Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8ea98bae018ec180acc111a2/0/32332e3138362e3138342e302f32342d3234203d3e203131333538.roa
File:                     32332e3138362e3138342e302f32342d3234203d3e203131333538.roa (raw, json)
Hash identifier:          abI7uQboATpajpFThJ35q70PxQHTQCL3dzfocLMfLZY=
Subject key identifier:   EA:42:E0:FC:B6:E1:AB:D3:1F:3D:D2:08:D5:28:81:85:72:A8:2A:EE
Certificate issuer:       /CN=ba21647aac78a3704dabe69d74570cb11566afd1b7dbdd388a
Certificate serial:       4B5F33370F405AB174E4CA478F43C1954BB03F96
Authority key identifier: 47:9F:29:66:0F:9E:05:B3:E7:2E:0C:85:B1:58:C5:87:0A:E0:E9:5B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2cd85896-beca-4cc9-8e09-9367b0ea9ea4/ba21647aac78a3704dabe69d74570cb11566afd1b7dbdd388a.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8ea98bae018ec180acc111a2/0/32332e3138362e3138342e302f32342d3234203d3e203131333538.roa
Signing time:             Thu 15 Aug 2024 22:20:35 +0000
ROA not before:           Thu 15 Aug 2024 22:15:35 +0000
ROA not after:            Thu 14 Aug 2025 22:20:35 +0000
asID:                     11358
IP address blocks:        23.186.184.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8ea98bae018ec180acc111a2/0/479F29660F9E05B3E72E0C85B158C5870AE0E95B.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8ea98bae018ec180acc111a2/0/479F29660F9E05B3E72E0C85B158C5870AE0E95B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2cd85896-beca-4cc9-8e09-9367b0ea9ea4/ba21647aac78a3704dabe69d74570cb11566afd1b7dbdd388a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2cd85896-beca-4cc9-8e09-9367b0ea9ea4/2cd85896-beca-4cc9-8e09-9367b0ea9ea4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2cd85896-beca-4cc9-8e09-9367b0ea9ea4/2cd85896-beca-4cc9-8e09-9367b0ea9ea4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2cd85896-beca-4cc9-8e09-9367b0ea9ea4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 19 Sep 2024 11:23:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:5f:33:37:0f:40:5a:b1:74:e4:ca:47:8f:43:c1:95:4b:b0:3f:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ba21647aac78a3704dabe69d74570cb11566afd1b7dbdd388a
        Validity
            Not Before: Aug 15 22:15:35 2024 GMT
            Not After : Aug 14 22:20:35 2025 GMT
        Subject: CN=EA42E0FCB6E1ABD31F3DD208D528818572A82AEE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:5a:5f:42:c4:f0:ce:21:51:28:4f:54:3c:7f:
                    a1:c2:af:df:dd:a6:93:c6:ff:c6:6d:12:35:2c:69:
                    47:09:46:71:4b:d5:1f:5c:02:ed:5c:da:44:95:7e:
                    59:2b:3d:5f:fc:03:cc:70:81:21:3a:69:c2:8d:42:
                    e1:03:92:84:f7:d0:7e:fa:11:4d:e8:c1:c6:f1:1a:
                    fb:58:96:eb:0e:b6:b2:f5:a2:7e:f0:d2:21:f9:05:
                    5f:74:67:23:d5:a9:f4:73:3e:8a:7e:eb:85:8f:ac:
                    06:ae:ec:bd:7b:6b:eb:85:86:9a:34:4b:ad:6a:d1:
                    02:d1:df:4c:65:ed:1f:99:3c:f9:12:15:90:25:8e:
                    eb:bc:81:a5:b7:67:4a:ed:1f:f9:67:57:e4:e4:21:
                    97:99:94:e3:f2:a8:7a:76:cb:9b:6a:f2:78:e1:ae:
                    1b:d4:b3:47:9b:15:71:bd:cf:97:47:70:df:8a:38:
                    4a:df:cb:c7:90:d0:99:1c:7c:54:88:8c:bc:0a:c3:
                    64:61:a3:35:33:6e:ac:c6:94:e3:12:52:c2:4c:c3:
                    b4:34:15:ec:0d:7e:17:54:50:73:49:f3:3c:b6:c4:
                    9e:65:33:2c:b6:f7:5c:e8:f4:4e:bf:d8:a0:ff:71:
                    65:dc:41:96:d2:93:8c:73:88:f4:03:63:8f:bd:1c:
                    94:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:42:E0:FC:B6:E1:AB:D3:1F:3D:D2:08:D5:28:81:85:72:A8:2A:EE
