Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8ea98bae018ec180acc111a2/0/32332e3138362e3138342e302f32342d3234203d3e203131333538.roa
File:                     32332e3138362e3138342e302f32342d3234203d3e203131333538.roa (raw, json)
Hash identifier:          kkln/yytN7rDMk9S0UpdZi9Nh8KaWEhUtPl5V1GLcyQ=
Subject key identifier:   75:0B:6F:0D:7C:44:57:89:64:CC:74:C4:4A:EB:0A:C9:C9:A2:F4:D9
Certificate issuer:       /CN=ba21647aac3dc2133bd3618a417f5a479a5720fc340f8e9cc0
Certificate serial:       3D32C8B71800D8A60C76F83B46A8215E241E20FA
Authority key identifier: D3:27:C6:08:C1:E8:56:F6:C0:78:97:6E:50:55:59:94:5A:23:DA:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2cd85896-beca-4cc9-8e09-9367b0ea9ea4/ba21647aac3dc2133bd3618a417f5a479a5720fc340f8e9cc0.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8ea98bae018ec180acc111a2/0/32332e3138362e3138342e302f32342d3234203d3e203131333538.roa
Signing time:             Sun 17 Nov 2024 00:57:46 +0000
ROA not before:           Sun 17 Nov 2024 00:52:46 +0000
ROA not after:            Sun 16 Nov 2025 00:57:46 +0000
asID:                     11358
IP address blocks:        23.186.184.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8ea98bae018ec180acc111a2/0/D327C608C1E856F6C078976E505559945A23DAD8.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8ea98bae018ec180acc111a2/0/D327C608C1E856F6C078976E505559945A23DAD8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2cd85896-beca-4cc9-8e09-9367b0ea9ea4/ba21647aac3dc2133bd3618a417f5a479a5720fc340f8e9cc0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2cd85896-beca-4cc9-8e09-9367b0ea9ea4/2cd85896-beca-4cc9-8e09-9367b0ea9ea4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2cd85896-beca-4cc9-8e09-9367b0ea9ea4/2cd85896-beca-4cc9-8e09-9367b0ea9ea4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2cd85896-beca-4cc9-8e09-9367b0ea9ea4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Nov 2024 04:17:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:32:c8:b7:18:00:d8:a6:0c:76:f8:3b:46:a8:21:5e:24:1e:20:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ba21647aac3dc2133bd3618a417f5a479a5720fc340f8e9cc0
        Validity
            Not Before: Nov 17 00:52:46 2024 GMT
            Not After : Nov 16 00:57:46 2025 GMT
        Subject: CN=750B6F0D7C44578964CC74C44AEB0AC9C9A2F4D9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:90:5f:72:27:cd:84:f2:de:7b:28:cc:fb:ef:
                    8f:0c:3c:c3:27:24:52:79:c1:c1:f4:7b:07:0a:79:
                    02:a6:7f:bc:2f:da:9b:a5:1c:4f:70:d7:3f:6a:ba:
                    af:b3:eb:47:2c:de:92:07:8f:ed:7e:00:ca:30:ca:
                    d2:02:0f:db:c8:c3:83:da:37:3c:e7:94:a2:68:fc:
                    79:fa:62:19:52:d9:c9:e7:4a:d8:b0:6b:49:c4:2e:
                    e4:c5:57:4a:be:ef:ef:14:9e:9a:5d:be:91:7b:ce:
                    a7:8a:3b:68:5e:1e:82:39:29:06:55:e0:93:82:f4:
                    54:2d:7e:3d:64:1f:75:d1:d3:08:3e:9b:96:3a:07:
                    20:39:2e:fa:c2:b3:92:45:fa:2d:56:87:74:60:9a:
                    90:d5:86:b9:2a:90:ab:76:35:46:a5:3b:e4:11:9d:
                    71:74:12:a0:f5:57:e4:47:8b:90:9e:39:5d:76:83:
                    d7:a5:cc:06:8c:73:2f:e3:b1:05:84:af:b1:fd:77:
                    3e:21:b4:b7:7c:77:57:7b:72:31:aa:71:54:8a:7d:
                    3b:15:0c:75:f9:f9:2b:1b:cf:a0:b6:0f:6b:e2:0b:
                    ab:54:23:fc:a1:e9:65:ba:0b:a0:b3:39:f1:1f:00:
                    e1:fa:0c:a3:c2:a3:40:52:75:b0:6b:05:2f:b1:79:
                    81:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:0B:6F:0D:7C:44:57:89:64:CC:74:C4:4A:EB:0A:C9:C9:A2:F4:D9
