Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/6/32332e3136322e3136382e302f32342d3234203d3e203135333533.roa
File:                     32332e3136322e3136382e302f32342d3234203d3e203135333533.roa (raw, json)
Hash identifier:          mkeaxxFUy7/YQCo8PCVv3FxtwAtgYCp+tx+gx5XRNwo=
Subject key identifier:   D7:FB:D4:E5:8E:D5:14:32:EF:EE:12:CD:00:1E:A0:C7:90:4F:2E:68
Certificate issuer:       /CN=7c4424b0ef940ae283a399bf40b888b424ed0322e0ce02dad6
Certificate serial:       138254C907C7BDA24BB9762CD280CA0718661A39
Authority key identifier: BB:26:2D:2D:06:A5:BB:F4:FF:22:26:5C:7B:4F:55:1F:F0:37:43:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5138de2d-512a-4692-8c53-d2d9a6ceb549/7c4424b0ef940ae283a399bf40b888b424ed0322e0ce02dad6.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/6/32332e3136322e3136382e302f32342d3234203d3e203135333533.roa
Signing time:             Sun 12 Nov 2023 15:26:47 +0000
ROA not before:           Sun 12 Nov 2023 15:21:47 +0000
ROA not after:            Sun 10 Nov 2024 15:26:47 +0000
asID:                     15353
IP address blocks:        23.162.168.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/6/BB262D2D06A5BBF4FF22265C7B4F551FF037433D.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/6/BB262D2D06A5BBF4FF22265C7B4F551FF037433D.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5138de2d-512a-4692-8c53-d2d9a6ceb549/7c4424b0ef940ae283a399bf40b888b424ed0322e0ce02dad6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5138de2d-512a-4692-8c53-d2d9a6ceb549/5138de2d-512a-4692-8c53-d2d9a6ceb549.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5138de2d-512a-4692-8c53-d2d9a6ceb549/5138de2d-512a-4692-8c53-d2d9a6ceb549.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5138de2d-512a-4692-8c53-d2d9a6ceb549.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 27 Jun 2024 03:54:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:82:54:c9:07:c7:bd:a2:4b:b9:76:2c:d2:80:ca:07:18:66:1a:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c4424b0ef940ae283a399bf40b888b424ed0322e0ce02dad6
        Validity
            Not Before: Nov 12 15:21:47 2023 GMT
            Not After : Nov 10 15:26:47 2024 GMT
        Subject: CN=D7FBD4E58ED51432EFEE12CD001EA0C7904F2E68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:22:2d:28:36:bd:35:9c:8e:ae:fc:33:52:b2:
                    1d:3e:65:1e:6b:4d:8d:80:25:aa:03:5d:29:27:78:
                    d9:fe:4a:ab:5a:73:e1:f0:85:14:69:66:85:a7:a0:
                    f0:e2:ed:26:77:2e:bd:64:55:73:2b:98:34:00:23:
                    8f:9c:5f:76:63:e8:6d:b7:27:61:7d:25:25:ad:07:
                    99:ca:08:b9:22:dd:6a:6c:21:53:82:4a:f0:f0:59:
                    08:ee:40:0e:88:4c:30:23:a8:e5:14:83:ff:81:80:
                    61:19:de:ad:90:a8:4b:c8:c6:33:50:a0:5e:57:b3:
                    f9:52:e0:43:8a:de:c1:51:3f:e4:1f:59:0e:6e:ba:
                    ab:33:eb:8d:94:42:be:1e:3e:9e:9d:3d:55:8c:c5:
                    1f:9e:4a:4f:5e:ed:9d:91:e8:8e:09:c0:8b:e2:ff:
                    4e:cf:96:88:96:53:fc:fd:e0:54:65:f6:63:85:c5:
                    52:7d:34:cc:d2:9b:3d:c2:6d:ba:fe:ea:71:6d:0b:
                    54:e3:55:d5:a4:c1:4b:52:29:5c:25:83:8f:47:83:
                    1b:21:0c:f4:6f:93:be:15:67:96:1b:2d:3d:0d:6f:
                    7c:16:86:be:65:23:7b:24:04:38:31:22:14:d1:b1:
                    25:9f:76:c3:8b:08:74:19:49:87:73:15:54:10:36:
                    8c:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:FB:D4:E5:8E:D5:14:32:EF:EE:12:CD:00:1E:A0:C7:90:4F:2E:68
            X509v3 Authority Key Identifier:
