Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/20/32332e3138332e3133362e302f32342d3234203d3e203539393933.roa
File:                     32332e3138332e3133362e302f32342d3234203d3e203539393933.roa (raw, json)
Hash identifier:          V6xYMAJmLNi9a7jp/UV/wrxTo2CdoGJPenlXloSwxmY=
Subject key identifier:   BA:6E:44:05:45:FB:B0:9F:FE:62:84:9C:DB:C1:28:A3:4E:46:CE:AC
Certificate issuer:       /CN=ba59c15b9777a4a5270c9b7a584e46978e09a7bd2d154bfa9d
Certificate serial:       07769F7137C505A2EB28DE32CC3D2379D34E10C0
Authority key identifier: D7:0A:91:D8:9E:34:C7:A2:00:09:B1:E1:60:FB:6C:62:70:63:63:0C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/32619ff9-4a46-4e93-a9b5-dda2a33a9ffd/ba59c15b9777a4a5270c9b7a584e46978e09a7bd2d154bfa9d.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/20/32332e3138332e3133362e302f32342d3234203d3e203539393933.roa
Signing time:             Tue 23 Jul 2024 22:45:52 +0000
ROA not before:           Tue 23 Jul 2024 22:40:52 +0000
ROA not after:            Tue 22 Jul 2025 22:45:52 +0000
asID:                     59993
IP address blocks:        23.183.136.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/20/D70A91D89E34C7A20009B1E160FB6C627063630C.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/20/D70A91D89E34C7A20009B1E160FB6C627063630C.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/32619ff9-4a46-4e93-a9b5-dda2a33a9ffd/ba59c15b9777a4a5270c9b7a584e46978e09a7bd2d154bfa9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/32619ff9-4a46-4e93-a9b5-dda2a33a9ffd/32619ff9-4a46-4e93-a9b5-dda2a33a9ffd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/32619ff9-4a46-4e93-a9b5-dda2a33a9ffd/32619ff9-4a46-4e93-a9b5-dda2a33a9ffd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/32619ff9-4a46-4e93-a9b5-dda2a33a9ffd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 16:32:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:76:9f:71:37:c5:05:a2:eb:28:de:32:cc:3d:23:79:d3:4e:10:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ba59c15b9777a4a5270c9b7a584e46978e09a7bd2d154bfa9d
        Validity
            Not Before: Jul 23 22:40:52 2024 GMT
            Not After : Jul 22 22:45:52 2025 GMT
        Subject: CN=BA6E440545FBB09FFE62849CDBC128A34E46CEAC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:65:e4:82:f2:aa:d0:dc:19:ee:32:74:fc:56:
                    15:18:15:a5:06:5e:ae:9e:92:ce:f1:83:15:e2:97:
                    c9:bc:4b:b1:79:a1:8a:9a:cd:85:b7:c6:d9:33:b5:
                    42:e0:f3:a2:7b:08:03:a9:b7:0c:be:db:e4:a0:96:
                    2d:ba:19:77:5e:91:54:c9:6e:4e:79:66:1f:f1:b5:
                    1b:fb:ac:ce:b2:7b:65:5e:da:60:e8:33:1e:e2:69:
                    64:7d:0f:ef:9f:fa:a5:87:f1:b5:c1:a4:bb:8b:77:
                    4e:c9:01:b4:30:36:16:de:33:0d:cc:23:03:7d:2a:
                    0f:54:c5:09:34:ea:62:54:ad:19:83:0f:c0:10:5a:
                    81:cc:ec:3d:30:25:65:6f:25:70:0b:39:10:29:4f:
                    b9:b0:06:50:c2:2e:4f:4e:55:a9:20:af:b6:ad:d7:
                    da:f2:c3:95:5c:e9:16:02:12:43:a6:2e:41:67:d4:
                    7c:ac:91:23:d2:f0:bd:e5:62:95:d3:8b:41:5d:89:
                    d4:3a:e8:5e:f8:2c:80:7c:5d:14:f2:08:4f:76:dd:
                    0f:29:f3:27:58:c9:d6:d9:0c:f3:30:ac:52:35:1c:
                    71:b1:95:8f:e2:b2:80:d9:c9:be:7b:f6:0e:62:b3:
                    20:51:71:59:c7:41:67:a8:8f:ac:c6:62:7b:7e:4d:
                    46:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:6E:44:05:45:FB:B0:9F:FE:62:84:9C:DB:C1:28:A3:4E:46:CE:AC
            X509v3 Authority Key Identifier:
                keyid:D7:0A:91:D8:9E:34:C7:A2:00:09:B1:E1:60:FB:6C:62:70:63:63:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/20/D70A91D89E34C7A20009B1E160FB6C627063630C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/32619ff9-4a46-4e93-a9b5-dda2a33a9ffd/ba59c15b9777a4a5270c9b7a584e46978e09a7bd2d154bfa9d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/20/32332e3138332e3133362e302f32342d3234203d3e203539393933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.183.136.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5e:7e:57:04:f9:16:18:89:43:88:fb:9b:82:62:d9:40:97:6d:
         3c:3e:11:1b:8c:9c:52:82:42:8d:9c:f7:21:28:88:67:06:9d:
         e2:dc:d0:c0:01:1c:5c:f9:97:d0:25:e8:6e:41:d2:90:e1:c8:
         fc:aa:f9:87:7c:f4:08:b3:58:dc:7b:92:5f:e4:b6:90:3f:71:
         a0:40:b8:af:1f:9a:dd:09:82:f1:b6:e6:c3:30:6f:82:0d:e2:
         42:87:2c:b6:ee:97:ac:62:fa:e9:81:2d:1e:ea:dd:62:85:53:
         de:18:fa:f1:cc:76:ea:37:64:ac:30:0e:aa:0e:9e:ee:ba:ea:
         6f:46:1c:26:72:d8:f4:f6:fd:f6:78:dd:fc:fc:dd:bc:60:ef:
         b0:47:1b:0c:94:80:8c:0e:91:07:73:fd:dc:79:f2:3d:97:98:
         23:ad:c1:d4:26:0a:5b:4e:54:a2:82:7b:45:a9:35:aa:d1:1d:
         b2:d4:98:9d:43:3c:a8:f3:5e:78:42:0d:47:89:c7:bb:3a:64:
         98:dd:75:dd:9e:cb:a3:01:2b:fe:0b:90:73:5b:9a:4f:24:12:
         42:97:c6:f9:63:57:17:2a:cd:50:81:8b:73:96:52:8a:cb:08:
         9a:83:d8:ce:40:e4:e1:b2:8c:49:40:9b:f6:25:04:08:62:6d:
         7b:ff:0e:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 18:06:13 2024 by rpki-client on console-fra.rpki-client.org