Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/0/32332e3132392e3231322e302f32342d3234203d3e203136393039.roa
File:                     32332e3132392e3231322e302f32342d3234203d3e203136393039.roa (raw, json)
Hash identifier:          5guVT4if0LrKDB3Q8rvRkxXnCmvFDzyjP40984fVdbU=
Subject key identifier:   64:B7:F0:0B:5D:0E:1F:85:40:3F:18:08:FE:33:75:AF:A8:69:42:B3
Certificate issuer:       /CN=506be15e199605e756028137092036298a746bcdfe24227e72
Certificate serial:       6AC32B1FBC32AC1C1B8DB284FAAF0FF412DE8F7A
Authority key identifier: 15:E0:24:37:1A:83:5B:B0:0E:AB:BA:FB:44:F6:8F:0F:8A:EB:F8:F7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f914ac1a-b017-4cf4-9c3d-349dd19000d3/506be15e199605e756028137092036298a746bcdfe24227e72.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/0/32332e3132392e3231322e302f32342d3234203d3e203136393039.roa
Signing time:             Thu 19 Dec 2024 14:15:36 +0000
ROA not before:           Thu 19 Dec 2024 14:10:36 +0000
ROA not after:            Thu 18 Dec 2025 14:15:36 +0000
asID:                     16909
IP address blocks:        23.129.212.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/0/15E024371A835BB00EABBAFB44F68F0F8AEBF8F7.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/0/15E024371A835BB00EABBAFB44F68F0F8AEBF8F7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f914ac1a-b017-4cf4-9c3d-349dd19000d3/506be15e199605e756028137092036298a746bcdfe24227e72.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f914ac1a-b017-4cf4-9c3d-349dd19000d3/f914ac1a-b017-4cf4-9c3d-349dd19000d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f914ac1a-b017-4cf4-9c3d-349dd19000d3/f914ac1a-b017-4cf4-9c3d-349dd19000d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f914ac1a-b017-4cf4-9c3d-349dd19000d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Feb 2025 03:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:c3:2b:1f:bc:32:ac:1c:1b:8d:b2:84:fa:af:0f:f4:12:de:8f:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=506be15e199605e756028137092036298a746bcdfe24227e72
        Validity
            Not Before: Dec 19 14:10:36 2024 GMT
            Not After : Dec 18 14:15:36 2025 GMT
        Subject: CN=64B7F00B5D0E1F85403F1808FE3375AFA86942B3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:b6:2d:80:d5:2e:23:9c:a3:d3:88:56:55:28:
                    77:99:00:66:08:33:5d:0a:f9:ab:30:a4:5d:82:66:
                    7c:64:70:a7:1b:bc:9c:87:c9:04:8d:19:fa:78:cf:
                    78:3a:0e:d2:ab:fb:8f:59:c6:46:70:02:9e:99:c6:
                    48:21:9a:4d:4d:18:03:1c:ca:e4:d7:d2:69:9b:f8:
                    14:82:d6:a4:b9:9b:4b:59:32:7c:dd:a8:1e:68:23:
                    6f:37:53:0e:27:33:2c:de:23:b7:ad:8f:78:ac:4a:
                    1f:d5:8b:08:2d:b9:3a:fd:8b:5d:1a:49:91:54:e0:
                    47:6c:56:ef:46:b3:91:8d:05:d6:7b:8d:12:11:fd:
                    92:0a:1c:58:45:cb:db:75:95:c1:b3:34:85:9c:8f:
                    7c:0d:96:51:d5:f2:8d:60:c4:ac:0b:6c:55:20:c2:
                    9c:6d:42:04:b5:50:96:8d:4f:e5:f0:88:48:73:5d:
                    12:6e:18:54:73:94:93:af:87:c0:c8:33:d0:73:dd:
                    22:3f:7a:04:4f:b1:a4:a7:d4:0c:c0:7d:cb:3d:61:
                    0a:7a:66:67:73:30:cb:42:6c:f4:40:f0:fc:67:f5:
                    2b:12:31:13:c5:0d:ca:b5:97:7f:03:fb:41:70:27:
                    75:e9:fa:03:bc:0c:03:69:cf:64:ad:0c:e9:8f:e5:
                    4b:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:B7:F0:0B:5D:0E:1F:85:40:3F:18:08:FE:33:75:AF:A8:69:42:B3
            X509v3 Authority Key Identifier:
                keyid:15:E0:24:37:1A:83:5B:B0:0E:AB:BA:FB:44:F6:8F:0F:8A:EB:F8:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/0/15E024371A835BB00EABBAFB44F68F0F8AEBF8F7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f914ac1a-b017-4cf4-9c3d-349dd19000d3/506be15e199605e756028137092036298a746bcdfe24227e72.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/0/32332e3132392e3231322e302f32342d3234203d3e203136393039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.129.212.0/24

    Signature Algorithm: sha256WithRSAEncryption
         09:f8:b5:48:7e:28:ba:d5:52:79:ba:92:29:2e:4d:c6:d8:d5:
         8a:24:01:71:af:93:c2:a3:2f:2a:8b:5f:51:d5:60:99:f9:b5:
         e9:7d:41:e3:7f:6f:01:72:f2:0e:3f:6f:66:fe:26:de:8f:8e:
         cf:d8:03:a0:0f:d1:dd:29:03:3e:f6:88:df:96:49:ee:76:31:
         13:63:bb:55:54:be:3e:ed:52:dc:1b:07:10:35:cf:b0:d9:23:
         1c:ad:c7:67:c5:67:6b:ee:e1:4e:fc:9a:ba:1e:7b:83:00:8f:
         95:6a:04:53:4d:8c:61:70:c7:d4:f0:be:ec:3b:d6:44:01:d5:
         32:50:17:4f:a2:21:d5:94:8e:2d:de:5e:dc:e2:b7:94:3e:1a:
         6a:da:7b:2b:74:ab:a7:33:33:64:27:e1:19:69:72:53:31:cb:
         df:d1:3e:9b:8d:31:73:bb:d3:76:fd:18:71:c5:63:83:50:52:
         c6:b2:55:70:09:63:44:18:99:77:c9:5c:df:f4:c8:3b:0a:84:
         28:ce:60:a0:6f:c1:d6:26:a1:93:9c:d1:9f:10:55:0b:d0:a2:
         f3:4a:0e:94:56:b9:97:a9:8b:8a:22:45:d0:ee:4b:3a:d6:82:
         8a:17:12:00:be:15:ee:e7:e1:ab:28:2e:eb:d6:24:17:89:9e:
         c8:1c:5b:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 07:01:48 2025 by rpki-client