Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/0/32332e3134322e32362e302f32342d3234203d3e203633303233.roa
File:                     32332e3134322e32362e302f32342d3234203d3e203633303233.roa (raw, json)
Hash identifier:          rhk7SvssoyyHQE0yLY8zXZoRPm2F/SXTLi2dbqb88+U=
Subject key identifier:   E8:91:3D:23:91:A9:9E:E9:EF:B8:45:6E:42:55:1E:87:A0:70:C5:0D
Certificate issuer:       /CN=6916ebca586a822a5426c8bac8ea2e5e25e5def6c3210f28c5
Certificate serial:       28C4D525E5018A5083399FC4C79319BD276CC67D
Authority key identifier: F7:CA:76:95:FC:79:BE:2F:5B:AC:B4:B4:5D:5A:A5:60:79:CA:93:36
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3098fc14-29c9-4916-b03a-ae4a2af101cd/6916ebca586a822a5426c8bac8ea2e5e25e5def6c3210f28c5.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/0/32332e3134322e32362e302f32342d3234203d3e203633303233.roa
Signing time:             Thu 09 May 2024 20:51:36 +0000
ROA not before:           Thu 09 May 2024 20:46:36 +0000
ROA not after:            Thu 08 May 2025 20:51:36 +0000
asID:                     63023
IP address blocks:        23.142.26.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/0/F7CA7695FC79BE2F5BACB4B45D5AA56079CA9336.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/0/F7CA7695FC79BE2F5BACB4B45D5AA56079CA9336.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3098fc14-29c9-4916-b03a-ae4a2af101cd/6916ebca586a822a5426c8bac8ea2e5e25e5def6c3210f28c5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3098fc14-29c9-4916-b03a-ae4a2af101cd/3098fc14-29c9-4916-b03a-ae4a2af101cd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3098fc14-29c9-4916-b03a-ae4a2af101cd/3098fc14-29c9-4916-b03a-ae4a2af101cd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3098fc14-29c9-4916-b03a-ae4a2af101cd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 08:08:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:c4:d5:25:e5:01:8a:50:83:39:9f:c4:c7:93:19:bd:27:6c:c6:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6916ebca586a822a5426c8bac8ea2e5e25e5def6c3210f28c5
        Validity
            Not Before: May  9 20:46:36 2024 GMT
            Not After : May  8 20:51:36 2025 GMT
        Subject: CN=E8913D2391A99EE9EFB8456E42551E87A070C50D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:2c:aa:83:f3:77:f1:e9:79:fb:3e:5e:d3:1f:
                    f7:ce:fe:42:dc:41:53:c8:df:fe:0c:80:d7:4a:03:
                    c6:2b:cd:16:25:a4:4b:e0:87:a9:9a:c4:8b:90:39:
                    39:c3:19:ef:01:64:83:45:09:b7:45:62:a5:22:ee:
                    07:d6:08:7c:54:c7:83:85:0d:08:d1:3e:db:ae:ab:
                    3c:62:cd:88:f1:59:76:23:27:cc:59:4a:bf:83:74:
                    36:52:45:8b:92:5e:14:a0:42:96:00:15:2c:0a:30:
                    07:bc:fc:15:de:55:8f:b6:1e:3f:30:c8:bc:f9:d5:
                    cb:9d:25:07:f8:2c:ff:61:f2:24:19:c3:4b:38:6d:
                    c2:39:a0:19:b6:dc:68:bf:e5:52:d2:5e:c2:96:aa:
                    20:f6:e3:d3:e1:34:ac:3a:71:9a:9f:45:5b:42:79:
                    5d:22:80:bb:fa:df:c1:e8:9d:67:86:17:f0:3c:08:
                    6c:8d:87:ab:77:75:89:4e:cb:cb:37:ba:9f:1c:e3:
                    ea:86:c3:1b:14:73:51:b0:76:ee:f7:9a:e2:23:56:
                    ae:14:78:c5:97:eb:1c:7f:02:c0:c7:4e:ed:ab:35:
                    12:2e:40:1c:3b:5a:7a:9c:9e:b5:8f:a5:59:21:6e:
                    33:98:aa:c1:c8:5d:d8:e8:26:e4:2d:b9:f0:1e:af:
                    f4:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:91:3D:23:91:A9:9E:E9:EF:B8:45:6E:42:55:1E:87:A0:70:C5:0D
            X509v3 Authority Key Identifier:
                keyid:F7:CA:76:95:FC:79:BE:2F:5B:AC:B4:B4:5D:5A:A5:60:79:CA:93:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/0/F7CA7695FC79BE2F5BACB4B45D5AA56079CA9336.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3098fc14-29c9-4916-b03a-ae4a2af101cd/6916ebca586a822a5426c8bac8ea2e5e25e5def6c3210f28c5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/0/32332e3134322e32362e302f32342d3234203d3e203633303233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.142.26.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8c:3d:cf:14:7d:97:73:55:c2:6b:c4:d5:9c:3d:cd:15:be:36:
         18:20:b0:74:a7:b8:06:4d:de:a1:20:36:3c:89:1c:7b:a1:72:
         0f:7e:40:8c:a8:d5:57:62:ce:10:d5:93:18:40:75:60:c7:e7:
         26:92:28:6b:ed:e3:62:36:a4:5e:b5:50:6b:cb:8b:67:62:9c:
         dc:d9:02:bf:4c:21:53:60:6b:9f:66:36:b2:e0:aa:db:ba:c2:
         bf:1a:60:8d:8f:a6:af:f4:50:88:df:4f:b7:33:d5:45:40:17:
         21:94:1b:92:86:7f:5c:88:92:52:4d:92:23:09:c4:3a:7c:aa:
         25:9e:25:c7:16:85:04:3c:5e:7e:bc:c8:60:6e:c0:e3:61:71:
         13:0d:d1:0d:b9:01:5d:13:7d:58:c2:67:39:4f:23:ce:98:d9:
         52:ac:c5:d4:20:a0:71:19:27:2d:e5:a5:43:c4:22:ca:1c:73:
         f8:9a:f3:e5:2f:6b:09:a7:9d:18:e2:84:87:66:b6:73:23:00:
         97:fe:26:e4:69:02:3b:87:44:af:89:7e:8c:ba:0e:d6:f5:ac:
         14:5d:8b:b6:9d:93:4e:3e:5f:1a:74:8b:d4:ff:fa:01:df:fd:
         1d:9a:2c:7e:a0:0c:2b:0a:04:40:fe:66:65:a1:fa:cf:c9:ca:
         aa:73:ce:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 06:04:01 2024 by rpki-client on console-ams.rpki-client.org