Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS202400/0/32332e3134372e3132302e302f32342d3234203d3e20323032343030.roa
File:                     32332e3134372e3132302e302f32342d3234203d3e20323032343030.roa (raw, json)
Hash identifier:          zjhUoknBfzv9iOwkl/qVrK6SWQKav6NCzKeEoIIlHB8=
Subject key identifier:   A2:2B:E9:10:E0:9C:AA:09:DE:51:A5:2A:28:A8:45:47:42:15:F5:73
Certificate issuer:       /CN=2a5af74dbb9d4d437cf3ac13206067caa11b1798319623f21f
Certificate serial:       7EB6E8C3FE7105E3614C2B41826FBD5CF96CB630
Authority key identifier: B0:BE:7A:BD:BE:B3:E0:14:7D:08:12:2B:69:9C:47:8C:99:A1:B0:FF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70f5d80c-9daa-4f6f-8f58-181c5f0c4b0a/2a5af74dbb9d4d437cf3ac13206067caa11b1798319623f21f.cer
Subject info access:      rsync://rpki.co/repo/AS202400/0/32332e3134372e3132302e302f32342d3234203d3e20323032343030.roa
Signing time:             Mon 28 Oct 2024 00:23:41 +0000
ROA not before:           Mon 28 Oct 2024 00:18:41 +0000
ROA not after:            Mon 27 Oct 2025 00:23:41 +0000
asID:                     202400
IP address blocks:        23.147.120.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.co/repo/AS202400/0/B0BE7ABDBEB3E0147D08122B699C478C99A1B0FF.crl
                          rsync://rpki.co/repo/AS202400/0/B0BE7ABDBEB3E0147D08122B699C478C99A1B0FF.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70f5d80c-9daa-4f6f-8f58-181c5f0c4b0a/2a5af74dbb9d4d437cf3ac13206067caa11b1798319623f21f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70f5d80c-9daa-4f6f-8f58-181c5f0c4b0a/70f5d80c-9daa-4f6f-8f58-181c5f0c4b0a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70f5d80c-9daa-4f6f-8f58-181c5f0c4b0a/70f5d80c-9daa-4f6f-8f58-181c5f0c4b0a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70f5d80c-9daa-4f6f-8f58-181c5f0c4b0a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:b6:e8:c3:fe:71:05:e3:61:4c:2b:41:82:6f:bd:5c:f9:6c:b6:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a5af74dbb9d4d437cf3ac13206067caa11b1798319623f21f
        Validity
            Not Before: Oct 28 00:18:41 2024 GMT
            Not After : Oct 27 00:23:41 2025 GMT
        Subject: CN=A22BE910E09CAA09DE51A52A28A845474215F573
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:4d:98:6b:ac:10:00:17:93:13:4c:1c:b4:f0:
                    ac:02:98:bc:87:3c:bf:88:4b:c2:6e:17:3a:35:79:
                    37:b3:00:72:9f:40:59:19:75:d5:20:f8:42:bb:f2:
                    0c:d9:26:f6:4d:44:fe:66:2e:b3:0d:14:0d:ca:f0:
                    f2:00:47:69:5c:70:74:94:b8:30:9a:15:66:99:78:
                    82:99:d9:e6:1b:2f:7e:49:eb:4f:cf:a2:28:8c:32:
                    42:79:c0:a1:3d:33:57:f6:8c:c3:f9:da:e3:c9:b0:
                    a2:9d:76:28:72:2e:ca:5b:cd:88:08:9f:48:a1:cf:
                    6f:03:90:f0:00:30:4f:ff:f6:60:01:aa:f2:2d:5a:
                    61:9c:bb:da:88:1a:b9:a7:12:92:83:04:4c:3d:13:
                    7e:0b:ca:6a:43:80:7c:e3:30:93:da:08:a2:03:41:
                    01:e1:52:2c:5c:c8:f6:54:8b:19:83:28:6d:0c:1e:
                    86:ae:01:a1:43:75:ea:d8:0a:35:2f:60:b1:e3:b7:
                    a4:3f:ae:bf:cd:de:f3:b1:b9:7e:00:5d:ee:be:20:
                    85:1f:09:53:a0:a4:aa:ec:5f:19:e4:10:db:35:f9:
                    fd:c2:9a:3c:5f:7b:b5:85:2f:e6:74:e9:24:5c:2f:
                    c5:36:e1:a7:2b:95:e7:9d:7c:fc:a7:f2:72:95:29:
                    ee:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:2B:E9:10:E0:9C:AA:09:DE:51:A5:2A:28:A8:45:47:42:15:F5:73
            X509v3 Authority Key Identifier:
                keyid:B0:BE:7A:BD:BE:B3:E0:14:7D:08:12:2B:69:9C:47:8C:99:A1:B0:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS202400/0/B0BE7ABDBEB3E0147D08122B699C478C99A1B0FF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70f5d80c-9daa-4f6f-8f58-181c5f0c4b0a/2a5af74dbb9d4d437cf3ac13206067caa11b1798319623f21f.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS202400/0/32332e3134372e3132302e302f32342d3234203d3e20323032343030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.147.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1d:aa:c1:e7:23:af:26:ad:d7:f2:e4:79:7a:df:76:5c:6a:d9:
         22:bd:d1:53:f9:fe:2f:b4:0a:42:a8:bd:c5:8f:99:95:fd:c5:
         de:9d:2d:e8:21:ae:3f:3b:30:08:5b:4c:9a:28:34:a6:3f:a4:
         53:46:b3:3a:8e:e4:24:76:46:2d:33:6b:e4:85:5e:06:2e:52:
         db:1f:31:17:20:43:90:47:f0:05:02:22:75:23:c3:3d:af:9f:
         08:2c:34:d5:cc:a8:21:43:0b:af:13:23:69:e8:9d:7b:fb:ae:
         fb:e0:25:fb:f9:c8:74:b4:3f:39:3a:31:2d:3b:80:0a:d4:d5:
         af:7f:12:86:9b:5d:cc:d6:cd:de:d1:b9:c1:67:4a:a3:6a:2c:
         c9:75:1d:df:af:66:14:97:1c:ee:14:55:ff:95:21:41:0a:1c:
         85:b6:5d:c5:b6:15:98:bd:43:5b:a9:f6:d4:02:bf:4e:55:12:
         bc:dd:18:8d:99:9f:73:02:df:22:79:ce:a1:87:9d:5c:9b:45:
         84:ea:a6:37:1a:29:4e:41:4d:2b:84:56:7c:de:7a:4e:10:5e:
         eb:14:01:72:86:7b:9a:67:2d:5f:6b:4c:82:e6:83:9c:95:67:
         f4:8f:81:50:43:0d:63:95:66:27:ee:49:6a:48:54:87:77:b0:
         18:3f:57:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 18:58:55 2024 by rpki-client on console-ams.rpki-client.org