Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/8/32332e3134352e35362e302f32342d3234203d3e203135333533.roa
File:                     32332e3134352e35362e302f32342d3234203d3e203135333533.roa (raw, json)
Hash identifier:          zQn6BJnUtSyDryo+kAbwCEuo+nIC+FUHVIgSAuPCEMU=
Subject key identifier:   EB:EE:12:0C:BA:D0:D0:7A:15:62:57:CB:57:0A:4E:78:99:A8:DC:64
Certificate issuer:       /CN=1822fe9c8a1d8a021778934e378159ff8f794df32bfe9ed071
Certificate serial:       0FCA48C9858DCFA296CEA4E7BA9227ABBE1DAB46
Authority key identifier: 93:B0:29:6C:31:78:77:80:FE:84:13:31:8F:D0:D2:70:83:83:4C:C5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5563e2f9-4d9b-40c3-afa2-ce7045ffd23a/1822fe9c8a1d8a021778934e378159ff8f794df32bfe9ed071.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/8/32332e3134352e35362e302f32342d3234203d3e203135333533.roa
Signing time:             Sun 12 Nov 2023 15:26:50 +0000
ROA not before:           Sun 12 Nov 2023 15:21:50 +0000
ROA not after:            Sun 10 Nov 2024 15:26:50 +0000
asID:                     15353
IP address blocks:        23.145.56.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/8/93B0296C31787780FE8413318FD0D27083834CC5.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/8/93B0296C31787780FE8413318FD0D27083834CC5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5563e2f9-4d9b-40c3-afa2-ce7045ffd23a/1822fe9c8a1d8a021778934e378159ff8f794df32bfe9ed071.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5563e2f9-4d9b-40c3-afa2-ce7045ffd23a/5563e2f9-4d9b-40c3-afa2-ce7045ffd23a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5563e2f9-4d9b-40c3-afa2-ce7045ffd23a/5563e2f9-4d9b-40c3-afa2-ce7045ffd23a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5563e2f9-4d9b-40c3-afa2-ce7045ffd23a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 03 Jun 2024 06:06:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:ca:48:c9:85:8d:cf:a2:96:ce:a4:e7:ba:92:27:ab:be:1d:ab:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1822fe9c8a1d8a021778934e378159ff8f794df32bfe9ed071
        Validity
            Not Before: Nov 12 15:21:50 2023 GMT
            Not After : Nov 10 15:26:50 2024 GMT
        Subject: CN=EBEE120CBAD0D07A156257CB570A4E7899A8DC64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:73:e1:0e:d8:08:f2:e5:0a:95:c4:4f:4e:e5:
                    31:8e:fd:0a:58:81:f4:01:4a:29:02:cd:52:f0:d2:
                    26:fe:b4:ee:4b:49:f4:d8:9c:e8:f6:21:b9:36:95:
                    b1:03:3b:fd:e2:d2:9a:a1:4f:06:9b:cc:b4:74:7d:
                    a1:0d:a2:a3:b3:d4:b6:9f:77:7a:ae:a6:ec:1a:61:
                    b0:e8:70:54:d5:89:9f:44:66:06:3c:29:87:b7:01:
                    a8:57:2b:df:10:28:00:60:4b:9e:6b:bb:69:e3:f0:
                    cf:0b:26:e7:42:45:50:89:e2:03:c7:44:d3:80:6e:
                    b7:9f:11:bc:bc:1c:7c:51:c6:ad:c1:e9:75:4f:8d:
                    a5:05:32:f6:89:a5:85:ed:7b:db:8b:8c:1a:dd:51:
                    bf:92:d2:4e:b4:f8:87:a5:7d:1d:6e:46:5d:e2:f7:
                    81:63:d4:c6:87:77:ce:fe:26:a5:3b:0c:73:f8:5e:
                    5d:07:fd:de:9d:97:e0:17:fd:af:96:80:34:5a:4e:
                    ef:93:6f:a2:a4:3d:20:53:d8:50:da:62:14:e7:68:
                    a4:75:9f:5e:2b:6c:da:0b:66:6c:bb:ee:c8:9f:f3:
                    16:6f:2a:b0:68:bb:59:af:d5:da:95:b1:a1:00:8c:
                    a5:4d:e9:a5:5d:81:29:33:55:e2:0a:43:5c:8c:2f:
                    e2:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:EE:12:0C:BA:D0:D0:7A:15:62:57:CB:57:0A:4E:78:99:A8:DC:64
            X509v3 Authority Key Identifier:
                keyid:93:B0:29:6C:31:78:77:80:FE:84:13:31:8F:D0:D2:70:83:83:4C:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/8/93B0296C31787780FE8413318FD0D27083834CC5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5563e2f9-4d9b-40c3-afa2-ce7045ffd23a/1822fe9c8a1d8a021778934e378159ff8f794df32bfe9ed071.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/8/32332e3134352e35362e302f32342d3234203d3e203135333533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.145.56.0/24

    Signature Algorithm: sha256WithRSAEncryption
         04:b3:c3:20:b4:ee:8a:f0:09:1e:91:b1:4d:46:53:d2:ad:c4:
         3d:b9:00:f0:6c:54:27:fd:d8:00:b7:8f:5a:ec:58:3a:39:5c:
         08:bc:35:5e:52:27:8e:d8:92:be:1a:d2:cd:88:3c:dd:e0:ba:
         19:fc:b1:e7:92:26:8e:65:30:32:2e:81:70:9a:2a:33:a2:d6:
         ce:28:ee:3a:f7:a9:40:76:d5:74:62:18:9c:56:ad:78:90:48:
         7f:f7:8c:9a:8e:63:1c:d2:c1:87:eb:e4:02:14:9c:92:6b:06:
         a9:54:07:71:be:76:7c:68:6e:ca:77:84:b0:6f:8d:93:42:e8:
         ee:16:b0:db:2a:61:ac:7f:8f:ef:d2:56:f7:f2:7e:4e:c1:07:
         2b:19:47:5f:95:d5:dc:29:ac:ee:60:cd:fb:9a:76:c3:5b:ae:
         e6:15:5f:f0:fb:64:74:2f:9d:d7:67:91:69:5c:3f:9d:17:54:
         19:46:64:15:49:fe:ab:58:c2:fe:37:5f:a0:f7:13:56:b8:af:
         33:d7:d3:59:7f:4f:29:c9:a6:1b:3d:61:71:fa:a2:53:05:dc:
         50:7a:7f:5d:53:9c:2d:7d:2f:07:7a:7e:64:63:2d:cc:ae:e1:
         95:78:2f:3d:10:d3:9d:b6:38:fd:46:0f:1c:ff:8f:93:bf:d8:
         54:e8:6b:60
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Jun 2 04:20:44 2024 by rpki-client on console-fra.rpki-client.org