Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/0/32332e3134322e32372e302f32342d3234203d3e2037303138.roa
File:                     32332e3134322e32372e302f32342d3234203d3e2037303138.roa (raw, json)
Hash identifier:          8sLsNglJE5QAUSfTbajtxFa2upS+dfLuGDdyMq70t08=
Subject key identifier:   69:97:E7:70:E3:7D:40:F8:72:BA:C1:EA:3E:41:12:3A:94:7B:6A:A9
Certificate issuer:       /CN=6916ebca586a822a5426c8bac8ea2e5e25e5def6c3210f28c5
Certificate serial:       2771EF8DFF1246CEB5D0337185F3A1B329566CD1
Authority key identifier: F7:CA:76:95:FC:79:BE:2F:5B:AC:B4:B4:5D:5A:A5:60:79:CA:93:36
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3098fc14-29c9-4916-b03a-ae4a2af101cd/6916ebca586a822a5426c8bac8ea2e5e25e5def6c3210f28c5.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/0/32332e3134322e32372e302f32342d3234203d3e2037303138.roa
Signing time:             Tue 24 Sep 2024 16:39:59 +0000
ROA not before:           Tue 24 Sep 2024 16:34:59 +0000
ROA not after:            Tue 23 Sep 2025 16:39:59 +0000
asID:                     7018
IP address blocks:        23.142.27.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/0/F7CA7695FC79BE2F5BACB4B45D5AA56079CA9336.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/0/F7CA7695FC79BE2F5BACB4B45D5AA56079CA9336.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3098fc14-29c9-4916-b03a-ae4a2af101cd/6916ebca586a822a5426c8bac8ea2e5e25e5def6c3210f28c5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3098fc14-29c9-4916-b03a-ae4a2af101cd/3098fc14-29c9-4916-b03a-ae4a2af101cd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3098fc14-29c9-4916-b03a-ae4a2af101cd/3098fc14-29c9-4916-b03a-ae4a2af101cd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3098fc14-29c9-4916-b03a-ae4a2af101cd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 13:37:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:71:ef:8d:ff:12:46:ce:b5:d0:33:71:85:f3:a1:b3:29:56:6c:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6916ebca586a822a5426c8bac8ea2e5e25e5def6c3210f28c5
        Validity
            Not Before: Sep 24 16:34:59 2024 GMT
            Not After : Sep 23 16:39:59 2025 GMT
        Subject: CN=6997E770E37D40F872BAC1EA3E41123A947B6AA9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:20:70:cd:55:53:7c:40:60:51:72:40:fe:5a:
                    e9:f3:83:1f:b7:24:68:bd:4d:11:78:69:ed:f2:25:
                    7a:e9:bd:8c:52:33:72:ac:5d:7c:a4:d5:78:1e:29:
                    f0:82:57:7c:b2:2f:c4:5a:ca:50:03:03:f8:04:f0:
                    3c:50:2c:d6:89:e7:2d:b2:f8:28:f8:77:38:af:db:
                    59:ca:a1:c7:4f:df:ec:bb:f3:d7:ed:39:8e:50:4f:
                    e5:02:b3:1c:98:86:cb:47:61:66:1d:0a:b1:96:fe:
                    70:f9:cd:63:9b:3c:cf:65:62:d5:fb:2b:5c:d4:25:
                    a6:22:a6:45:17:c5:bb:70:db:c2:70:c1:04:39:77:
                    e0:4d:66:16:d0:20:cc:6e:bf:6f:3a:90:48:c1:1c:
                    d1:0c:3f:25:03:a2:22:07:c2:b8:2d:27:47:b2:46:
                    da:5a:b3:01:2d:aa:dc:fd:96:b3:cd:9d:d5:a7:95:
                    25:ca:2c:0e:6f:80:48:af:96:3f:a0:a0:b7:1a:a4:
                    65:62:84:71:cb:c2:54:4e:24:cd:39:a8:96:d2:20:
                    7a:4e:39:24:c3:83:ce:3c:ad:1c:e0:d8:4a:b2:8a:
                    d9:da:f8:1a:60:1f:ba:17:99:c3:2b:6c:c9:90:e8:
                    6a:8c:50:c1:15:f7:4d:81:0d:f2:0a:94:05:5f:55:
                    3b:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:97:E7:70:E3:7D:40:F8:72:BA:C1:EA:3E:41:12:3A:94:7B:6A:A9
