Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS136258.roa
File:                     AS136258.roa (raw, json)
Hash identifier:          TaAJtg1diHn/EWKSChQA6UckN7M0rAlhvgJltapqc+g=
Subject key identifier:   39:93:46:EE:EA:C7:91:98:6C:40:0B:CA:EA:40:D2:AA:C5:C5:D1:18
Certificate issuer:       /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Certificate serial:       489486AE0CD35895AA14C1D9424D3B380AFA503E
Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS136258.roa
Signing time:             Tue 04 Jun 2024 13:26:36 +0000
ROA not before:           Tue 04 Jun 2024 13:21:36 +0000
ROA not after:            Tue 03 Jun 2025 13:26:36 +0000
asID:                     136258
IP address blocks:        23.95.72.0/22 maxlen: 24
                          23.95.76.0/23 maxlen: 24
                          23.95.79.0/24 maxlen: 24
                          107.175.82.0/24 maxlen: 24
                          172.245.232.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 18 Jun 2024 17:32:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:94:86:ae:0c:d3:58:95:aa:14:c1:d9:42:4d:3b:38:0a:fa:50:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
        Validity
            Not Before: Jun  4 13:21:36 2024 GMT
            Not After : Jun  3 13:26:36 2025 GMT
        Subject: CN=399346EEEAC791986C400BCAEA40D2AAC5C5D118
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:00:fa:5f:51:38:27:cc:be:91:26:85:a0:8f:
                    71:fe:8f:59:40:f6:3e:f1:e2:83:ca:5a:55:f9:a9:
                    90:d2:96:58:c1:df:a9:e0:ad:a4:51:a2:8e:e7:e6:
                    f6:60:0c:5d:bf:11:c8:1a:48:04:da:16:c3:d5:8e:
                    b5:8a:f3:2c:51:6a:4a:15:d6:81:ce:bc:54:8b:b0:
                    0b:9c:b2:f2:be:c8:4e:a4:60:3e:b6:d4:df:d6:79:
                    d9:37:10:7c:5a:6a:37:67:05:0a:ea:ee:fe:ee:df:
                    8d:b7:1e:4f:45:b4:82:a1:d8:57:0f:db:45:21:19:
                    5a:5b:eb:3b:74:61:f7:75:2d:6f:4d:f7:84:41:60:
                    30:56:30:19:4d:83:cb:96:ac:1e:80:0a:0b:9b:1e:
                    de:2d:5a:fa:f7:2d:32:31:2d:d4:f0:1b:27:fb:ce:
                    cc:45:f0:6a:e7:98:d3:58:ae:2d:f7:5e:fb:7d:82:
                    e6:c0:83:42:b5:c5:63:1d:a7:96:bc:12:ab:2c:3d:
                    b2:3f:5c:be:56:a5:65:d2:b8:6c:7d:49:b6:70:63:
                    5a:f6:6b:d6:51:0b:50:b4:72:a1:1e:f1:d0:b4:28:
                    c2:f3:bc:97:1c:02:55:7d:34:99:8d:11:ee:50:06:
                    31:4d:53:e8:29:7e:0a:3b:4f:da:ae:49:56:b8:a4:
                    7d:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:93:46:EE:EA:C7:91:98:6C:40:0B:CA:EA:40:D2:AA:C5:C5:D1:18
            X509v3 Authority Key Identifier:
                keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS136258.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.95.72.0-23.95.77.255
                  23.95.79.0/24
                  107.175.82.0/24
                  172.245.232.0/21

    Signature Algorithm: sha256WithRSAEncryption
         7f:1b:b2:42:98:38:88:b3:d5:f8:6c:54:c1:ee:8f:c1:17:01:
         bf:03:72:c5:dd:19:f6:1a:89:2e:b8:53:c7:8f:62:65:c3:dc:
         46:f3:fa:19:81:85:4b:9e:26:75:87:6d:c1:fd:c9:a5:23:ad:
         f6:04:ba:36:6e:37:15:b3:25:ab:2f:49:cc:3c:e6:ce:93:6e:
         05:db:c9:c8:be:aa:de:02:a9:3c:32:1c:2b:33:39:3f:d1:31:
         53:b2:e3:1e:93:62:b2:9b:80:0d:ad:63:ee:cc:31:2e:ae:4d:
         a1:a4:9a:c7:6e:d8:d1:b9:a7:02:fd:cf:e6:45:bf:82:fb:82:
         f2:e9:b9:92:82:3d:19:bf:46:09:0e:77:64:9f:18:58:47:07:
         55:88:7b:63:7b:77:74:1c:cc:33:c6:40:b2:28:5d:ec:07:ae:
         7f:f3:26:58:db:b5:11:ce:f5:ad:f4:50:36:4d:74:71:a6:f6:
         ab:08:ea:32:e3:33:1d:ce:c1:0f:06:df:8e:91:81:61:94:51:
         c5:1d:33:4e:9c:d5:ce:c1:05:43:20:f3:3c:ae:a9:22:7e:2c:
         56:81:66:95:b9:64:ff:0d:4b:ef:45:b6:4a:0b:11:25:c8:0a:
         d5:f8:1e:a3:04:20:ab:f9:00:d2:ab:75:e7:76:ca:b3:31:ce:
         dd:b0:99:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 17 15:56:25 2024 by rpki-client on console-fra.rpki-client.org