Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/0/32332e3133332e3137322e302f32342d3234203d3e203131393637.roa
File:                     32332e3133332e3137322e302f32342d3234203d3e203131393637.roa (raw, json)
Hash identifier:          d2wU+Gol/3brvneyCqx25z7lsHUJWvDupBMA5DMJyKc=
Subject key identifier:   48:03:46:58:2A:60:07:04:25:72:03:2D:2E:42:B7:9A:33:BF:8A:26
Certificate issuer:       /CN=369dbc2ec1754da1dbaabab18a4c5590d9fbf947f503b5fd60
Certificate serial:       11F10E27B6038E45DBDBEF1000234995E76F626E
Authority key identifier: 41:17:16:F7:FD:EB:2F:71:72:BC:E3:E6:1D:86:C8:3B:82:41:11:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576633f-343d-4ac3-a936-98958e5630e6/369dbc2ec1754da1dbaabab18a4c5590d9fbf947f503b5fd60.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/0/32332e3133332e3137322e302f32342d3234203d3e203131393637.roa
Signing time:             Mon 05 May 2025 08:21:21 +0000
ROA not before:           Mon 05 May 2025 08:16:21 +0000
ROA not after:            Mon 04 May 2026 08:21:21 +0000
asID:                     11967
IP address blocks:        23.133.172.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/0/411716F7FDEB2F7172BCE3E61D86C83B824111FC.crl
                          rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/0/411716F7FDEB2F7172BCE3E61D86C83B824111FC.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576633f-343d-4ac3-a936-98958e5630e6/369dbc2ec1754da1dbaabab18a4c5590d9fbf947f503b5fd60.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576633f-343d-4ac3-a936-98958e5630e6/c576633f-343d-4ac3-a936-98958e5630e6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576633f-343d-4ac3-a936-98958e5630e6/c576633f-343d-4ac3-a936-98958e5630e6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576633f-343d-4ac3-a936-98958e5630e6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 11 May 2025 21:13:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:f1:0e:27:b6:03:8e:45:db:db:ef:10:00:23:49:95:e7:6f:62:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=369dbc2ec1754da1dbaabab18a4c5590d9fbf947f503b5fd60
        Validity
            Not Before: May  5 08:16:21 2025 GMT
            Not After : May  4 08:21:21 2026 GMT
        Subject: CN=480346582A6007042572032D2E42B79A33BF8A26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:08:2f:14:44:4c:73:1d:c6:81:f5:9f:5c:92:
                    e4:67:ee:d1:ac:72:78:80:7a:50:35:74:dc:4f:a5:
                    e8:0c:8b:e5:be:5a:93:99:11:72:13:ff:b0:ef:86:
                    7b:73:51:f0:13:3d:a3:da:7f:57:c6:d4:70:a5:56:
                    20:ae:cb:8c:c4:bb:10:5a:54:dd:ef:64:69:f4:50:
                    8b:a0:5f:b5:5b:38:8a:e4:67:c0:61:3e:23:30:a9:
                    0a:f7:a5:19:d2:f0:70:c3:ee:ec:cf:d2:83:9b:09:
                    c7:33:21:ae:cb:af:1d:89:e4:aa:2b:e4:9d:2e:7c:
                    6b:aa:45:0d:1b:d6:b5:4e:53:76:71:a4:ed:50:2b:
                    b9:ea:8b:fd:91:f6:28:ea:5d:26:66:7e:3c:d3:94:
                    9b:89:42:43:4e:7a:70:af:e3:14:ec:16:f2:78:b1:
                    d9:40:c6:c8:6c:80:f3:6b:57:80:92:b7:a9:dd:aa:
                    30:b6:37:44:20:9a:6b:d1:c1:eb:d7:7d:c9:95:a2:
                    84:b3:e0:bd:be:df:79:95:92:c0:2c:d7:2e:ee:73:
                    1e:33:52:c3:27:a0:6c:1b:57:c8:7d:55:3a:2e:d2:
                    67:66:29:f9:42:34:a6:22:14:f3:2a:95:42:65:10:
                    0e:34:81:0d:71:b7:e5:8d:e0:e9:06:cc:fd:d0:bf:
                    e3:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:03:46:58:2A:60:07:04:25:72:03:2D:2E:42:B7:9A:33:BF:8A:26
            X509v3 Authority Key Identifier:
                keyid:41:17:16:F7:FD:EB:2F:71:72:BC:E3:E6:1D:86:C8:3B:82:41:11:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/0/411716F7FDEB2F7172BCE3E61D86C83B824111FC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576633f-343d-4ac3-a936-98958e5630e6/369dbc2ec1754da1dbaabab18a4c5590d9fbf947f503b5fd60.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/0/32332e3133332e3137322e302f32342d3234203d3e203131393637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.133.172.0/24

    Signature Algorithm: sha256WithRSAEncryption
         74:ac:a6:5b:62:5f:13:33:92:fb:6c:95:2e:61:e1:46:7c:42:
         33:d6:cd:e0:90:c8:2e:5f:a4:fa:5b:ad:d4:7e:12:63:33:5d:
         a7:e2:bc:fb:49:10:e8:d6:25:45:6c:ac:3b:62:17:1e:28:8a:
         16:97:d4:22:43:c1:68:bd:82:18:64:a5:fc:c2:62:8e:b8:1e:
         2a:da:1a:b3:0a:5a:ae:36:2c:ec:11:30:ba:a9:ac:cc:eb:bb:
         c7:f6:b9:52:14:bb:c9:15:b5:77:77:eb:93:8f:e1:fe:5f:38:
         18:f4:77:d3:0b:05:6a:f4:9b:4a:65:db:2c:fc:34:b4:1e:ce:
         15:39:d5:21:1e:f6:89:1c:ab:51:c9:d7:91:59:dc:0c:ac:4e:
         a8:fe:ae:db:49:b7:8c:2c:5e:86:3f:e0:6a:41:cf:58:c8:80:
         3d:46:bf:5f:99:ea:96:26:97:ca:4d:c8:39:bb:7d:ae:00:bb:
         94:7c:db:4f:1d:07:1c:bc:80:c2:c3:6d:0d:78:21:f4:fe:02:
         ff:07:31:8c:9c:82:bf:c5:20:97:cd:98:da:62:a9:a2:a7:ac:
         65:12:ce:59:f1:40:df:87:54:b8:c5:c3:f1:98:b2:92:5d:b9:
         2f:9f:7c:f7:c3:85:84:21:f8:ac:b2:67:a2:25:08:24:79:07:
         8d:a2:0c:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 12:22:28 2025 by rpki-client