d:15:bc:4a:fa:b7:fe:0b:
         72:a4:ea:f3:7e:fc:ab:d9:2c:95:c0:4f:3d:3a:fc:d0:7c:0c:
         cf:cf:f0:ff:fb:f2:91:5c:82:e8:0d:7b:ce:d1:9c:c1:00:83:
         b3:06:94:77:5c:c2:21:14:c0:e4:20:29:2b:cd:a7:96:1b:d2:
         ab:56:fb:71:53:cc:7b:f4:1a:84:6f:90:cc:36:ea:9b:cc:d5:
         c4:b3:e7:cd:50:89:bc:fe:17:18:7c:7c:90:c0:5a:8b:ea:dc:
         46:4c:b4:2f:ad:de:7e:98:79:45:7d:3b:d6:13:1a:e1:6c:25:
         a5:00:bd:8d:c7:cd:61:26:59:91:65:2a:41:ca:b8:4a:84:9b:
         de:5e:af:fc:59:68:19:15:a9:d4:67:f1:75:38:93:c4:49:f4:
         ff:08:3e:0e:49:4f:8c:a4:de:95:06:bc:44:4e:d6:52:c0:f6:
         8c:e7:c6:c8:6f:da:bc:57:07:c8:8c:9a:09:db:84:ce:b0:51:
         50:9e:d2:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:03:27 2025 by rpki-client