Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/32332e3133322e3138352e302f32342d3234203d3e20323131313434.roa
File:                     32332e3133322e3138352e302f32342d3234203d3e20323131313434.roa (raw, json)
Hash identifier:          TIg7H9uITNCKgSESm4ZLt2hV0mZbfKEU6lsw4hN9vdA=
Subject key identifier:   7C:F5:8A:3C:E0:21:48:28:FD:5A:16:84:0F:E5:37:23:82:D9:86:83
Certificate issuer:       /CN=eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96
Certificate serial:       6F08D4787C1D76B349F35BB6BBA237CE7C540CEA
Authority key identifier: 0F:03:31:2E:E5:9E:3D:E8:27:35:F6:6B:54:94:15:DE:44:64:78:75
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/32332e3133322e3138352e302f32342d3234203d3e20323131313434.roa
Signing time:             Tue 05 Dec 2023 02:44:20 +0000
ROA not before:           Tue 05 Dec 2023 02:39:20 +0000
ROA not after:            Tue 03 Dec 2024 02:44:20 +0000
asID:                     211144
IP address blocks:        23.132.185.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/0F03312EE59E3DE82735F66B549415DE44647875.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/0F03312EE59E3DE82735F66B549415DE44647875.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/a01e997c-b89e-47c2-8d79-d31e58bc3ca4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/a01e997c-b89e-47c2-8d79-d31e58bc3ca4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 29 Mar 2024 04:06:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:08:d4:78:7c:1d:76:b3:49:f3:5b:b6:bb:a2:37:ce:7c:54:0c:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96
        Validity
            Not Before: Dec  5 02:39:20 2023 GMT
            Not After : Dec  3 02:44:20 2024 GMT
        Subject: CN=7CF58A3CE0214828FD5A16840FE5372382D98683
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:2d:8c:e3:05:99:04:7a:70:0d:5c:0e:46:d9:
                    74:d1:68:7a:7e:a5:ad:a7:88:ec:80:0d:33:8a:ce:
                    c0:39:d3:ad:99:1d:03:e9:f9:10:ab:99:78:f6:35:
                    b1:53:7e:8a:1d:94:ad:26:a0:1a:57:18:e3:b9:22:
                    5a:2a:84:3f:50:63:f5:65:45:58:80:21:c6:b4:12:
                    d9:46:6f:c3:01:97:6a:cf:a8:b1:16:20:32:fe:a5:
                    db:dc:ad:c9:da:04:2f:1d:a0:a2:ec:7c:35:30:f8:
                    28:eb:e5:bc:08:ef:20:53:ca:9d:87:6e:5f:fc:43:
                    6b:a9:86:29:25:47:f2:7c:01:f5:d0:67:4d:79:75:
                    9c:e2:81:99:92:fb:1a:7e:a8:d7:75:48:28:de:f9:
                    cb:f2:c4:1b:d5:49:d7:d2:e3:7a:55:a7:8d:22:e9:
                    42:b2:bf:6a:ab:f9:9f:58:71:89:4c:aa:77:9f:ef:
                    77:bc:d7:2f:90:5c:69:35:dd:5c:47:79:99:e7:34:
                    52:f7:64:c8:4d:2a:c6:7f:da:e7:62:7e:38:dd:39:
                    01:7f:f3:0d:b8:fd:93:c7:6a:44:de:62:5c:87:f9:
                    eb:0f:54:f6:91:3f:f9:51:61:f3:58:2c:be:31:08:
                    b4:2e:a4:3b:78:23:18:9b:f5:b6:d0:4b:d4:e9:69:
                    d1:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:F5:8A:3C:E0:21:48:28:FD:5A:16:84:0F:E5:37:23:82:D9:86:83
            X509v3 Authority Key Identifier:
                keyid:0F:03:31:2E:E5:9E:3D:E8:27:35:F6:6B:54:94:15:DE:44:64:78:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/0F03312EE59E3DE82735F66B549415DE44647875.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/32332e3133322e3138352e302f32342d3234203d3e20323131313434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.132.185.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6e:d2:62:3f:dd:85:f7:28:ae:07:61:ca:09:52:7a:ac:ef:e1:
         a8:84:cd:62:f0:61:e1:e0:74:f2:82:68:23:97:c8:d7:60:73:
         ea:b7:b9:4d:4d:96:9b:85:d4:ff:57:85:9c:bd:7e:b2:0d:78:
         30:7a:49:b1:4f:80:7f:0b:16:ca:04:45:52:2f:14:0c:8c:81:
         fb:af:5e:ce:49:87:30:75:51:7e:38:47:44:11:74:4c:59:73:
         56:25:a0:3a:90:87:a0:d9:68:b2:10:58:20:57:72:5d:76:48:
         a0:b8:af:36:c2:8f:29:5e:71:e4:59:81:66:ad:68:fa:c2:a3:
         4e:fc:5d:68:61:58:19:34:e6:ef:e8:98:55:89:fb:e9:8e:b5:
         0e:56:10:56:17:c4:28:79:ce:d9:d2:4d:7c:63:ad:42:5a:f3:
         9f:35:94:d4:93:a2:2c:a8:ac:ce:dc:11:51:0b:b6:b0:4f:62:
         e9:3e:c2:0a:b1:fb:71:2b:cc:f0:7f:a6:7f:b4:a2:84:dc:14:
         18:b6:0c:4b:7d:f9:37:22:56:74:ee:36:07:24:2c:bd:12:fd:
         e1:b3:2b:7c:33:41:1c:97:05:07:fc:bc:99:5d:85:2d:63:ce:
         ea:7f:16:05:bb:09:cf:0a:06:41:47:51:f1:0e:b0:01:25:f4:
         e0:f5:89:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 28 00:59:36 2024 by rpki-client on console-fra.rpki-client.org