Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/0c70401c-7f41-4a6b-9434-cc80dca093e6/3/32332e3139302e32342e302f32342d3234203d3e203133383532.roa
File:                     32332e3139302e32342e302f32342d3234203d3e203133383532.roa (raw, json)
Hash identifier:          N9miqn/XeWnI2x4q978KfgI3giSsB9quYTNg+REDQRU=
Subject key identifier:   B8:C7:21:CA:5F:22:38:E8:2B:CB:EF:3B:C7:1B:BB:A7:1E:2A:FA:67
Certificate issuer:       /CN=f9d4bd83ed27b9a9325e1d6da6cc71a7e6564c102ee7996ce8
Certificate serial:       75E600D90C8D357DF9A37B4F55C794E76BC02529
Authority key identifier: 22:EC:27:BC:99:97:53:43:E6:F2:5F:5A:46:C6:E6:7C:28:2D:96:DD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6e83fbf2-b64b-4c55-ba28-ca84ad0af5ab/f9d4bd83ed27b9a9325e1d6da6cc71a7e6564c102ee7996ce8.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/0c70401c-7f41-4a6b-9434-cc80dca093e6/3/32332e3139302e32342e302f32342d3234203d3e203133383532.roa
Signing time:             Thu 19 Sep 2024 13:37:55 +0000
ROA not before:           Thu 19 Sep 2024 13:32:55 +0000
ROA not after:            Thu 18 Sep 2025 13:37:55 +0000
asID:                     13852
IP address blocks:        23.190.24.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/0c70401c-7f41-4a6b-9434-cc80dca093e6/3/22EC27BC99975343E6F25F5A46C6E67C282D96DD.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/0c70401c-7f41-4a6b-9434-cc80dca093e6/3/22EC27BC99975343E6F25F5A46C6E67C282D96DD.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6e83fbf2-b64b-4c55-ba28-ca84ad0af5ab/f9d4bd83ed27b9a9325e1d6da6cc71a7e6564c102ee7996ce8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6e83fbf2-b64b-4c55-ba28-ca84ad0af5ab/6e83fbf2-b64b-4c55-ba28-ca84ad0af5ab.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6e83fbf2-b64b-4c55-ba28-ca84ad0af5ab/6e83fbf2-b64b-4c55-ba28-ca84ad0af5ab.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6e83fbf2-b64b-4c55-ba28-ca84ad0af5ab.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 10 Nov 2024 18:43:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:e6:00:d9:0c:8d:35:7d:f9:a3:7b:4f:55:c7:94:e7:6b:c0:25:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f9d4bd83ed27b9a9325e1d6da6cc71a7e6564c102ee7996ce8
        Validity
            Not Before: Sep 19 13:32:55 2024 GMT
            Not After : Sep 18 13:37:55 2025 GMT
        Subject: CN=B8C721CA5F2238E82BCBEF3BC71BBBA71E2AFA67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:09:1f:80:71:74:fe:16:f4:68:35:c6:a7:12:
                    11:d9:cc:50:4c:59:3a:85:0f:be:95:82:09:f1:5d:
                    60:50:97:77:da:22:7d:1b:93:ce:ec:3e:95:fd:9d:
                    dd:59:a9:db:a2:16:cb:cf:4d:17:23:4c:c3:45:fc:
                    9f:67:51:60:f4:51:c5:8c:2f:bc:2d:21:9a:1e:3e:
                    fd:22:f3:75:18:47:c1:f2:82:f9:ca:8a:17:92:cd:
                    00:db:6d:60:bc:4d:15:45:cc:59:8b:28:25:82:26:
                    f8:6d:2c:6a:e6:d6:bb:0b:0d:d3:27:0f:7c:01:3d:
                    e2:c6:52:11:48:7f:a4:5d:77:60:7f:3f:71:b1:f9:
                    39:0d:9c:af:e6:24:2f:a5:cf:0f:1f:49:11:5f:6f:
                    3e:c6:df:ca:bb:21:cb:34:6e:b1:00:18:44:cd:77:
                    69:55:95:7c:7b:dc:ab:d9:40:bc:00:84:21:80:d8:
                    71:b7:80:1b:ae:e6:42:9c:cf:ac:13:b2:7e:c8:10:
                    eb:2c:82:b5:ce:e2:f6:4b:9e:fd:dc:25:f6:19:ba:
                    87:dc:58:00:c0:50:71:2e:b1:e6:3a:4c:44:b8:a0:
                    cb:1b:23:76:65:90:31:a2:b1:1b:cb:42:34:c8:8a:
                    49:9f:5f:f7:62:03:13:8a:56:64:dd:d5:9e:d1:bf:
                    40:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:C7:21:CA:5F:22:38:E8:2B:CB:EF:3B:C7:1B:BB:A7:1E:2A:FA:67
            X509v3 Authority Key Identifier:
                keyid:22:EC:27:BC:99:97:53:43:E6:F2:5F:5A:46:C6:E6:7C:28:2D:96:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/0c70401c-7f41-4a6b-9434-cc80dca093e6/3/22EC27BC99975343E6F25F5A46C6E67C282D96DD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6e83fbf2-b64b-4c55-ba28-ca84ad0af5ab/f9d4bd83ed27b9a9325e1d6da6cc71a7e6564c102ee7996ce8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0c70401c-7f41-4a6b-9434-cc80dca093e6/3/32332e3139302e32342e302f32342d3234203d3e203133383532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.190.24.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7a:1e:af:21:1d:2d:b5:8e:fd:e0:81:3d:eb:90:7f:a5:39:9c:
         52:25:7d:21:e9:4b:98:58:16:83:fc:b9:a2:3a:8d:46:c0:87:
         f4:87:cb:25:a8:a2:74:22:e0:6b:c3:96:6f:ea:e4:5e:87:98:
         21:98:10:d1:a5:91:71:db:7f:de:b2:ef:03:5e:0a:4c:08:73:
         d5:26:84:7a:33:d4:b7:fc:cf:4e:09:79:d9:f6:5f:a8:8b:7f:
         b3:d5:7d:da:37:91:12:04:4e:cf:b3:10:64:75:2d:f4:bd:4f:
         d7:0a:1f:35:54:a7:81:06:54:db:cb:56:48:5a:3c:26:b0:55:
         d5:dd:ee:7c:c1:ba:ad:37:dd:b6:26:0b:a9:b0:17:59:88:a4:
         b5:e6:ae:7c:b3:b7:34:05:50:20:95:a6:cc:f9:6c:bc:95:50:
         b6:3b:12:8d:c6:42:38:5d:c5:1a:da:cf:82:a9:2d:95:12:7f:
         51:5b:48:24:5e:ee:3c:0c:d2:e5:b1:d9:73:3e:15:d5:36:4a:
         6c:93:87:3a:66:0c:ac:cd:53:76:4e:c2:b4:e0:db:3c:54:08:
         b3:6c:4d:9b:8e:86:c5:28:6c:e4:fd:7e:3f:ef:43:0e:f5:c5:
         e0:f0:40:13:64:29:f3:7e:f7:8c:78:70:da:b9:5d:be:80:f3:
         ca:75:48:0b
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Nov 9 18:20:16 2024 by rpki-client on console-fra.rpki-client.org