Route Origin Authorization

$ rpki-client -vvf rpki.roa.net/rrdp/xTom/53/32332e3134312e33322e302f32342d3332203d3e2030.roa
File:                     32332e3134312e33322e302f32342d3332203d3e2030.roa (raw, json)
Hash identifier:          0xL9fuNFP6uCr87+l8KJxV2/Hn/Ys69boyHN9bT/tck=
Subject key identifier:   D1:F4:0F:3C:B3:B4:B6:1F:12:AC:DA:B1:C8:51:A6:88:E6:C9:78:0E
Certificate issuer:       /CN=81dade47ef565a67c33494e667d03d4da7cff1739b027c640b
Certificate serial:       3B8368D1CFF7F692594057107523AF133B5D973B
Authority key identifier: 74:E3:B9:E1:6E:92:C5:1A:89:79:AD:B5:A7:31:DD:E2:D5:EA:E9:6C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5ae183e-a402-4c1a-b464-670472e82b72/81dade47ef565a67c33494e667d03d4da7cff1739b027c640b.cer
Subject info access:      rsync://rpki.roa.net/rrdp/xTom/53/32332e3134312e33322e302f32342d3332203d3e2030.roa
Signing time:             Thu 01 Feb 2024 15:39:11 +0000
ROA not before:           Thu 01 Feb 2024 15:34:11 +0000
ROA not after:            Thu 30 Jan 2025 15:39:11 +0000
asID:                     0
IP address blocks:        23.141.32.0/24 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.roa.net/rrdp/xTom/53/74E3B9E16E92C51A8979ADB5A731DDE2D5EAE96C.crl
                          rsync://rpki.roa.net/rrdp/xTom/53/74E3B9E16E92C51A8979ADB5A731DDE2D5EAE96C.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5ae183e-a402-4c1a-b464-670472e82b72/81dade47ef565a67c33494e667d03d4da7cff1739b027c640b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5ae183e-a402-4c1a-b464-670472e82b72/b5ae183e-a402-4c1a-b464-670472e82b72.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5ae183e-a402-4c1a-b464-670472e82b72/b5ae183e-a402-4c1a-b464-670472e82b72.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5ae183e-a402-4c1a-b464-670472e82b72.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 15:14:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:83:68:d1:cf:f7:f6:92:59:40:57:10:75:23:af:13:3b:5d:97:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81dade47ef565a67c33494e667d03d4da7cff1739b027c640b
        Validity
            Not Before: Feb  1 15:34:11 2024 GMT
            Not After : Jan 30 15:39:11 2025 GMT
        Subject: CN=D1F40F3CB3B4B61F12ACDAB1C851A688E6C9780E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:2c:51:79:cc:a5:64:8d:6b:73:a1:43:94:6c:
                    8b:af:82:f2:56:14:9d:91:c8:5e:d7:df:4b:9d:ac:
                    cf:d3:91:25:47:76:d2:84:d1:67:c8:89:8b:b2:5b:
                    cc:35:31:a8:dc:a5:d3:dc:6a:a1:89:f5:80:e1:2d:
                    ab:71:9e:19:32:b5:79:7c:ad:77:6d:ae:22:98:2c:
                    8f:7c:8a:40:9e:99:18:09:81:f4:b2:2a:9a:e4:60:
                    9d:e8:b1:77:4a:92:6e:6e:d5:fd:d9:4a:cf:e1:d4:
                    64:9f:cc:08:2e:9e:c0:aa:7b:58:67:a1:2c:86:7c:
                    38:09:c8:1c:c7:a2:05:ac:c6:9c:19:48:86:bf:d4:
                    3a:79:63:9d:88:da:99:40:6e:76:e0:97:1e:8c:f6:
                    bd:d3:ff:43:ce:74:2b:69:f6:fa:e9:0d:bf:a8:b9:
                    db:57:ae:6b:e5:89:87:67:17:ae:1e:35:1c:60:c5:
                    2e:50:f0:38:31:81:26:a2:da:85:d9:ee:82:a2:92:
                    1e:98:53:ba:5a:3c:42:2b:e3:db:9a:42:88:52:13:
                    6f:a2:63:1d:56:f6:32:5c:8d:5a:74:87:5d:04:51:
                    12:41:69:be:d2:3a:e2:59:41:47:69:cc:2c:f4:da:
                    2f:d9:0c:74:14:69:3b:90:ee:36:63:a7:a5:7c:1d:
                    f5:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:F4:0F:3C:B3:B4:B6:1F:12:AC:DA:B1:C8:51:A6:88:E6:C9:78:0E
            X509v3 Authority Key Identifier:
                keyid:74:E3:B9:E1:6E:92:C5:1A:89:79:AD:B5:A7:31:DD:E2:D5:EA:E9:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.roa.net/rrdp/xTom/53/74E3B9E16E92C51A8979ADB5A731DDE2D5EAE96C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5ae183e-a402-4c1a-b464-670472e82b72/81dade47ef565a67c33494e667d03d4da7cff1739b027c640b.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/53/32332e3134312e33322e302f32342d3332203d3e2030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.141.32.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0d:15:6f:ff:f2:c9:04:f8:a6:cb:79:e9:ce:81:85:a6:63:94:
         20:23:ef:5b:9b:c2:80:2c:0c:0a:cb:29:36:9d:69:5c:52:60:
         50:a9:f7:af:ae:0e:0d:d6:e8:61:79:bf:b4:dc:0c:49:2c:91:
         b3:2d:87:e5:5c:6d:c8:f2:6a:f4:2f:ed:03:ee:d1:3b:21:9a:
         3d:34:ed:b5:90:a4:c6:5e:f4:21:cd:13:5e:21:a1:21:99:0f:
         d7:57:69:01:6a:86:5d:f8:f5:8b:c4:01:bd:b7:99:5a:b2:cb:
         31:46:cb:3d:6b:9c:22:1f:f5:2a:42:eb:1b:b4:3e:a2:96:80:
         9d:4f:42:3e:03:e6:ed:2b:24:64:b8:9b:4d:bc:da:c1:6f:df:
         c8:15:35:48:4f:91:86:4d:0a:5e:20:d6:0d:f5:eb:c8:72:1f:
         4b:63:1c:f7:24:de:0a:a6:be:88:79:0e:13:09:a5:3b:57:36:
         c0:6c:7c:a7:a7:88:71:a8:a8:7a:41:b7:06:9b:a4:fa:e3:b4:
         f6:41:c0:18:f7:f3:f0:36:69:8b:43:bf:e9:ac:af:24:46:cf:
         d4:b3:10:1f:3d:23:82:ac:6e:9b:2d:1b:3c:f5:17:98:70:50:
         37:00:d5:c9:5b:54:5d:56:53:c0:bd:b0:b2:83:c4:5d:72:64:
         e8:9c:51:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 16:17:29 2024 by rpki-client on console-fra.rpki-client.org