Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/32332e3133322e3138342e302f32332d3234203d3e203631313338.roa
File:                     32332e3133322e3138342e302f32332d3234203d3e203631313338.roa (raw, json)
Hash identifier:          wYZ1/kg0mMiS1Ad7AeJJ97E7DiaH6HfDbKbuWRD2hQA=
Subject key identifier:   69:C5:3C:98:CB:AE:3A:F3:2D:2D:B7:82:F7:07:97:74:4B:8E:1B:60
Certificate issuer:       /CN=eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96
Certificate serial:       19C167AF3E81FA8C926FA5DF4A0E77B4DCED7187
Authority key identifier: 0F:03:31:2E:E5:9E:3D:E8:27:35:F6:6B:54:94:15:DE:44:64:78:75
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/32332e3133322e3138342e302f32332d3234203d3e203631313338.roa
Signing time:             Tue 05 Nov 2024 03:40:11 +0000
ROA not before:           Tue 05 Nov 2024 03:35:11 +0000
ROA not after:            Tue 04 Nov 2025 03:40:11 +0000
asID:                     61138
IP address blocks:        23.132.184.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/0F03312EE59E3DE82735F66B549415DE44647875.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/0F03312EE59E3DE82735F66B549415DE44647875.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/a01e997c-b89e-47c2-8d79-d31e58bc3ca4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/a01e997c-b89e-47c2-8d79-d31e58bc3ca4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:c1:67:af:3e:81:fa:8c:92:6f:a5:df:4a:0e:77:b4:dc:ed:71:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96
        Validity
            Not Before: Nov  5 03:35:11 2024 GMT
            Not After : Nov  4 03:40:11 2025 GMT
        Subject: CN=69C53C98CBAE3AF32D2DB782F70797744B8E1B60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:8f:82:3d:bb:17:c5:e6:a2:99:79:43:2f:d1:
                    ea:b9:5f:81:2e:35:4b:97:83:90:b6:b9:54:93:48:
                    42:fc:1c:e5:dc:6c:d0:b9:4f:bf:88:70:1a:e9:82:
                    22:6f:96:13:4e:9a:15:58:03:53:3f:ef:63:6f:1a:
                    20:27:18:b6:ff:5d:b7:8d:fa:5a:f9:54:ae:70:20:
                    b1:a1:31:99:1b:c3:79:51:4e:a1:eb:7d:08:d0:38:
                    86:e9:58:d3:76:a6:56:e4:dd:f4:81:84:8e:b0:8b:
                    ef:3b:ba:c3:a1:ef:66:d9:c6:da:da:76:76:a5:48:
                    d8:f1:11:a8:79:89:a8:30:72:94:45:d3:95:2a:1f:
                    80:97:17:4e:ae:c9:7c:8a:c7:9c:d7:95:b1:9c:1b:
                    a6:fe:1a:1b:91:ba:ff:58:37:52:c9:fa:a8:0b:9c:
                    1f:a1:37:1d:f2:9a:eb:70:61:76:5f:de:47:b3:3f:
                    61:f9:7c:f4:21:20:0c:6e:2d:b7:2c:85:51:d8:91:
                    d7:6a:48:a9:f7:0c:cf:19:79:41:8c:db:74:63:ed:
                    df:df:e0:e9:ab:ce:cb:38:70:c0:0b:e9:70:af:84:
                    b2:af:49:12:fc:98:d2:7c:e6:bb:48:59:7d:0c:39:
                    26:6a:d9:c8:4c:6b:ad:28:a6:1f:57:97:7a:07:99:
                    7a:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:C5:3C:98:CB:AE:3A:F3:2D:2D:B7:82:F7:07:97:74:4B:8E:1B:60
            X509v3 Authority Key Identifier:
                keyid:0F:03:31:2E:E5:9E:3D:E8:27:35:F6:6B:54:94:15:DE:44:64:78:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/0F03312EE59E3DE82735F66B549415DE44647875.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/32332e3133322e3138342e302f32332d3234203d3e203631313338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.132.184.0/23

    Signature Algorithm: sha256WithRSAEncryption
         cc:8f:fb:ee:f8:0d:72:f2:0a:2c:44:6e:da:92:21:5b:4d:c2:
         e3:9a:fa:ac:7c:07:f4:65:d9:e3:9d:96:b2:27:90:af:46:0a:
         85:52:e2:28:27:16:e4:05:c4:1b:3b:1e:41:a2:9e:01:0b:54:
         f7:7a:21:72:9a:65:5d:78:c4:a0:9e:f8:88:65:4b:01:54:c0:
         57:c9:df:de:8c:e7:87:12:e2:3e:7b:fe:3a:65:c9:dc:27:8e:
         26:93:c4:ce:f5:ca:02:96:1d:e4:99:a7:ad:b4:e8:62:00:d4:
         e8:8b:3d:e2:0b:0d:9c:a1:71:6b:81:24:d7:97:83:bf:3d:dd:
         16:49:74:bb:8d:91:6c:62:67:23:f3:e6:dd:8c:51:6f:59:31:
         b2:1b:60:c6:6f:58:ee:66:cb:7e:5e:4a:d8:25:1f:85:9e:33:
         67:c9:94:32:e1:52:55:b8:8c:61:12:ba:01:34:d9:35:ec:c0:
         84:9a:51:6d:ff:a7:7c:c1:09:c7:24:2f:8b:65:58:d9:be:1a:
         f7:c1:7a:26:97:d6:ec:e6:19:53:8b:75:33:44:70:0f:75:59:
         2d:54:4e:21:f7:09:3f:f8:fb:10:3f:6c:0c:4b:1a:8c:96:4c:
         c7:d5:ae:2b:9d:66:46:bb:29:e5:91:68:01:b9:48:af:38:23:
         5b:63:7c:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:40:16 2024 by rpki-client on console-ams.rpki-client.org