Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/0/32332e3134322e32372e302f32342d3234203d3e2037303138.roa
File:                     32332e3134322e32372e302f32342d3234203d3e2037303138.roa (raw, json)
Hash identifier:          gaD9Hp+4qfGaUzubU+S/pkAuunRkFVQEFP8zdckne6Q=
Subject key identifier:   DC:B9:3A:7F:BB:E6:2D:33:ED:2B:11:8E:E2:5E:38:28:65:90:A1:4A
Certificate issuer:       /CN=6916ebca586a822a5426c8bac8ea2e5e25e5def6c3210f28c5
Certificate serial:       300C8A1C0F56E6BA2575C53AF6350672E72D8DE1
Authority key identifier: F7:CA:76:95:FC:79:BE:2F:5B:AC:B4:B4:5D:5A:A5:60:79:CA:93:36
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3098fc14-29c9-4916-b03a-ae4a2af101cd/6916ebca586a822a5426c8bac8ea2e5e25e5def6c3210f28c5.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/0/32332e3134322e32372e302f32342d3234203d3e2037303138.roa
Signing time:             Tue 24 Oct 2023 16:32:32 +0000
ROA not before:           Tue 24 Oct 2023 16:27:32 +0000
ROA not after:            Tue 22 Oct 2024 16:32:32 +0000
asID:                     7018
IP address blocks:        23.142.27.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/0/F7CA7695FC79BE2F5BACB4B45D5AA56079CA9336.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/0/F7CA7695FC79BE2F5BACB4B45D5AA56079CA9336.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3098fc14-29c9-4916-b03a-ae4a2af101cd/6916ebca586a822a5426c8bac8ea2e5e25e5def6c3210f28c5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3098fc14-29c9-4916-b03a-ae4a2af101cd/3098fc14-29c9-4916-b03a-ae4a2af101cd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3098fc14-29c9-4916-b03a-ae4a2af101cd/3098fc14-29c9-4916-b03a-ae4a2af101cd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3098fc14-29c9-4916-b03a-ae4a2af101cd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 05 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:0c:8a:1c:0f:56:e6:ba:25:75:c5:3a:f6:35:06:72:e7:2d:8d:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6916ebca586a822a5426c8bac8ea2e5e25e5def6c3210f28c5
        Validity
            Not Before: Oct 24 16:27:32 2023 GMT
            Not After : Oct 22 16:32:32 2024 GMT
        Subject: CN=DCB93A7FBBE62D33ED2B118EE25E38286590A14A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:f1:b2:db:6a:54:85:16:09:49:b5:66:dc:1a:
                    17:f7:e4:8f:51:ba:7f:22:5e:bf:53:92:cc:d0:05:
                    14:b7:31:82:39:d1:b5:40:15:e2:9f:a7:81:66:6c:
                    5f:be:1a:cf:4a:6a:39:3a:3f:94:2d:9a:ff:24:4e:
                    f0:bd:28:c8:f6:3b:6b:58:de:5c:18:6f:87:37:ac:
                    a2:b2:ef:dd:de:40:ae:df:85:2b:f6:b0:65:48:2a:
                    a4:7e:de:b2:f2:3f:0b:16:f7:c5:78:be:6c:e5:56:
                    7c:85:9a:dc:75:43:0a:f5:1c:21:bb:e0:35:51:91:
                    9e:ac:b7:eb:84:5e:94:94:4b:0a:49:f1:1d:33:72:
                    cc:80:33:c6:5e:26:3a:e3:65:fa:7e:05:ec:51:29:
                    b9:38:0f:68:0a:5b:67:36:d0:d0:17:b2:d7:32:c4:
                    f2:15:bc:18:7e:ba:b2:6f:5a:40:93:90:4c:c2:87:
                    9c:96:b3:8c:d4:63:2e:f4:dc:8c:8b:e1:71:f9:d3:
                    ec:35:61:e2:aa:54:77:0e:1a:dd:28:11:74:8c:12:
                    57:15:0d:4b:49:e4:81:f4:0d:2c:f3:30:9a:45:cb:
                    b3:01:16:d1:b0:44:01:a0:e3:50:2f:7b:c3:44:ba:
                    f4:56:fc:70:bf:58:45:39:b7:27:36:d7:2f:eb:3f:
                    9e:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:B9:3A:7F:BB:E6:2D:33:ED:2B:11:8E:E2:5E:38:28:65:90:A1:4A
            X509v3 Authority Key Identifier:
                keyid:F7:CA:76:95:FC:79:BE:2F:5B:AC:B4:B4:5D:5A:A5:60:79:CA:93:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/0/F7CA7695FC79BE2F5BACB4B45D5AA56079CA9336.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3098fc14-29c9-4916-b03a-ae4a2af101cd/6916ebca586a822a5426c8bac8ea2e5e25e5def6c3210f28c5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/0/32332e3134322e32372e302f32342d3234203d3e2037303138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.142.27.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6b:4b:f6:fe:bd:fe:93:83:2b:0e:cc:0b:1a:3e:28:cf:bb:92:
         3a:76:4c:5c:da:48:dc:78:aa:9a:90:7d:88:0b:d6:13:a1:d3:
         c9:1e:b3:41:c6:26:2b:55:9b:3f:21:04:4e:d2:f8:9e:28:eb:
         94:72:ab:72:cf:ef:a4:eb:c5:04:24:04:86:4d:e5:f4:f7:36:
         30:c1:18:ec:e9:ba:09:9b:a7:e0:f9:cf:2e:33:ef:84:65:5d:
         23:26:3f:a4:5e:55:4f:a7:a3:96:60:87:5b:9c:50:6f:cb:df:
         7d:84:66:bc:5a:e5:cf:a3:47:2f:f7:ef:c7:21:05:83:37:29:
         b0:c2:93:37:87:84:69:37:ad:b3:4a:f6:91:a8:00:ad:99:fa:
         d3:71:11:0f:e3:db:9f:6a:ac:3f:74:d3:41:1c:18:28:5d:08:
         b3:ff:67:9a:32:d9:11:a2:55:0e:02:2d:5f:c0:b5:0a:24:c5:
         5f:bb:a5:24:b8:ad:92:d4:af:f2:af:10:f3:9f:c5:60:94:1b:
         15:a4:72:cc:30:b1:65:4f:f3:06:bd:a5:43:f7:be:f2:4f:67:
         cb:c6:78:52:f8:57:e0:c4:94:c1:b2:34:2d:38:2e:18:94:a4:
         59:6b:a6:af:98:7e:e9:1d:fb:3c:bd:5f:8b:6b:c2:5d:25:f1:
         6d:ce:b0:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 13:34:56 2024 by rpki-client on console-fra.rpki-client.org