Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/32332e3133322e3138342e302f32342d3234203d3e20313338393935.roa
File:                     32332e3133322e3138342e302f32342d3234203d3e20313338393935.roa (raw, json)
Hash identifier:          dXarkXaitYT6qwEHkZb3K7CwRhzd2YnEAmbxaJA9MSs=
Subject key identifier:   13:47:00:D6:33:AF:52:51:A2:D7:73:8E:1C:22:85:88:FE:EC:A9:09
Certificate issuer:       /CN=eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96
Certificate serial:       10B79FE4587BD441D616E0CE78FF5B528D35DA27
Authority key identifier: 0F:03:31:2E:E5:9E:3D:E8:27:35:F6:6B:54:94:15:DE:44:64:78:75
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/32332e3133322e3138342e302f32342d3234203d3e20313338393935.roa
Signing time:             Sun 07 Jul 2024 00:50:20 +0000
ROA not before:           Sun 07 Jul 2024 00:45:20 +0000
ROA not after:            Sun 06 Jul 2025 00:50:20 +0000
asID:                     138995
IP address blocks:        23.132.184.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/0F03312EE59E3DE82735F66B549415DE44647875.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/0F03312EE59E3DE82735F66B549415DE44647875.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/a01e997c-b89e-47c2-8d79-d31e58bc3ca4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/a01e997c-b89e-47c2-8d79-d31e58bc3ca4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:b7:9f:e4:58:7b:d4:41:d6:16:e0:ce:78:ff:5b:52:8d:35:da:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96
        Validity
            Not Before: Jul  7 00:45:20 2024 GMT
            Not After : Jul  6 00:50:20 2025 GMT
        Subject: CN=134700D633AF5251A2D7738E1C228588FEECA909
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:fe:3a:1f:38:c2:3f:ff:c1:eb:d4:90:d2:aa:
                    bc:42:d2:33:c5:fe:77:bd:8e:59:94:ef:37:28:52:
                    0d:bf:71:5d:53:bf:e0:64:73:b7:db:65:33:9e:6a:
                    15:52:dc:5a:e8:c9:41:ec:97:4b:dc:2d:f8:c1:0d:
                    bb:22:48:6d:49:9a:40:fc:a4:a9:bb:d2:88:e2:39:
                    ae:95:c9:57:ab:f7:ae:45:ba:df:66:82:b1:33:47:
                    84:6e:d7:56:12:c2:92:1f:52:a9:0d:7d:dd:61:7e:
                    c2:a3:b5:be:0d:c5:90:57:d9:2f:4f:f7:c0:64:05:
                    60:a4:c1:a4:9b:2c:9b:e0:5b:3d:ca:ad:32:d7:41:
                    51:ce:da:f2:7b:46:f6:3d:d0:16:5e:c1:33:06:18:
                    46:44:c5:de:78:aa:3b:28:bc:64:2f:2b:ce:9c:50:
                    19:2d:c9:36:e8:fd:c2:dd:f4:84:22:63:cb:7a:94:
                    8b:4b:bb:69:45:1a:d1:8e:2e:42:91:86:2a:4f:b6:
                    f5:2b:fb:84:c4:e5:75:f0:61:fd:84:c9:60:03:d4:
                    e1:92:51:e1:46:79:36:62:92:00:db:10:b9:1b:4a:
                    b3:39:d9:e5:c3:8a:d7:e5:d8:2d:b0:06:2d:d4:08:
                    73:0f:10:0d:ce:69:c9:84:50:2e:cb:55:2e:e3:2e:
                    3c:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:47:00:D6:33:AF:52:51:A2:D7:73:8E:1C:22:85:88:FE:EC:A9:09
            X509v3 Authority Key Identifier:
