Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS202400/0/32332e3134372e3132302e302f32342d3234203d3e20323032343030.roa
File:                     32332e3134372e3132302e302f32342d3234203d3e20323032343030.roa (raw, json)
Hash identifier:          O9nFTk2Rb+7tsOrq9lpvqtTO5PJDA5K3TfVHYUosh2Y=
Subject key identifier:   7A:EE:BB:22:07:2A:4E:53:E1:CB:43:20:CC:54:22:89:F8:20:49:7C
Certificate issuer:       /CN=2a5af74dbb9d4d437cf3ac13206067caa11b1798319623f21f
Certificate serial:       5401C077ADEB3CF9F0CD2E5E0E87B386C0B9BE0C
Authority key identifier: B0:BE:7A:BD:BE:B3:E0:14:7D:08:12:2B:69:9C:47:8C:99:A1:B0:FF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70f5d80c-9daa-4f6f-8f58-181c5f0c4b0a/2a5af74dbb9d4d437cf3ac13206067caa11b1798319623f21f.cer
Subject info access:      rsync://rpki.co/repo/AS202400/0/32332e3134372e3132302e302f32342d3234203d3e20323032343030.roa
Signing time:             Mon 27 Nov 2023 00:21:29 +0000
ROA not before:           Mon 27 Nov 2023 00:16:29 +0000
ROA not after:            Mon 25 Nov 2024 00:21:29 +0000
asID:                     202400
IP address blocks:        23.147.120.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.co/repo/AS202400/0/B0BE7ABDBEB3E0147D08122B699C478C99A1B0FF.crl
                          rsync://rpki.co/repo/AS202400/0/B0BE7ABDBEB3E0147D08122B699C478C99A1B0FF.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70f5d80c-9daa-4f6f-8f58-181c5f0c4b0a/2a5af74dbb9d4d437cf3ac13206067caa11b1798319623f21f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70f5d80c-9daa-4f6f-8f58-181c5f0c4b0a/70f5d80c-9daa-4f6f-8f58-181c5f0c4b0a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70f5d80c-9daa-4f6f-8f58-181c5f0c4b0a/70f5d80c-9daa-4f6f-8f58-181c5f0c4b0a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70f5d80c-9daa-4f6f-8f58-181c5f0c4b0a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 26 Apr 2024 04:34:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:01:c0:77:ad:eb:3c:f9:f0:cd:2e:5e:0e:87:b3:86:c0:b9:be:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a5af74dbb9d4d437cf3ac13206067caa11b1798319623f21f
        Validity
            Not Before: Nov 27 00:16:29 2023 GMT
            Not After : Nov 25 00:21:29 2024 GMT
        Subject: CN=7AEEBB22072A4E53E1CB4320CC542289F820497C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:06:53:5c:fe:33:c8:ae:bc:6e:f1:1c:b5:48:
                    28:c6:37:4f:12:d2:bc:36:62:90:b2:4b:76:2f:19:
                    83:80:07:7f:6b:2c:fe:a1:45:60:07:22:84:b9:57:
                    30:2e:0d:10:92:c7:eb:1d:0c:5f:ec:81:88:86:0a:
                    14:05:f1:69:af:08:83:80:b8:dc:ca:d2:ea:22:1e:
                    64:fb:9e:69:7c:cf:2f:b7:fc:7c:4d:9b:6c:c1:a2:
                    73:18:17:8b:69:e6:10:1d:47:d0:04:43:58:65:0f:
                    25:a8:ed:78:ef:74:2a:0d:07:4c:0a:48:30:81:75:
                    22:6f:4a:04:63:1f:ae:10:7b:45:67:f2:ec:fe:4b:
                    08:b7:60:f5:93:e6:c0:25:5d:a2:50:85:f5:f9:92:
                    b9:82:54:0e:37:a3:3e:ac:4a:42:fc:f2:69:4e:c8:
                    e2:a5:f1:54:3a:f0:4a:c8:fa:ee:d9:fe:2f:9b:da:
                    e3:05:af:0a:6e:7c:1b:46:20:ad:54:a4:7f:a3:ac:
                    fe:80:8c:7e:e2:36:a6:6b:d5:53:13:10:9b:e5:3c:
                    93:c4:7f:e9:f1:a7:b6:2e:b1:bf:cf:d2:38:9d:5f:
                    4d:17:c9:b5:b1:92:be:d1:89:61:d3:e8:e4:e0:84:
                    e1:dc:7d:da:2a:82:81:8d:b7:96:1f:ce:5e:99:43:
                    96:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:EE:BB:22:07:2A:4E:53:E1:CB:43:20:CC:54:22:89:F8:20:49:7C
            X509v3 Authority Key Identifier:
                keyid:B0:BE:7A:BD:BE:B3:E0:14:7D:08:12:2B:69:9C:47:8C:99:A1:B0:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS202400/0/B0BE7ABDBEB3E0147D08122B699C478C99A1B0FF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70f5d80c-9daa-4f6f-8f58-181c5f0c4b0a/2a5af74dbb9d4d437cf3ac13206067caa11b1798319623f21f.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS202400/0/32332e3134372e3132302e302f32342d3234203d3e20323032343030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.147.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         03:4c:0e:08:4b:29:0d:92:64:7a:a3:18:89:d5:b9:80:b6:2d:
         73:03:94:86:79:5b:49:5e:28:b4:35:3f:46:df:90:09:5f:21:
         30:3f:16:db:c2:4a:0c:d9:4a:5e:7d:95:2b:d5:83:aa:0e:cf:
         7f:cc:a6:84:56:68:98:44:c3:f9:ee:a1:7c:ab:39:aa:76:79:
         7e:25:2c:ae:39:6a:ef:59:a6:03:1a:84:46:73:ac:d7:66:bf:
         d8:a1:49:39:53:e6:8c:41:e6:ff:35:7e:7b:4a:46:64:c6:4d:
         86:41:81:fe:70:40:b0:4e:8f:c8:b4:05:5b:b9:75:24:f1:44:
         68:e4:94:35:f2:ca:b6:fe:00:dd:9f:06:59:5c:02:c3:f6:f5:
         4f:ff:3a:02:68:83:b1:59:45:6f:79:b1:4b:4f:21:0c:df:3f:
         42:7d:94:13:91:29:da:21:6e:7b:b0:01:f2:32:ba:0f:22:d0:
         c0:b2:4d:52:32:c0:d4:b9:2d:72:eb:aa:3d:e8:44:51:08:7e:
         b7:93:99:83:6b:a3:f1:77:e8:bb:c2:60:a9:d9:9f:a8:60:79:
         e5:c1:d7:63:63:5f:36:7f:44:08:c4:48:c2:23:55:72:71:88:
         b7:39:b9:40:ef:20:33:54:de:2c:cb:d1:26:d6:82:c1:bf:90:
         c4:5e:3d:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 06:19:40 2024 by rpki-client on console-ams.rpki-client.org