            X509v3 Authority Key Identifier:
                keyid:47:9F:29:66:0F:9E:05:B3:E7:2E:0C:85:B1:58:C5:87:0A:E0:E9:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8ea98bae018ec180acc111a2/0/479F29660F9E05B3E72E0C85B158C5870AE0E95B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2cd85896-beca-4cc9-8e09-9367b0ea9ea4/ba21647aac78a3704dabe69d74570cb11566afd1b7dbdd388a.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8ea98bae018ec180acc111a2/0/32332e3138362e3138342e302f32342d3234203d3e203131333538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.186.184.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bc:55:64:ba:c9:20:df:b0:af:bc:a5:3f:0d:b2:95:72:94:b0:
         b5:88:c4:42:58:19:62:91:e1:2b:5f:34:5d:82:31:2c:64:ab:
         d6:f5:9a:1e:e1:ce:46:7e:93:f0:36:c4:bd:21:36:d2:e7:14:
         98:07:d3:a2:af:15:e9:7a:bc:6c:25:87:f3:d8:95:66:b5:5e:
         38:eb:fb:75:fc:4a:38:86:d6:c2:33:ec:c7:b8:79:b0:96:b9:
         7b:c9:bb:b4:c4:7b:b1:ea:5e:4f:bc:2b:3b:16:4c:0f:45:c7:
         15:60:e6:36:a9:56:0a:d0:6a:ef:bc:99:fd:d0:08:05:93:80:
         8f:d6:9f:6e:bf:38:83:64:8b:bf:88:bc:de:8e:5e:e1:72:3c:
         5c:26:03:3e:b3:65:3a:74:dd:1b:4d:af:6c:7f:78:2e:db:c4:
         e1:57:7f:da:80:e1:eb:27:3c:bb:b0:0d:b2:90:fd:93:d6:b3:
         aa:12:4e:5b:17:bd:fc:76:cc:4d:77:fa:47:13:9f:3d:29:45:
         1b:51:00:17:e7:a9:e2:85:a0:96:6d:bd:14:47:30:c1:05:80:
         9d:4b:b9:7a:ce:0f:6d:ea:0c:e0:33:f3:0b:2d:5f:f1:fe:2c:
         48:74:8e:31:f0:07:92:68:38:bb:2b:73:fe:ee:e5:c9:c5:dd:
         a1:15:0a:0b
-----BEGIN CERTIFICATE-----
MIIFsjCCBJqgAwIBAgIUS18zNw9AWrF05MpHj0PBlUuwP5YwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyYmEyMTY0N2FhYzc4YTM3MDRkYWJlNjlkNzQ1NzBjYjEx
NTY2YWZkMWI3ZGJkZDM4OGEwHhcNMjQwODE1MjIxNTM1WhcNMjUwODE0MjIyMDM1
WjAzMTEwLwYDVQQDEyhFQTQyRTBGQ0I2RTFBQkQzMUYzREQyMDhENTI4ODE4NTcy
QTgyQUVFMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1VpfQsTwziFR
KE9UPH+hwq/f3aaTxv/GbRI1LGlHCUZxS9UfXALtXNpElX5ZKz1f/APMcIEhOmnC
jULhA5KE99B++hFN6MHG8Rr7WJbrDray9aJ+8NIh+QVfdGcj1an0cz6KfuuFj6wG
ruy9e2vrhYaaNEutatEC0d9MZe0fmTz5EhWQJY7rvIGlt2dK7R/5Z1fk5CGXmZTj
8qh6dsubavJ44a4b1LNHmxVxvc+XR3DfijhK38vHkNCZHHxUiIy8CsNkYaM1M26s
xpTjElLCTMO0NBXsDX4XVFBzSfM8tsSeZTMstvdc6PROv9ig/3Fl3EGW0pOMc4j0
A2OPvRyUkwIDAQABo4ICsjCCAq4wHQYDVR0OBBYEFOpC4Py24avTHz3SCNUogYVy
qCruMB8GA1UdIwQYMBaAFEefKWYPngWz5y4MhbFYxYcK4OlbMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmOGVhOThiYWUwMThlYzE4MGFjYzExMWEyLzAv
NDc5RjI5NjYwRjlFMDVCM0U3MkUwQzg1QjE1OEM1ODcwQUUwRTk1Qi5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNGFiN2FlNGQtYmQ3Yi00YjMzLTlhODgtNWIyMmQy
YTgzMzdkLzJjZDg1ODk2LWJlY2EtNGNjOS04ZTA5LTkzNjdiMGVhOWVhNC9iYTIx
NjQ3YWFjNzhhMzcwNGRhYmU2OWQ3NDU3MGNiMTE1NjZhZmQxYjdkYmRkMzg4YS5j
ZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjhlYTk4YmFlMDE4ZWMx
ODBhY2MxMTFhMi8wLzMyMzMyZTMxMzgzNjJlMzEzODM0MmUzMDJmMzIzNDJkMzIz
NDIwM2QzZTIwMzEzMTMzMzUzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO
AjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEABe6uDANBgkqhkiG9w0BAQsF
AAOCAQEAvFVkuskg37CvvKU/DbKVcpSwtYjEQlgZYpHhK180XYIxLGSr1vWaHuHO
Rn6T8DbEvSE20ucUmAfToq8V6Xq8bCWH89iVZrVeOOv7dfxKOIbWwjPsx7h5sJa5
e8m7tMR7sepeT7wrOxZMD0XHFWDmNqlWCtBq77yZ/dAIBZOAj9afbr84g2SLv4i8
3o5e4XI8XCYDPrNlOnTdG02vbH94LtvE4Vd/2oDh6yc8u7ANspD9k9azqhJOWxe9
/HbMTXf6RxOfPSlFG1EAF+ep4oWglm29FEcwwQWAnUu5es4PbeoM4DPzCy1f8f4s
SHSOMfAHkmg4uytz/u7lycXdoRUKCw==
-----END CERTIFICATE-----
Generated at Wed Sep 18 10:54:06 2024 by rpki-client on console-fra.rpki-client.org