            X509v3 Authority Key Identifier:
                keyid:D3:27:C6:08:C1:E8:56:F6:C0:78:97:6E:50:55:59:94:5A:23:DA:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8ea98bae018ec180acc111a2/0/D327C608C1E856F6C078976E505559945A23DAD8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2cd85896-beca-4cc9-8e09-9367b0ea9ea4/ba21647aac3dc2133bd3618a417f5a479a5720fc340f8e9cc0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8ea98bae018ec180acc111a2/0/32332e3138362e3138342e302f32342d3234203d3e203131333538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.186.184.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0d:9e:8f:e9:ad:fa:2f:bf:40:04:82:06:00:cc:65:84:e9:32:
         e7:78:b0:14:30:c2:61:f0:4f:9a:82:ab:1b:71:a6:10:b0:2f:
         13:18:f2:20:75:5f:39:7e:8f:57:59:af:04:07:71:20:57:97:
         d7:92:6a:ce:61:fc:6e:85:f0:57:85:20:c0:b7:d5:19:d0:9e:
         df:7c:35:b4:1b:0b:73:2a:3d:83:2b:49:59:a1:54:ee:f8:a4:
         1c:3d:3e:38:6d:ac:18:d2:57:62:6e:d5:b8:8c:75:a3:d9:b0:
         14:42:e0:2e:ac:55:0b:45:ac:aa:f0:8a:ff:ff:f3:6a:1d:93:
         d2:09:26:e8:15:5b:fd:14:48:56:69:fd:9c:2e:27:85:4a:ec:
         62:7f:50:b4:da:c2:f5:07:8a:4b:36:62:71:da:b8:af:96:6f:
         50:d1:bb:a8:da:4a:01:50:44:c8:3a:84:ba:31:af:87:e8:bb:
         a3:35:bf:28:19:d8:2d:86:b2:2e:b4:ac:83:6f:c6:14:e2:e7:
         4f:b2:56:fb:4a:b6:82:de:1c:01:fa:d7:44:5e:4d:be:5c:30:
         c4:e5:8a:e1:55:21:60:16:0a:a6:b7:6b:11:23:14:fe:c7:a7:
         00:a5:a4:4e:56:f6:37:a6:ff:e1:18:1a:d8:59:29:8f:b4:9f:
         ef:9b:58:91
-----BEGIN CERTIFICATE-----
MIIFsjCCBJqgAwIBAgIUPTLItxgA2KYMdvg7RqghXiQeIPowDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyYmEyMTY0N2FhYzNkYzIxMzNiZDM2MThhNDE3ZjVhNDc5
YTU3MjBmYzM0MGY4ZTljYzAwHhcNMjQxMTE3MDA1MjQ2WhcNMjUxMTE2MDA1NzQ2
WjAzMTEwLwYDVQQDEyg3NTBCNkYwRDdDNDQ1Nzg5NjRDQzc0QzQ0QUVCMEFDOUM5
QTJGNEQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlZBfcifNhPLe
eyjM+++PDDzDJyRSecHB9HsHCnkCpn+8L9qbpRxPcNc/arqvs+tHLN6SB4/tfgDK
MMrSAg/byMOD2jc855SiaPx5+mIZUtnJ50rYsGtJxC7kxVdKvu/vFJ6aXb6Re86n
ijtoXh6COSkGVeCTgvRULX49ZB910dMIPpuWOgcgOS76wrOSRfotVod0YJqQ1Ya5
KpCrdjVGpTvkEZ1xdBKg9VfkR4uQnjlddoPXpcwGjHMv47EFhK+x/Xc+IbS3fHdX
e3IxqnFUin07FQx1+fkrG8+gtg9r4gurVCP8oellugugsznxHwDh+gyjwqNAUnWw
awUvsXmB7wIDAQABo4ICsjCCAq4wHQYDVR0OBBYEFHULbw18RFeJZMx0xErrCsnJ
ovTZMB8GA1UdIwQYMBaAFNMnxgjB6Fb2wHiXblBVWZRaI9rYMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmOGVhOThiYWUwMThlYzE4MGFjYzExMWEyLzAv
RDMyN0M2MDhDMUU4NTZGNkMwNzg5NzZFNTA1NTU5OTQ1QTIzREFEOC5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNGFiN2FlNGQtYmQ3Yi00YjMzLTlhODgtNWIyMmQy
YTgzMzdkLzJjZDg1ODk2LWJlY2EtNGNjOS04ZTA5LTkzNjdiMGVhOWVhNC9iYTIx
NjQ3YWFjM2RjMjEzM2JkMzYxOGE0MTdmNWE0NzlhNTcyMGZjMzQwZjhlOWNjMC5j
ZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjhlYTk4YmFlMDE4ZWMx
ODBhY2MxMTFhMi8wLzMyMzMyZTMxMzgzNjJlMzEzODM0MmUzMDJmMzIzNDJkMzIz
NDIwM2QzZTIwMzEzMTMzMzUzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO
AjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEABe6uDANBgkqhkiG9w0BAQsF
AAOCAQEADZ6P6a36L79ABIIGAMxlhOky53iwFDDCYfBPmoKrG3GmELAvExjyIHVf
OX6PV1mvBAdxIFeX15JqzmH8boXwV4UgwLfVGdCe33w1tBsLcyo9gytJWaFU7vik
HD0+OG2sGNJXYm7VuIx1o9mwFELgLqxVC0WsqvCK///zah2T0gkm6BVb/RRIVmn9
nC4nhUrsYn9QtNrC9QeKSzZicdq4r5ZvUNG7qNpKAVBEyDqEujGvh+i7ozW/KBnY
LYayLrSsg2/GFOLnT7JW+0q2gt4cAfrXRF5NvlwwxOWK4VUhYBYKprdrESMU/sen
AKWkTlb2N6b/4Rga2Fkpj7Sf75tYkQ==
-----END CERTIFICATE-----
Generated at Sat Nov 23 03:55:08 2024 by rpki-client on console-ams.rpki-client.org