Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS202400/0/32332e3134372e3132302e302f32342d3234203d3e20323032343030.roa
File:                     32332e3134372e3132302e302f32342d3234203d3e20323032343030.roa (raw, json)
Hash identifier:          q7kTbAlrs1QxOozrM4Tt6QcJqWeXkNSisGwvuIycswo=
Subject key identifier:   60:5B:52:DD:8A:A5:78:86:E4:87:3A:4F:A2:82:45:3D:03:47:C2:2B
Certificate issuer:       /CN=2a5af74dbb9d4d437cf3ac13206067caa11b1798319623f21f
Certificate serial:       1E79609173FDA5EA8CDBE6A77D3B5FD63A0936C7
Authority key identifier: B0:BE:7A:BD:BE:B3:E0:14:7D:08:12:2B:69:9C:47:8C:99:A1:B0:FF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70f5d80c-9daa-4f6f-8f58-181c5f0c4b0a/2a5af74dbb9d4d437cf3ac13206067caa11b1798319623f21f.cer
Subject info access:      rsync://rpki.co/repo/AS202400/0/32332e3134372e3132302e302f32342d3234203d3e20323032343030.roa
Signing time:             Thu 13 Apr 2023 15:31:38 +0000
ROA not before:           Thu 13 Apr 2023 15:26:38 +0000
ROA not after:            Thu 11 Apr 2024 15:31:38 +0000
asID:                     202400
IP address blocks:        23.147.120.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.co/repo/AS202400/0/B0BE7ABDBEB3E0147D08122B699C478C99A1B0FF.crl
                          rsync://rpki.co/repo/AS202400/0/B0BE7ABDBEB3E0147D08122B699C478C99A1B0FF.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70f5d80c-9daa-4f6f-8f58-181c5f0c4b0a/2a5af74dbb9d4d437cf3ac13206067caa11b1798319623f21f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70f5d80c-9daa-4f6f-8f58-181c5f0c4b0a/70f5d80c-9daa-4f6f-8f58-181c5f0c4b0a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70f5d80c-9daa-4f6f-8f58-181c5f0c4b0a/70f5d80c-9daa-4f6f-8f58-181c5f0c4b0a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70f5d80c-9daa-4f6f-8f58-181c5f0c4b0a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 20 Jul 2023 10:28:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:79:60:91:73:fd:a5:ea:8c:db:e6:a7:7d:3b:5f:d6:3a:09:36:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a5af74dbb9d4d437cf3ac13206067caa11b1798319623f21f
        Validity
            Not Before: Apr 13 15:26:38 2023 GMT
            Not After : Apr 11 15:31:38 2024 GMT
        Subject: CN=605B52DD8AA57886E4873A4FA282453D0347C22B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:fa:b5:0d:ec:c8:94:06:40:e2:e4:01:6d:4e:
                    55:ed:03:4b:68:1e:a8:e9:25:01:c1:b7:3a:a4:fe:
                    f8:cf:38:c2:22:9f:4f:11:2d:28:ee:8e:54:78:1b:
                    0c:c4:ff:c7:19:5f:a4:36:52:b6:46:c5:9b:67:1b:
                    44:2c:f7:07:83:0f:b6:95:e3:dd:42:2e:3a:23:13:
                    26:cc:d1:02:9d:89:01:d9:8b:32:cb:6d:56:90:75:
                    b5:50:12:a9:b0:0e:f6:07:8c:84:49:84:8b:05:d0:
                    c7:45:2b:b7:d7:23:8d:ad:e6:79:64:6e:ea:3b:04:
                    cd:09:00:93:73:48:da:5d:18:a0:1f:00:a5:cc:07:
                    99:6e:dd:39:7e:85:b3:dc:3e:c9:b5:e0:ba:0b:de:
                    ed:55:5c:8b:4a:76:e8:03:fc:56:ff:48:18:75:d5:
                    7e:5f:63:9e:77:95:10:69:67:39:ba:4f:99:4c:58:
                    f8:51:ec:29:53:ae:02:43:fe:14:79:68:17:57:0d:
                    ff:3a:d3:b6:43:25:3f:80:25:65:87:e4:d9:0e:37:
                    ca:ea:04:fb:2d:66:76:87:14:7e:99:3b:e3:a2:1c:
                    c7:b1:39:75:1b:19:51:88:11:b6:64:92:0a:3c:ba:
                    b6:6d:a2:bf:f5:1c:e8:28:ed:45:b4:54:7a:43:f5:
                    90:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:5B:52:DD:8A:A5:78:86:E4:87:3A:4F:A2:82:45:3D:03:47:C2:2B
            X509v3 Authority Key Identifier:
                keyid:B0:BE:7A:BD:BE:B3:E0:14:7D:08:12:2B:69:9C:47:8C:99:A1:B0:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS202400/0/B0BE7ABDBEB3E0147D08122B699C478C99A1B0FF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70f5d80c-9daa-4f6f-8f58-181c5f0c4b0a/2a5af74dbb9d4d437cf3ac13206067caa11b1798319623f21f.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS202400/0/32332e3134372e3132302e302f32342d3234203d3e20323032343030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.147.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a1:18:78:4d:ad:90:f2:da:c9:a6:0e:d9:1e:7f:24:e7:2e:eb:
         3b:f9:21:57:86:b9:08:e7:6b:ea:57:30:b0:a9:2f:08:97:46:
         2f:83:03:8d:0d:33:52:4a:3e:ef:fa:cb:6b:5d:0b:fa:7d:13:
         16:7c:0e:19:ee:5e:77:5f:25:48:2b:2d:ee:30:fd:e5:5d:18:
         78:57:93:bb:e0:93:f0:74:2c:a7:eb:29:93:8d:9d:59:19:1d:
         06:18:28:21:38:e2:19:12:1f:11:ab:09:10:fe:52:9e:26:bb:
         38:1d:f9:a5:cd:9f:85:4a:ca:14:75:15:c3:15:ad:6f:c3:de:
         f6:92:3d:0d:f5:eb:5b:10:45:ad:23:a8:46:d2:09:fa:9b:01:
         44:23:9f:29:ca:9f:f2:11:49:9f:3e:e0:fc:fe:2d:c1:f7:61:
         fc:81:7c:fe:f8:de:e3:68:3d:2e:ce:4a:a6:38:bf:86:49:9d:
         b4:f4:74:df:ee:d4:03:16:79:53:d7:b6:e7:32:75:a1:36:0d:
         30:94:1c:d5:3a:5c:4b:68:27:cb:c9:a5:16:73:79:f9:87:6d:
         2a:1f:be:87:9f:32:85:05:d4:9d:aa:18:50:d2:a2:99:de:d9:
         19:bf:e6:59:ee:3c:56:d5:88:a5:54:98:6c:7d:c5:bd:42:6a:
         85:d7:11:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 22:43:21 2023 by rpki-client on console-fra.rpki-client.org