Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/0/32332e3138352e3230382e302f32342d3234203d3e20393833.roa
File:                     32332e3138352e3230382e302f32342d3234203d3e20393833.roa (raw, json)
Hash identifier:          by/rVapeQT1hw57+SO3qzeEp8CblY9MfR5Z9u3BwDVE=
Subject key identifier:   B4:4D:DC:46:B7:68:C0:96:0F:35:8D:77:1F:C8:EC:AA:02:FC:47:58
Certificate issuer:       /CN=99a8a036db0e8f1d29d003f0fec681f66db1269cde1507e775
Certificate serial:       15BC917CC4262739284340B2A63495490950EBCE
Authority key identifier: FD:CC:EA:4A:55:0B:41:E8:52:B3:36:E7:17:92:E5:36:57:E4:F2:80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/37fe8a4a-3fd3-4ba0-9423-f957bd58bca4/99a8a036db0e8f1d29d003f0fec681f66db1269cde1507e775.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/0/32332e3138352e3230382e302f32342d3234203d3e20393833.roa
Signing time:             Fri 16 Aug 2024 07:00:20 +0000
ROA not before:           Fri 16 Aug 2024 06:55:20 +0000
ROA not after:            Fri 15 Aug 2025 07:00:20 +0000
asID:                     983
IP address blocks:        23.185.208.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/0/FDCCEA4A550B41E852B336E71792E53657E4F280.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/0/FDCCEA4A550B41E852B336E71792E53657E4F280.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/37fe8a4a-3fd3-4ba0-9423-f957bd58bca4/99a8a036db0e8f1d29d003f0fec681f66db1269cde1507e775.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/37fe8a4a-3fd3-4ba0-9423-f957bd58bca4/37fe8a4a-3fd3-4ba0-9423-f957bd58bca4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/37fe8a4a-3fd3-4ba0-9423-f957bd58bca4/37fe8a4a-3fd3-4ba0-9423-f957bd58bca4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/37fe8a4a-3fd3-4ba0-9423-f957bd58bca4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 21:27:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:bc:91:7c:c4:26:27:39:28:43:40:b2:a6:34:95:49:09:50:eb:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99a8a036db0e8f1d29d003f0fec681f66db1269cde1507e775
        Validity
            Not Before: Aug 16 06:55:20 2024 GMT
            Not After : Aug 15 07:00:20 2025 GMT
        Subject: CN=B44DDC46B768C0960F358D771FC8ECAA02FC4758
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:b7:85:b0:c0:68:b5:e9:b9:83:99:a6:26:9c:
                    3f:e5:95:67:9e:a4:f0:ab:7e:85:e9:e7:b4:e6:b3:
                    16:d5:3e:71:a1:ac:6a:ee:d1:bb:4e:4c:a1:41:0c:
                    a5:db:40:3f:95:c7:6d:23:5b:72:c3:80:1e:55:84:
                    99:6e:02:e1:66:9c:49:fb:33:8a:e7:98:ac:ea:ea:
                    5b:15:96:72:16:17:ea:65:2a:00:ce:98:be:bc:46:
                    32:e3:e7:bd:97:bd:af:1e:a2:f3:21:d8:87:37:60:
                    83:15:c3:54:49:c9:27:4a:32:e6:07:93:5d:82:2e:
                    da:fa:68:f7:b0:46:5e:8f:86:f6:95:a5:25:27:03:
                    fb:3f:01:cf:c9:47:dc:78:7a:da:b2:f6:d7:d1:d8:
                    51:64:60:7c:17:db:28:63:43:3d:57:21:f2:3f:95:
                    6d:2a:5b:43:da:17:9e:27:22:90:c4:7f:4f:ec:bd:
                    45:09:29:91:67:42:ed:76:85:94:03:8f:58:cd:e8:
                    f9:5b:4c:1a:f0:ea:9e:6b:99:9c:0e:cc:85:a4:4a:
                    91:24:8b:ff:0f:e1:ed:19:42:f5:c6:e5:0c:51:0b:
                    f6:3a:5b:a1:80:0a:7e:0b:46:d5:82:93:ec:a7:4f:
                    2f:71:0a:5d:e7:06:8c:4e:50:5e:c7:66:22:e8:af:
                    65:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:4D:DC:46:B7:68:C0:96:0F:35:8D:77:1F:C8:EC:AA:02:FC:47:58
            X509v3 Authority Key Identifier:
                keyid:FD:CC:EA:4A:55:0B:41:E8:52:B3:36:E7:17:92:E5:36:57:E4:F2:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/0/FDCCEA4A550B41E852B336E71792E53657E4F280.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/37fe8a4a-3fd3-4ba0-9423-f957bd58bca4/99a8a036db0e8f1d29d003f0fec681f66db1269cde1507e775.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/0/32332e3138352e3230382e302f32342d3234203d3e20393833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.185.208.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8e:f7:ac:25:38:a5:8d:d3:8e:5e:1e:26:c2:55:05:06:0e:20:
         78:3e:2a:23:88:1b:fc:1a:5e:61:b2:46:a8:4b:2d:1d:a6:4b:
         26:9f:1b:14:ee:04:db:5f:a8:36:d1:e1:74:3c:aa:60:96:63:
         aa:5d:b2:b1:e1:19:63:89:c4:c6:41:2b:98:46:a1:26:b1:93:
         ab:7f:f6:63:e0:48:f2:80:4f:72:ce:50:4b:7e:15:2a:32:cf:
         83:f4:57:94:48:33:03:d7:a5:99:85:81:34:b0:de:a6:26:c6:
         26:0a:26:fc:7f:b5:5f:07:f0:90:f5:c8:10:c9:85:1e:c9:cc:
         7f:0a:83:96:d6:74:eb:93:6b:22:cc:90:70:62:d8:7c:5d:a3:
         ae:21:bd:64:e8:4e:a8:a8:f4:89:03:c9:43:cb:81:88:fe:5d:
         6a:56:89:3d:f8:92:e2:32:f8:aa:86:50:f0:a1:e3:c6:bf:f7:
         3a:93:17:44:64:5d:83:8a:46:d8:c5:fa:2e:c8:35:86:f2:53:
         21:93:9e:ec:cc:8e:58:81:92:4e:ff:a1:75:2d:87:46:75:f5:
         a2:29:68:b1:0d:ad:9e:9f:22:ac:08:05:47:60:d4:15:7a:98:
         52:4f:06:37:94:89:32:d8:1f:0a:c1:1b:71:6f:81:b5:ad:b0:
         38:8c:4d:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 21:33:13 2024 by rpki-client on console-ams.rpki-client.org