Route Origin Authorization

$ rpki-client -vvf rpki.roa.net/rrdp/xTom/44/32332e3134352e34382e302f32342d3234203d3e203530313331.roa
File:                     32332e3134352e34382e302f32342d3234203d3e203530313331.roa (raw, json)
Hash identifier:          keNtQ6euhK2Z4DE+mqw3lFT6Nl4Jw6Vf+FHp1kTuhSw=
Subject key identifier:   E9:1A:79:BE:36:65:F0:CF:E3:00:70:97:37:AE:60:8D:3F:DF:F6:52
Certificate issuer:       /CN=73516995116535a22de5a23000d3e7814baad6490837f37731
Certificate serial:       03EC5F266E797477CFFDD5D4D4DE3B1EEA2C8733
Authority key identifier: 0F:D3:45:FD:54:15:11:79:51:13:60:9B:A4:AF:5F:FF:60:04:1A:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a18f1ddb-2d6e-491c-bf65-f32f98dbc569/73516995116535a22de5a23000d3e7814baad6490837f37731.cer
Subject info access:      rsync://rpki.roa.net/rrdp/xTom/44/32332e3134352e34382e302f32342d3234203d3e203530313331.roa
Signing time:             Wed 30 Aug 2023 15:13:37 +0000
ROA not before:           Wed 30 Aug 2023 15:08:37 +0000
ROA not after:            Wed 28 Aug 2024 15:13:37 +0000
asID:                     50131
IP address blocks:        23.145.48.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.roa.net/rrdp/xTom/44/0FD345FD541511795113609BA4AF5FFF60041AFC.crl
                          rsync://rpki.roa.net/rrdp/xTom/44/0FD345FD541511795113609BA4AF5FFF60041AFC.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a18f1ddb-2d6e-491c-bf65-f32f98dbc569/73516995116535a22de5a23000d3e7814baad6490837f37731.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a18f1ddb-2d6e-491c-bf65-f32f98dbc569/a18f1ddb-2d6e-491c-bf65-f32f98dbc569.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a18f1ddb-2d6e-491c-bf65-f32f98dbc569/a18f1ddb-2d6e-491c-bf65-f32f98dbc569.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a18f1ddb-2d6e-491c-bf65-f32f98dbc569.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 02 Jun 2024 09:52:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:ec:5f:26:6e:79:74:77:cf:fd:d5:d4:d4:de:3b:1e:ea:2c:87:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73516995116535a22de5a23000d3e7814baad6490837f37731
        Validity
            Not Before: Aug 30 15:08:37 2023 GMT
            Not After : Aug 28 15:13:37 2024 GMT
        Subject: CN=E91A79BE3665F0CFE300709737AE608D3FDFF652
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:9a:1c:e4:7a:01:ec:96:f6:c7:a6:18:55:37:
                    15:4a:bc:d6:36:57:f4:e1:70:e8:99:7d:56:d4:04:
                    6d:8d:fd:cc:96:ff:c9:02:ab:81:94:39:bf:2b:39:
                    a6:71:1c:4a:8d:a8:82:9e:72:c8:c7:bf:55:c2:7f:
                    69:c5:61:8c:01:a2:2b:de:c2:bc:b0:bf:48:f4:af:
                    e4:53:69:c5:1e:de:2f:61:11:aa:61:67:91:04:02:
                    b2:73:89:1d:54:9f:2f:31:bb:4e:9b:fd:cd:d9:86:
                    91:dc:e6:f6:5a:09:91:b8:d6:80:33:ce:d1:51:e7:
                    d8:f5:51:c9:19:c2:d5:67:60:04:ea:69:a7:41:2a:
                    3e:3e:b9:54:9c:90:79:14:b7:0c:9d:f6:65:fb:10:
                    32:c9:10:dc:7e:68:e1:96:c9:a7:08:f1:08:fa:7b:
                    d5:48:36:73:2d:68:c2:e3:ec:9f:6e:62:89:94:ef:
                    13:32:70:21:25:be:10:f7:7c:8f:9a:52:47:20:6b:
                    48:ad:d1:57:be:95:66:b4:72:20:f8:2c:32:03:53:
                    e8:1f:98:19:1b:9a:75:4f:52:8e:57:6d:31:f1:6b:
                    c6:21:80:0d:1c:fc:ef:4c:b0:f1:ef:93:d1:11:01:
                    84:0a:46:52:5e:29:ab:e8:f3:03:25:aa:4a:ac:16:
                    af:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:1A:79:BE:36:65:F0:CF:E3:00:70:97:37:AE:60:8D:3F:DF:F6:52
