Route Origin Authorization

$ rpki-client -vvf rpki.roa.net/rrdp/xTom/52/32332e3134342e3136302e302f32342d3234203d3e203332373237.roa
File:                     32332e3134342e3136302e302f32342d3234203d3e203332373237.roa (raw, json)
Hash identifier:          zX0ed5kR2C3wOl69iLIem3RxGdApeFQ7UUYGj3HDKPs=
Subject key identifier:   8D:72:24:F4:5C:D8:B7:03:67:AB:48:9D:69:8B:EC:5B:FF:26:3B:D8
Certificate issuer:       /CN=0da65ef0eb63c8789dabda39951af100771d9ee1304558fdbf
Certificate serial:       65807369ACBE7D624B13B6F455F04B620E159B60
Authority key identifier: 09:D2:A9:DA:8F:06:5F:99:59:AE:9C:CB:05:DF:D5:0B:23:A8:BE:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/589c840d-5406-45bd-ac1d-d77b3c5c3780/0da65ef0eb63c8789dabda39951af100771d9ee1304558fdbf.cer
Subject info access:      rsync://rpki.roa.net/rrdp/xTom/52/32332e3134342e3136302e302f32342d3234203d3e203332373237.roa
Signing time:             Thu 12 Oct 2023 16:10:41 +0000
ROA not before:           Thu 12 Oct 2023 16:05:41 +0000
ROA not after:            Thu 10 Oct 2024 16:10:41 +0000
asID:                     32727
IP address blocks:        23.144.160.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.roa.net/rrdp/xTom/52/09D2A9DA8F065F9959AE9CCB05DFD50B23A8BEF9.crl
                          rsync://rpki.roa.net/rrdp/xTom/52/09D2A9DA8F065F9959AE9CCB05DFD50B23A8BEF9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/589c840d-5406-45bd-ac1d-d77b3c5c3780/0da65ef0eb63c8789dabda39951af100771d9ee1304558fdbf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/589c840d-5406-45bd-ac1d-d77b3c5c3780/589c840d-5406-45bd-ac1d-d77b3c5c3780.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/589c840d-5406-45bd-ac1d-d77b3c5c3780/589c840d-5406-45bd-ac1d-d77b3c5c3780.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/589c840d-5406-45bd-ac1d-d77b3c5c3780.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 24 Jun 2024 18:33:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:80:73:69:ac:be:7d:62:4b:13:b6:f4:55:f0:4b:62:0e:15:9b:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0da65ef0eb63c8789dabda39951af100771d9ee1304558fdbf
        Validity
            Not Before: Oct 12 16:05:41 2023 GMT
            Not After : Oct 10 16:10:41 2024 GMT
        Subject: CN=8D7224F45CD8B70367AB489D698BEC5BFF263BD8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:66:01:f3:ee:92:2c:35:a0:09:71:7d:42:7f:
                    0a:d4:ed:eb:17:78:0c:56:8c:8a:19:c2:7a:2f:40:
                    c5:1f:1a:d0:ad:dd:04:8e:b7:b4:6b:fe:27:93:93:
                    f7:82:2f:98:9f:cb:96:da:9a:8d:42:18:ab:74:ec:
                    cd:b6:3e:af:2f:29:be:18:2e:7e:40:84:98:03:ae:
                    56:0e:f3:16:59:a7:31:6d:07:d6:a6:0c:43:d3:06:
                    73:9b:35:3d:a5:14:e7:f4:eb:6a:5b:64:c9:3d:1c:
                    72:64:81:10:30:20:1d:e9:9c:94:74:56:02:3f:23:
                    93:e0:66:13:7f:37:33:84:ff:fd:0a:f0:b3:4d:bb:
                    67:bc:fb:3a:5f:ed:60:66:71:98:ac:3e:37:d9:21:
                    60:a5:0a:88:ff:4a:76:e5:ad:8a:70:de:f7:fe:91:
                    fb:8c:ff:bd:ea:77:78:6f:03:65:40:72:64:20:d5:
                    69:9b:99:de:c8:08:8f:a5:5a:4b:4e:52:3b:da:95:
                    48:55:53:1f:31:ee:97:cc:5a:e7:48:90:94:92:55:
                    d0:e2:a5:7e:a9:5f:bc:48:f1:15:c8:95:e4:d6:6b:
                    cf:03:68:04:aa:30:9c:65:96:10:71:1c:9b:05:e9:
                    45:e6:c5:b5:bc:d3:14:82:31:18:1b:6f:20:19:bb:
                    1a:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:72:24:F4:5C:D8:B7:03:67:AB:48:9D:69:8B:EC:5B:FF:26:3B:D8
            X509v3 Authority Key Identifier:
                keyid:09:D2:A9:DA:8F:06:5F:99:59:AE:9C:CB:05:DF:D5:0B:23:A8:BE:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.roa.net/rrdp/xTom/52/09D2A9DA8F065F9959AE9CCB05DFD50B23A8BEF9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/589c840d-5406-45bd-ac1d-d77b3c5c3780/0da65ef0eb63c8789dabda39951af100771d9ee1304558fdbf.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/52/32332e3134342e3136302e302f32342d3234203d3e203332373237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.144.160.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6c:fd:2e:3b:7b:13:d6:27:8a:38:c7:12:6d:ea:01:bb:ea:64:
         5f:61:af:5a:25:4d:f2:2f:11:8a:9a:21:d4:3f:6f:ab:d3:26:
         05:17:2d:7d:4d:24:03:80:01:72:14:a8:b1:40:66:30:db:28:
         11:28:61:dd:79:11:17:d0:89:33:02:69:e5:33:53:2c:9c:70:
         60:ba:79:15:79:7e:69:13:06:ea:69:4f:12:29:ec:4e:70:e1:
         ae:90:9f:97:b4:8d:ba:9b:9a:51:e5:56:e9:03:db:1d:fc:9f:
         ab:e7:40:8c:50:e9:83:17:6b:38:6a:1b:59:1b:78:c5:a2:08:
         2a:01:1a:00:1a:3d:3d:6e:8d:ea:a1:28:be:d8:b2:6f:9c:34:
         a5:c3:80:0d:6a:d0:84:58:33:94:f3:ad:b0:92:96:5e:ed:e6:
         b0:d1:b5:33:08:a0:39:9d:41:1f:62:4e:94:0d:b2:bd:05:62:
         21:a6:27:04:67:7d:53:a6:b8:b1:41:3f:3f:4c:31:43:c5:0e:
         a5:d4:c4:c7:9b:4d:d2:55:d9:36:b9:72:f4:d6:28:06:2a:78:
         b7:cc:27:6a:4f:c6:41:b5:c1:ed:ae:38:06:55:d3:02:c5:c5:
         74:c9:0e:e0:30:a7:b3:c7:b3:d8:61:8b:8f:4a:bb:e8:ab:84:
         a9:0f:f1:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 19:24:50 2024 by rpki-client on console-fra.rpki-client.org