            X509v3 Authority Key Identifier:
                keyid:F7:CA:76:95:FC:79:BE:2F:5B:AC:B4:B4:5D:5A:A5:60:79:CA:93:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/0/F7CA7695FC79BE2F5BACB4B45D5AA56079CA9336.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3098fc14-29c9-4916-b03a-ae4a2af101cd/6916ebca586a822a5426c8bac8ea2e5e25e5def6c3210f28c5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/0/32332e3134322e32372e302f32342d3234203d3e2037303138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.142.27.0/24

    Signature Algorithm: sha256WithRSAEncryption
         03:08:d1:fb:a0:ca:1f:a7:54:a4:4b:5a:89:4d:02:88:18:c9:
         6e:37:57:3f:41:8f:ca:66:35:ec:e3:a7:e3:28:8f:fa:75:0f:
         41:b4:82:bb:c6:10:5c:ef:e6:13:68:d7:21:ba:a8:fe:11:bb:
         bb:45:6a:91:1b:12:e2:b3:b2:9a:60:ce:52:e6:9e:4a:ea:06:
         89:72:f7:c6:8e:7e:62:24:40:3b:20:0f:8e:cc:f8:b9:af:b5:
         38:da:24:57:95:2b:30:50:a5:85:f7:37:66:22:cd:27:9a:ba:
         a9:df:7e:d5:6b:e1:89:dd:b3:e5:d7:ea:6e:e6:4e:02:52:96:
         1a:38:78:c3:06:c2:10:d7:67:c1:32:37:75:24:76:79:4a:fd:
         0a:f9:d2:83:58:8b:62:62:c6:4b:66:0e:8b:ed:1e:d9:46:a2:
         6b:f5:f6:fb:59:d7:6f:f0:33:77:60:69:e8:ef:ae:04:b9:34:
         8f:75:aa:da:6f:5d:70:20:bd:0c:15:66:e5:a5:79:df:38:2e:
         d5:92:78:f2:68:24:a3:49:c0:5b:82:51:aa:bb:36:41:62:91:
         6b:bc:ac:bb:ac:4d:13:1f:f9:2b:5b:bf:fa:68:c4:e2:db:af:
         eb:cf:fb:b8:33:de:f1:1c:2c:37:09:f4:55:b5:36:84:4c:e5:
         ba:fa:94:50
-----BEGIN CERTIFICATE-----
MIIFrTCCBJWgAwIBAgIUJ3Hvjf8SRs610DNxhfOhsylWbNEwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNjkxNmViY2E1ODZhODIyYTU0MjZjOGJhYzhlYTJlNWUy
NWU1ZGVmNmMzMjEwZjI4YzUwHhcNMjQwOTI0MTYzNDU5WhcNMjUwOTIzMTYzOTU5
WjAzMTEwLwYDVQQDEyg2OTk3RTc3MEUzN0Q0MEY4NzJCQUMxRUEzRTQxMTIzQTk0
N0I2QUE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAySBwzVVTfEBg
UXJA/lrp84MftyRovU0ReGnt8iV66b2MUjNyrF18pNV4Hinwgld8si/EWspQAwP4
BPA8UCzWiectsvgo+Hc4r9tZyqHHT9/su/PX7TmOUE/lArMcmIbLR2FmHQqxlv5w
+c1jmzzPZWLV+ytc1CWmIqZFF8W7cNvCcMEEOXfgTWYW0CDMbr9vOpBIwRzRDD8l
A6IiB8K4LSdHskbaWrMBLarc/ZazzZ3Vp5UlyiwOb4BIr5Y/oKC3GqRlYoRxy8JU
TiTNOaiW0iB6Tjkkw4POPK0c4NhKsorZ2vgaYB+6F5nDK2zJkOhqjFDBFfdNgQ3y
CpQFX1U7MwIDAQABo4ICrTCCAqkwHQYDVR0OBBYEFGmX53DjfUD4crrB6j5BEjqU
e2qpMB8GA1UdIwQYMBaAFPfKdpX8eb4vW6y0tF1apWB5ypM2MA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1YzkxYmUzZjlkLzAv
RjdDQTc2OTVGQzc5QkUyRjVCQUNCNEI0NUQ1QUE1NjA3OUNBOTMzNi5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvMDM1NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5
ZWYzMjIzLzMwOThmYzE0LTI5YzktNDkxNi1iMDNhLWFlNGEyYWYxMDFjZC82OTE2
ZWJjYTU4NmE4MjJhNTQyNmM4YmFjOGVhMmU1ZTI1ZTVkZWY2YzMyMTBmMjhjNS5j
ZXIwgZ0GCCsGAQUFBwELBIGQMIGNMIGKBggrBgEFBQcwC4Z+cnN5bmM6Ly9ycGtp
LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1
YzkxYmUzZjlkLzAvMzIzMzJlMzEzNDMyMmUzMjM3MmUzMDJmMzIzNDJkMzIzNDIw
M2QzZTIwMzczMDMxMzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAXjhswDQYJKoZIhvcNAQELBQADggEB
AAMI0fugyh+nVKRLWolNAogYyW43Vz9Bj8pmNezjp+Moj/p1D0G0grvGEFzv5hNo
1yG6qP4Ru7tFapEbEuKzsppgzlLmnkrqBoly98aOfmIkQDsgD47M+LmvtTjaJFeV
KzBQpYX3N2YizSeauqnfftVr4Ynds+XX6m7mTgJSlho4eMMGwhDXZ8EyN3UkdnlK
/Qr50oNYi2JixktmDovtHtlGomv19vtZ12/wM3dgaejvrgS5NI91qtpvXXAgvQwV
ZuWled84LtWSePJoJKNJwFuCUaq7NkFikWu8rLusTRMf+Stbv/poxOLbr+vP+7gz
3vEcLDcJ9FW1NoRM5br6lFA=
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:48:04 2025 by rpki-client