                keyid:0F:03:31:2E:E5:9E:3D:E8:27:35:F6:6B:54:94:15:DE:44:64:78:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/0F03312EE59E3DE82735F66B549415DE44647875.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/32332e3133322e3138342e302f32342d3234203d3e20313338393935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.132.184.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3e:4a:3d:8f:e5:a2:f9:06:ca:42:45:54:a7:45:59:e1:fc:b6:
         05:33:2b:4d:cc:5f:4b:f5:d0:b8:19:26:69:86:2f:d0:d9:4c:
         ec:ee:b8:cb:ce:8e:8d:41:87:57:a6:69:05:e9:d6:67:60:71:
         25:f5:a6:21:f9:b2:66:95:46:ce:d3:eb:76:b0:0a:c9:f7:e3:
         db:4e:51:d3:ee:1d:f4:d6:6f:e4:69:33:d5:32:a8:e4:64:67:
         2b:2c:62:e6:db:b4:80:b9:ac:f1:b6:bf:7a:43:d2:d6:cd:0c:
         03:0d:b0:f1:ca:7a:3f:3f:21:13:cb:d6:e5:3b:2a:92:ec:9c:
         3b:e4:89:ff:1b:22:cd:e5:d8:2e:29:d3:ef:cc:cd:c5:fe:84:
         48:49:8d:a7:7e:61:8f:df:46:cc:8e:e4:12:09:8c:42:8a:1c:
         1c:82:d6:57:82:0f:e5:1e:81:b4:45:e4:98:2d:df:04:2c:23:
         23:ca:8c:c6:10:79:b7:24:cf:10:97:3f:af:7d:9d:e2:8e:28:
         65:cb:2f:3b:06:a1:14:d7:82:77:32:7a:35:b0:8c:b4:8d:f1:
         f3:24:6d:11:25:3d:8a:77:1c:56:f2:07:4c:e1:97:01:8f:2a:
         61:0c:f0:70:11:19:63:16:ff:cb:75:86:9c:ea:a1:32:21:27:
         98:4d:5a:73
-----BEGIN CERTIFICATE-----
MIIFtDCCBJygAwIBAgIUELef5Fh71EHWFuDOeP9bUo012icwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZWVjZjg0N2Q3YTNlNTc5NTliZWJkNjk3YTdlMDY3YTc1
ZTE4YmI2Mjk4YjFkM2JmOTYwHhcNMjQwNzA3MDA0NTIwWhcNMjUwNzA2MDA1MDIw
WjAzMTEwLwYDVQQDEygxMzQ3MDBENjMzQUY1MjUxQTJENzczOEUxQzIyODU4OEZF
RUNBOTA5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsf46HzjCP//B
69SQ0qq8QtIzxf53vY5ZlO83KFINv3FdU7/gZHO322UznmoVUtxa6MlB7JdL3C34
wQ27IkhtSZpA/KSpu9KI4jmulclXq/euRbrfZoKxM0eEbtdWEsKSH1KpDX3dYX7C
o7W+DcWQV9kvT/fAZAVgpMGkmyyb4Fs9yq0y10FRztrye0b2PdAWXsEzBhhGRMXe
eKo7KLxkLyvOnFAZLck26P3C3fSEImPLepSLS7tpRRrRji5CkYYqT7b1K/uExOV1
8GH9hMlgA9ThklHhRnk2YpIA2xC5G0qzOdnlw4rX5dgtsAYt1AhzDxANzmnJhFAu
y1Uu4y48wQIDAQABo4ICtDCCArAwHQYDVR0OBBYEFBNHANYzr1JRotdzjhwihYj+
7KkJMB8GA1UdIwQYMBaAFA8DMS7lnj3oJzX2a1SUFd5EZHh1MA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1YzkxYmUzZjlkLzEv
MEYwMzMxMkVFNTlFM0RFODI3MzVGNjZCNTQ5NDE1REU0NDY0Nzg3NS5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEz
YjAyZTI5L2EwMWU5OTdjLWI4OWUtNDdjMi04ZDc5LWQzMWU1OGJjM2NhNC9lZWNm
ODQ3ZDdhM2U1Nzk1OWJlYmQ2OTdhN2UwNjdhNzVlMThiYjYyOThiMWQzYmY5Ni5j
ZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1
NWM5MWJlM2Y5ZC8xLzMyMzMyZTMxMzMzMjJlMzEzODM0MmUzMDJmMzIzNDJkMzIz
NDIwM2QzZTIwMzEzMzM4MzkzOTM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4S4MA0GCSqGSIb3DQEB
CwUAA4IBAQA+Sj2P5aL5BspCRVSnRVnh/LYFMytNzF9L9dC4GSZphi/Q2Uzs7rjL
zo6NQYdXpmkF6dZnYHEl9aYh+bJmlUbO0+t2sArJ9+PbTlHT7h301m/kaTPVMqjk
ZGcrLGLm27SAuazxtr96Q9LWzQwDDbDxyno/PyETy9blOyqS7Jw75In/GyLN5dgu
KdPvzM3F/oRISY2nfmGP30bMjuQSCYxCihwcgtZXgg/lHoG0ReSYLd8ELCMjyozG
EHm3JM8Qlz+vfZ3ijihlyy87BqEU14J3Mno1sIy0jfHzJG0RJT2KdxxW8gdM4ZcB
jyphDPBwERljFv/LdYac6qEyISeYTVpz
-----END CERTIFICATE-----
Generated at Thu Nov 21 21:03:21 2024 by rpki-client on console-fra.rpki-client.org