Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/AS23352.roa
File:                     AS23352.roa (raw, json)
Hash identifier:          Wm++dklHdY+/XdaoZuSdYQ2b4CssRJmMw7HxUlQJPcc=
Subject key identifier:   60:DE:6E:AF:E2:D7:2F:A0:F7:5C:99:9C:DE:E5:98:B4:2A:E2:F6:9F
Certificate issuer:       /CN=b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4
Certificate serial:       0BEC5969E9129E338AD0154AB80002A7D89A6A7B
Authority key identifier: A7:74:82:0B:3F:E2:B7:39:59:6F:4A:6B:F3:1F:BF:D2:6E:23:F2:BC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca/b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/AS23352.roa
Signing time:             Thu 13 Feb 2025 18:16:09 +0000
ROA not before:           Thu 13 Feb 2025 18:11:09 +0000
ROA not after:            Thu 12 Feb 2026 18:16:09 +0000
asID:                     23352
IP address blocks:        64.202.113.0/24 maxlen: 24
                          66.225.220.0/23 maxlen: 24
                          66.225.221.0/24 maxlen: 24
                          216.246.80.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/A774820B3FE2B739596F4A6BF31FBFD26E23F2BC.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/A774820B3FE2B739596F4A6BF31FBFD26E23F2BC.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca/b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca/26a5e08b-a8ed-4bab-8a32-52601ca93eca.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca/26a5e08b-a8ed-4bab-8a32-52601ca93eca.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Apr 2025 22:31:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:ec:59:69:e9:12:9e:33:8a:d0:15:4a:b8:00:02:a7:d8:9a:6a:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4
        Validity
            Not Before: Feb 13 18:11:09 2025 GMT
            Not After : Feb 12 18:16:09 2026 GMT
        Subject: CN=60DE6EAFE2D72FA0F75C999CDEE598B42AE2F69F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:31:bc:cd:5d:78:54:9e:7f:4a:81:71:95:e2:
                    34:64:44:3e:6e:85:84:f7:5f:82:ff:24:dd:4d:4a:
                    fd:ea:c3:8b:4f:45:bc:0a:b1:2a:1a:eb:2b:6c:5d:
                    b6:94:23:1e:a0:81:b2:18:ee:9e:4f:3d:b6:4e:6c:
                    f5:b1:d6:6c:73:21:06:c4:ee:f0:f8:12:24:e9:49:
                    43:bf:61:5f:ed:61:b0:ab:2d:9f:2d:48:21:b9:c0:
                    fa:ae:a0:da:3c:4f:5b:39:e9:cd:42:bd:0f:ac:4b:
                    42:29:88:54:81:26:24:46:65:9e:34:15:6b:59:69:
                    2b:fb:4a:26:c7:b9:67:08:7c:a2:5c:dd:51:5e:a0:
                    71:20:c0:d9:77:3d:de:7c:ff:78:89:bc:dd:e9:d8:
                    e6:85:6f:18:6a:a4:24:82:b0:8a:d3:70:e8:b5:31:
                    f3:70:3c:93:48:7b:e5:f8:50:87:96:07:47:50:ab:
                    fc:9e:a6:05:e5:a9:c8:05:61:c5:69:6e:36:2c:26:
                    ab:cb:4e:e2:52:bf:55:2f:d0:2b:17:3d:e9:40:89:
                    be:18:19:e8:7f:4e:52:27:03:1e:27:92:4b:24:ac:
                    6c:82:e5:a8:f0:2d:50:72:73:ea:0d:70:e7:6d:f1:
                    b5:f6:7f:8b:8c:0e:96:96:aa:34:0a:17:51:6c:00:
                    07:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:DE:6E:AF:E2:D7:2F:A0:F7:5C:99:9C:DE:E5:98:B4:2A:E2:F6:9F
            X509v3 Authority Key Identifier:
                keyid:A7:74:82:0B:3F:E2:B7:39:59:6F:4A:6B:F3:1F:BF:D2:6E:23:F2:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/A774820B3FE2B739596F4A6BF31FBFD26E23F2BC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca/b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/AS23352.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.202.113.0/24
                  66.225.220.0/23
                  216.246.80.0/21

    Signature Algorithm: sha256WithRSAEncryption
         a8:cc:18:1f:58:a1:a3:06:1f:c9:8f:3c:bc:48:0d:81:4f:d8:
         3d:8f:6a:2c:d5:3e:48:a2:3e:ac:bc:ef:b4:e7:f7:76:1c:c7:
         8f:50:1a:b3:e4:c1:e9:d8:f8:1b:94:97:ba:50:a1:7c:5f:37:
         09:8d:b2:33:0a:70:b8:36:bc:39:48:31:c6:9c:39:59:e8:b3:
         47:2e:f6:64:23:0e:2e:80:ff:f9:2e:08:66:c9:e1:38:b8:28:
         77:9d:30:e7:e9:35:e0:ce:b1:47:21:9d:67:3e:79:a1:9c:76:
         85:39:8b:23:fb:71:4c:8f:f8:6b:5c:73:b3:c5:f8:85:29:fe:
         c3:45:7e:4f:f0:15:79:e5:a0:ef:55:d5:eb:c9:c6:8c:22:e2:
         5d:5b:69:b9:db:9c:90:80:d9:23:cb:57:00:e2:2c:cb:47:10:
         34:65:33:3f:63:6a:c4:63:fb:1a:02:f5:7f:76:67:ed:c0:35:
         f4:ca:5a:fa:a5:84:bf:b8:d8:d9:42:04:99:51:06:39:e9:3d:
         83:75:bf:c8:a1:4a:60:a8:a1:cd:e2:12:b1:72:d4:e8:d1:cc:
         86:3e:04:30:71:f3:d7:27:93:d7:04:86:94:23:96:42:d0:6e:
         d0:04:ec:2d:6a:36:eb:02:85:6d:34:5d:80:14:54:9e:06:5d:
         00:89:68:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:32:12 2025 by rpki-client