Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/0/32332e3134322e32352e302f32342d3234203d3e203631313338.roa
File:                     32332e3134322e32352e302f32342d3234203d3e203631313338.roa (raw, json)
Hash identifier:          7eaCEcYehOikYLgXPc+e5LqfSC4lXFU0BvHj5aMJfD8=
Subject key identifier:   A8:4D:64:6F:51:10:65:F9:03:CB:16:5F:AC:D9:4B:CB:07:06:00:EA
Certificate issuer:       /CN=6916ebca586a822a5426c8bac8ea2e5e25e5def6c3210f28c5
Certificate serial:       6A4EB74F166FD2D0CC78CD0A5B4F61BC37C20B67
Authority key identifier: F7:CA:76:95:FC:79:BE:2F:5B:AC:B4:B4:5D:5A:A5:60:79:CA:93:36
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3098fc14-29c9-4916-b03a-ae4a2af101cd/6916ebca586a822a5426c8bac8ea2e5e25e5def6c3210f28c5.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/0/32332e3134322e32352e302f32342d3234203d3e203631313338.roa
Signing time:             Tue 19 Nov 2024 21:35:52 +0000
ROA not before:           Tue 19 Nov 2024 21:30:52 +0000
ROA not after:            Tue 18 Nov 2025 21:35:52 +0000
asID:                     61138
IP address blocks:        23.142.25.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/0/F7CA7695FC79BE2F5BACB4B45D5AA56079CA9336.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/0/F7CA7695FC79BE2F5BACB4B45D5AA56079CA9336.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3098fc14-29c9-4916-b03a-ae4a2af101cd/6916ebca586a822a5426c8bac8ea2e5e25e5def6c3210f28c5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3098fc14-29c9-4916-b03a-ae4a2af101cd/3098fc14-29c9-4916-b03a-ae4a2af101cd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3098fc14-29c9-4916-b03a-ae4a2af101cd/3098fc14-29c9-4916-b03a-ae4a2af101cd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3098fc14-29c9-4916-b03a-ae4a2af101cd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:4e:b7:4f:16:6f:d2:d0:cc:78:cd:0a:5b:4f:61:bc:37:c2:0b:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6916ebca586a822a5426c8bac8ea2e5e25e5def6c3210f28c5
        Validity
            Not Before: Nov 19 21:30:52 2024 GMT
            Not After : Nov 18 21:35:52 2025 GMT
        Subject: CN=A84D646F511065F903CB165FACD94BCB070600EA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:01:1f:67:9b:ea:2e:4e:54:28:86:c3:11:81:
                    1b:6e:07:c6:62:a1:09:a2:8e:51:d1:a0:44:4a:97:
                    ba:8d:f8:65:9e:8e:d7:62:a4:c0:aa:b6:5f:f2:28:
                    ef:10:21:03:9b:99:07:ca:1d:14:af:d9:ed:3d:f2:
                    3b:84:02:16:93:5f:91:9e:92:6e:0f:32:2a:41:4b:
                    16:3d:eb:67:02:71:ae:0f:7f:a8:bb:b7:a1:f7:a0:
                    9a:03:29:93:c6:f2:ae:c7:04:27:6a:72:8b:8f:b5:
                    db:14:8a:7a:c5:0e:7a:f9:a5:4e:bf:4c:e8:1b:fb:
                    84:73:26:24:df:c5:10:78:4d:aa:fd:a3:0d:d3:13:
                    7d:cc:64:ff:e9:e9:0c:fa:cd:96:1c:db:b6:cf:ea:
                    c2:f2:94:88:ad:af:94:a7:25:10:72:22:50:b9:5f:
                    d4:a1:7d:52:35:ee:4e:28:3d:83:75:c3:9b:51:ac:
                    6a:a7:f7:2b:48:ab:d7:57:ea:5f:f6:ab:1a:ed:a4:
                    cf:fd:72:c3:34:d6:83:8b:d3:06:d0:cc:82:04:d1:
                    03:c2:5c:db:cd:9c:6e:71:f6:ff:b6:8d:4b:20:be:
                    cd:5d:0d:b3:80:b1:9a:a1:be:36:8a:48:2f:65:5c:
                    60:b5:4b:cb:a4:3d:65:42:49:e8:fb:7a:c3:7a:d1:
                    c1:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:4D:64:6F:51:10:65:F9:03:CB:16:5F:AC:D9:4B:CB:07:06:00:EA
            X509v3 Authority Key Identifier:
                keyid:F7:CA:76:95:FC:79:BE:2F:5B:AC:B4:B4:5D:5A:A5:60:79:CA:93:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/0/F7CA7695FC79BE2F5BACB4B45D5AA56079CA9336.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3098fc14-29c9-4916-b03a-ae4a2af101cd/6916ebca586a822a5426c8bac8ea2e5e25e5def6c3210f28c5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/0/32332e3134322e32352e302f32342d3234203d3e203631313338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.142.25.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a6:37:1d:51:14:e5:9c:be:a8:52:47:e1:db:b6:17:bf:ae:77:
         5c:d0:36:f2:64:a1:b4:2a:cc:6e:61:d7:27:4f:24:60:8b:49:
         98:d8:b6:79:3d:a9:4d:22:5c:89:76:6d:45:fe:98:4c:84:3d:
         9d:4d:8a:6f:2b:da:d6:53:e7:1e:e4:a8:da:09:7f:4d:2f:c8:
         a4:65:2d:8e:50:15:a1:bf:f4:6e:46:49:09:97:6e:20:f1:7d:
         a7:30:3e:a0:91:c0:0d:0d:77:81:3f:b2:5b:07:f3:9c:12:2a:
         eb:14:3e:ef:77:d7:c1:98:4a:c8:ce:75:b9:e2:26:18:c1:26:
         59:ca:0d:c5:ad:90:f8:ae:e9:ce:67:f8:57:c4:30:cc:bd:4c:
         49:c6:9a:3e:97:8e:c3:78:fb:c1:a8:7f:a0:46:3e:6b:f1:54:
         26:4e:75:33:d2:8c:f8:85:af:42:cf:8b:3f:13:26:61:69:fa:
         dc:e3:3b:ef:31:06:f1:2a:0b:7f:ec:e9:6f:95:26:7a:57:4c:
         01:99:28:96:9e:85:8e:af:59:e1:12:39:4d:b1:d3:e9:f4:e8:
         6e:5e:7b:2c:4b:2d:62:00:36:cb:97:23:ed:91:32:70:ec:de:
         9c:2f:22:fc:c3:64:0e:6a:2e:fe:7c:90:39:1d:11:17:c3:ed:
         75:ef:2c:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 08:13:34 2024 by rpki-client on console-fra.rpki-client.org