                keyid:BB:26:2D:2D:06:A5:BB:F4:FF:22:26:5C:7B:4F:55:1F:F0:37:43:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/6/BB262D2D06A5BBF4FF22265C7B4F551FF037433D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5138de2d-512a-4692-8c53-d2d9a6ceb549/7c4424b0ef940ae283a399bf40b888b424ed0322e0ce02dad6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/6/32332e3136322e3136382e302f32342d3234203d3e203135333533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.162.168.0/24

    Signature Algorithm: sha256WithRSAEncryption
         01:9f:b6:bc:0c:50:ac:af:5b:3e:50:c3:3d:fe:61:59:1c:48:
         dc:3e:a1:3a:09:b4:49:58:85:d0:e6:26:0f:46:ec:84:a1:03:
         cc:c9:90:98:21:ac:f9:8b:38:66:4a:00:bf:64:4d:6a:bd:d6:
         f2:df:6d:f6:23:b0:ba:42:e8:7b:f6:0f:3d:c3:58:58:05:29:
         74:9d:c1:5b:5f:8f:91:4e:d0:ac:46:a6:df:1a:4e:62:0a:0d:
         a1:f8:d4:6d:99:24:b3:af:8b:49:89:15:cb:d7:8d:bb:98:5f:
         2c:a6:c5:13:59:5a:72:09:52:31:0a:4a:9e:4c:44:48:49:b3:
         ca:5b:49:eb:79:bb:1a:33:5f:18:3b:cd:4c:aa:ba:ad:bf:80:
         08:14:3b:2a:82:92:ec:32:e6:c6:d9:3a:4a:d1:22:9f:2f:ae:
         9f:11:11:d2:83:93:9a:38:3e:94:e7:92:81:51:86:74:90:08:
         e4:d0:86:63:e0:81:58:cd:b3:66:5f:c3:9c:71:96:80:f8:48:
         bc:34:6e:fc:c5:30:0a:5b:80:a0:74:a4:72:a5:a3:b6:64:99:
         26:14:65:f0:08:96:b4:9d:e4:1a:41:13:db:29:ad:dd:59:c9:
         fc:33:06:fe:ff:34:8a:11:53:00:d3:43:d8:85:86:58:9b:e8:
         57:9b:4b:13
-----BEGIN CERTIFICATE-----
MIIFzTCCBLWgAwIBAgIUE4JUyQfHvaJLuXYs0oDKBxhmGjkwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyN2M0NDI0YjBlZjk0MGFlMjgzYTM5OWJmNDBiODg4YjQy
NGVkMDMyMmUwY2UwMmRhZDYwHhcNMjMxMTEyMTUyMTQ3WhcNMjQxMTEwMTUyNjQ3
WjAzMTEwLwYDVQQDEyhEN0ZCRDRFNThFRDUxNDMyRUZFRTEyQ0QwMDFFQTBDNzkw
NEYyRTY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzCItKDa9NZyO
rvwzUrIdPmUea02NgCWqA10pJ3jZ/kqrWnPh8IUUaWaFp6Dw4u0mdy69ZFVzK5g0
ACOPnF92Y+httydhfSUlrQeZygi5It1qbCFTgkrw8FkI7kAOiEwwI6jlFIP/gYBh
Gd6tkKhLyMYzUKBeV7P5UuBDit7BUT/kH1kObrqrM+uNlEK+Hj6enT1VjMUfnkpP
Xu2dkeiOCcCL4v9Oz5aIllP8/eBUZfZjhcVSfTTM0ps9wm26/upxbQtU41XVpMFL
UilcJYOPR4MbIQz0b5O+FWeWGy09DW98Foa+ZSN7JAQ4MSIU0bEln3bDiwh0GUmH
cxVUEDaMfwIDAQABo4ICzTCCAskwHQYDVR0OBBYEFNf71OWO1RQy7+4SzQAeoMeQ
Ty5oMB8GA1UdIwQYMBaAFLsmLS0Gpbv0/yImXHtPVR/wN0M9MA4GA1UdDwEB/wQE
AwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3luYzovL3JzeW5jLnBhYXMu
cnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzY2YmQ5MmYxLTQxNWItNDc2NS04YTE2
LWRiZmM0NTkzYzFhOC82L0JCMjYyRDJEMDZBNUJCRjRGRjIyMjY1QzdCNEY1NTFG
RjAzNzQzM0QuY3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYIKwYBBQUHMAKGgdNy
c3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0
YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYt
NGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81MTM4ZGUyZC01MTJhLTQ2OTItOGM1My1k
MmQ5YTZjZWI1NDkvN2M0NDI0YjBlZjk0MGFlMjgzYTM5OWJmNDBiODg4YjQyNGVk
MDMyMmUwY2UwMmRhZDYuY2VyMIGtBggrBgEFBQcBCwSBoDCBnTCBmgYIKwYBBQUH
MAuGgY1yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
LzY2YmQ5MmYxLTQxNWItNDc2NS04YTE2LWRiZmM0NTkzYzFhOC82LzMyMzMyZTMx
MzYzMjJlMzEzNjM4MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzEzNTMzMzUzMy5y
b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEABeiqDANBgkqhkiG9w0BAQsFAAOCAQEAAZ+2vAxQrK9bPlDDPf5h
WRxI3D6hOgm0SViF0OYmD0bshKEDzMmQmCGs+Ys4ZkoAv2RNar3W8t9t9iOwukLo
e/YPPcNYWAUpdJ3BW1+PkU7QrEam3xpOYgoNofjUbZkks6+LSYkVy9eNu5hfLKbF
E1lacglSMQpKnkxESEmzyltJ63m7GjNfGDvNTKq6rb+ACBQ7KoKS7DLmxtk6StEi
ny+unxER0oOTmjg+lOeSgVGGdJAI5NCGY+CBWM2zZl/DnHGWgPhIvDRu/MUwCluA
oHSkcqWjtmSZJhRl8AiWtJ3kGkET2ymt3VnJ/DMG/v80ihFTANND2IWGWJvoV5tL
Ew==
-----END CERTIFICATE-----
Generated at Wed Jun 26 08:28:48 2024 by rpki-client on console-fra.rpki-client.org