            X509v3 Authority Key Identifier:
                keyid:0F:D3:45:FD:54:15:11:79:51:13:60:9B:A4:AF:5F:FF:60:04:1A:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.roa.net/rrdp/xTom/44/0FD345FD541511795113609BA4AF5FFF60041AFC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a18f1ddb-2d6e-491c-bf65-f32f98dbc569/73516995116535a22de5a23000d3e7814baad6490837f37731.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/44/32332e3134352e34382e302f32342d3234203d3e203530313331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.145.48.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8a:f4:22:c0:af:13:b0:e4:33:e2:b9:6d:45:af:93:22:0a:5e:
         c0:4f:4c:42:f0:be:f7:c2:3c:da:73:f7:2d:30:13:cd:9a:5f:
         d1:5f:06:2a:e8:c9:ac:69:4a:00:b0:91:98:85:95:fc:09:81:
         6d:50:48:ac:bb:86:0e:7b:98:94:2e:31:fd:54:48:c7:cb:14:
         99:66:b7:90:17:1e:b4:2a:38:3e:1e:74:81:9f:92:c9:06:c7:
         1e:77:71:6a:f7:ea:be:93:bf:69:57:d8:17:4f:97:18:33:72:
         06:a1:38:16:4f:e6:d0:cb:a9:36:74:74:e5:9f:d7:60:00:d0:
         c9:34:3d:e7:22:2a:74:80:3a:8a:4b:84:27:8f:15:3a:7f:ec:
         01:83:b4:da:bb:5a:cf:91:62:78:18:96:93:b8:b0:6d:e2:c4:
         b4:a0:af:0f:2a:3c:ef:4f:d6:8b:7c:0c:35:7f:82:72:2c:56:
         2a:63:9a:bb:62:e5:43:dc:ef:59:48:a5:c2:62:e2:40:6d:4d:
         b1:cc:d3:ac:77:fb:e6:61:03:5c:88:ee:3d:3f:e3:c7:a8:e6:
         5f:84:3d:25:76:f9:f3:1e:11:f2:2f:74:3f:e4:c9:3a:b0:7f:
         26:57:64:56:42:c1:ed:d2:e7:6e:3e:fd:a9:b3:71:15:6d:a4:
         40:c7:58:18
-----BEGIN CERTIFICATE-----
MIIFXjCCBEagAwIBAgIUA+xfJm55dHfP/dXU1N47HuoshzMwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNzM1MTY5OTUxMTY1MzVhMjJkZTVhMjMwMDBkM2U3ODE0
YmFhZDY0OTA4MzdmMzc3MzEwHhcNMjMwODMwMTUwODM3WhcNMjQwODI4MTUxMzM3
WjAzMTEwLwYDVQQDEyhFOTFBNzlCRTM2NjVGMENGRTMwMDcwOTczN0FFNjA4RDNG
REZGNjUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtpoc5HoB7Jb2
x6YYVTcVSrzWNlf04XDomX1W1ARtjf3Mlv/JAquBlDm/KzmmcRxKjaiCnnLIx79V
wn9pxWGMAaIr3sK8sL9I9K/kU2nFHt4vYRGqYWeRBAKyc4kdVJ8vMbtOm/3N2YaR
3Ob2WgmRuNaAM87RUefY9VHJGcLVZ2AE6mmnQSo+PrlUnJB5FLcMnfZl+xAyyRDc
fmjhlsmnCPEI+nvVSDZzLWjC4+yfbmKJlO8TMnAhJb4Q93yPmlJHIGtIrdFXvpVm
tHIg+CwyA1PoH5gZG5p1T1KOV20x8WvGIYANHPzvTLDx75PREQGECkZSXimr6PMD
JapKrBav9wIDAQABo4ICXjCCAlowHQYDVR0OBBYEFOkaeb42ZfDP4wBwlzeuYI0/
3/ZSMB8GA1UdIwQYMBaAFA/TRf1UFRF5URNgm6SvX/9gBBr8MA4GA1UdDwEB/wQE
AwIHgDBfBgNVHR8EWDBWMFSgUqBQhk5yc3luYzovL3Jwa2kucm9hLm5ldC9ycmRw
L3hUb20vNDQvMEZEMzQ1RkQ1NDE1MTE3OTUxMTM2MDlCQTRBRjVGRkY2MDA0MUFG
Qy5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8v
cnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1l
ODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzQ2ZTAxMTEtZmFmYi00MzBmLWI3
NzgtZDIwNGNmY2Q5OWE4L2ExOGYxZGRiLTJkNmUtNDkxYy1iZjY1LWYzMmY5OGRi
YzU2OS83MzUxNjk5NTExNjUzNWEyMmRlNWEyMzAwMGQzZTc4MTRiYWFkNjQ5MDgz
N2YzNzczMS5jZXIwdgYIKwYBBQUHAQsEajBoMGYGCCsGAQUFBzALhlpyc3luYzov
L3Jwa2kucm9hLm5ldC9ycmRwL3hUb20vNDQvMzIzMzJlMzEzNDM1MmUzNDM4MmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzUzMDMxMzMzMS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEABeRMDAN
BgkqhkiG9w0BAQsFAAOCAQEAivQiwK8TsOQz4rltRa+TIgpewE9MQvC+98I82nP3
LTATzZpf0V8GKujJrGlKALCRmIWV/AmBbVBIrLuGDnuYlC4x/VRIx8sUmWa3kBce
tCo4Ph50gZ+SyQbHHndxavfqvpO/aVfYF0+XGDNyBqE4Fk/m0MupNnR05Z/XYADQ
yTQ95yIqdIA6ikuEJ48VOn/sAYO02rtaz5FieBiWk7iwbeLEtKCvDyo870/Wi3wM
NX+CcixWKmOau2LlQ9zvWUilwmLiQG1NsczTrHf75mEDXIjuPT/jx6jmX4Q9JXb5
8x4R8i90P+TJOrB/JldkVkLB7dLnbj79qbNxFW2kQMdYGA==
-----END CERTIFICATE-----
Generated at Sat Jun 1 06:31:21 2024 by rpki-client on console-fra.rpki-client.org