Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/32332e3133322e3138352e302f32342d3234203d3e20313937363931.roa
File:                     32332e3133322e3138352e302f32342d3234203d3e20313937363931.roa (raw, json)
Hash identifier:          VAn9OS5D/aEHIQxPIFl1qZDHq0Px1W9lKxpeVpG9C5I=
Subject key identifier:   7A:44:35:E7:3D:15:0D:05:72:1C:72:C1:F2:4E:87:08:7F:C5:9A:CF
Certificate issuer:       /CN=eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96
Certificate serial:       7C119CD9E93212B8EC2A167EAC1E42C11DE96C3B
Authority key identifier: 0F:03:31:2E:E5:9E:3D:E8:27:35:F6:6B:54:94:15:DE:44:64:78:75
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/32332e3133322e3138352e302f32342d3234203d3e20313937363931.roa
Signing time:             Sat 22 Jul 2023 12:29:19 +0000
ROA not before:           Sat 22 Jul 2023 12:24:19 +0000
ROA not after:            Sat 20 Jul 2024 12:29:19 +0000
asID:                     197691
IP address blocks:        23.132.185.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/0F03312EE59E3DE82735F66B549415DE44647875.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/0F03312EE59E3DE82735F66B549415DE44647875.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/a01e997c-b89e-47c2-8d79-d31e58bc3ca4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/a01e997c-b89e-47c2-8d79-d31e58bc3ca4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 04 May 2024 20:17:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:11:9c:d9:e9:32:12:b8:ec:2a:16:7e:ac:1e:42:c1:1d:e9:6c:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96
        Validity
            Not Before: Jul 22 12:24:19 2023 GMT
            Not After : Jul 20 12:29:19 2024 GMT
        Subject: CN=7A4435E73D150D05721C72C1F24E87087FC59ACF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:2a:4e:ec:fa:65:b8:43:44:08:6b:9f:bb:91:
                    47:31:8c:53:ff:6c:24:29:9a:64:4b:23:92:2b:0b:
                    f8:67:dd:7c:df:7d:8e:b1:39:db:38:44:ef:c8:00:
                    b2:a2:72:93:a9:b3:aa:cc:10:07:7a:07:77:1b:2d:
                    05:4a:4b:ae:8a:5e:9e:c0:90:69:7b:0a:b0:ef:76:
                    9e:a9:12:95:fe:9f:f3:dc:ef:08:63:49:92:d0:43:
                    a5:ca:c4:ea:dd:36:3a:a9:f7:75:75:e2:92:0a:3f:
                    1c:93:a1:60:84:c9:9f:e1:3e:b2:f9:a2:59:bd:96:
                    a7:96:50:2b:b1:cc:9b:1c:c7:a5:08:b9:0c:3e:a7:
                    8c:6d:77:51:de:81:63:40:d6:d6:8d:1a:bd:72:53:
                    75:13:8d:a1:8b:7e:b7:7c:fa:13:e1:f2:1c:0a:2f:
                    95:f5:ac:ea:57:7e:33:9d:89:a5:12:95:be:99:87:
                    16:87:e6:df:a9:ef:bd:6c:86:80:e3:80:32:aa:42:
                    7d:48:bb:93:31:9d:cc:23:40:3a:de:87:02:f1:8e:
                    54:67:92:ac:0f:d4:0a:d4:6c:6e:88:06:1b:17:31:
                    ac:6f:80:19:e1:c4:14:1c:33:73:72:52:4c:cf:33:
                    41:44:6e:58:7a:bd:d2:9e:02:37:3b:64:96:6f:b9:
                    5a:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:44:35:E7:3D:15:0D:05:72:1C:72:C1:F2:4E:87:08:7F:C5:9A:CF
            X509v3 Authority Key Identifier:
                keyid:0F:03:31:2E:E5:9E:3D:E8:27:35:F6:6B:54:94:15:DE:44:64:78:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/0F03312EE59E3DE82735F66B549415DE44647875.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/32332e3133322e3138352e302f32342d3234203d3e20313937363931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.132.185.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7c:71:b1:2a:fe:34:43:ad:c5:d5:ff:2a:87:d2:9b:8d:05:41:
         66:76:9e:76:c6:89:94:54:1e:db:4b:80:4b:9b:d1:26:5c:9e:
         45:3c:41:ff:9b:52:7c:9f:c7:35:9e:40:00:88:f5:9b:5a:cd:
         0c:da:bf:7e:b7:6d:f5:5d:ea:04:b7:5e:66:00:06:3f:07:cf:
         76:fe:15:e3:5d:3e:7c:43:5a:07:47:66:d0:e8:e1:d5:bd:30:
         00:c0:63:95:f2:35:e1:89:53:00:7c:a3:6d:75:cf:33:ed:65:
         97:f6:87:be:8c:34:f7:7e:34:13:d1:85:78:76:54:63:da:f9:
         7c:f9:42:59:e7:fa:ba:ba:92:50:c7:05:b8:95:8b:a5:7c:0a:
         07:ce:c1:f5:0f:6c:0b:67:42:88:39:70:7f:4f:c3:b3:e6:d4:
         0c:d4:e0:76:f8:d6:8b:fc:07:53:c0:92:df:39:0a:4f:0b:9b:
         a0:1e:61:f7:fd:51:e8:1e:77:4c:24:2c:6f:64:b0:70:15:3e:
         c6:c3:06:16:c8:73:48:86:f0:61:0c:8b:01:4a:c9:33:19:f8:
         ec:79:01:2d:12:bb:65:c1:43:c7:88:3e:11:e0:10:da:1b:eb:
         da:4f:aa:16:29:a8:34:f4:33:83:f2:39:5a:5d:d3:c8:c5:ca:
         cd:83:2f:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 20:32:55 2024 by rpki-client on console-fra.rpki-client.org