Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/0/32332e3138352e3230382e302f32342d3234203d3e203338313336.roa
File:                     32332e3138352e3230382e302f32342d3234203d3e203338313336.roa (raw, json)
Hash identifier:          4qwS/3li5+ypeu0+iBRu6+hCIVE4yNrI497/d3uPWiE=
Subject key identifier:   B5:61:9B:FC:FA:D5:0F:E4:22:CB:08:3C:6B:97:9B:A7:F6:8C:FB:7B
Certificate issuer:       /CN=99a8a036db0e8f1d29d003f0fec681f66db1269cde1507e775
Certificate serial:       1ED23CE8F0CF8FB6D8CC9D0EF3B6F6A87A2F3FE0
Authority key identifier: FD:CC:EA:4A:55:0B:41:E8:52:B3:36:E7:17:92:E5:36:57:E4:F2:80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/37fe8a4a-3fd3-4ba0-9423-f957bd58bca4/99a8a036db0e8f1d29d003f0fec681f66db1269cde1507e775.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/0/32332e3138352e3230382e302f32342d3234203d3e203338313336.roa
Signing time:             Fri 16 Aug 2024 07:00:44 +0000
ROA not before:           Fri 16 Aug 2024 06:55:44 +0000
ROA not after:            Fri 15 Aug 2025 07:00:44 +0000
asID:                     38136
IP address blocks:        23.185.208.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/0/FDCCEA4A550B41E852B336E71792E53657E4F280.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/0/FDCCEA4A550B41E852B336E71792E53657E4F280.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/37fe8a4a-3fd3-4ba0-9423-f957bd58bca4/99a8a036db0e8f1d29d003f0fec681f66db1269cde1507e775.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/37fe8a4a-3fd3-4ba0-9423-f957bd58bca4/37fe8a4a-3fd3-4ba0-9423-f957bd58bca4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/37fe8a4a-3fd3-4ba0-9423-f957bd58bca4/37fe8a4a-3fd3-4ba0-9423-f957bd58bca4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/37fe8a4a-3fd3-4ba0-9423-f957bd58bca4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 18:14:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:d2:3c:e8:f0:cf:8f:b6:d8:cc:9d:0e:f3:b6:f6:a8:7a:2f:3f:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99a8a036db0e8f1d29d003f0fec681f66db1269cde1507e775
        Validity
            Not Before: Aug 16 06:55:44 2024 GMT
            Not After : Aug 15 07:00:44 2025 GMT
        Subject: CN=B5619BFCFAD50FE422CB083C6B979BA7F68CFB7B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:c5:e5:13:40:97:19:6e:c9:45:41:93:45:24:
                    fc:48:dc:d7:fe:d2:7a:df:a2:e6:e8:f7:fb:05:0a:
                    41:7a:a4:bc:67:c6:19:fe:ed:35:e9:17:2d:03:4d:
                    da:fd:91:6c:8a:70:3f:85:ac:f8:a5:53:3f:8d:78:
                    b0:52:bf:47:60:68:44:f7:db:60:26:f8:6b:c5:80:
                    d5:9f:46:8d:d5:c5:b3:40:f1:1d:8d:1c:37:a5:b1:
                    d3:d4:ad:05:66:1e:91:c0:c9:fc:80:9d:b4:79:eb:
                    89:cd:64:64:13:2d:05:a9:7a:b2:15:e6:90:b5:d8:
                    a3:03:e2:97:24:47:32:48:a6:b6:57:d8:74:bc:72:
                    71:7f:6c:8f:27:d1:f2:5c:59:e5:52:e4:d5:d9:85:
                    9d:f7:dd:a4:b9:8e:a8:57:e9:ad:91:a0:2f:50:ba:
                    ee:0a:05:c2:b9:28:e3:f4:d2:4a:94:2d:2d:c1:c9:
                    2f:a0:ea:08:ba:ab:89:f1:60:ec:8e:c4:84:a9:4b:
                    4b:f2:f6:75:26:0f:68:ae:94:bd:a2:20:92:62:fa:
                    1d:ad:21:88:9d:a2:60:48:36:72:6d:02:54:78:eb:
                    a8:b4:0e:ad:3c:71:c9:f5:6f:2a:7b:53:4c:e8:91:
                    a5:46:57:3f:18:2d:c3:e9:a2:b7:11:09:e3:86:1d:
                    d7:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:61:9B:FC:FA:D5:0F:E4:22:CB:08:3C:6B:97:9B:A7:F6:8C:FB:7B
            X509v3 Authority Key Identifier:
                keyid:FD:CC:EA:4A:55:0B:41:E8:52:B3:36:E7:17:92:E5:36:57:E4:F2:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/0/FDCCEA4A550B41E852B336E71792E53657E4F280.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/37fe8a4a-3fd3-4ba0-9423-f957bd58bca4/99a8a036db0e8f1d29d003f0fec681f66db1269cde1507e775.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/0/32332e3138352e3230382e302f32342d3234203d3e203338313336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.185.208.0/24

    Signature Algorithm: sha256WithRSAEncryption
         46:9d:13:b4:5c:5c:29:69:df:eb:69:e1:b2:10:b5:9d:54:13:
         7e:e0:ae:ab:99:e3:76:65:a0:b4:9e:b6:db:16:56:c9:69:d8:
         98:a9:85:09:62:4a:9d:99:e4:e2:6d:89:a4:f9:7b:b8:2c:79:
         1e:0e:d6:38:93:bf:5c:fe:de:2e:ab:d0:4e:27:fb:65:4e:6b:
         e1:85:80:7a:57:d1:6e:6b:57:d4:75:e6:bd:f5:eb:97:5e:71:
         20:c5:4d:71:3f:ef:55:99:a8:4f:4e:3b:f0:c1:5a:19:a6:0b:
         95:25:c2:00:1d:d5:4d:33:00:5b:04:3c:81:ad:65:8b:3d:92:
         62:76:0c:d0:39:a4:78:32:b5:5c:86:54:39:8f:20:37:6c:9c:
         3c:4f:63:f5:eb:08:32:ef:bf:3c:d4:7e:7d:b0:ec:15:9a:e7:
         b6:c1:9c:5d:50:4c:0c:da:5c:8e:08:08:bb:31:98:03:3c:a4:
         c9:fe:a1:cb:84:b3:36:94:14:dc:2c:58:5e:fc:a0:c8:dc:27:
         b4:eb:25:17:b3:a8:e5:85:95:9b:09:f1:4d:e7:51:72:28:e0:
         5b:fa:bf:43:8a:bc:a6:aa:28:e1:ae:70:62:f0:61:dd:c8:54:
         dd:d3:f8:ca:db:70:77:48:7c:72:23:ba:f5:da:4d:e9:ba:78:
         17:2c:f5:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:46:15 2024 by rpki-client on console-ams.rpki-client.org