Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/4/32332e3137382e37322e302f32342d3332203d3e203437323732.roa
File:                     32332e3137382e37322e302f32342d3332203d3e203437323732.roa (raw, json)
Hash identifier:          wTUFhxB1ra/9ePWw4ip99fGrwEoVBpfosSvBVZgBSUk=
Subject key identifier:   C6:93:EB:5F:05:BB:DC:67:F0:2B:E6:F9:95:87:D6:75:4A:19:D2:10
Certificate issuer:       /CN=f44c82daba68b40f65cfc17445f89b2192a57379d7f13be8fa
Certificate serial:       5C0713C41381FC4F70BF93EBB0B01B56004879D5
Authority key identifier: 6D:7A:26:67:30:92:8D:9D:FD:FD:AC:E3:6F:73:AC:89:E4:24:E2:28
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02c7706b-3baf-42cb-bdf7-782b036252b3/f44c82daba68b40f65cfc17445f89b2192a57379d7f13be8fa.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/4/32332e3137382e37322e302f32342d3332203d3e203437323732.roa
Signing time:             Wed 15 May 2024 15:55:49 +0000
ROA not before:           Wed 15 May 2024 15:50:49 +0000
ROA not after:            Wed 14 May 2025 15:55:49 +0000
asID:                     47272
IP address blocks:        23.178.72.0/24 maxlen: 32

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/4/6D7A266730928D9DFDFDACE36F73AC89E424E228.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/4/6D7A266730928D9DFDFDACE36F73AC89E424E228.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02c7706b-3baf-42cb-bdf7-782b036252b3/f44c82daba68b40f65cfc17445f89b2192a57379d7f13be8fa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02c7706b-3baf-42cb-bdf7-782b036252b3/02c7706b-3baf-42cb-bdf7-782b036252b3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02c7706b-3baf-42cb-bdf7-782b036252b3/02c7706b-3baf-42cb-bdf7-782b036252b3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02c7706b-3baf-42cb-bdf7-782b036252b3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Nov 2024 05:34:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:07:13:c4:13:81:fc:4f:70:bf:93:eb:b0:b0:1b:56:00:48:79:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f44c82daba68b40f65cfc17445f89b2192a57379d7f13be8fa
        Validity
            Not Before: May 15 15:50:49 2024 GMT
            Not After : May 14 15:55:49 2025 GMT
        Subject: CN=C693EB5F05BBDC67F02BE6F99587D6754A19D210
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:a2:0a:08:9d:88:bb:c5:7a:29:60:8a:14:f0:
                    c1:3a:d0:d6:c4:9b:4c:d5:bf:f1:6e:f1:ed:9c:45:
                    d1:da:8c:cf:c3:16:50:c0:c7:32:fc:71:9a:50:09:
                    a8:45:50:3f:9f:bb:ae:2c:f7:4e:13:7b:ba:0f:19:
                    d3:33:88:96:86:80:4a:83:df:67:79:ce:57:ab:ad:
                    9f:73:bc:84:46:cb:0c:e5:59:ef:a2:c9:ea:45:c4:
                    73:e5:85:b9:d9:f2:26:e2:67:b5:37:02:57:c8:20:
                    4b:d8:40:20:30:87:ad:74:74:8a:9f:e5:f6:34:d4:
                    11:9c:0c:9e:10:b6:e2:48:af:d6:e7:ff:d1:04:9e:
                    8f:e6:e9:0d:2b:94:85:6b:d5:21:dc:fa:00:07:82:
                    34:35:41:e5:23:8c:17:3b:aa:53:ac:11:76:90:6d:
                    88:46:46:d3:bc:90:56:e5:90:6b:4e:8e:45:79:d5:
                    b7:27:e5:56:74:b1:7a:cb:54:8b:f7:d7:ae:9f:f6:
                    20:eb:56:41:9a:29:5b:60:f2:d9:7a:02:5a:ea:dc:
                    db:da:91:97:fa:e2:1d:b3:da:19:bc:c7:9b:1b:31:
                    f5:a8:d3:ba:c4:3a:6f:a5:d3:2e:56:8a:0b:af:13:
                    31:40:ad:20:77:ef:dc:fb:3a:e5:88:4d:93:b6:84:
                    8f:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:93:EB:5F:05:BB:DC:67:F0:2B:E6:F9:95:87:D6:75:4A:19:D2:10
            X509v3 Authority Key Identifier:
                keyid:6D:7A:26:67:30:92:8D:9D:FD:FD:AC:E3:6F:73:AC:89:E4:24:E2:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/4/6D7A266730928D9DFDFDACE36F73AC89E424E228.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02c7706b-3baf-42cb-bdf7-782b036252b3/f44c82daba68b40f65cfc17445f89b2192a57379d7f13be8fa.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/4/32332e3137382e37322e302f32342d3332203d3e203437323732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.178.72.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6c:f8:4f:98:82:67:19:4c:e8:ad:d4:c4:4c:54:02:90:8d:dc:
         fb:7d:dc:c0:b9:9e:40:6d:d2:48:43:c6:38:95:e9:e0:17:8e:
         89:96:fd:20:08:bd:4d:d2:7d:0b:af:6e:ee:f5:3f:c3:26:71:
         be:31:4a:be:eb:d0:c2:99:06:69:94:5f:bf:3b:4e:4e:20:a4:
         4c:ad:37:14:af:57:ad:ca:8f:21:64:3b:49:16:1d:f7:4d:22:
         bf:2a:c4:66:e2:73:ad:8a:e5:98:1a:23:c6:ac:10:d0:1a:18:
         af:5c:4c:3c:cc:ce:a1:3b:fc:c4:98:11:2d:83:b2:c4:01:7f:
         a7:fe:f9:0d:e7:d2:c9:5d:67:32:95:34:6b:db:ca:a1:b0:4a:
         5d:56:c5:98:8f:d4:ed:c9:25:39:75:7b:f6:7a:72:60:14:08:
         3b:2d:42:76:2a:a9:d7:df:2d:8c:45:05:f7:d2:0a:94:b0:20:
         35:2e:2d:8d:ee:3c:f7:ae:5b:2e:d0:53:a2:e9:ee:44:bf:70:
         17:b0:54:c6:f6:b2:d9:b4:9a:c3:32:c4:04:76:48:cb:f4:c5:
         4c:42:5c:ec:70:6f:9c:84:fe:56:ba:8d:9e:0b:40:82:30:72:
         bf:64:47:6a:36:01:9c:95:e1:5f:72:41:ad:83:d2:12:88:ee:
         a3:90:c4:e5
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Nov 23 04:49:01 2024 by rpki-client on console-ams.rpki-client.org