Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/0/32332e3134322e32372e302f32342d3234203d3e203633303233.roa
File:                     32332e3134322e32372e302f32342d3234203d3e203633303233.roa (raw, json)
Hash identifier:          AhMJGRLgj298DtF2lBXtPrYq45cLD65Q/U60yiSVxro=
Subject key identifier:   D0:0A:23:FF:36:6A:14:27:63:BF:1F:73:8C:01:22:40:21:9E:28:E4
Certificate issuer:       /CN=6916ebca586a822a5426c8bac8ea2e5e25e5def6c3210f28c5
Certificate serial:       0CC1D8B1E9BCB05E8AC62A3A069DC59137F45E7D
Authority key identifier: F7:CA:76:95:FC:79:BE:2F:5B:AC:B4:B4:5D:5A:A5:60:79:CA:93:36
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3098fc14-29c9-4916-b03a-ae4a2af101cd/6916ebca586a822a5426c8bac8ea2e5e25e5def6c3210f28c5.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/0/32332e3134322e32372e302f32342d3234203d3e203633303233.roa
Signing time:             Thu 09 May 2024 20:49:19 +0000
ROA not before:           Thu 09 May 2024 20:44:19 +0000
ROA not after:            Thu 08 May 2025 20:49:19 +0000
asID:                     63023
IP address blocks:        23.142.27.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/0/F7CA7695FC79BE2F5BACB4B45D5AA56079CA9336.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/0/F7CA7695FC79BE2F5BACB4B45D5AA56079CA9336.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3098fc14-29c9-4916-b03a-ae4a2af101cd/6916ebca586a822a5426c8bac8ea2e5e25e5def6c3210f28c5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3098fc14-29c9-4916-b03a-ae4a2af101cd/3098fc14-29c9-4916-b03a-ae4a2af101cd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3098fc14-29c9-4916-b03a-ae4a2af101cd/3098fc14-29c9-4916-b03a-ae4a2af101cd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3098fc14-29c9-4916-b03a-ae4a2af101cd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 20:15:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:c1:d8:b1:e9:bc:b0:5e:8a:c6:2a:3a:06:9d:c5:91:37:f4:5e:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6916ebca586a822a5426c8bac8ea2e5e25e5def6c3210f28c5
        Validity
            Not Before: May  9 20:44:19 2024 GMT
            Not After : May  8 20:49:19 2025 GMT
        Subject: CN=D00A23FF366A142763BF1F738C012240219E28E4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:cf:80:25:c6:ef:e6:c9:fb:14:ff:3e:ab:bb:
                    19:be:ee:e3:cc:10:b4:25:42:45:19:95:8c:8f:25:
                    81:a4:28:f6:b7:45:11:36:6b:4e:ba:d7:46:e0:90:
                    42:f5:44:b3:81:f1:bd:14:df:c5:d0:d1:7f:0e:18:
                    ef:96:ed:a7:18:57:c8:9d:b3:a2:18:9f:fb:c8:08:
                    6c:b6:6a:a7:c3:f8:d3:d2:85:33:1e:2b:f6:c6:c7:
                    41:d2:6c:78:e3:f3:8f:60:17:8e:22:ee:17:08:10:
                    3f:99:f7:ff:17:91:15:08:9b:f8:a9:cc:8c:54:b4:
                    38:89:c0:a3:bc:f0:4e:73:c7:af:90:69:2d:d4:18:
                    1b:ca:14:f6:52:50:a3:fc:5b:18:ec:a9:1b:fd:e6:
                    1f:b7:35:11:b6:e7:5a:d2:e3:d5:7c:09:30:6b:14:
                    5e:30:3d:87:ca:04:b1:8e:a5:d4:ba:08:91:d0:8f:
                    83:97:84:a3:9e:e6:55:84:da:ce:fb:d6:55:d9:34:
                    20:ef:71:9e:36:ce:11:36:51:ef:21:1f:2e:c2:94:
                    60:a2:b4:86:f6:1f:77:03:07:6f:2d:3e:c3:20:d9:
                    c6:a4:67:80:76:f6:11:74:fd:16:3d:9e:ed:d2:40:
                    1b:36:0e:ef:f8:8e:28:6e:4a:8d:3d:9d:eb:16:43:
                    ba:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:0A:23:FF:36:6A:14:27:63:BF:1F:73:8C:01:22:40:21:9E:28:E4
            X509v3 Authority Key Identifier:
                keyid:F7:CA:76:95:FC:79:BE:2F:5B:AC:B4:B4:5D:5A:A5:60:79:CA:93:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/0/F7CA7695FC79BE2F5BACB4B45D5AA56079CA9336.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3098fc14-29c9-4916-b03a-ae4a2af101cd/6916ebca586a822a5426c8bac8ea2e5e25e5def6c3210f28c5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/0/32332e3134322e32372e302f32342d3234203d3e203633303233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.142.27.0/24

    Signature Algorithm: sha256WithRSAEncryption
         18:22:30:96:74:84:30:0d:1a:e4:45:91:19:11:d3:55:c8:27:
         e1:08:cc:2d:46:62:cd:50:8c:a3:ec:fb:53:6e:f3:38:4e:ba:
         2c:4a:19:5d:a1:b0:e9:f8:8e:a9:3b:16:94:19:a0:e2:91:82:
         94:e8:50:cb:ba:1b:1d:13:0a:8a:c5:bf:1e:12:09:da:e0:d9:
         d3:ea:08:6b:01:0b:ee:d0:8a:ef:58:d3:36:6e:64:58:03:ce:
         e6:62:4a:d0:47:1c:5d:47:ee:78:fc:b7:c1:c4:2d:c8:bd:64:
         ea:8a:4e:f2:7b:34:e3:06:9b:17:92:b0:7d:d3:e1:11:b1:f9:
         35:ce:04:2b:5b:fe:21:7b:97:2a:fc:dd:ee:00:92:28:87:18:
         5a:bc:28:9f:36:34:ef:0f:27:c9:75:bd:63:b2:5f:47:5c:ec:
         11:ef:1e:94:a2:38:2f:42:bd:50:59:03:03:df:e4:34:4e:18:
         93:65:0c:e4:b5:35:43:f3:68:c7:9e:c1:42:57:ba:85:81:32:
         7d:f3:63:51:bb:68:0a:8d:84:3c:ce:40:d2:ad:f1:93:7a:c5:
         03:37:16:ba:58:25:d7:bd:37:7d:f8:2a:6d:c0:5a:2f:8d:93:
         de:50:5c:44:a2:ac:4f:83:d6:65:8f:e0:a0:f5:df:51:82:fb:
         d5:3f:eb:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:03:21 2024 by rpki-client on console-fra.rpki-client.org