Route Origin Authorization

$ rpki-client -vvf rpki.leitecastro.com/repo/CASTRO-INTERNET/1/32332e3134372e3136382e302f32342d3234203d3e20323030343534.roa
File:                     32332e3134372e3136382e302f32342d3234203d3e20323030343534.roa (raw, json)
Hash identifier:          dGG4US9OZpoXZGmFlyRkDI4qB9mcpmuLKjohxkHeiIM=
Subject key identifier:   DF:99:E5:29:23:61:F7:AF:ED:26:80:42:1E:02:79:84:44:30:13:44
Certificate issuer:       /CN=01286d5411b53f893a4a569df9d6d933d29a653abdb8108643
Certificate serial:       5596E932F0FC53AB4D0BD9E39B7895274592BA3D
Authority key identifier: A1:56:4C:CE:2E:9C:73:24:D3:18:FC:B4:A0:8A:00:BB:09:F3:B4:69
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/26ce408d-5581-483d-90b3-5119fc830064/01286d5411b53f893a4a569df9d6d933d29a653abdb8108643.cer
Subject info access:      rsync://rpki.leitecastro.com/repo/CASTRO-INTERNET/1/32332e3134372e3136382e302f32342d3234203d3e20323030343534.roa
Signing time:             Mon 20 Jan 2025 05:01:53 +0000
ROA not before:           Mon 20 Jan 2025 04:56:53 +0000
ROA not after:            Mon 19 Jan 2026 05:01:53 +0000
asID:                     200454
IP address blocks:        23.147.168.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.leitecastro.com/repo/CASTRO-INTERNET/1/A1564CCE2E9C7324D318FCB4A08A00BB09F3B469.crl
                          rsync://rpki.leitecastro.com/repo/CASTRO-INTERNET/1/A1564CCE2E9C7324D318FCB4A08A00BB09F3B469.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/26ce408d-5581-483d-90b3-5119fc830064/01286d5411b53f893a4a569df9d6d933d29a653abdb8108643.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/26ce408d-5581-483d-90b3-5119fc830064/26ce408d-5581-483d-90b3-5119fc830064.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/26ce408d-5581-483d-90b3-5119fc830064/26ce408d-5581-483d-90b3-5119fc830064.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/26ce408d-5581-483d-90b3-5119fc830064.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 05 Feb 2025 23:17:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:96:e9:32:f0:fc:53:ab:4d:0b:d9:e3:9b:78:95:27:45:92:ba:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01286d5411b53f893a4a569df9d6d933d29a653abdb8108643
        Validity
            Not Before: Jan 20 04:56:53 2025 GMT
            Not After : Jan 19 05:01:53 2026 GMT
        Subject: CN=DF99E5292361F7AFED2680421E02798444301344
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:54:6e:d7:b0:04:2d:b0:9d:e0:45:73:b0:f1:
                    51:23:dd:e7:11:70:03:d2:7f:7b:a2:18:6b:55:15:
                    ba:4d:5b:61:4c:c0:24:fe:37:e9:45:93:61:a4:54:
                    06:8e:f5:11:99:1b:ce:31:91:3d:f3:4d:60:eb:77:
                    a8:7c:97:5f:a7:50:db:0a:e9:66:0b:03:f4:52:b6:
                    b3:89:77:4b:fc:c1:bf:70:33:3a:e7:c8:2d:bc:03:
                    ae:83:1e:4e:40:04:97:f0:ae:a3:78:ca:b9:6e:9d:
                    16:81:3f:45:66:24:8a:d0:2f:29:49:ad:f3:56:ac:
                    af:9a:f4:d6:b9:22:85:d1:c4:c7:8f:32:29:38:96:
                    cb:e3:39:43:20:cd:52:f9:fd:26:67:6f:79:67:81:
                    83:7c:f4:c6:ad:68:ad:d7:8b:80:60:eb:7f:d5:bd:
                    f6:7f:6c:1a:25:ef:bd:ad:b2:6a:6d:30:29:79:49:
                    9e:ea:b7:a4:99:ad:a0:12:65:2f:a2:9f:d2:81:b9:
                    77:de:e1:eb:88:88:56:61:bd:15:39:40:37:fb:ac:
                    46:67:89:d7:85:19:a2:c7:45:7e:48:c3:67:24:e9:
                    fd:01:66:d3:4e:fa:3a:ab:e2:20:fd:7a:6e:e5:8e:
                    6b:b2:d7:8b:51:0c:77:7e:06:77:52:dd:c5:86:69:
                    06:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:99:E5:29:23:61:F7:AF:ED:26:80:42:1E:02:79:84:44:30:13:44
            X509v3 Authority Key Identifier:
                keyid:A1:56:4C:CE:2E:9C:73:24:D3:18:FC:B4:A0:8A:00:BB:09:F3:B4:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.leitecastro.com/repo/CASTRO-INTERNET/1/A1564CCE2E9C7324D318FCB4A08A00BB09F3B469.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/26ce408d-5581-483d-90b3-5119fc830064/01286d5411b53f893a4a569df9d6d933d29a653abdb8108643.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.leitecastro.com/repo/CASTRO-INTERNET/1/32332e3134372e3136382e302f32342d3234203d3e20323030343534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.147.168.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6f:c1:ce:08:b3:2c:2d:f2:bc:61:bf:13:e0:19:3f:5b:89:df:
         06:35:26:b0:4e:da:94:a1:84:07:85:6d:27:04:c5:26:46:27:
         cb:b9:20:ff:60:37:e8:97:df:f0:b5:21:27:45:7d:21:70:00:
         60:d3:1b:75:80:9c:c0:ef:a6:d4:85:eb:2d:6f:70:1e:46:50:
         bb:be:7c:ad:e5:23:e5:c7:b1:e1:7a:1c:2c:26:fc:f7:9a:9e:
         65:40:08:b7:05:56:74:a3:e9:23:50:5a:c0:d0:f5:21:b3:39:
         2a:bc:75:43:03:14:30:6e:7d:69:4a:9b:28:fa:68:3c:7d:5a:
         59:92:b8:15:9c:51:8e:24:27:fe:d1:48:e8:cf:d6:03:bb:59:
         c9:d5:c1:10:40:6e:b4:16:ae:1e:63:0a:df:b4:4c:6f:f4:e3:
         ff:83:53:c5:fb:56:04:06:d9:27:37:0f:a7:64:4b:89:8e:41:
         74:0e:0c:d7:a0:57:64:a0:19:ff:6e:e8:2c:c0:4a:bc:22:53:
         70:47:1b:25:6f:97:9d:0e:e1:49:0f:1f:bc:78:fc:5b:f9:92:
         40:b0:8b:81:e2:a2:63:60:db:db:80:e7:38:7a:8c:db:30:ce:
         d1:1e:7c:da:1a:a7:4c:b6:9c:80:62:a0:26:69:8f:8a:8f:34:
         12:af:c5:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:52:39 2025 by rpki-client